cosmic-mcp

One governed door between your AI clients and your tools.

COSMOS is TheOne's MCP gateway. Claude, ChatGPT, Cursor and your own agents connect once and use TheOne and Reach tools safely: every call signed in, scoped, checked against policy, approved when it matters, and written to a tamper-evident audit log.

MCP endpointhttps://cosmic-mcp.app/mcp

Get started Sign in Browse the directory

Claude
ChatGPT
Claude Code
Cursor
VS Code
Any MCP client

Every call takes the same road

The model never decides what is allowed. The gateway does, on every call, in this order.

Who Your Reach sign-in, OAuth 2.1 token
May it Per-tool scopes you ticked
For whom Workspace membership, checked live
Policy Leg, site and workspace rules
Approval One-time human OK for risky or paid actions
Record Hash-chained audit, every outcome

Built for teams that answer for what their agents do

Secure

OAuth 2.1 with PKCE, opaque tokens you can revoke at once, per-tool scopes off by default for anything risky, and an edge in front of the origin.

Governed

Policies per leg, workspace and person, browser site rules, admin approval for new clients, and confirmations bound to the exact arguments.

Observable

Every call lands in an append-only, hash-chained audit log you can verify. Traces, metrics and typed error codes for every failure.

Open

Plain MCP over Streamable HTTP, plus REST and gRPC for services. Bring any MCP client; nothing to install for remote use.

Quick start

Remote clients need nothing installed: paste the URL, sign in with your Reach account, choose what the client may do.

Claude (web and desktop)

Add COSMOS as a custom connector.

Open Settings, then Connectors, then Add custom connector.
Paste the URL below and save.
Sign in with your Reach account when asked, then pick what Claude may use.

https://cosmic-mcp.app/mcp

ChatGPT

Add COSMOS as an MCP connector (workspace admins may need to allow custom connectors first).

Open Settings, then Connectors (or Apps and connectors), then Create.
Use the URL below and choose OAuth.
Sign in with your Reach account and approve.

https://cosmic-mcp.app/mcp

Claude Code

One command adds the remote server; run /mcp inside Claude Code to sign in.

claude mcp add --transport http cosmos https://cosmic-mcp.app/mcp

Cursor and VS Code

Add the server to your MCP config file (Cursor: .cursor/mcp.json; VS Code: .vscode/mcp.json uses "servers" instead of "mcpServers"). The editor opens the sign-in page on first use.

{
  "mcpServers": {
    "cosmos": {
      "url": "https://cosmic-mcp.app/mcp"
    }
  }
}

Local bridge and browser extension downloads

For developers

Auth

OAuth 2.1 + PKCE, dynamic client registration (new clients wait for admin approval), metadata URLs, scopes, token lifetimes.

Tool catalog

Every tool with its description, required scope and input schema, from the live registry. Also as JSON at /tools.json.

Errors and limits

Typed error codes with retry hints. Limits: per network at the edge, per session and per person at the gateway; a 429 says when to retry.

Status

Gateway readiness and every leg's health, live.

Changelog

What changed, newest first.

Questions

What is MCP?

The Model Context Protocol is an open standard that lets AI clients discover and call tools on a server. COSMOS is one MCP server that fronts many tool backends (legs).

Who can sign in?

Anyone with a Reach account. Sign-in happens on reach-usa.com; COSMOS never sees your password.

Can the AI do something I did not allow?

No. Scopes, workspace membership, policy and confirmations are enforced by the gateway on every call, never by the model. Risky scopes stay off unless you tick them.

How do I disconnect a client?

How do I report a security issue?

Email [email protected]. Please do not test against other people's accounts.

One governed door between your AI clients and your tools.

Every call takes the same road

Built for teams that answer for what their agents do

Secure

Governed

Observable

Open

Directory

agentlab

Browser

COSMOS core

ICARUS

Models

Veritas

Persona

Cosmic Unicorn

Cosmic Chariot