Matchstick for agents
Version 1.5.0 · All sections
How to connect
By URL, with OAuth
Add https://matchstick.io/mcp as a custom connector in claude.ai (Settings → Connectors), in ChatGPT (Settings → Connectors, developer mode), in Cursor, or in any client that follows the MCP authorization spec. The client finds the authorization server through https://matchstick.io/.well-known/oauth-protected-resource/mcp, sends you to sign in with Google or GitHub, and shows the consent page: which sites, which permissions, a weekly credit budget. The client identifies itself with a Client ID Metadata Document or registers dynamically; PKCE S256 and the resource parameter are required. Access tokens last an hour and refresh for thirty days; revoke a connection at any time from Settings → Connected agents.
Claude Code and Cursor
claude mcp add --transport http matchstick https://matchstick.io/mcp
Cursor takes the same URL in mcpServers ({ "url": "https://matchstick.io/mcp" }) and completes OAuth on the first call.
With a personal API key
Settings → API keys mints a key (msk_live_…) with the scopes and sites you choose. Send it as a bearer token to /mcp or /api/v1:
curl -H "Authorization: Bearer msk_live_…" https://matchstick.io/api/v1/sites
Scopes
| Group | Scopes | Allows |
|---|---|---|
| See my sites and reports | sites:read data:read findings:read changes:read reports:read activity:read runs:read | Every read tool. The bundle matchstick:read stands for all of them. |
| Run research and draft fixes (uses credits) | findings:write runs:write | Research passes, checks, drafts, reverts and suggested findings; uses credits. |
| Review and approve fixes, within each site's autonomy level | changes:review changes:approve | Comment, request changes, reject, approve (within the site's level). |
| Tell Matchstick when a change is live on the site | changes:deploy | Not available yet. |
The full list: sites:read, data:read, findings:read, changes:read, reports:read, activity:read, runs:read, findings:write, runs:write, changes:review, changes:approve, changes:deploy, cloudflare:apply.