Your catalog,
speaking the language of agents.
MCP is how Claude, ChatGPT, and every serious AI client read and write structured data. Catalyte ships two MCP servers — one for managing your workspace, one for the open directory the rest of the world can browse.
Authenticated MCP
OAuth 2.1 with PKCE and Dynamic Client Registration. Claude registers itself, the user grants consent once, and tokens scope to a single workspace.
https://catalyte.dev/api/public/v1/mcpDirectory MCP
Anonymous. Lets any agent search products and merchants that have opted into the public AI directory. No keys, no setup.
https://catalyte.dev/api/public/v1/discover/mcpConnect in a minute.
Paste the URL into any MCP-capable client. The workspace server walks the user through OAuth on first connect.
Settings → Connectors → Add custom connector. Paste the workspace URL. Claude registers itself via DCR and opens the consent screen.
Use the SFTP push for ACP-style feeds, or wire the public directory MCP into a Custom GPT for browsing tools.
Run npx @modelcontextprotocol/inspector and point it at either URL to explore the tool surface live.
Any client that speaks Streamable HTTP MCP works — Cursor, Continue, custom agents. Use the API key flow for headless setups.
The tool surface.
Stable names. JSON Schema everywhere. No hidden side effects.
list_productsPaginate the workspace catalog.get_productRead one product by SKU or ID.create_productUpsert a product with full validation.update_productPatch fields, idempotent by SKU.delete_productSoft-delete and remove from feeds.list_channelsInspect which surfaces are enabled.search_productsPublic — full-text across the directory.list_merchantsPublic — browse opted-in merchants.Security, in plain terms.
- OAuth 2.1 with PKCE S256. No implicit flow, no shared secrets in the browser.
- SHA-256 token hashing. Access and refresh tokens are never stored in plaintext.
- Workspace scoping. Every tool call resolves to one workspace. There is no cross-tenant read path.
- Revocable at any time. Disconnect from Claude or revoke from the dashboard.