Constellation Data Labs
Constellation Data Labs

Connect an AI Client (MCP)

Point Claude, ChatGPT, Cursor, or your automation tool at a Constellation Data Labs MCP server and start asking questions in plain language. Same Client ID / Secret you already use for our APIs - nothing new to provision.

MCP URL

Credentials

Every MCP server uses the same Client ID and Client Secret as our OData/GraphQL APIs. Nothing new to provision per server.

How to connect

A - Sign-in flow

  1. Give the client the MCP URL ().
  2. Complete the sign-in page titled “” with your Client ID and Client Secret.
  3. The client stays signed in from then on.

Leave any OAuth Client ID / Secret fields in the AI client blank. Our servers register the client automatically.

Clients

Steps and the example prompt below use the selected server.

Try asking:

Recommended: add the connector from claude.ai in your browser, not the Desktop app. Desktop opens your OS's default browser to sign in - if a different Claude account is already logged in there, it'll force you to switch accounts to finish connecting.

  1. Settings > Connectors (Team/Enterprise: an owner adds it under Organization settings first).
  2. +Add custom connector.
  3. Name the connector, and for the URL use .
  4. Choose how the connector's Client ID / Secret is set:
    Fill in Client ID / Secret under Advanced

    That one credential becomes fixed for everyone using this connector - no individual sign-in step, but everyone shares the same CDL account and entitlements as whoever's credentials were entered. Works for both MCP servers.

    Leave Advanced blank

    Each person signs in individually with their own Client ID / Secret the first time they use the connector. Different people on the same org connector can each use a different CDL account - everyone sees only what their own credentials are entitled to.

  5. AddConnect → sign in with your credentials.

Troubleshooting

Symptom Likely cause
I connected to the MCP but now get a 401 Method B token expired (24h). Re-mint with curl.
"Credentials were not accepted" Typo in Client ID/Secret, or secret was rotated.
"This sign-in page has expired" Form timed out (10 min). Restart from the client.
Got an unsupported_grant_type error Your integration sent a token request straight to the MCP sign-in URL, which only handles the browser sign-in flow (method A). For direct token requests, use method B's curl example instead - it posts to our identity provider's token endpoint, not the sign-in page.

Use cases

Tools