For Claude Desktop this takes under a minute and involves **pasting one URL**. There is no JSON file to edit and no credential to copy, because the connector registers itself.

Everything else on the page exists for clients that cannot do that. Most people never need it.

[Watch the set-up walkthrough](https://kb.trackiq.com/kb-assets/kbvideo-mcp-install-explainer-45b53ec5.mp4)

*Prefer to watch? Sixty-eight seconds from copying the URL to your first question.*

## **Find the screen**

**Settings &rarr; MCP & API Keys.** It sits under **Workspace**, below Connections.

![The MCP access screen, with the server URL and the four steps](/kb-assets/shot-mcp-connect-69e419.png)

The MCP server URL is the same for everyone:

```
https://app.trackiq.com/mcp
```

Use the **Copy** button rather than retyping it.

## **Claude Desktop: the one-URL path**

![The four connect steps](/kb-assets/shot-mcp-steps-a9ceb0.png)

1. **Open the custom connector dialog.** In Claude Desktop, **Settings &rarr; Connectors**, then **Add custom connector**.
2. **Paste the URL** and click **Connect**.
3. **Pick a brand and approve.** A TrackIQ tab opens in your browser. Log in if you are not already, choose which brand the connector should be able to query, and click **Approve**.
4. **Ask something.** Back in Claude Desktop, try *&ldquo;List my marketplaces&rdquo;* as a smoke test, then something real like *&ldquo;Top 10 SP campaigns by spend last 30 days&rdquo;*.

Step 3 is the one that matters for security. **The brand you pick is the only brand that connector can ever read.** If you manage several and want an assistant that can see all of them, you connect once per brand.

## **Cursor, scripts and everything else**

Claude Desktop supports **OAuth Dynamic Client Registration**, which is why it can register itself. Clients that do not yet support it need credentials issued in advance, and that is what the **Advanced** section is for.

![The Advanced section, expanded](/kb-assets/shot-mcpadv-panel-27a94b.png)

The screen says it plainly: *most customers do not need anything below.* Open it only if the one-URL path does not apply to your client.

**Manual OAuth clients** issue a pre-made `client_id` / `client_secret` pair. The brand is still chosen at connect time on the consent screen, exactly as above.

| Use it for | Do not use it for |
|---|---|
| Cursor (current versions) | Claude Desktop &mdash; paste the URL instead |
| In-house OAuth-aware integrations | anything that already self-registers |
| OAuth proxies | |

**Per-brand API keys** are long-lived bearer tokens locked to a single brand, sent as an `Authorization: Bearer` header on every request.

![Per-brand API keys, one section per connected brand](/kb-assets/shot-mcpkeys-apikeys-2b8c5a.png)

Reach for a key when the thing calling TrackIQ does not speak OAuth at all: `curl` or Postman, `claude mcp add` from the command line, the older `mcp-remote` bridge, or a server-to-server script on a schedule.

Each connected brand gets its own block showing **active** and **revoked** counts, with **New Key** to issue one.

The **Setup instructions for Cursor, Claude Code, & direct API** button on the same panel opens step-by-step instructions for those clients specifically.

## **Treat a key like a password**

An API key is a standing credential. Anyone holding it can read that brand's data until it is revoked.

- **Issue one key per thing that uses it**, not one shared key. Revoking a shared key breaks everything at once; revoking a named one breaks only what you meant to break.
- **Never paste a key into a chat, a ticket or a shared doc.** Environment variables and secret stores exist for this.
- **Revoke rather than delete-and-forget.** The revoked count on each brand is your audit trail.

If you only need Claude Desktop, you never issue a key at all &mdash; which is the safest state to be in.

## **Checking it worked**

Two independent confirmations:

**In your assistant**, ask *&ldquo;List my marketplaces&rdquo;*. It should come back with your connected marketplaces and account types.

**In TrackIQ**, open **Call Logs** from the top of the MCP screen. Every request appears with the question that prompted it, the number of tool calls it took, and when it was posted.

![Call Logs, empty until the first request arrives](/kb-assets/shot-mcplog2-header-fa1a52.png)

An empty log after a successful-looking connection means the assistant registered but has not actually asked anything yet &mdash; connecting and querying are separate events.

## **If it does not connect**

| Symptom | Cause |
|---|---|
| Browser tab opens but never returns | you were not logged into TrackIQ &mdash; log in, then retry |
| No brand appears on the consent screen | that brand is not connected yet &mdash; see [**How to Connect Your Amazon Accounts**](https://kb.trackiq.com/hc/knowledge-base/articles/how-to-connect-your-amazon-accounts) |
| Assistant sees the connector but every tool errors | the brand's Amazon connection has expired &mdash; see [**Fixing a Broken or Expired Amazon Connection**](https://kb.trackiq.com/hc/knowledge-base/articles/fixing-a-broken-or-expired-amazon-connection) |
| Some tools work, others say unavailable | those tools need a higher plan tier |

That last row is expected rather than broken. See [**MCP Tiers: What Each Plan Unlocks**](https://kb.trackiq.com/hc/knowledge-base/articles/mcp-tiers-what-each-plan-unlocks).

## **Related**

- [**The MCP Web Console**](https://kb.trackiq.com/hc/knowledge-base/articles/mcp-web-console) &mdash; the page you install from.
- [**MCP Call Logs: Seeing What Your AI Tools Asked**](https://kb.trackiq.com/hc/knowledge-base/articles/mcp-call-logs) &mdash; checking what your client asked.
- [**The Full MCP Tool Reference**](https://kb.trackiq.com/hc/knowledge-base/articles/the-full-mcp-tool-reference) &mdash; what it can query.
