Endpoint
https://mcp.assets.hoistai.com/mcp
Use this exact URL in MCP-compatible hosts. It is the remote MCP server for Hoist.
Current status: MCP discovery, OAuth metadata, dynamic client registration, and the protected MCP endpoint are live. Tool calls require OAuth. Real PPSR and ABN source checks require approved account/source access. The REST API health endpoint is live; direct API and CLI calls use Hoist Assets API keys.
Authentication
MCP uses OAuth. The host registers a client, opens a browser, and asks the user to approve scopes. After approval, the host stores a scoped access token and sends it with MCP requests. Do not use HOIST_ASSETS_API_KEY for MCP.
- The AI host discovers Hoist at
/.well-known/mcp.json. - The host starts OAuth with PKCE.
- The user signs in and approves the requested scopes.
- The host receives a token scoped to that client.
- The user can revoke access from account settings.
Scopes
| Scope | Allows |
|---|---|
ppsr:search.org | Run PPSR organisation checks. |
ppsr:search.serial | Run PPSR serial-number checks. |
abn:lookup | Look up ABN and business identity data. |
gst:status | Check GST status. |
assets:receipts | Read records and logs for completed checks. |
exports:write | Create Evidence Pack exports and audit artifacts. |
assets:monitor | Monitor approved entities and assets for source-backed changes. |
mcp:account.receipts | Read MCP session logs for the connected account. |
Supported hosts
Claude Desktop
Use the remote MCP endpoint with OAuth.
Install guide MCP hostClaude.ai
Add Hoist as a connector where your plan supports it.
Install guide Best effortChatGPT
Create a private app where ChatGPT exposes that setting.
Install guide MCP hostCursor
Add Hoist to your MCP server config.
Install guide MCP hostCline
Connect from the VS Code extension settings.
Install guide MCP hostCodex CLI
Register Hoist in Codex MCP config.
Install guide MCP hostGemini CLI
Add Hoist to Gemini CLI settings.
Install guide Direct HTTPcurl
Useful for testing JSON-RPC calls and OAuth discovery.
GuideTools
The exact tool list is returned by tools/list. The first datasets are PPSR and ABN.
| Tool family | What it answers |
|---|---|
ppsr_search | Is there a PPSR registration against this business or asset? |
abn_lookup | Does this business have a valid ABN? |
verify_counterparty | Check a counterparty using available Australian source data. |
create_evidence_pack | Bundle records for a subject into a downloadable pack. |
show_due_diligence_receipt | Read the log for a completed check. |
See the tool reference for parameters and example calls.
