Nothing to install
An account with us is all you need. There is nothing to download and nothing to install on a server.
MCP + OAUTH / Agent connectionYour assistant prepares.
Your assistant prepares.
You decide.
You can connect the AI assistant you already use (Claude, for example) to your Send the Canary account. It reads your test requests and reports and prepares drafts; the decision to submit stays with you.
How do I connect? ↓01 / MAKE THE CONNECTION01 02 03
Before you connect
Server address
https://mcp.sendthecanary.com/mcpProtocolMCP + OAuth
Paste this address into your client’s add MCP server screen.
No secret is copied
You do not paste a password or an API key into the assistant. The connection is made over OAuth: the assistant is authorised in its own name and does not carry your credentials.
The assistant starts it, you approve it
When the assistant starts the connection you are sent to the panel. No access begins until you have seen the consent screen.
03 / CAPABILITIES AND LIMITS
What the assistant can do once connected
Ten tools; eight only read, two prepare drafts.
01
Readiness check: verifies account, balance and package eligibility in one call
READ02
Account summary: organisation details and balance
READ03
Packages: the package catalogue
READ04
Projects: your project list
READ05
Request list: your test requests
READ06
Request detail: one request in full
READ07
Report: a test report
READ08
Authorisation text: the declaration to read before submitting
READ09
Create project (writes)
DRAFT10
Create draft request (writes)
DRAFTWhat the assistant cannot do
This is not a promise but a permission list enforced on the server: any request outside it is refused.
- —It cannot submit a request
- —It cannot make a payment
- —It cannot add or remove organisation members
- —It cannot change organisation settings
- —It cannot delete the account
04 / THE FINAL STEP IS YOURSSign in to my panel ↗
The agent prepares, you submit
Submitting creates an order and a debit on your account. Your declaration that you are authorised to have the test carried out is also recorded, together with your IP address.
So you read the draft in the panel, correct it if needed, and make the decision to submit yourself. The assistant cannot take that step for you.
The panel also shows which client opened a draft. When you open one yourself, that field stays empty.
Removing access
Panel → Security → Connected applications, whenever you want.
Refresh authority is revoked the moment you remove it. The access token already in the assistant's hands is signed and cannot be recalled, so it expires within five minutes at the latest.
Where the data goes
We do not send your data to Anthropic or any other AI provider. The connection is made by your own assistant, and that assistant calls our server; the flow runs from your tool towards us.
The privacy policy of the assistant you use continues to apply to everything you share with it.
07 / GOOD TO KNOW
Questions, answered without hedging.
Can my assistant order a test on my behalf?
No. The assistant can only prepare a draft. Submitting depends on a separate approval you give in the panel, and that limit is enforced on the server.
Do I have to give the assistant my password or an API key?
No. The connection is made over OAuth; you copy no secret into the assistant. Its authority is limited to the permissions you granted on the consent screen.
Is my data sent to the AI provider?
Not by us. The connection is made by your own assistant and it calls our server. For what you share with the assistant, that assistant's own privacy policy applies.
How do I cut off access?
Remove it in the panel under Security → Connected applications. Refresh authority is revoked immediately; a token already issued expires within five minutes at the latest.
Which assistants does it work with?
Any client that supports the Model Context Protocol. The server address is https://mcp.sendthecanary.com/mcp — give that address to your client's "add MCP server" screen.