Skip to main content
MarketplaceInstalling from Marketplace

Installing from Marketplace

This page has been cleared and is ready for updated Builder Studio documentation.

Installing a marketplace MCP server means adding a published server to a workspace registry so that BuilderStudio agent nodes in that workspace can discover and call its tools. This is the BuilderStudio-internal consumption path. It is different from direct external-client setup, where Cursor, Claude Code, or Codex connect straight to the server's published endpoint.

Install is the workspace path, not direct-client setup
Adding a marketplace server to a workspace registry is a BuilderStudio-internal install step. For bearer-protected published servers, use the marketplace install flow to save the server owner's bearer token as outbound headers during install, or add and rotate it later on Agent node > MCP Servers > Auth headers. BuilderStudio does not issue self-serve marketplace bearer tokens for protected published servers.

Install vs direct client

A published MCP server supports two consumption paths. Choose the one that matches where you want to call the tools.

Two consumption pathstext
Install (this page):- adds the published server to a workspace registry- makes the tools available to Agent nodes in that workspace- protected installs can save outbound auth during install, or later on the Agent node Direct external client:- connects Cursor, Claude Code, or Codex straight to the published endpoint- /api/user-mcp/<workspaceId>/<slug>- public endpoint needs no bearer token; protected endpoint needs owner-managed auth

Install a server into a workspace

  1. Open the server detail page

    Review the description, category, and whether the published endpoint is public or protected. Confirm the server is the one you want before installing.

  2. Choose the target workspace

    Install registers the server in a specific workspace registry. Pick the workspace whose Agent nodes should be able to call the server's tools.

  3. Handle protected-server auth

    Protected published endpoints use a separate owner-managed published-server bearer path, typically a umcp_ key when the server owner issues API keys. Workspacebuilder_ keys do not unlock direct external client access to those published endpoints. For a bearer-protected server, save the owner-provided outbound auth during install if you already have it. Otherwise you can skip it during install and add it later. If you do not own it, ask the server owner for the published-server bearer token or exact outbound Authorization header value that endpoint expects. BuilderStudio does not issue self-serve marketplace tokens for protected published servers yet.

  4. Finish or defer the Agent-node auth

    If you skipped auth during a protected install, complete it later from Agent node > MCP Servers > Auth headers before expecting runs to succeed. Public servers need no extra auth.

Protected installs need outbound auth before they run
Installing a bearer-protected server does not by itself make its tools callable. The outbound Authorization the published endpoint expects must be saved during install or added afterward on the Agent node, or calls from that workspace will fail auth.

After install

  • The published server is discoverable by Agent nodes in the workspace you installed it into.
  • Outbound auth for protected servers is editable later on the Agent node, so you can rotate or add the owner-provided token without reinstalling.
  • A workspace install does not grant direct external-client access; that path uses the server's published endpoint and its own auth.
Related
For the full picture of marketplace consumption, see the Marketplace overview. For the publisher side, see Publishing MCP servers. For how Agent contexts call installed tools, see the MCP Tool node.

Was this page helpful?