AI assistants and ICP MCP

An AI assistant reaches your Agent through ICP MCP, the Internet Computer’s hosted MCP server. The assistant signs in with Internet Identity and calls the Agent as its own principal, so it can do only what the role you give it allows. Find the details under Agent › Integrations › AI assistants.

Make the Agent discoverable

ICP MCP calls an Agent only when it publishes a manifest naming itself. Only the Agent’s owner can turn this on, because doing so accepts the ICP MCP App Operator Terms (version 1.1) for the Agent’s operator.

1. Open Agent › Integrations › AI assistants and choose Make discoverable.
2. Optionally enter a custom domain, such as agent.example.com.
3. Accept the terms, then choose Make available as You.

The Agent then serves a certified /.well-known/ic-architecture file that names only itself. The owner or an Admin can choose Stop at any time; ICP MCP stops calling the Agent once it sees the change.

Use a custom domain

The Agent lists your domain in /.well-known/ic-domains. Add these DNS records, then validate and register the domain as the Internet Computer’s custom domains guide describes:

Type	Name	Value
CNAME	agent.example.com	agent.example.com.icp1.io
TXT	_canister-id.agent.example.com	your Agent’s canister ID
CNAME	_acme-challenge.agent.example.com	_acme-challenge.agent.example.com.icp2.io

Connect an assistant

1. In the assistant, add the connector https://mcp.internetcomputer.org/mcp.
2. Sign in, then add the app at your Agent’s address (or your domain).
3. The assistant shows its principal. Add it in Agent › People as a Read-only member.

For a local tool, run icp identity link web --app <your Agent's address>.

An assistant gets a different principal from yours, because it signs in at the Agent’s address rather than icLens. Until you add it, it can call nothing.

What an assistant can do

• getApiDoc describes every method, who may call it and what it changes.
• schema and execute answer read-only queries over four kinds of record:

Record	For example
Canisters	The canisters in the Agent’s Registry
Metric samples	Cycles, memory and your own metrics over time
Timeline events	Code changes, settings changes and Monitor events
Alerts	Which rules are firing, and for which canisters

Queries never return raw logs, AI conversations, credentials, wallet details or payment receipts. A Read-only member can’t change anything; a higher role can call the changes that role allows, so keep assistants Read-only.

To read metrics from Grafana instead, use Connect Grafana.