Connect any client

Nucifra is a standard remote MCP server. Any client that speaks Streamable HTTP and MCP OAuth works, not only the clients named in this section.

Server details

Item	Value
Server URL	`https://mcp.nucifra.com/mcp`
Transport	Streamable HTTP
Auth	OAuth 2.0, discovered from `https://mcp.nucifra.com/.well-known/oauth-protected-resource`
Static key fallback	A bearer token from the API keys page, for a client with no browser

Connection flow

Your client calls server/discover and tools/list. Both work with no token.
Your client calls a tool that needs a signed-in tenant, such as nucifra_create_upload_url.
Nucifra answers 401 with a WWW-Authenticate header naming the resource metadata URL.
Your client runs the OAuth flow: discovery, then /authorize, then /token. Nucifra federates the sign-in to Google or GitHub and mints its own token. Your client never sees the Google or GitHub token.
Your client retries the original tool call with the new token.

With a static key

Set an Authorization: Bearer ncf_live_... header on every request instead of running OAuth. This works for any client, including a plain curl command:

curl -s https://mcp.nucifra.com/mcp \
  -H "Authorization: Bearer ncf_live_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -H "Accept: application/json, text/event-stream" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Limits every client should know

A tool result stays under 25,000 tokens.
nucifra_list_objects returns 25 objects by default and 100 at most. Page with the returned cursor.
A public link lasts one hour by default, and no more than 7 days.