You need the hosted Lucim MCP URL and a tenant API key. Most read workflows need only the read scope.
Hosted Streamable HTTP
Set the key in your client process environment:
For Codex CLI, register the server without placing the key on the command line:
Other MCP clients should send the same key as:
Local stdio
Run the adapter from the backend environment:
Configure your client to start that command in the backend working directory.
Verify the connection
Ask the client to list tools, then call get_changes with a small limit. The available list varies with product stage and independent sandbox or observation gates.
Use a write-scoped key only for a client that must create watches, request scans, or run approved mutations. Do not reuse a broad operator key for read-only agents.
