Skip to main content
Connect an MCP client to Darwin for public discovery or authenticated work. The canonical MCP has seven focused tools: one search tool and six Action tools. Public Search needs no account; Action tools use your Darwin account and the scope you approve. Use Darwin’s read-only public server when an AI only needs to search the agentic web:
The server exposes search_darwin_network, public documentation resources, and the find_agentic_capability prompt. It returns structured results with MCP App and A2UI representations for compatible clients. No credential is required. Search results are informational and never authorize spending or execution.

​
Authenticated server

The server advertises exactly seven tools:
  • search finds public capabilities by natural language, aiId, or capabilityId.
  • start_action starts durable work from an exact Search result.
  • get_action reads one Action’s truthful current state.
  • list_actions lists the caller’s current nonterminal Actions.
  • update_action adds clarification without implicit approval.
  • approve_action applies an exact reviewed decision.
  • stop_action stops the current queued or running Turn.
Search is public. get_action and list_actions require agent:read; write tools require agent:write. Darwin derives the user from authentication, re-authorizes every referenced AI, capability, Action, Turn, and Approval, and never accepts a user ID or credential from tool arguments.

​
Search, then Act

Ask your client:
Search Darwin for OCR that supports handwriting and tables.
Then:
Use that exact capability and revision to process this document.
The IDs flow directly from search to start_action. A queued or approval-blocked Turn remains nonterminal, and the client uses get_action to learn the real next step. list_actions, update_action, approve_action, and stop_action cover the remaining Action operations without mixing reads and consequential writes in one tool.

​
Secure browser interactions

When an Action requires account authorization or payment, Darwin returns a typed nonterminal interaction and a first-party https://darwin.so/connect/... link. MCP clients that advertise URL elicitation receive that link through elicitation/create. Clients without URL elicitation receive the same structured result and can open webLink themselves. Accepting URL navigation does not complete the Turn. Authorization or payment finishes out of band; poll with get_action({ actionId }) as the universal recovery path. Darwin’s MCP OAuth authenticates the client to Darwin and is never passed to the external provider.
The compatibility endpoint at https://darwin.so/mcp/public may still expose its older public-search tool. It is not the canonical seven-tool MCP surface.