Integrations

MCP connectors

Use Oracle from the agent client you already run. Generated connector configs expose the read and prepare plane, not a wallet key or control bypass.

MCP stdioRegistry listedPrepare only

Install a connector

Oracle can print or install MCP configuration for supported clients. Inspect the generated configuration before accepting it.

terminal

oracle mcp print --target claude-code
oracle mcp install claude-code
oracle mcp install codex
oracle mcp install chatgpt
oracle harness detect

Generic MCP

Oracle is listed in the official MCP registry as io.github.demi-hl/oracle. A registry-aware client can launch the read-plane stdio server directly.

stdio

npx -y -p @oracle-agent/oracle oracle-data-mcp

You can also run oracle-data-mcp from a global installation. The server communicates over stdio and expects Oracle's local data plane where required.

Supported clients

Client	Setup target	Posture
Claude Code	claude-code	Read and prepare
Claude Desktop	claude-desktop	Read and prepare
Codex	codex	Read and prepare
ChatGPT	chatgpt	Hosted, unsigned preparation
Cursor	cursor	Read and prepare
VS Code / Copilot	vscode / copilot	Read and prepare
Generic MCP	generic	Stdio read plane

Web tools in MCP

Tool	Availability	Boundary
web_fetch	Available	One public URL through SSRF checks, DNS pinning, redirect validation, response caps, and redaction
web_search	Configured	Requires an operator-selected ORACLE_SEARCH_URL and never chooses a search vendor silently

browser_exec remains standalone-only because it can click and fill public pages inside its sandbox. It is not exposed through the public MCP.

Oracle Sidecar remains extension-only and is not exposed as a generic MCP tool. Its read-only browser context requires a grant for one exact tab ID and origin. MCP cannot request Sidecar cookies, CDP, clicks, typing, signing, or broadcast authority.

Connector boundary

Every generated MCP configuration is read and prepare only. Oracle does not install a public control MCP or create a tunnel into private owner infrastructure.

Hosted clients stay keyless

A hosted client can request research, quotes, simulations, and unsigned artifacts. Signing stays in the user's wallet or an explicitly configured local self-hosted execution path.