OAuth
OAuth is the easiest way to connect an agent that runs on your computer and can open a browser: Claude, ChatGPT, Codex, Cursor and most desktop MCP clients.
How it works
Section titled “How it works”- Add
https://mcp.usenysa.com/mcpto your agent. The install guides have the exact steps for each agent. - Your agent opens a Nysa sign-in page in your browser.
- Sign in with the Google account you use for Nysa.
- Start a new conversation. Your agent now acts as you.
You need a Nysa account in a Company workspace.
What your agent can do
Section titled “What your agent can do”An agent signed in with OAuth has the same access you have in the web app: it reads everything you can read and can write when you ask. To give an agent less access than you have, use an API key instead.
Staying signed in
Section titled “Staying signed in”- Nysa checks your membership on every call. If you leave the workspace, the next request is refused and your agent asks you to reconnect.
- If your agent says “Your Nysa connection needs to be refreshed”, remove Nysa from the agent, add it again, and sign in.
OAuth or API key?
Section titled “OAuth or API key?”| OAuth | API key | |
|---|---|---|
| Best for | Agents on your computer | Agents on a server, scripts, no browser |
| Setup | Sign in once in the browser | Create a key, store it as NYSA_API_KEY |
| Access | Everything you can do | Read only or read and write, limited to chosen scopes and projects if you want |
| Expires | Stays signed in until you disconnect or leave | After 30 days, 90 days or 1 year |