Connection security
Use browser authorization for connected agents.
The fresh MCP endpoint uses OAuth authorization with PKCE and consent. Old MCP tokens do not migrate.
Start your searchOn this page
Prefer OAuth
Connect ChatGPT or Claude from Agent settings and complete the browser flow. SoloSearcher verifies issuer, audience, expiry, account subject, and granted scopes on every request.
Choose the smallest scope
Use workspace:read for inspection and workspace:write only when the agent must save work. Approval operations remain explicit even with write scope.
Reconnect old clients
Legacy credentials and old MCP tokens are not accepted automatically. Remove the old connection and authorize the current protected resource again.