Connect your AI

Every person connects their own AI client and signs in as themselves. PSArelay then works as their Autotask user: Autotask applies their own permissions to every change, and the console records who did what.

Before you start (administrator, once)

• The server’s public address: set MCP_PUBLIC_URL to the https address the AI clients reach (for example https://mcp.example.com). Hosted PSArelay has this already.
• Link people to their Autotask user: console → Users → Autotask user → Link (their Autotask email). Someone who is not linked can’t sign in from an AI client.

ChatGPT

1. ChatGPT → Settings → Connectors → Create.
2. Name PSArelay, the address from console → Connect, Authentication OAuth.
3. Connect — a PSArelay sign-in page opens. Sign in with your console login.

Business and Enterprise workspaces: an admin adds it once and shares it; each person still signs in as themselves.

Claude (claude.ai, Desktop)

1. Settings → Connectors → Add custom connector, paste the address.
2. Connect and sign in with your console login.

Codex

codex mcp add psarelay --url https://mcp.example.com/mcp

codex mcp login psarelay

n8n and scripts

They can’t sign in interactively. Create a token on your Account page (or an administrator creates a service token on Access) and send it as Authorization: Bearer <token>.

How the sign-in works

PSArelay is its own OAuth 2.1 authorization server, as the MCP specification describes: clients find it from /.well-known/oauth-protected-resource, register themselves, and sign the person in with PKCE. Access tokens last an hour and work only on this server; refresh tokens rotate, and a reused one disconnects that client at once. Disconnect any client from console → Connect → Signed in as you.