Connect an agent with MCP

An Agent Connection lets a compatible local agent use ToDoddle through the Model Context Protocol (MCP). The local stdio package calls ToDoddle's hosted external API; it does not connect directly to the database.

From Workspace Settings → Agent Connections:

1. Create a connection with a descriptive, vendor-neutral label such as Release agent or Frontend assistant.
2. Start with Read and report, the least-privilege default. Choose Project contributor only when the agent should change tasks, Context, or files; choose Project operator only for trusted structural and time-management work.
3. Grant selected projects unless full-workspace project access is genuinely required.
4. Create credentials and copy the generated configuration immediately. The secret is shown once.
5. Add the configuration to the MCP host, restart that host, then use Check setup to copy the read-only verification prompt.

Access always has three boundaries: the connection's scopes, its project grants, and the authorizing user's own workspace/project permissions. ToDoddle applies the intersection. A prompt, repository role, or agent vendor cannot broaden it.

The connection label appears on claims and agent-authored activity so humans can tell which integration acted on behalf of its creator. A human task assignee remains separate.

Changing individual scope checkboxes marks the selection as custom. Add write scopes only for intended mutations, and add organization Notes or personal Focus scopes separately because the three project presets do not include them.

Check setup validates that the saved connection is enabled and has usable scopes and project grants. The final end-to-end check runs from the configured agent because ToDoddle never stores a recoverable copy of the one-time secret. Ask the agent to list accessible projects and read one project brief without making changes. The dialog maps common error codes to the exact setting to inspect.

Ready to test means the saved configuration is internally usable but the credentials have not authenticated yet. Connected means ToDoddle has accepted the connection at least once; it does not mean every possible scope or project is granted.

See Install and troubleshoot the MCP for configuration and Scopes, grants, and credentials for ongoing administration.