Every agent has its own private MCP address. You add that address to your AI app, approve the connection on your site, and the app then works as that agent — with only that agent’s tools, and every call recorded in the Activity Log under its name.
AI Agent OS → Agents → Configure → Connection
Two Ways to Connect
| App | How it connects |
|---|---|
| Claude, ChatGPT | By signing in. You approve the connection on your site; there is no token to copy and no file to edit. |
| Codex | With the agent’s token, issued in the agent’s Token card. |
| Other apps (Cursor, VS Code, Claude Code) | An app that identifies itself with a client metadata document signs in the same way as Claude; one that cannot sign in uses the agent’s token. |
Before You Start
- Your site uses HTTPS and its permalinks are not set to Plain (Settings → Permalinks). Signing in needs both.
- The agent is active and has the permissions you want.
- You can log in as an administrator to approve the connection.
If signing in is not possible on your site, the Connection section shows a yellow notice with the reason. You can still connect with the agent’s token (see below).
Step 1: Copy the Agent’s Address
On the agent’s Connection section, click Copy next to This agent’s address. It looks like https://yourstore.com/wp-json/ai-agent-os/v1/mcp/agent/….

The screen above is from a test site without HTTPS, so it shows the yellow notice. The steps for each app are listed right below the address:

Connect Claude
- In Claude (claude.ai or the desktop app), click your name (bottom left) → Settings.
- Open Connectors and click Add custom connector.
- Enter a name (for example the agent’s name) and paste the agent’s address into the remote MCP server URL box. Leave the OAuth client ID and secret empty.
- Click Add, then Connect on the connector that appears.
- Sign in to your site as an administrator if asked, check that the screen names this agent, and click Approve and connect.
Connect ChatGPT
- In ChatGPT, click your name (bottom left) → Settings → Plugins, open Developer mode at the bottom of that list and switch it on.
- Go back, click Browse plugins, then the + button beside the search box.
- In New Plugin, enter a name, leave Connection on Server URL, and paste the agent’s address.
- Leave Authentication on OAuth, tick I understand and want to continue, and click Create.
- Sign in to your site as an administrator and click Approve and connect. Then pick it from the + menu inside a chat.
Connect Codex
Codex connects with the agent’s token:
- Issue a token in the agent’s Token card (see below) and copy it.
- Put it in an environment variable — the Connection section names it for you, for example
ZOREM_ADMIN_ASSISTANT_TOKEN. - Copy the Codex command from the Connection section and run it in a terminal.
codex mcp add admin-assistant --url https://yourstore.com/wp-json/ai-agent-os/v1/mcp/agent/… --bearer-token-env-var ZOREM_ADMIN_ASSISTANT_TOKEN
The Approval Screen
When an app signs in, your site shows a page titled A client is asking to connect to this site. Check it before approving:
- Who is asking — the large text is the address the connection is handed to (for example claude.ai). This is the one fact an app cannot fake; the app’s own name is shown smaller and is not checked.
- Which agent — the agent it connects as, with its tools and what it cannot do (for example that customer names are replaced with [masked]).
- What approving does — the app acts as that agent. Nothing new is created and no permission changes.
If you did not just start a connection from that app, click Deny. Nothing is changed.
Connect Several Agents
Because every agent has its own address, you can add several agents to the same Claude or ChatGPT account — for example Order Assistant and Support Assistant as two separate connectors, each with its own tools. Revoking one disconnects only that one.
The Token

An agent has no token until you issue one — apps that sign in don’t need it. Click Issue new token in the Token card. The token (it starts with zag_) is shown once; copy it straight away. Only its first few characters are kept in readable form, enough to tell two tokens apart in the log.
How Long a Connection Lasts
A signed-in app refreshes its access quietly every hour. After 90 days it must be approved again — open the connector in the app and click Connect. A connection also ends when you:
- Revoke or delete the agent, or its expiry date passes.
- Click New address on the agent’s Connection section (the old address stops working and every sign-in ends).
- Leave the app unused for 30 days.