article feature

MCP integrations: remote HTTP servers as skills

Prime Agent wraps remote HTTP MCP servers as Python-callable integrations through the McpIntegration class. Built-in providers can be enabled by login, and custom servers are discovered at runtime. Only HTTP transport is supported; stdio MCP servers are not wired through this path, and third-party tools share your trust boundary.

v v0.7.1reviewed 2026-08-09evidence code-derivedsources S015, S021, S002, S001cutoff 2026-08-09
Features

Pinned repository file/line or test referenced in the audit.

Remote HTTP servers

Prime Agent wraps remote HTTP MCP servers as Python-callable integrations through the McpIntegration class. Built-in providers can be enabled by login, and custom servers are discovered at runtime. Only HTTP transport is supported; stdio MCP servers are not wired through this path, and third-party tools share your trust boundary.

  • S015 supports the route's current claim set.
  • S021 supports the route's current claim set.
  • S002 supports the route's current claim set.
  • S001 supports the route's current claim set.

OAuth and authentication

Prime Agent wraps remote HTTP MCP servers as Python-callable integrations through the McpIntegration class. Built-in providers can be enabled by login, and custom servers are discovered at runtime. Only HTTP transport is supported; stdio MCP servers are not wired through this path, and third-party tools share your trust boundary.

  • S015 supports the route's current claim set.
  • S021 supports the route's current claim set.
  • S002 supports the route's current claim set.
  • S001 supports the route's current claim set.

Tool discovery

Prime Agent wraps remote HTTP MCP servers as Python-callable integrations through the McpIntegration class. Built-in providers can be enabled by login, and custom servers are discovered at runtime. Only HTTP transport is supported; stdio MCP servers are not wired through this path, and third-party tools share your trust boundary.

  • S015 supports the route's current claim set.
  • S021 supports the route's current claim set.
  • S002 supports the route's current claim set.
  • S001 supports the route's current claim set.

Trust boundary

Everything here runs inside the local trust boundary. If a section mentions code execution, remember that process separation improves reliability and recovery more than it improves security.