MCP (Model Context Protocol) enables Large Language Models (LLMs) to interact with Kontainer DAM & PIM on behalf of users. This integration allows services like ChatGPT, Claude, Amazon Bedrock, Mistral, CoPilot or any other LLM provider to securely connect to your Kontainer instance.

The MCP will inherit the same access rights as the user who generates its credentials. Below, we outline two authentication methods to activate MCP for Kontainer.

Authentication Methods

1. HTTP Header Authentication

You can use your existing JSON API credentials to authenticate the MCP via the HTTP request header.

The authentication is performed by including the following in the request header:

Authorization: Bearer $TOKEN

You can either use an existing API token or create a new one specifically for MCP.

2. OAuth 2.0 Authentication

OAuth 2.0 allows you to authenticate the MCP similarly to how you would use "Log In With Google," but with Kontainer credentials.

To set this up:

    1. Click "Add New User Access."
      MCP Kontainer image 1
    2. Select the user whose permissions you want the MCP to inherit. For example, if the user has delete rights, the LLM will also be able to delete files. If the user only has download rights, the LLM will be restricted accordingly. The same goes for access to data fields.Kontainer MCP image 2
    3. Create and securely copy the Client ID and Client Secret.Kontainer MCP image 3

Each LLM provider may have different integration steps. Please refer to their MCP documentation for detailed guidance.

Example: Connecting Claude

The steps below show a complete setup using Claude as an example. The flow uses OAuth 2.0, so Claude will act in Kontainer with the permissions of the user who signs in.

  1. In Claude, go to Settings > Connectors and choose Add > Add custom connector.
    Claude settings with the Connectors page open and the Add custom connector option selected
  2. Name the connector and enter your Kontainer URL followed by /mcp — for example https://yourcompany.kontainer.com/mcp. Leave Individual sign-in enabled and click Add.
    The Add custom connector dialog with a name and the Kontainer MCP URL filled in
  3. Click Connect on the new connector.
    The Kontainer MCP connector page in Claude with the Connect button
  4. Confirm the Kontainer workspace you are connecting to. This is the subdomain you normally sign in to.
    Kontainer workspace selection screen asking for the subdomain
  5. Log in as the user whose permissions Claude should inherit, then click Authorize. You can revoke this access again at any time from your Kontainer account settings.
    Kontainer authorization screen granting Claude access to the MCP integration

Important Note

Some LLM providers require technical/IT knowledge to add Kontainer to their MCP services. Ensure you follow the provider's documentation and best practices for a secure setup.