The Model Context Protocol (MCP) is an open standard that lets AI agents communicate with external tools and data sources through a common interface. Bolt uses MCP to extend what agents can do — a connected MCP server can expose anything from a database query tool to a full web-search API. Bolt manages the complete lifecycle: adding servers, running OAuth flows, refreshing tokens, and probing connectivity.Documentation Index
Fetch the complete documentation index at: https://mintlify.com/bolt-builder/bolt-cli/llms.txt
Use this file to discover all available pages before exploring further.
Server types
Bolt supports two kinds of MCP servers.| Type | Transport | Description |
|---|---|---|
remote | HTTP / SSE (Streamable HTTP) | A server running at a URL you can reach over the network |
local | stdio | A local command that Bolt spawns as a child process |
Commands
bolt mcp add
Add a new MCP server interactively or in one shot.
Interactive — run bolt mcp add with no arguments to step through a prompt-driven wizard that asks for the name, scope (project or global), type, URL or command, and whether the server uses OAuth.
Non-interactive — provide a name plus either --url for a remote server or a command after -- for a local one:
bolt mcp add
| Flag | Description |
|---|---|
--url <url> | URL of a remote MCP server |
--header <KEY=VALUE> | HTTP header to send to a remote server (repeatable) |
--env <KEY=VALUE> | Environment variable for a local server (repeatable) |
bolt mcp list
List every configured MCP server along with its connection and authentication status.
| Icon | Meaning |
|---|---|
✓ | Connected (and authenticated if OAuth is in use) |
⚠ | Needs authentication or credentials are expired |
✗ | Failed to connect or client registration required |
○ | Not yet initialised or disabled |
bolt mcp auth <name>
Authenticate with an OAuth-enabled remote MCP server. If you omit the name, Bolt shows an interactive picker listing all OAuth-capable servers together with their current auth status (✓ authenticated, ⚠ expired, ✗ not authenticated).
Bolt handles the full OAuth flow, including token storage and automatic token refresh. You do not need to copy tokens or manage expiry manually. If a server requires a pre-registered client ID, add
oauth.clientId (and optionally oauth.clientSecret) to the server’s config entry in .bolt/bolt.jsonc.bolt mcp logout <name>
Remove stored OAuth credentials for a server. If you omit the name, Bolt prompts you to choose from a list of servers that have stored tokens.
bolt mcp debug <name>
Probe a remote server’s connectivity and inspect its OAuth state without starting a full session. This is the first tool to reach for when a server shows ✗ failed or ⚠ needs authentication.
debug reports:
- The server URL and current auth status
- Access-token details (masked) and expiry timestamp
- Whether a refresh token is present
- Raw HTTP response code from the server
WWW-Authenticateheader contents- The result of an OAuth discovery probe (without completing the flow)
Manual configuration
You can add or edit MCP servers directly in.bolt/bolt.jsonc without using the CLI commands. Bolt picks up changes on the next session start.
Add and authenticate a remote MCP server
Add the server
Run Bolt writes the entry to
bolt mcp add and follow the prompts, or use the non-interactive form:.bolt/bolt.jsonc (project scope) or your global config.Check the connection status
⚠ needs authentication next to its name.Authenticate with OAuth
✓ connected (OAuth).