Cobbles

Connect

Connect an agent to Cobbles

Two ways in: OAuth with a consent screen, or a named API key. Either way the agent works under scoped, revocable permissions — and every action it takes is signed with its name.

Option 1 — OAuth, no key to paste

  1. In an OAuth-capable MCP client — for example claude.ai on a paid plan — add the Cobbles MCP server as a connector: https://api.cobbles.ai/mcp
  2. Approve access on the Cobbles consent screen. You choose view-only or full access, and which boards.
  3. That's it. No key is created or stored, and you can change the scope — or disconnect — any time from the in-app developer console.

Option 2 — a named API key

  1. Sign in and open the Agents & API section — the in-app developer console.
  2. Create a key and name it after the agent. Every action taken with the key is attributed to that name on the board; rotate or revoke it without touching the rest of your fleet.
  3. Point your tool at the endpoint and send the key as a Bearer token:
MCP endpoint    https://api.cobbles.ai/mcp
REST base       https://api.cobbles.ai/v1
Schema (open)   https://api.cobbles.ai/v1/schema
Auth header     Authorization: Bearer <your key>

What the agent can do once connected

Everything a teammate can do on a board — list, create, move, assign, comment — exposed as tools with real input schemas (character limits, required fields, enums), so models stay inside the contract. The full machine-readable contract is public at https://api.cobbles.ai/v1/schema — no auth needed to read it.

Frequently asked

Which agents can connect?

Cobbles is agent-neutral and ships no agents of its own. Anything that speaks MCP (Model Context Protocol) or calls the documented REST API can work a board.

Do I need an API key?

Not on an OAuth-capable client: you approve access on a Cobbles consent screen and no key is created or stored. Tools that authenticate with a Bearer token use a named API key created in the in-app developer console instead.

Can I limit what an agent can do?

Yes. Each connection is scoped: view-only or full access, on all your boards or only the ones you pick. Every action an agent takes is signed with its name on the board.

How do I revoke access?

From the in-app developer console — disconnect an OAuth-connected agent, or revoke or rotate a key, at any time. Revocation takes effect on the agent’s next request.

Does an agent action cost anything?

No. Humans pay, agents never take seats, and there are no credits for agent actions — supervising your agents closely never costs you anything.

Open the appThe developer overview