Real MCP Playground

The Real MCP Playground lets you connect to any live Streamable HTTP MCP server, browse its capabilities, and invoke them directly — no JSON-RPC required.

Connecting to an MCP Server

  1. Go to Explorer in the navigation
  2. Click Add New → MCP Server
  3. Enter the server's base URL (e.g., https://mcp.example.com)
  4. Click Connect — Agent Explorer fetches and caches the capability manifest

The server's tools, resources, and prompts are displayed in the Playground tab.

Playground Tab

The Playground is organized into one section per MCP capability the server advertises. Each section appears only when supported.

Server Info

Shows the server's identity from the initialize response: name, version, protocol version, advertised capability flags, and any instructions text. Click Refresh from server to re-fetch. Collapsed JSON blocks below let you inspect the raw initialize response and the full capability cache.

Tools

Each tool renders as an expandable row showing its description and input schema. Click a row to open an auto-generated form, fill in arguments, and click Run tool. The JSON-RPC response is displayed inline.

Resources

Each resource lists its name, URI, and MIME type. Expand to edit the URI (useful for templated URIs) and click Read resource.

Prompts

Each prompt shows its arguments. Expand to fill in values and click Get prompt to render the message list.

Ping

A simple round-trip latency test. Click Send ping to issue a JSON-RPC ping and record the result; the latest 10 pings are shown in a ring buffer.

Authentication

MCP servers that require authentication return a 401 response. Agent Explorer handles the MCP OAuth 2.1 flow automatically:

  1. Parses the WWW-Authenticate header for the resource_metadata URL
  2. Fetches the RFC 9728 Protected Resource Metadata document
  3. Discovers the Authorization Server from the PRM's authorization_servers field
  4. Verifies S256 PKCE support in the AS metadata
  5. Initiates OAuth 2.1 Authorization Code + PKCE with the resource parameter (RFC 8707)
  6. Stores encrypted access and refresh tokens (AES-256-GCM)
  7. Attaches Authorization: Bearer <token> to every subsequent request

If the server doesn't advertise RFC 9728 metadata, configure OAuth manually in the Settings tab.

Settings Tab

SettingDescription
Auth statusCurrent authentication state
Authorization serverDiscovered or manually configured AS URL
ScopesRequested OAuth scopes
Re-authorizeStart a fresh OAuth flow
RevokeClear stored tokens

The raw capability manifest (tools, resources, prompts) — previously a separate Schema tab — is now available inside the Server Info section of the Playground, with Expand / Collapse / Copy controls.

Workspaces

Add an MCP server to a Workspace to group it with related A2A agents. Workspace membership is shared with all team members.

API Routes

MethodPathDescription
GET/POST/api/mcp-serversList / create connections
GET/PUT/DELETE/api/mcp-servers/:idServer operations
POST/api/mcp-servers/:id/capabilitiesFetch & cache capability manifest
POST/api/mcp-servers/:id/invokeProxy a tool/resource/prompt invocation
GET/PUT/api/mcp-servers/:id/oauth/configOAuth configuration