Brainstorm Board MCP server

Connects Claude (Desktop, Code, or any MCP client) to a Brainstorm Board workspace through its versioned machine API (/api/v1).

Sign-in is SSO, not keys. The first tool call starts an OAuth device flow (RFC 8628): Claude shows you a URL and a short code, you approve in a browser where you are already signed in, and a workspace-scoped token is delivered back automatically. Nothing is typed, pasted, or stored in any config file.

Setup

Claude Desktop

Add to claude_desktop_config.json (Settings → Developer → Edit Config), then restart Claude Desktop from the system tray:

{
  "mcpServers": {
    "brainstorm": {
      "command": "npx",
      "args": ["-y", "@cintelisai/brainstorm-mcp@latest"]
    }
  }
}

On Windows, if npx fails to launch, use "command": "cmd", "args": ["/c", "npx", "-y", "@cintelisai/brainstorm-mcp@latest"].

Claude Code

claude mcp add brainstorm -- npx -y @cintelisai/brainstorm-mcp@latest

Connecting

In any chat: "connect to brainstorm". Claude will call brainstorm_connect and give you a URL and code.

1. Switch to the workspace this connection should access first — in the Brainstorm app, make it your active workspace. The token is bound to whichever workspace is active when you approve, and that cannot be changed afterwards without reconnecting.
2. Open the URL, check the code matches, and approve. Approval requires a workspace admin on a Premium workspace.
3. Tell Claude you've approved; it calls brainstorm_finish_connect and you're connected.

Tools

Tool	What it does
brainstorm_connect	Start the SSO device flow
brainstorm_finish_connect	Collect the token after you approve
brainstorm_status	Show connection state and workspace
brainstorm_list_notes	List notes and folders (titles and ids, not content)
brainstorm_read_note	Read one note's full markdown content by id
brainstorm_read_asset	Fetch an attachment by name — images display inline; .docx, spreadsheets and PDFs convert to text; text formats pass through
brainstorm_create_note	Create a markdown note; folder is a folder name, created if new
brainstorm_disconnect	Delete the stored token from this machine

Reading requires the Brainstorm Board deployment to include the /api/v1/notes/[id] and /api/v1/assets/[name] routes (August 2026 or later); older deployments answer 404 and the tools say so.

Configuration

Env var	Default	Purpose
BRAINSTORM_URL	https://brainstorm.cintelis.ai	The Brainstorm Board instance to talk to

Set it in the MCP config entry to target another deployment:

"brainstorm": {
  "command": "npx",
  "args": ["-y", "@cintelisai/brainstorm-mcp@latest"],
  "env": { "BRAINSTORM_URL": "https://your-instance.example.com" }
}

Security notes

• The token is cached in one file per host in your home directory (~/.brainstorm-mcp-<host>.json, mode 0600). It never appears in any config file or chat.
• Tokens are per-machine and individually revocable: each shows up under Account → API tokens in the app, and brainstorm_disconnect deletes the local copy.
• The API refuses plaintext writes into vault (end-to-end encrypted) workspaces by design — this server can only work with standard workspaces.
• The API is a Premium feature; a lapsed subscription stops tokens working immediately.

License

MIT © Cintelis Pty Limited