How to Create an App Registration for the MCP Server in OnePlan

  • Updated

Direct Answer: How to Create an App Registration for the MCP Server in OnePlan

To create an app registration for the OnePlan MCP Server, select your profile avatar > Register Custom Apps, then select + > New App Registration. Enter an Application Name and your AI assistant’s Callback URL(s), choose a Scope, choose whether the app is a Public client, and select Add. Copy the Client ID, and the Client Secret if one is created, into your AI assistant’s connector settings. For Claude, you can usually skip this and add consent to the preconfigured Claude app instead.

Note: The OnePlan MCP Server is available in preview to approved customers. To request access, contact your Customer Success Manager.

What This Article Covers: App Registrations for the MCP Server

This article explains how to create an app registration (also called a Custom App) in OnePlan for an AI assistant that connects to the OnePlan MCP Server. It covers the callback URL each assistant needs, how to choose between a public and confidential client, how to choose a scope, and how to use the preconfigured Claude app instead.

What you will accomplish By the end of this article, you will have an app registration for your AI assistant and the Client ID (and Client Secret, if needed) to finish setup in the assistant.

Before You Begin: Creating an App Registration for the MCP Server

Before you begin, make sure:

  • Your organization is approved for the OnePlan MCP Server preview
  • You are a group administrator in OnePlan, working in the group you want to connect
  • You have the callback URL for your AI assistant (see Callback URLs by Assistant in this article)

Note: For Claude, OnePlan provides a preconfigured Claude app, so most organizations only need to add consent to it. Create your own registration for Claude only if your security policy requires an organization-owned OAuth client.

Why This Matters: App Registrations for the MCP Server

Context: What an App Registration Does

An app registration tells OnePlan which AI assistant is allowed to sign users in to the OnePlan MCP Server. Each user still signs in with their own OnePlan account, and the assistant only receives access to what that user can see and change.

Context: Key Terms

  • Callback URL — Where OnePlan sends the user after they sign in. It must match the assistant’s URL exactly.
  • Client ID — The app’s public identifier. You enter it in the assistant.
  • Client Secret — A password for the app. Only created for confidential clients and shown once.
  • Public client — An app with no Client Secret. Public clients must use PKCE, a sign-in safeguard that replaces the secret.
  • Scope — Group makes the app available in the current group only. Organization lets other groups in your organization add consent to the same app.
  • Consent — A group administrator’s approval for an app to be used in their group.
  • Preconfigured app — An app that OnePlan has already registered for you, such as Claude. Preconfigured apps appear on the Global tab of Browse App Registrations. You add consent to enable one in your group instead of creating your own app registration.

Context: Callback URLs by Assistant

Assistant Callback URL When you get it
Claude (web, desktop, mobile, and Cowork) https://claude.ai/api/mcp/auth_callback and https://claude.com/api/mcp/auth_callback Fixed. Use both values.
ChatGPT https://chatgpt.com/connector/oauth/{unique-id} Generated per app and shown in ChatGPT’s Advanced OAuth settings before you create the app registration.
Microsoft Copilot Studio Generated per connector Shown only after you select Create in Copilot Studio. Use https://localhost as a placeholder, then edit the registration.

Context: Public or Confidential Client

Choose When
Confidential (Public client cleared) Copilot Studio, or any assistant that asks for a Client Secret. Copilot Studio requires a secret.
Public (Public client selected) Assistants that support PKCE without a secret, such as ChatGPT and Claude. There is no secret to store or rotate.

Context: Group or Organization Scope

Scope Use when
Group Only one OnePlan group will use the assistant. Other groups can’t see the app.
Organization Several groups in your organization will use the same assistant. A group administrator in each group adds consent from Browse App Registrations.

Note: Scope can’t be changed after an app registration is created. If you need a different scope, create a new app registration.

Step-by-Step: Creating an App Registration for the MCP Server

Task: Open Register Custom Apps

Starting from any page in OnePlan, in the group you want to connect:

  1. Select your profile avatar in the top navigation.
  2. Select Register Custom Apps.

Profile menu with Register Custom Apps selected

Task: Start a New App Registration

Starting from Custom App Registrations:

  1. Select +.
  2. Select New App Registration.

Plus menu showing New App Registration

Task: Enter the App Details

In the New App Registration panel, enter the following:

  • Application Name — A name your users and administrators will recognize, such as Claude, ChatGPT, or Copilot Studio - Sales Agent.
  • Callback URL(s) — Your assistant’s callback URL. Enter one URL per line if the assistant uses more than one.
  • Scope — Group for this group only, or Organization to share the app with other groups.
  • Public client — Select for no Client Secret. Leave cleared to create a Client Secret.
  • Require PKCE — Selected automatically for public clients.

New App Registration panel with app details

Note: If you register your own app for Claude, add both Claude callback URLs so sign-in keeps working on either domain.

Task: Save and Copy the Credentials

Starting from the completed New App Registration panel:

  1. Select Add.
  2. In the Custom App Credentials window, copy the Client ID.
  3. If you created a confidential client, copy the Client Secret and store it securely.
  4. Select OK.

Important: The Client Secret is shown only once. If you lose it, use Rotate secret to create a new one, then update the assistant.

Custom App Credentials window showing the Client ID and Client Secret

Task: Finish Setup in Your Assistant

Open the setup article for your assistant and enter the Client ID (and Client Secret, if you created one) when asked:

Task: Use the Preconfigured Claude App Instead

OnePlan provides a preconfigured app for Claude, available on the Global tab of Browse App Registrations, that works with Claude’s published identity. You don’t need to create an app registration or enter a callback URL.

Starting from Register Custom Apps:

  1. Select + > Browse App Registrations.

Plus menu with Browse App Registrations selected

  1. On the Global tab, select Claude.

Browse App Registrations panel with the Global tab

  1. Select Add Consent.
  2. Repeat in each OnePlan group that should be available in Claude.

After you add consent, the app appears in your Custom App Registrations list with Scope shown as Group, because consent applies to your group only.

Custom App Registrations list showing the Claude app registered by OnePlan Platform

Task: Share an Organization App with Another Group

Starting from Register Custom Apps in the other group:

  1. Select + > Browse App Registrations.
  2. Open the Organization tab.
  3. Select the app.
  4. Select Add Consent.

Frequently Asked Questions: App Registrations for the MCP Server

Q: Why does sign-in fail with a redirect or callback error? A: In OnePlan, the callback URL on the app registration must match the assistant’s callback URL exactly, including https:// and any trailing characters. Select Edit on the app registration under Register Custom Apps and paste the URL again.

Q: Do I need a separate app registration for each AI assistant? A: Yes. In OnePlan, each AI assistant has its own callback URL and its own Client ID. Name each app registration clearly, such as ChatGPT or Copilot Studio - Sales Agent.

Q: Who can see the Client ID of an app registration? A: In OnePlan, anyone with access to the Custom App Registrations list in your group can see the Client ID. The Client ID is not a secret, but the Client Secret must be stored securely.

Q: What should I do if I lose the Client Secret? A: In OnePlan, the Client Secret can’t be retrieved after the Custom App Credentials window closes. Select Rotate secret on the app registration to create a new secret, then update your AI assistant with it.

Q: Why don’t I need an app registration for Claude? A: In OnePlan, a preconfigured Claude app provided by OnePlan is available on the Global tab of Browse App Registrations for all customers. A group administrator only needs to add consent to it, and the Claude Owner selects Use Claude’s published identity when adding the connector.

What to Do Next: App Registrations for the MCP Server

Get started with related tasks:

Learn about related topics:

Was this article helpful?

0 out of 0 found this helpful

Comments

0 comments

Please sign in to leave a comment.