# Connect Any MCP client to Tandem

Anything that speaks MCP over streamable HTTP. Clients that can sign in use OAuth; scripts and agents you run yourself use an API key.

## Steps

1. Point the client at Tandem's address. It registers itself (dynamic client registration) and asks you to sign in.
2. For scripts and agents you run yourself, create an API key in Tandem under Agents and send it as a bearer token.

**Tandem's MCP address**

```
https://api.tandemcrm.app/mcp
```

**With an API key**

```
{
  "mcpServers": {
    "tandem": {
      "url": "https://api.tandemcrm.app/mcp",
      "headers": { "Authorization": "Bearer crm_sk_…" }
    }
  }
}
```

## How it signs in

Any MCP client signs in with OAuth: it registers itself with Tandem, opens your browser, and you sign in, choose a workspace and approve what it may do (read, suggest, write, delete). It gets `crm:read` and `crm:write` unless you approve less. Disconnect it any time under **Agents** in Tandem.

## Try it

Ask Any MCP client: "Which Tandem workspace are you connected to, and what can you do there?" Then try "Add acme.com to Tandem with the details from its website."

See the [tools reference](/docs/tools) for everything Any MCP client can do, and [permissions](/docs/permissions) for what each scope allows.