Connect Grok Bot to Contro1
Connect Grok Bot to Contro1: add one MCP address, approve the sign-in, and it acts as you, with every call checked and recorded.
Start here
Connect Claude Duet to Contro1: add one MCP address, approve the sign-in, and it acts as you, with every call checked and recorded.
Updated Oct 21, 2026
Claude Duet is Anthropic's always-on agent, in research preview. It uses the connectors on your Claude account, so Contro1 is added to Claude first. It acts as you: it can use the Actions you hold and nothing more, and every call is recorded as yours.
Claude Duet is a personal agent that Anthropic runs for you on its own servers, so there is nothing to install. For: Claude Duet. Acts as: You, the person who approves the sign-in. Credential: An OAuth token Claude holds. Contro1 never sees your Anthropic password..
Claude Duet is Anthropic's always-on agent, in research preview. It uses the connectors on your Claude account, so Contro1 is added to Claude first. It acts as you: it can use the Actions you hold and nothing more, and every call is recorded as yours.
You need a Contro1 account and a Claude account.
| Step | What to do | What you should see |
|---|---|---|
| Copy the Contro1 MCP address | https://api.contro1.com/api/centcom/mcp | The address https://api.contro1.com/api/centcom/mcp is on your clipboard. |
The same address for every organization. The sign-in, not the address, decides who it acts as.
What you should see: The address https://api.contro1.com/api/centcom/mcp is on your clipboard.
Claude Duet is Anthropic's always-on agent, in research preview. It uses the connectors on your Claude account, so Contro1 is added to Claude first.
Not yet verified by Contro1. These steps come from third-party reports, not Anthropic's own documentation. If a screen looks different, what matters is that Contro1 is a connector on your Claude account.
| Step | What to do | What you should see |
|---|---|---|
| In Claude | https://api.contro1.com/api/centcom/mcp | The Contro1 connector is on your account. Go on to the next step. |
| Then in Claude Duet | Open Claude Duet and turn on the Contro1 connector for it. | Contro1 is on for Duet. It uses the Contro1 sign-in on your Claude account, so it acts as you. |
Add Contro1 to your Claude account first, exactly as for Claude.ai: Settings > Connectors > Add custom connector, paste https://api.contro1.com/api/centcom/mcp, choose Add, then Connect, and approve the Contro1 sign-in.
What you should see: The Contro1 connector is on your account. Go on to the next step.
Open Claude Duet and turn on the Contro1 connector for it.
What you should see: Contro1 is on for Duet. It uses the Contro1 sign-in on your Claude account, so it acts as you.
These start on the Contro1 sign-in page Claude opened.
| Step | What to do | What you should see |
|---|---|---|
| Approve the Contro1 sign-in | On the Contro1 consent page, sign in with your Contro1 account. Leave "Run Actions as you" checked so the app can run Actions; uncheck it if the connection should only read and preview. Then press Authorize. | The Contro1 page closes and you are back in the app, with Contro1 connected. |
| Ask it who you are | In a chat, ask the app: "Who am I in Contro1?" | The app calls the whoami tool, which names you and your organization. If it names somebody else, disconnect Contro1 in the app and connect again with the intended account. |
| Find it on Agents | Open Agents in Contro1. | It is listed as "Claude Duet (signed in as <you>)". It can use the Actions you hold and nothing more, and every call is recorded as yours. |
| Give it something to do | Connecting grants nothing by itself. Apps allows an application's tools for the organization, and Access gives them to people and agents. Once you hold an Action, ask the app to list its Actions: it calls list_actions, and invoke_action when it needs an application. | list_actions shows the Actions you hold. When the app runs one, Contro1 allows it, refuses it, or waits for a person first, as your organization's policy says. |
On the Contro1 consent page, sign in with your Contro1 account. Leave "Run Actions as you" checked so the app can run Actions; uncheck it if the connection should only read and preview. Then press Authorize.
What you should see: The Contro1 page closes and you are back in the app, with Contro1 connected.
In a chat, ask the app: "Who am I in Contro1?"
What you should see: The app calls the whoami tool, which names you and your organization. If it names somebody else, disconnect Contro1 in the app and connect again with the intended account.
Open Agents in Contro1.
What you should see: It is listed as "Claude Duet (signed in as <you>)". It can use the Actions you hold and nothing more, and every call is recorded as yours.
Connecting grants nothing by itself. Apps allows an application's tools for the organization, and Access gives them to people and agents. Once you hold an Action, ask the app to list its Actions: it calls list_actions, and invoke_action when it needs an application.
What you should see: list_actions shows the Actions you hold. When the app runs one, Contro1 allows it, refuses it, or waits for a person first, as your organization's policy says.
| What you see | What to do |
|---|---|
| Claude has no screen for a custom connector, or will not save it | Some plans, or only an admin, may add custom connectors in Claude. Ask your workspace admin. |
| whoami names somebody else | The sign-in was approved with another Contro1 account. Disconnect Contro1 in Claude and connect again, signing in with the intended account. |
| It can only read and preview, or says EXECUTE_SCOPE_REQUIRED | The sign-in was approved with "Run Actions as you" unchecked. Disconnect Contro1 in Claude and connect again with it checked. |
| list_actions is empty | You hold no Actions yet. An administrator allows the application's tools for the organization under Apps, and Actions are given in Access. |
| The sign-in is refused | Contro1 refuses a sign-in that returns to the same computer (a 127.0.0.1 or app-specific address), because the person approving is often on another device. |
No. Connecting grants nothing by itself. Claude Duet can use only the Actions you hold: Apps allows an application's tools for the organization, and Access gives them to people and agents.
You, the person who approved the sign-in. On Agents it appears as "Claude Duet (signed in as you)", and every call it makes is recorded as yours.
No. You sign in to Contro1 on a Contro1 page, and Claude receives an OAuth token for Contro1. Your password stays with Anthropic.
Remove the Contro1 connector in Claude. To revoke it from Contro1's side, open Settings > Connected apps.
Connect Grok Bot to Contro1: add one MCP address, approve the sign-in, and it acts as you, with every call checked and recorded.
Connect OpenAI Dots to Contro1: add one MCP address, approve the sign-in, and it acts as you, with every call checked and recorded.
Choose the applications your organization approves, decide who may do what, and connect one MCP. Every person and agent gets exactly their access, and every action is recorded on their name.