Install from the desktop app
In the desktop app, connect to the gateway where the MCP server should run. Click the MCP icon in the bottom bar, click Install, paste the MCP JSON config into the config field, and submit it. Pioneer reads the JSON, validates each server undermcpServers, stores secret values in the gateway secret store, saves redacted server settings, and starts or connects to enabled servers.
Stdio servers
Use stdio when Pioneer should launch the MCP server as a local child process. For stdio, the command in the JSON must already be available on the gateway host. For a remote gateway, install that command on the remote machine, not on your laptop. Paste a config with a top-levelmcpServers object:
resend, must use letters, numbers, _, or -. Use command for the executable, args for command arguments, and env for environment variables passed to that server. You can also set cwd when the command must start from a specific directory.
HTTP servers
Use HTTP when the MCP server is already running as a service. Start the service outside Pioneer, confirm the gateway can reach its URL, then install it from the MCP screen with a JSON config like this:url for the MCP HTTP endpoint and headers for authentication or routing headers. The URL must use http or https. If the gateway is remote, test connectivity from the remote host.
Common config fields
Every server config lives undermcpServers and uses the object key as the server name.
Secrets
Do not paste MCP secrets into chat prompts. Put API keys, tokens, and other credentials in the MCP JSONenv or headers fields, or in the gateway environment when your server reads credentials from there.
Pioneer stores secret values from env, headers, tokens, and authorization fields in the gateway secret store. Diagnostics, source references, and list/detail responses use redacted data instead of raw values.
When you update or uninstall an MCP server, Pioneer cleans up stale MCP secret references after the server settings are updated. If you need to inspect or clean orphaned MCP secrets explicitly, use pioneer secrets status and pioneer secrets garbage-collection.
Health and first test
After saving a server, Pioneer should discover its tools, resources, templates, and prompts. If it fails, the most common causes are a missing command, invalid environment variable, auth failure, unreachable HTTP endpoint, or a server that starts but advertises no tools. Review the discovered tools before enabling implicit invocation. Keep new MCP servers not implicit until you understand what their tools can read, write, or call. Use a read-only first prompt:Use in a thread
To use an explicit-only MCP capability, open a thread, click the composer add button, and choose Add MCP. Select either the whole server or specific tools. Selecting the server exposes that server’s allowed tools for the turn; selecting tools exposes only those raw MCP tools. The selection appears as attachment chips in the composer and in the sent user message. It is sent as turn capability metadata, not as ordinary message text.Further reading
- MCP Architecture explains config parsing, runtime state, catalog refresh, and policy.
- Secret Storage explains how MCP secrets are redacted and referenced.
- Agent Loop explains how explicit MCP selections are materialized for one turn.