MCP Connections

Model Context Protocol (MCP) Connections allows Portal Administrators find and share the configuration details their IT team needs to connect an AI tool, such as Claude, ChatGPT, or Microsoft Copilot, to a Prophix One FP&A Plus instance.

  Note:  MCP Connections currently supports FP&A Plus instances only. Support for additional Prophix One applications will be added in future releases.

Prerequisites

Before you access MCP Connections, make sure the following requirements are met.

• Portal Admin role

  Only Portal Administrators can view and access MCP Connections. Standard users do not see this menu item.

• Prophix One AI enabled

  MCP Connections appears only when Prophix One AI is active on the account. If the account has opted out of Prophix One AI, this page is not available.

• One set of credentials per account

  Each account has a single OAuth client pair (public and private) that is shared across all instances. The MCP Endpoint URL is unique to each instance. The OAuth credentials are not.

Navigate to MCP Connections

1. Sign in to Portal.

2. In the left navigation, open  Account Management.

3. Select MCP Connections.

   The MCP Connections page lists all FP&A Plus instances on your account

   • Application: The Prophix One application, currently FP&A Plus.

   • Instance Name: The instance name configured in Portal.

   • Instance ID: The unique identifier for the instance

   • Action: View opens the connection details for that instance.

View connection details

Select View for an instance to open the MCP Connection panel.

All fields in the panel are read-only. Use the copy button next to a field to copy its value to your clipboard.

The panel contains the following sections:

• MCP Endpoint URL

  The URL that your AI tool's MCP connector uses to connect to the instance.

  The MCP Endpoint URL is unique to each instance.

• Public OAuth credentials

  Credentials for Claude, ChatGPT, and other standard MCP-compatible tools.

• Private OAuth credentials

  Credentials for Microsoft Copilot and other tools that require a client secret.

• Metadata Configuration URL

  A link to your account's OpenID Connect discovery document. Your IT team may need this URL if the AI tool requires the authorization or token endpoint URLs to be entered manually.

Use public OAuth credentials

The Public OAuth credentials section provides a Client ID:

mcp/oauth

Public credentials use the OAuth 2.1 Authorization Code flow with PKCE. No client secret is required or issued.

Most standard MCP-compatible tools, including Claude and ChatGPT, require only:

• MCP Endpoint URL

• Client ID: mcp/oauth

Share these values with your IT team. The AI tool can typically discover the remaining configuration from the MCP Endpoint URL.

Generate private OAuth credentials

Some AI tools, such as Microsoft Copilot, require a confidential client that uses both a Client ID and a Client secret.

Generate credentials for the first time

If private credentials have not yet been generated for your account, the Generate private credentials button appears in the panel.

Select Generate private credentials to create the private client.

After the credentials are generated, the panel displays:

• Client ID: mcp/oauth_secret

• Client secret: masked by default

  Note:  Private credentials are generated once per account. If private credentials already exist, selecting Generate private credentials does not create a new secret. The existing credentials are displayed instead.

Access existing credentials

If private credentials have already been generated, the Client ID and Client secret appear automatically when you open the connection details panel.

Reveal or copy the client secret

The Client secret is masked by default.

• Reveal: Press and hold  next to the Client secret field to view the secret. Release the icon to mask it again.

• Copy: Select  Copy next to the field to copy the secret to your clipboard without revealing it.

Provide your IT team with:

• MCP Endpoint URL

• Client ID: mcp/oauth_secret

• Client secret

Copy connection details

Select the  Copy button next to any field to copy its value to your clipboard. A "Copied to clipboard" confirmation appears after the value is copied.

Share the copied values with your IT team to configure the connection.

Troubleshooting

Use the resolutions provided to resolve the issues you might encounter.

MCP Connections does not appear in Account Management

Confirm that Prophix One AI is enabled on your account and that you have the Portal Administrator role.

The connection details panel does not load

Close the panel and select View again. If the issue persists, wait a moment and try again.

I closed the panel before copying the secret

Open the panel again by selecting View for any instance. The existing private credentials are displayed. Closing the panel does not invalidate or reset the secret.

All instances show the same Client ID

This is expected. There is one OAuth client pair per account. The MCP Endpoint URL is unique to each instance, but the OAuth credentials are shared across the account.

FAQs

Why do all my instances show the same Client ID?

Your account has one OAuth client pair, regardless of how many FP&A Plus instances it contains.

The MCP Endpoint URL is unique to each instance and routes requests to the appropriate instance. The Client ID is shared across the account.

Do I need to generate private credentials?

Only if your AI tool requires client-secret authentication.

Claude, ChatGPT, and most standard MCP-compatible tools can use the public Client ID. Microsoft Copilot and some enterprise connectors require private credentials.

What is the Metadata Configuration URL used for?

The Metadata Configuration URL points to your account's OpenID Connect discovery document. It provides information about the authorization and token endpoints for your account.

Most modern AI tools can discover this information automatically. Your IT team may need to enter the URLs manually for tools that do not support automatic discovery.