Skip to main content
The server lives at one URL:
Paste it into your MCP client. The client discovers everything else, opens your browser, and you approve the connection by signing in the way you always do. There is no key to create, copy or store.

What happens

1

Your client discovers the server

It fetches /.well-known/oauth-protected-resource, finds the authorization server, and registers itself automatically. Nothing for you to configure.
2

Your browser opens

You land on seosorted.ai. If you are already signed in, you skip straight to the next step — it is the same session as the dashboard.
3

You choose what it gets

Pick the workspace it may work in, and tick what it may do. Then Connect.
4

Done

The client receives its own credential and the browser closes. Ask the agent to call get_site_profile to confirm.

The approval screen

You are granting access to one workspace, not your whole account: Anything you leave unticked is refused at the moment it is used, not just hidden. An agent without the publish permission cannot publish, whatever it tries. Access also never exceeds your own. The agent acts as you, and your role in that workspace is re-checked on every single call — if you are demoted or removed, its access changes with you.

Setting it up

Your browser opens for approval on first use.--scope user makes it available in every project. Leave it off and the connection is only added to the directory you ran the command in.

Checking it worked

Ask the agent to call get_site_profile:
The last line is what you approved. If the workspace is wrong, reconnect and pick a different one on the approval screen.

Disconnecting

Remove the server in your MCP client, or revoke it from SeoSorted — either stops it. Access tokens last an hour and refresh silently until revoked.

When a connection stops working

Normal. Access tokens expire hourly and the client refreshes them for you. You only see the browser again if the connection was revoked or unused for 30 days.
The connection acts as you. Losing membership ends it — there is no lingering access.
Payment failed and the grace period ran out. Resubscribe and it reconnects.
You left that permission unticked. Reconnect and approve it.
120 calls per minute. Ask the agent to batch its work.