Your MCP URL
All agents and clients connect to the same base URL:Locking to a Toolkit
For production agents, append aprofile parameter to lock the connection to a specific toolkit:
profile is set, the session is locked by default — the agent cannot switch toolkits or modify its own guardrails. This is the recommended configuration for production deployments.
Full URL Parameter Reference
Example URLs:
Agent Deployment
Full guide to profile locking, skills, and production agent configuration
Authentication: OAuth vs Token
Civic supports two authentication methods depending on how your agent or client connects.OAuth (Interactive Clients)
For interactive clients, Civic uses the standard MCP authorization flow. When you add the MCP URL to your client and connect:- Your client opens a browser window to app.civic.com
- You sign in with your Civic account
- The client receives a session token automatically
- No manual token management required
Civic Tokens (Agents and Automation)
For agents and automated workflows that cannot perform browser-based OAuth, generate a Civic token:Generate a Token
- Log in to app.civic.com
- Complete the onboarding flow — on the Install step, you will see your MCP URL
- Below the URL, select Generate a Civic token — described as “Best for automation platforms and scheduled tasks”
- Click Generate token and copy it immediately — it will not be shown again
Using Your Token
Pass the token as a Bearer token in theAuthorization header:
Token Expiry
Tokens expire after 30 days. Set a calendar reminder to regenerate before expiry. If a token expires, your agent will receive authentication errors until a new token is configured.For App Builders: Identifying Users
If you are building an app where end users should each have their own Civic connection, you have two options: Civic Auth — Use Civic’s user authentication system to identify users. Users log in via Civic Auth, and you can exchange their Civic Auth token for a Civic Hub session. Recommended for new apps.Civic Auth
Add user authentication to your app with Civic Auth
Token Exchange
Exchange existing auth tokens for Civic Hub access

