http://localhost:9858. The MCP server is at /mcp on the same address and port, over streamable HTTP in stateless mode (no MCP session to keep, no standard-input transport).
The fast way: one command
yukta-cli agents install finds the AI agents on your machine and, for each, registers the Yukta MCP server in the agent’s own configuration and installs the Yukta skills. The installer script offers it at the end of an install; run it yourself any time:
It talks to the server at
--url (default http://localhost:9858). For a server with API keys, add --token-file <file>, or --token-env VAR so that agents which support it read the key from an environment variable instead of a file. Without either, a key is written into the agent’s configuration file, which then is private to you (mode 0600).
What it never does: it changes only a yukta entry in each agent’s configuration and the skill folders yukta-workflows and yukta-supervisor; it keeps the first original of each file as <file>.yukta-bak; and it leaves a file it cannot parse as plain JSON (one with comments, say) alone and prints the entry to add by hand. Everything it did is recorded in agents.json in your user config folder, which agents uninstall reads. After upgrading yukta-cli, yukta-cli agents install --refresh updates the skills.
The steps below do the same by hand, for an agent that is not in the list or a setup of your own.
Steps
1
Pick a key and a role
/mcp uses the same yukta.api-keys as REST. Send the key as Authorization: Bearer <key> or X-API-Key: <key>. With no key configured, the server accepts loopback only, which means any process on the machine, including one that can call create_session and so install workflows that run code. Set a key whenever the machine is shared.Give the assistant the lowest role that does its job:Add a key when you start the server, optionally limited to some sessions:
sessionId that names one of its sessions. Commands it sends are audited as key:assistant.2
Connect your client
- Claude Code
- Codex
- Antigravity
- Any MCP client
--header when the server has no keys.3
Install the skill
The tools are enough for an agent that already knows Yukta. The
yukta-workflows skill gives any agent the working knowledge: call whoami first, which role each tool needs, which actions to ask you about first (replacing or deleting a session, force-stopping runs, rolling back, changing scheduler limits, answering an approval) and recipes to create, run, watch, debug and steer. Copy the folder (one SKILL.md) to where your agent reads skills:4
Try it
Ask the assistant: “Call whoami, then list the sessions on Yukta.”
Verify it worked
claude mcp list (or codex mcp list) shows yukta as connected, and the assistant’s first call returns something like:
list_sessions then answers with your sessions. A tool the role does not allow is refused with HTTP 403 (a body above 1 MB with 413). When keys are configured, a missing or wrong key is refused with 401.
To exercise a full loop, ask: “Create a session with a workflow that greets a name, start it for Ada and show me the result.” The assistant reads get_session_creation_instructions and list_plugins, calls create_session (an ADMIN tool: with an OPERATOR key it should tell you it needs a higher role), start_workflow, then get_workflow_status and get_execution_result.
Variations
start_workflowtakes no payload. It starts with an empty trigger payload. To start with input, use REST or the CLI, or a workflow that starts from aCONSTANT_SOURCE.- Let it read logs and outputs.
get_execution_logs(withafterCursorto read only new lines) andget_node_output(tail, head, grep) keep the answers small. - Run supervisors and answer questions. An assistant with
ADMINcan manage supervisors (save_supervisor,set_assignments,replay_supervisor); one withOPERATORcananswer_input. The risk rule still applies: anOPERATORkey counts as a person. See Route input requests. - Prompts and resources. The server offers prompts
debug-workflowandcreate-session-configand resourcesyukta://overviewandyukta://architecture; clients that support them list them.
Related
- MCP tools reference for every tool, role and argument.
- AI-assisted configuration for what an assistant can and cannot do.
- Secure the server and Security reference.