Skip to content
Artifactum Content Objects · MCP
Open vault

Status

Known issues

Public docs say what actually works. These are the constraints we will not paper over.

Safari and 127.0.0.1 callbacks

Some desktop MCP clients (Grok Build CLI; Cursor desktop OAuth) redirect to http://127.0.0.1:<port>/callback or http://localhost:8787/callback. Safari’s HTTPS-First feature upgrades that to https://, so the authorization code never reaches the client.

  • Daily path on a Safari-default Mac is a long-lived Bearer. That is first-class support, not a fallback until OAuth works.
  • Do not tell people to switch their default browser.
  • Artifactum cannot wrap another product’s loopback listener. The client owns redirect_uri. Hosted https callbacks (Grok Web, Grok iOS, Claude.ai) are a different flow and can work.

Dynamic OAuth apps on reconnect

Some MCP clients dynamically register a new OAuth application every time they “connect” or “reconnect.” On the hosted identity tenant those registrations are disabled. Extra apps named like tpc_* are junk, not a feature.

  • If tools still work, do not reconnect to “refresh.”
  • If a client asks you to mcp login because a Bearer is missing, put the Bearer in the process env instead.
  • Do not mint extra OAuth apps by hand.

Claude cannot fetch download_url

Default typical read is get_content (or retrieve) → metadata + a short-lived presigned download_url, then HTTP GET that URL for bytes. Humans, curl, Grok, and Cursor can GET it. Inline is not the default. Canonical get_content has no delivery= flag. Claude cannot GET that URL. Claude’s fetch allowlist only trusts URLs that originated from web_search / web_fetch. An Artifactum presign is rejected no matter how often you regenerate it.

  • Hosts that can HTTP GET: use the download URL. That is the product path.
  • Hosts that cannot HTTP GET that URL: opt-in get_content_for_llm (size/time capped). Do not make this the default for every agent.
  • Small text-like exception on exact-key get: include_content=true — never PDFs/images.
  • Do not instruct Claude to open or web_fetch the download URL.

Claude.ai custom connector is pass*: connect and tools work. Tell people to use in-tool content on that host, not “open the URL”. Claude Code and Claude Desktop are still blocked — not a public pass. ChatGPT MCP and Codex are still blocked. We are not grinding those logins from this documentation pass.

Still invite-only

Hosted Artifactum is not public self-serve. Request access from the marketing site. Connector URLs and tokens are issued privately.