Settings is one MCP call — do it yourself

Names: GITHUB_TOKEN LINEAR_API_KEY GRANOLA_API_KEY PERPLEXITY_API_KEY TAVILY_API_KEY YDC_API_KEY SOLID_WORKSPACE_API_TOKEN MIXPANEL_API_SECRET APIFY_API_KEY INSTAGRAM_ACCESS_TOKEN. list_secrets shows names, never values; delete_secret removes one.

Providers: anthropic openai google xai moonshot deepseek nvidia azure. Keys: ANTHROPIC_API_KEY OPENAI_API_KEY GEMINI_API_KEY XAI_API_KEY MOONSHOT_API_KEY DEEPSEEK_API_KEY NVIDIA_API_KEY, or AZURE_OPENAI_API_KEY with AZURE_OPENAI_ENDPOINT. Optional roles, as bare model ids: LLM_FAST_MODEL LLM_PREMIUM_MODEL.

Actions: list create add_member remove_member set_starter copy_key set_key_use leave delete. A group's own keys: set_secret { scope: "group", group }. The starter group is the Starter config new people get.

Each team's people and roles, plan and seats, default team, email domains, Slack.

Actions: create rename add remove leave set_role make_default. team is its name; leave it out for their default team. who is an @username or an email. Only the team's Team admins (role owner) can change it, except leave and make_default.

Or username instead of email. On a Team they're added at once, account or not; the plan's seats are honoured. Team admins only.

Needs a Team or Enterprise plan. Public mail services (gmail.com…) are refused. Leave out domains to read the current rule.

Pro and Team only. Turning it off also ends every listening session's link.

Actions: get set_name set_username set_photo remove_photo set_new_page_access. The username is picked once — confirm the spelling first. A photo is photo_key (one of theirs, from my_photos) or photo_url. set_new_page_access { new_page_access } is who can open a page they publish without naming an audience: private (the default), signed_in, or public — anyone with the link, unlisted. It never re-tiers a live page; share_space does that.

create returns the key once — hand it straight to the machine or CI that needs it. It works only from a client that itself signed in with one of their keys; a connected app (OAuth) can't mint keys. revoke takes the id or the ss_ prefix.

Actions: status set run_now disconnect. Pro. Connecting Google Drive itself is a consent screen — browser (below).

Gives a one-time code: they send /start CODE to the bot or open the t.me link — no browser. status shows Telegram and Slack; unlink ends a link and its key. Slack is connected per team by a Team admin (browser, below), not per person.

status lists connected accounts and pasted keys. Providers: google zoom linear. Drive is backups { action: "disconnect" }.

Actions: list add remove. add checks the server's address (e.g. https://api.ycombinator.com/v1/mcp) and answers a link to Settings with the form filled in — send it; they press Connect, and sign in to the server if it asks. Nothing connects until they do. team connects it for everyone on a team they run. Once connected, their agent uses it through fetch_integration (integration mcp:<name>).

list shows offers waiting on them under invited_to; decline is the other answer.

A Pro code applies to them. A Team code needs org = the slug of a team they own; a new team from a code is the Team page.

Actions: list show create add remove rename delete share unshare. Pass emails as the person gave them — lines, commas, a CSV row. Everyone on a group can view a space shared with it once signed in with that address; nobody on it can edit, and nobody is emailed, so send them the link. Same as Settings → Groups.