Connect Claude.ai to Contro1
Connect Claude.ai to Contro1: add one MCP address, approve the sign-in, and it acts as you, with every call checked and recorded.
Start here
Connect Grok Chat to Contro1
Connect Grok Chat to Contro1: add one MCP address, approve the sign-in, and it acts as you, with every call checked and recorded.
Updated Oct 21, 2026
Grok Chat adds Contro1 as a Custom connector. It acts as you: it can use the Actions you hold and nothing more, and every call is recorded as yours.
Who this is for
Grok Chat is a chat app that runs on xAI's servers, so there is nothing to install. For: Grok Chat. Acts as: You, the person who approves the sign-in. Credential: An OAuth token Grok Chat holds. Contro1 never sees your xAI password..
Grok Chat adds Contro1 as a Custom connector. It acts as you: it can use the Actions you hold and nothing more, and every call is recorded as yours.
Copy the address
You need a Contro1 account and a Grok Chat account. On Grok Business and Enterprise, a team admin may need to provision the connector first.
| Step | What to do | What you should see |
|---|---|---|
| Copy the Contro1 MCP address | https://api.contro1.com/api/centcom/mcp | The address https://api.contro1.com/api/centcom/mcp is on your clipboard. |
Copy the address, step 1: Copy the Contro1 MCP address
The same address for every organization. The sign-in, not the address, decides who it acts as.
What you should see: The address https://api.contro1.com/api/centcom/mcp is on your clipboard.
Add Contro1 in Grok Chat
Grok Chat adds Contro1 as a Custom connector.
| Step | What to do | What you should see |
|---|---|---|
| In Grok Chat | https://api.contro1.com/api/centcom/mcp | The Contro1 connector is on your account. Go on to the next step. |
| Then in Grok Chat | Name it Contro1, enter https://api.contro1.com/api/centcom/mcp, and add it. | Grok opens the Contro1 sign-in page. |
Add Contro1 in Grok Chat, step 1: In Grok Chat
Go to grok.com/connectors and choose New Connector, then Custom.
What you should see: The Contro1 connector is on your account. Go on to the next step.
Add Contro1 in Grok Chat, step 2: Then in Grok Chat
Name it Contro1, enter https://api.contro1.com/api/centcom/mcp, and add it.
What you should see: Grok opens the Contro1 sign-in page.
Approve the sign-in and check it
These start on the Contro1 sign-in page Grok Chat opened.
| Step | What to do | What you should see |
|---|---|---|
| Approve the Contro1 sign-in | On the Contro1 consent page, sign in with your Contro1 account. Leave "Run Actions as you" checked so the app can run Actions; uncheck it if the connection should only read and preview. Then press Authorize. | The Contro1 page closes and you are back in the app, with Contro1 connected. |
| Ask it who you are | In a chat, ask the app: "Who am I in Contro1?" | The app calls the whoami tool, which names you and your organization. If it names somebody else, disconnect Contro1 in the app and connect again with the intended account. |
| Find it on Agents | Open Agents in Contro1. | It is listed as "Grok Chat (signed in as <you>)". It can use the Actions you hold and nothing more, and every call is recorded as yours. |
| Give it something to do | Connecting grants nothing by itself. Apps allows an application's tools for the organization, and Access gives them to people and agents. Once you hold an Action, ask the app to list its Actions: it calls list_actions, and invoke_action when it needs an application. | list_actions shows the Actions you hold. When the app runs one, Contro1 allows it, refuses it, or waits for a person first, as your organization's policy says. |
Approve the sign-in and check it, step 1: Approve the Contro1 sign-in
On the Contro1 consent page, sign in with your Contro1 account. Leave "Run Actions as you" checked so the app can run Actions; uncheck it if the connection should only read and preview. Then press Authorize.
What you should see: The Contro1 page closes and you are back in the app, with Contro1 connected.
Approve the sign-in and check it, step 2: Ask it who you are
In a chat, ask the app: "Who am I in Contro1?"
What you should see: The app calls the whoami tool, which names you and your organization. If it names somebody else, disconnect Contro1 in the app and connect again with the intended account.
Approve the sign-in and check it, step 3: Find it on Agents
Open Agents in Contro1.
What you should see: It is listed as "Grok Chat (signed in as <you>)". It can use the Actions you hold and nothing more, and every call is recorded as yours.
Approve the sign-in and check it, step 4: Give it something to do
Connecting grants nothing by itself. Apps allows an application's tools for the organization, and Access gives them to people and agents. Once you hold an Action, ask the app to list its Actions: it calls list_actions, and invoke_action when it needs an application.
What you should see: list_actions shows the Actions you hold. When the app runs one, Contro1 allows it, refuses it, or waits for a person first, as your organization's policy says.
When something does not work
| What you see | What to do |
|---|---|
| Grok Chat has no screen for a custom connector, or will not save it | On Grok Business and Enterprise, a team admin may need to provision the connector first. |
| whoami names somebody else | The sign-in was approved with another Contro1 account. Disconnect Contro1 in Grok Chat and connect again, signing in with the intended account. |
| It can only read and preview, or says EXECUTE_SCOPE_REQUIRED | The sign-in was approved with "Run Actions as you" unchecked. Disconnect Contro1 in Grok Chat and connect again with it checked. |
| list_actions is empty | You hold no Actions yet. An administrator allows the application's tools for the organization under Apps, and Actions are given in Access. |
| The sign-in is refused | Contro1 refuses a sign-in that returns to the same computer (a 127.0.0.1 or app-specific address), because the person approving is often on another device. |
Frequently asked questions
Does connecting give Grok Chat access to my applications?
No. Connecting grants nothing by itself. Grok Chat can use only the Actions you hold: Apps allows an application's tools for the organization, and Access gives them to people and agents.
Who does Grok Chat act as?
You, the person who approved the sign-in. On Agents it appears as "Grok Chat (signed in as you)", and every call it makes is recorded as yours.
Does Contro1 see my Grok Chat password?
No. You sign in to Contro1 on a Contro1 page, and Grok Chat receives an OAuth token for Contro1. Your password stays with xAI.
How do I disconnect it?
Remove the Contro1 connector in Grok Chat. To revoke it from Contro1's side, open Settings > Connected apps.
Related resources
Connect ChatGPT to Contro1
Connect ChatGPT to Contro1: add one MCP address, approve the sign-in, and it acts as you, with every call checked and recorded.
Contro1 Action Gateway
Choose the applications your organization approves, decide who may do what, and connect one MCP. Every person and agent gets exactly their access, and every action is recorded on their name.