# Connect an AI assistant

Lumicast provides a remote Model Context Protocol (MCP) server for assistants such as Claude and ChatGPT. It can find content, build pages and playlists, manage campaigns and displays, and configure live data within the permissions you approve.

The server URL is:

```text
https://api.lumicast.com/mcp
```

::: info
The MCP must be enabled for your account by Lumicast. Contact Lumicast support if the connection is refused because the MCP is not enabled for your account.
:::

## Claude and ChatGPT

1. Open your assistant's connector settings and add a custom remote MCP connector.
2. Enter the Lumicast server URL above.
3. Sign in to Lumicast when the browser opens.
4. Choose the workspaces the assistant may use and an access level (**None**, **Read**, or **Read & edit**) per area. Publishing, deleting and assigning content to displays is a separate switch that is off by default.
5. Review the [AI connectors data-sharing statement](https://lumicast.com/ai-connectors), tick the data-sharing acknowledgement, and click **Allow**.

Use **Connected apps** in your account settings to review recent activity or **Revoke** access. Revocation takes effect immediately.

## API-driven agents

OAuth is recommended. Agents that cannot complete browser OAuth may use a [personal access token](/how-to/personal-access-tokens) in the HTTP authorization header:

```http
Authorization: Bearer <YOUR_TOKEN>
```

Do not put the token in prompts, source control, logs, or tool arguments. A read-only token cannot call tools that change Lumicast.

## Safe tool use

- Start with `list_workspaces`; other tools require a `workspaceId`.
- Reuse the same `idempotencyKey` only when retrying the same create call. Use a new key for a new intended item.
- Update, publish, and revert tools require the latest `ifUpdatedAt` returned by a read or previous mutation. Re-read the item after a conflict.
- Publishing, deleting, assigning content, and display commands require destructive access and may ask for confirmation.
- Third-party account credentials and webhook secrets are entered or revealed only on Lumicast pages, never in the assistant conversation.

Temporary upload, preview, connection, and secret-reveal links expire. If one expires, follow the tool result's recovery instruction instead of reusing the old URL.