Claude Desktop & Co-work
Connect Celavii to the Claude Mac/Windows app or claude.ai web Co-work in three clicks. Browser-based OAuth — no terminal, no JSON, no API key paste in the app itself.
Connect Celavii to the Claude Mac/Windows app, or to claude.ai web Co-work, in three clicks. Browser-based OAuth — no terminal, no JSON, no API key paste in the app itself.
Steps
1. Open the "Add custom connector" dialog
- Mac/Windows app: Customize → Connectors → +
- claude.ai web Co-work: Settings → Connectors → +
2. Fill the dialog
| Field | Value |
|---|---|
| Name | Celavii |
| Remote MCP server URL | https://www.celavii.com/api/mcp/mcp |
| OAuth Client ID | leave blank |
| OAuth Client Secret | leave blank |
Celavii uses RFC 7591 dynamic client registration — Desktop registers itself the first time it talks to our auth server. Manual Client ID / Secret are only for servers that pre-issue static credentials, which we don't.
3. Authorize on the consent page
Desktop opens a browser tab to celavii.com/oauth/authorize. What you see depends on whether you're already signed in:
- Signed in — A workspace picker shows every workspace you belong to with effective-plan badges. Pick a key and click Connect Claude. The browser bounces back to Desktop.
- Not signed in — A paste fallback appears. Paste a
cvii_live_*key from Settings → API. Same callback round-trip.
4. Verify
Desktop populates the tool list within a few seconds (83 tools across 12 groups). Test by asking Claude: "Call get_account_info" — you'll get back your org slug, plan, and credit usage.
How the auth works
| Access token | 1-hour TTL, opaque (32 random bytes) |
| Refresh token | 60-day TTL, rotated on every use |
| At rest | SHA-256 hash only — raw token never persisted |
| Scope | mcp:tools |
The OAuth bearer wraps the API key you picked on the consent page. Both flow through the same downstream auth pipeline as raw cvii_live_* keys — same rate limits, same scopes, same audit trail.
External API access requires a Starter plan or higher AND a payment method on file. The picker greys out free-effective-plan workspaces with "🔒 Upgrade to Starter". If your org is on a shared_pool plan that inherits Pro from a parent workspace, you're already covered — the picker shows it as Pro · inherited.
Revoke access
Anytime, in Settings → API:
- Look for the purple Used by Claude badge on a key — that's the one Desktop is holding an OAuth bearer for.
- Click Revoke on that key. Desktop's next tool call returns 401 and prompts the user to reconnect (which re-runs the OAuth dance, picking a fresh key).
Common pitfalls
That subdomain is a different (Microsoft 365) connector. The MCP server for the Celavii API lives at https://www.celavii.com/api/mcp/mcp.
Only cvii_live_* keys work. Sandbox cvii_test_* keys are blocked at the auth gate.
Starter = 30 req/min, Pro = 60 req/min, Enterprise = 120 req/min. The picker shows the limit your selected key will get.
See troubleshooting for symptom-by-symptom fixes.