On this page
Website chat MCP servers
Last updated
Connect remote custom MCP servers so the visitor chat widget can answer page-specific questions.
Website chat MCP servers
Project admins can attach remote MCP servers to Channels → Website chat → MCP servers. The visitor AI assistant calls those tools when answering questions (for example, “tell me more about this property” on a listing page).
Important: This is separate from vTilt MCP. Website chat never exposes your analytics, persons, or ads tools to visitors. Only connect MCP servers that are safe for public visitors.
#Prerequisites
- Website chat enabled for the project
- AI assistant enabled
- An HTTPS remote MCP endpoint (Streamable HTTP; SSE is used as a fallback)
#Add a server
- Open Channels → Website chat → MCP servers.
- Click Add server.
- Enter a name and the MCP URL (must be
https://). - Choose an auth mode (see below).
- Save, then Test (and Connect for OAuth).
- Enable the server (at most two enabled servers per project).
#Auth modes
| Mode | When to use |
|---|---|
| None | Public MCP with no authentication |
| Bearer token | Server expects Authorization: Bearer … |
| Custom headers | Non-Bearer auth (API keys in headers, etc.) as a JSON object |
| OAuth | MCP Authorization (browser Connect). Tokens are stored encrypted on the project |
#OAuth
- Set auth to OAuth and save.
- Optionally paste a static client ID / secret if the authorization server does not support Client ID Metadata or Dynamic Client Registration.
- Click Connect — complete consent in the browser.
- When status shows connected, click Test to refresh the tool list.
If refresh fails later, the server shows Reconnect. Chat still answers from your system prompt and Site Knowledge while that server’s tools are skipped.
#Current page context
The chat widget sends the visitor’s current page URL and title with every message. The AI sees the full URL (including query string) so tools can resolve “this property” / “this listing” from the page the visitor is on.
#Security notes
- Credentials never appear in the install snippet or
/decide. - Prefer read-oriented MCP tools. Anything the model can call may run for any visitor who chats.
- Private / localhost MCP URLs are rejected (SSRF protection).
- Tool results are redacted for obvious secrets before the model sees them; visitors never see raw tool JSON.
#Related
- Chat widget API
- vTilt MCP overview (for Cursor / Claude — not for the visitor widget)