Real MCP Playground
The Real MCP Playground lets you connect to any live Streamable HTTP MCP server, browse its capabilities, and invoke them directly — no JSON-RPC required.
Connecting to an MCP Server
- Go to Explorer in the navigation
- Click Add New → MCP Server
- Enter the server's base URL (e.g.,
https://mcp.example.com) - Click Connect — Agent Explorer fetches and caches the capability manifest
The server's tools, resources, and prompts are displayed in the Playground tab.
Playground Tab
The Playground is organized into one section per MCP capability the server advertises. Each section appears only when supported.
Server Info
Shows the server's identity from the initialize response: name, version, protocol version, advertised capability flags, and any instructions text. Click Refresh from server to re-fetch. Collapsed JSON blocks below let you inspect the raw initialize response and the full capability cache.
Tools
Each tool renders as an expandable row showing its description and input schema. Click a row to open an auto-generated form, fill in arguments, and click Run tool. The JSON-RPC response is displayed inline.
Resources
Each resource lists its name, URI, and MIME type. Expand to edit the URI (useful for templated URIs) and click Read resource.
Prompts
Each prompt shows its arguments. Expand to fill in values and click Get prompt to render the message list.
Ping
A simple round-trip latency test. Click Send ping to issue a JSON-RPC ping and record the result; the latest 10 pings are shown in a ring buffer.
Authentication
MCP servers that require authentication return a 401 response. Agent Explorer handles the MCP OAuth 2.1 flow automatically:
- Parses the
WWW-Authenticateheader for theresource_metadataURL - Fetches the RFC 9728 Protected Resource Metadata document
- Discovers the Authorization Server from the PRM's
authorization_serversfield - Verifies
S256PKCE support in the AS metadata - Initiates OAuth 2.1 Authorization Code + PKCE with the
resourceparameter (RFC 8707) - Stores encrypted access and refresh tokens (AES-256-GCM)
- Attaches
Authorization: Bearer <token>to every subsequent request
If the server doesn't advertise RFC 9728 metadata, configure OAuth manually in the Settings tab.
Settings Tab
| Setting | Description |
|---|---|
| Auth status | Current authentication state |
| Authorization server | Discovered or manually configured AS URL |
| Scopes | Requested OAuth scopes |
| Re-authorize | Start a fresh OAuth flow |
| Revoke | Clear stored tokens |
The raw capability manifest (tools, resources, prompts) — previously a separate Schema tab — is now available inside the Server Info section of the Playground, with Expand / Collapse / Copy controls.
Workspaces
Add an MCP server to a Workspace to group it with related A2A agents. Workspace membership is shared with all team members.
API Routes
| Method | Path | Description |
|---|---|---|
| GET/POST | /api/mcp-servers | List / create connections |
| GET/PUT/DELETE | /api/mcp-servers/:id | Server operations |
| POST | /api/mcp-servers/:id/capabilities | Fetch & cache capability manifest |
| POST | /api/mcp-servers/:id/invoke | Proxy a tool/resource/prompt invocation |
| GET/PUT | /api/mcp-servers/:id/oauth/config | OAuth configuration |