Enable MCP server on-premise

Enable the MCP endpoint on your UI Bakery on-premise instance.

See the MCP server guide for connection instructions and supported capabilities.

MCP is in beta. Configuration requirements and the MCP API can change. The environment variable described on this page is for UI Bakery on-premise only; do not configure it in UI Bakery Cloud.

Before you begin

• You need access to the UI Bakery deployment configuration and its .env file.

• The instance must be reachable through its public HTTPS URL.

• UI_BAKERY_APP_SERVER_NAME must match the externally reachable host. This ensures OAuth redirects use the correct URL.

Enable the MCP server

1. Generate a cryptographically secure random secret. Use at least 32 random bytes.

   openssl rand -hex 32

2. Add the following line to the UI Bakery .env file.

   UI_BAKERY_JWT_MCP_SECRET=<generated-value>

3. Restart UI Bakery using the existing Updating environment variables procedure.

4. Configure MCP clients with this remote Streamable HTTP endpoint:

   https://<your-ui-bakery-instance>/api/mcp

5. Follow the general MCP server guide to connect Codex, Claude Code, Cursor, or another MCP-compatible client.

Store UI_BAKERY_JWT_MCP_SECRET in the deployment secret store, never in source control or documentation. Changing the secret invalidates all previously issued MCP tokens, so connected clients must authenticate again.

Related documentation

• MCP server guide

• Environment variables

• Updating environment variables