Claude app (claude.ai web)¶
Validated on claude.ai web in a browser (the Claude desktop app was not part of the pass), 2026-11-04.
Add the connector¶
claude.ai → Settings → Connectors → add a custom connector ("Ajouter un connecteur personnalisé") with URL https://mcp.bloomy.earth/mcp. The add form auto-detected Claude's published OAuth identity ("Utiliser l'identité publiée de Claude (Détecté)") — the lane observed on this host.
Sign in¶
The connector then shows a needs-auth prompt ("Vous n'êtes pas encore connecté à Bloomy Earth." + Connecter): sign-in starts from the server's 401 challenge, not silently at add time. Connecting opens the Bloomy consent page, where you sign in with your own Dashboard → Integration API credentials.
Claude requests all three scopes — mcp:read mcp:write offline_access — and the page rendered three checkboxes at the time of the pass. The consent page has since moved to a single read+write permission row plus the informational offline_access line, so the checkbox count describes the page as it rendered then, not as it renders now. Connect succeeded in one attempt.
Tools and approval policy¶
Tools refresh in-session: Disconnect → Connect re-lists the seven tools with no application restart (observed). Claude groups them from the server's annotations (four read-only, three write/destructive) and exposes a per-tool approval policy — automatic, requires approval, or disabled — with the write group defaulting to requiring approval.
Confirmation¶
Write actions render a native dialog (Accept / Decline); the human confirmation step happens in that dialog, at host level. Declining returns the server's declined outcome verbatim: "not executed — the user declined this action. Nothing was spent."
The server's own two-call confirmation remains the floor underneath the dialog: the host can add a step, it cannot remove one.
Token lifetime¶
The connection survived the roughly one-hour access-token expiry without re-authentication on the validation day — the same connection powered a real offset action hours after consent was granted.