OpenAdapt Agent MCP Server: Setup for Claude, Cursor and Other Apps

• Lists the recorded workflows the assistant may run

  Returns each workflow's name, purpose, what counts as done, and the inputs it needs. The built-in sandbox has one practice workflow.

  Try: “What workflows can you run?”

  Read · list_workflows

• Runs a recorded workflow in an app and checks that the entry saved

  Fills in an app using a recorded workflow, confirms the right record is open before typing, and reads the record back after saving. It returns one of four outcomes: done and checked, stopped before saving, check the record, or didn't run.

  Try: “Add the note "recheck blood pressure in 2 weeks" to the first referral.”

  Runs code · run_workflow

• Checks the latest result of an earlier run

  Looks up a run by its id and returns its latest outcome, including a person's decision on a run that stopped.

  Try: “Check on run demo-0001.”

  Read · get_run

• Starts a tracked job with rules and a list of items

  Opens a job that holds your intent, the rules to follow and the items to process. The rules are locked once the job opens.

  Try: “Open a job to enter these 12 referrals.”

  Write · open_job

• Shows a short summary of a job

  Returns the current rules, counts by status, items not yet verified, waiting questions and what changed since the last read.

  Try: “Where are we on the referral job?”

  Read · get_job

• Adds items to a job

  Adds up to 100 items per call, 500 per job.

  Try: “Add these 20 referrals to the job.”

  Write · add_items

• Notes a fact and where it came from

  Stores a fact with its source: the user (trusted), the app, or a document (never trusted).

  Try: “Note that the clinic confirmed the date by phone.”

  Write · record_evidence

• Asks a person a yes-or-no question

  Puts a question to a person and can wait up to 600 seconds for the answer.

  Try: “Ask whether I should retry the failed referral.”

  Read · ask_user

• Reads a person's answer to a question

  Returns waiting, yes, no, expired or refused for an earlier question.

  Try: “Did anyone answer my question yet?”

  Read · get_answer

• Asks a person to change or add a rule

  Requests a rule change. The old rule stays in force until a person approves it.

  Try: “Ask to allow entries over 5,000.”

  Write · change_constraint

• Closes a job and says which items are verified

  Closes the job and reports whether every item was verified, with the list the assistant may report as done.

  Try: “Close the job and tell me what was verified.”

  Write · close_job

Watch out for

• With your own workflows it writes into real apps

  The default sandbox only touches a made-up test clinic. Once you serve your own workflows in production mode, a run types into and saves records in the real app, so start on a test or staging copy. github.com

• Run folders keep patient-style data

  The runs folder holds a report with the values entered and before-and-after screenshots. Other accounts on the computer could read the screenshots in the README's sandbox test, so limit access to that folder. github.com

• Screenshots can leave the computer if grounding is on

  Model grounding sends a screenshot to an AI model when a control cannot be found. It is off by default. github.com

• It acts as whoever started it

  The server has no sign-in and runs as your OS account. Do not expose it over a network or tunnel. github.com

• Saves wait for approval by default

  In production a run stops before each save until a person approves it, unless approval gating is turned off. github.com

Security advisories