MCP server

Cracked exposes a remote MCP server over Streamable HTTP at https://cracked-ai-pearl.vercel.app/mcp. Two ways to authenticate: OAuth 2.1 (sign in with your Cracked account from Claude.ai, Claude Desktop, ChatGPT, Cursor) or a bearer API key header (Claude Code, Codex, OpenCode, scripts).

Tools exposed

Tool	Arguments	Purpose
`discover_tools`	query, limit?, live_only?	Natural-language search with price, health and availability.
`inspect_tool`	provider, endpoint	Schema, price, health, docs.
`run_tool`	provider, endpoint, input, wait?	Execute and bill. `wait:false` for long scrapers.
`get_run`	run_id, wait_seconds?	Poll an async run.
`get_balance`		Workspace balance in USD.

Claude.ai and Claude Desktop (OAuth)

Settings → Connectors → Add custom connector. Name Cracked, URL https://cracked-ai-pearl.vercel.app/mcp. Claude discovers our OAuth server, registers itself, sends you to the Cracked consent screen, and you pick the workspace to bill. Tokens last 30 days and refresh automatically. Revoke from API keys.

ChatGPT

Settings → Connectors → Create. Connection URL https://cracked-ai-pearl.vercel.app/mcp, authentication OAuth. Same consent flow.

Claude Code

claude mcp add --transport http cracked https://cracked-ai-pearl.vercel.app/mcp --header "Authorization: Bearer ck_live_..."
# or let Claude Code run the OAuth flow:
claude mcp add --transport http cracked https://cracked-ai-pearl.vercel.app/mcp

Cursor

~/.cursor/mcp.json

{ "mcpServers": { "cracked": { "url": "https://cracked-ai-pearl.vercel.app/mcp", "headers": { "Authorization": "Bearer ck_live_..." } } } }

Codex

codex mcp add cracked --url https://cracked-ai-pearl.vercel.app/mcp --header "Authorization: Bearer ck_live_..."

OpenCode

opencode.json

{ "mcp": { "cracked": { "type": "remote", "url": "https://cracked-ai-pearl.vercel.app/mcp", "enabled": true, "headers": { "Authorization": "Bearer ck_live_..." } } } }

OAuth details

Discovery: https://cracked-ai-pearl.vercel.app/.well-known/oauth-authorization-server and https://cracked-ai-pearl.vercel.app/.well-known/oauth-protected-resource/mcp.
Dynamic client registration (RFC 7591) at /oauth/register; no manual client setup.
Authorization code with PKCE (S256), refresh tokens, revocation at /oauth/revoke.
Scopes: tools:discover, tools:run, wallet:read, offline_access.
An access token is a workspace-scoped key (ck_oauth_…) that also works on the HTTP API.

Verify from the shell

curl -s https://cracked-ai-pearl.vercel.app/mcp -H "Authorization: Bearer ck_live_..." -H "content-type: application/json" -H "accept: application/json, text/event-stream" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'