Client setup

Desktop agents

Cursor, Claude Code, scripts, VS Code — use a pam_mkey API key.

Browser LLM

ChatGPT, Claude web, Perplexity — OAuth via MCP URL.

Endpoint: https://api.pam.harmix.ai/v1/mcp/memoryCopy your account MCP URL from Setup. Generate or rotate a desktop key on Setup or Access. Auth details: Setup and keys.

Browser LLM connectors

Use OAuth 2.1 + PKCE. The MCP URL alone is enough for clients that support OAuth discovery — they register via dynamic client registration (DCR) automatically.

ChatGPT
Claude web
Perplexity
Other

Open ChatGPT and follow these steps:

Open Apps settings

Open Settings → Apps.

Enable Developer mode

Open Advanced settings and turn on Developer mode (accept the elevated-risk notice if shown).

Create app

Click Create app (from Advanced settings or the Enabled apps section).

Name the app

Name: anything you like (e.g. PAM Memory).

Paste MCP URL

Under Connection, choose Server URL and paste your MCP URL from Setup. Leave Authentication as OAuth — no client ID is required when discovery is enabled.

Create connector

Check I understand and want to continue, then click Create.

Click Sign in with [your app name]. ChatGPT opens PAM in your browser to sign in if needed.

Approve access

On the PAM approval screen, click Approve to grant memory:read access. You will be redirected back to ChatGPT.

ChatGPT uses per-connector redirect URLs such as https://chatgpt.com/connector/oauth/{id}. PAM accepts trusted chatgpt.com callback paths automatically.

Open Claude and follow these steps:

Add connector

In Claude, open Settings → Connectors → Add custom connector.

Name the connector

Name: anything you like (e.g. PAM Memory).

Paste MCP URL

Remote MCP server URL: paste your MCP URL from Setup.

Add

Click Add. Claude opens PAM in your browser if you are not signed in yet.

Approve access

On the approval screen, click Approve to grant memory:read access.

Claude web may show the connector as added before you approve in PAM. Access starts only after you click Approve on the PAM consent screen.

Open Perplexity and follow these steps:

Open Customize

In Perplexity, open Customize in the left sidebar.

Open Connectors

Click Connectors.

Add custom connector

Choose Custom connector.

Name the connector

Enter a connector name (e.g. PAM Memory).

Paste description

Paste the description below into the Description field.

Paste MCP URL

Paste your MCP server URL from Setup into the MCP URL field.

Save and approve

Save the connector, then sign in to PAM and approve memory:read when prompted.

Connector description (paste into Perplexity)

Read-only access to your company's internal context — people, projects, decisions, and processes — when your questions need organizational memory.

Open connector settings

Open your browser LLM connector or MCP settings.

Add MCP URL

Add the MCP server URL from Setup and choose OAuth if available.

Approve access

Complete PAM login and approve memory:read when prompted.

Advanced OAuth details

Browser clients resolve OAuth from:

Endpoint	Purpose
`GET /.well-known/oauth-protected-resource`	Protected resource metadata (RFC 9728)
`GET /.well-known/oauth-authorization-server`	Authorization server metadata
`POST /v1/oauth/register`	Dynamic client registration (DCR)

Scope: memory:read (read-only company memory retrieval).Token refresh: After the initial OAuth approval, compliant clients call POST /v1/oauth/token with grant_type=refresh_token to obtain a new access token without asking you to sign in again. Access tokens last about 1 hour; refresh tokens last about 30 days. PAM rotates the refresh token on every refresh (OAuth 2.1 best practice). If a refresh token is reused, the entire connection family is revoked and you must reconnect.Claude web — optional OAuth Client ID: For ChatGPT and other clients that support OAuth discovery, the MCP URL alone is enough. If Claude asks for credentials under Advanced settings, expand Advanced settings, paste the OAuth Client ID from Setup (or oauth_client_id from GET /v1/dev/mcp-config), and leave OAuth Client Secret blank (public client + PKCE).

Manage browser connections

View and revoke browser LLM connections from Access, or use the Developer REST API:

Method	Path	Purpose
`GET`	`/v1/dev/oauth-connections`	List active, expired, and revoked browser connections
`POST`	`/v1/dev/oauth-connections/{id}/revoke`	Revoke one connection (entire refresh-token family)

Desktop agents

Desktop and script clients use a static pam_mkey in the Authorization header. See Setup and keys for key format and rotation.

Cursor
Claude Code
Script / terminal
VS Code

Open MCP settings

Open Cursor and go to Settings → MCP (or run Ctrl+Shift+P → Open MCP settings).

Add server

Click Add new global MCP server (or project MCP server).

Configure auth

Paste the MCP server URL and Authorization: pam_mkey_<key> header. Generate a key on Setup if you do not have one yet.

Paste config (optional)

If your client asks for a full config block, paste the JSON below.

Test

Run the hello world prompt from Cursor to verify retrieve_memory works.

{
  "mcpServers": {
    "pam_memory": {
      "url": "https://api.pam.harmix.ai/v1/mcp/memory",
      "headers": {
        "Authorization": "pam_mkey_<key>"
      }
    }
  }
}

Open MCP config

Open your Claude Code MCP config file (typically ~/.claude/claude_desktop_config.json or project MCP settings).

Paste config

Paste the config JSON below under mcpServers.pam_memory, or use the CLI command.

Test

Run the hello world prompt to verify retrieve_memory works.

claude mcp add --transport http pam_memory https://api.pam.harmix.ai/v1/mcp/memory \
  --header "Authorization: pam_mkey_<key>"

{
  "mcpServers": {
    "pam_memory": {
      "type": "http",
      "url": "https://api.pam.harmix.ai/v1/mcp/memory",
      "headers": {
        "Authorization": "pam_mkey_<key>"
      }
    }
  }
}

Generate a key

Generate a static API key on Setup or Access if you do not have one yet.

Set Authorization header

Send requests to the MCP URL with Authorization: pam_mkey_<key> (no Bearer prefix).

Call retrieve_memory

Use JSON-RPC tools/call with retrieve_memory and your prompt.

Show Example tools/call payload

Minimal JSON-RPC example for server-side agents and scripts:

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "retrieve_memory",
    "arguments": {
      "prompt": "What do we know about our current project priorities, and who is responsible for follow-up on each?"
    }
  }
}

Create or update .vscode/mcp.json in your workspace:

{
  "servers": {
    "pam_memory": {
      "type": "http",
      "url": "https://api.pam.harmix.ai/v1/mcp/memory",
      "headers": {
        "Authorization": "pam_mkey_<key>"
      }
    }
  }
}

Test your connection

Run this hello world prompt in your agent:

What do we know about our current project priorities, and who is responsible for follow-up on each?

Confirm the call in Request Log. A successful retrieve_memory marks your setup as MCP verified on Setup.

Server metadata

After connection, the MCP handshake returns:

Field	Value
Server name	`pam_memory_mcp`
Protocol version	`2024-11-05`
Tools (v1)	`retrieve_memory` only
Resources / prompts	Empty lists in v1

The response may include an Mcp-Session-Id header for session continuity. The retrieve_memory tool includes MCP annotations for connector directories: readOnlyHint: true, destructiveHint: false.

Prefer live values from Setup for your MCP URL and config snippets. For automation, GET /v1/dev/mcp-config returns account-specific connection details (requires a PAM access JWT).

Getting started

Reference

Desktop agents

Browser LLM

Browser LLM connectors

Desktop agents

Test your connection

Server metadata

Desktop agents

Browser LLM

​Browser LLM connectors

​Desktop agents

​Test your connection

​Server metadata

Browser LLM connectors

Desktop agents

Test your connection

Server metadata