Ephemeral

warnings

app.ephemer.al

Run AI agent tasks in isolated sandboxes with a cost cap, saved workflows and scoped connections.

https://app.ephemer.al/mcpWebsiteOAuthMCP 2025-11-25v2026.10.27.1-5ab06ddlast checked 27 Oct 2026spoke MCP on 4 of 4 checks (30 days)initialize in 1029 ms

Last checked 27 Oct 2026

✓Answered the MCP handshake (MCP 2025-11-25)
✓Auth detected: OAuth
✓Lists 19 tools
!2 warnings
✓Spoke MCP on 4 of 4 checks (30 days)

Will my client connect?

Decided from what the probe found at the endpoint, and from what each client's own documentation says it can complete. Every row carries the day that documentation was read.

✓Claude CodeConnects

The authorization server advertises RFC 7591 registration, so Claude Code can register itself and sign you in through the browser.

claude mcp add --transport http ephemeral https://app.ephemer.al/mcp

Claude Code docs · read on 2026-08-30

✓Claude (claude.ai & Desktop)Connects

The authorization server advertises RFC 7591 registration, so Claude (claude.ai & Desktop) can register itself and sign you in through the browser.

Settings → Connectors → Add custom connector, then paste https://app.ephemer.al/mcp.

Claude (claude.ai & Desktop) docs · read on 2026-08-30

✓ChatGPTConnects

The authorization server advertises RFC 7591 registration, so ChatGPT can register itself and sign you in through the browser.

Settings → Apps → Advanced settings → Developer mode, then create a connector pointing at https://app.ephemer.al/mcp.

ChatGPT docs · read on 2026-08-30

✓CursorConnects

The authorization server advertises RFC 7591 registration, so Cursor can register itself and sign you in through the browser.

{
  "mcpServers": {
    "ephemeral": {
      "url": "https://app.ephemer.al/mcp"
    }
  }
}

Cursor docs · read on 2026-08-30

✓VS Code (Copilot)Connects

The authorization server advertises RFC 7591 registration, so VS Code (Copilot) can register itself and sign you in through the browser.

{
  "servers": {
    "ephemeral": {
      "type": "http",
      "url": "https://app.ephemer.al/mcp"
    }
  }
}

VS Code (Copilot) docs · read on 2026-08-30

How to authenticate

Checked against the endpoint by our probe on 27 Oct 2026. These are the capabilities the server advertises, not a prediction about any particular client.

Scheme	OAuth
Issuer	https://ephemer.al
Dynamic client registration	✓Advertised (RFC 7591)
Client ID Metadata Document	✕Not advertised
PKCE	✓S256
Grant types	authorization_code, refresh_token
Scopes	member, admin
Protected-resource metadata	✓Published (RFC 9728)
Anonymous access	Handshake succeeds; 19 tools listable
Credentials demanded in prose	✕save_workflow These tools are listed anonymously and their own descriptions ask for an account or key, but no challenge is issued — so a client has nothing to act on and the refusal arrives as a tool error.
Documentation	https://ephemer.al/docs/api#authentication

What the probe found

warningTools needing credentials are listed without a challenge

1 of the 19 tools listed anonymously say in their own descriptions that they need an account or a key (save_workflow), but the endpoint issued no WWW-Authenticate challenge. The requirement is stated only in prose, so a call reaches the tool and comes back as a tool error instead of an authorization step.

warningThe server card contradicts the server

https://ephemer.al/.well-known/mcp/server-card.json: the card says version 1.0.0, the server says 2026.10.27.1-5ab06dd. Clients that configure themselves from the card are told something the live server does not do.

No CORS headers for browser-based clients

A cross-origin preflight came back without Access-Control-Allow-Origin, so the endpoint is reachable from native clients only — code running in a web page is stopped by the browser before a request is ever sent.

19 tools usable without signing in

The server exposes a public surface before authorization: create_run, get_run, wait_for_run, list_runs, cancel_run, list_workflows, get_workflow, list_models, list_connections, save_workflow, delete_workflow, list_schedules, get_schedule, create_schedule, update_schedule, delete_schedule, preview_schedule, run_schedule, list_files.

Tools

cancel_runcreate_runcreate_scheduledelete_scheduledelete_workflowget_runget_scheduleget_workflowlist_connectionslist_fileslist_modelslist_runslist_scheduleslist_workflowspreview_schedulerun_schedulesave_workflowupdate_schedulewait_for_run

Contract history

27 Oct 2026v2026.10.27.1-5ab06ddno contract changes

26 Oct 2026v2026.10.26.65-13cda13first recorded contract

Watch this server

Save its public contract as a baseline and manage breaking-change email alerts.

Set up a watch

Route it through the gateway

Put this endpoint behind one find_tools / call_tool pair with the rest of your servers. Part of Pro.

Add to my gateway

Own this server?

Status badge

Status for a README, from the last probe — cached an hour, so up to seven hours behind the endpoint. Links back to this page.

[![MCP status](https://mcpi.app/servers/ephemeral/badge.svg)](https://mcpi.app/servers/ephemeral)