Skip to content
Toolradar

For Claude Team and Enterprise admins

Sign your team in to Toolradar from Claude, automatically

This page walks a company admin through Claude's managed authorization for the Toolradar connector. Once it is on, the people of your Claude organization update your Toolradar listing from Claude without a Toolradar sign-in screen: Claude vouches for who they are, and Toolradar lets in the members of your company whose email it knows. It takes about five minutes, on both sides.

Without it, anyone can still add https://toolradar.com/mcp in Claude or ChatGPT and sign in once when asked (how).

What you need

  • A Claude Team or Enterprise organization, and the Owner or Primary Owner role in it. Claude-issued sign-in is not offered in an organization that signs in to Claude through Okta.
  • Your company verified on Toolradar, with you as its owner or admin there.
  • For each person: a membership in your company on Toolradar, under the same email address as their Claude account.

Set it up

  1. 1

    Add Toolradar as a connector in Claude

    In Claude, open Organization settings, then Connectors, and add a custom connector with this URL: https://toolradar.com/mcp. Leave the authentication setting as it is.

  2. 2

    Open the managed authorization setup

    Open the Toolradar connector. In its Authentication section, click Set up on the Managed authorization row. Under Identity source, choose Claude-issued.

  3. 3

    Copy the Issuer URL

    Claude shows an Issuer URL that belongs to your Claude organization. It looks like https://identity.anthropic.com/issuers/.... Copy it exactly.

  4. 4

    Paste it in Toolradar and turn managed sign-in on

    Sign in to Toolradar and open Company, Claude & ChatGPT. In Sign your team in automatically, paste the Issuer URL, tick Turn on managed sign-in and save. Only owners and admins of a verified company see this section.

  5. 5

    Give Claude your Tenant ID

    The same section shows your Tenant ID. Copy it into the Tenant ID (optional) field of Claude's setup and save. It tells Toolradar which company a sign-in is for, and it is what keeps sign-ins working if another company ever registers the same issuer URL.

  6. 6

    Run the test, then use it

    Click Run test under Connection status. Claude shows each step and what Toolradar answered. Once it passes, ask Claude "update my Toolradar listing": no sign-in screen appears.

Who gets in, and for how long

  • Toolradar looks for the person by email among the members of your company only, comparing the whole address and ignoring capital letters. A member of another company is refused.
  • The address must be one Toolradar has verified (the person signed in once with an emailed code, Google or LinkedIn) or be on your company's verified domain.
  • What the person can do is the same as after a normal sign-in: read and edit your company's listings, with every change logged and undoable on Toolradar.
  • Access lasts an hour at a time; Claude renews it on its own for as long as the person stays in your Claude organization. Someone you remove keeps access for an hour at most. To cut it at once, remove them from your company on Toolradar or turn managed sign-in off.

If the test fails

Claude's test shows what Toolradar answered. Find the message here.

no Toolradar company registered this issuerThe Issuer URL is not saved in Toolradar yet, or managed sign-in is off. Paste it and tick the box (step 4).
iss is not the issuer this company registeredThe URL saved in Toolradar differs from Claude's, even by one character. Copy it again from Claude.
several Toolradar companies registered this issuerEnter your Tenant ID in Claude (step 5).
no member of this company has this email addressInvite the person to your company on Toolradar with the same email as their Claude account.
not verified on Toolradar and is not on the company's verified domainAsk the person to sign in to Toolradar once (emailed code, Google or LinkedIn), or use an address on your company's verified domain.
this assertion was already usedEach sign-in works once. Run the test again.
Technical details
Authorization server issuer
https://toolradar.com
Metadata
https://toolradar.com/.well-known/oauth-authorization-server
Protected resource
https://toolradar.com/mcp
Token endpoint
https://toolradar.com/api/oauth/token
Grant
urn:ietf:params:oauth:grant-type:jwt-bearer (RFC 7523, ID-JAG profile)
Assertions accepted
Signed ES256 or RS256 with a key from the issuer's own discovery document, typ oauth-id-jag+jwt, aud https://toolradar.com, client_id equal to the request's, a sub, 60 seconds of clock skew at most, each jti once.
Tenant ID
Your Toolradar company id, sent by Claude as aud_tenant. Without it, the one company that registered the issuer.
Tokens
An access token valid one hour, no refresh token (Claude asks again with a new assertion).
Enterprise Managed Auth setup for Claude | Toolradar