Kanzi Portal MCP server¶
The Kanzi Portal MCP server connects your AI assistant to your Kanzi Account in the Kanzi Portal, so you can query and manage your account in natural language. For example, you can ask which licenses your organization has, who is using them, and what is expiring. You can look up the latest Kanzi Studio build for a platform, or open a support ticket. If you can do it in the Kanzi Portal, you can do it through the Kanzi Portal MCP server.
The Kanzi Portal MCP server is available at https://portal.kanzi.com/api/mcp. For users in mainland China, a mirror is available at https://portal.kanzi.cn/api/mcp, which exists to reliably serve users in mainland China. The mirror uses the same registration flow with the .cn endpoint.
Unlike the Kanzi documentation and API MCP servers, the Kanzi Portal MCP server:
Requires you to sign in. It uses per-user OAuth 2.0. After you register the server, your AI assistant opens a browser for you to sign in to your Kanzi Account.
Acts as you. Every request runs with your Kanzi Portal permissions, so through the server you can do only what you can do in the Kanzi Portal.
Takes no Kanzi version argument. It works with your account, not with a specific Kanzi version.
Note
The Kanzi Portal MCP server needs an AI tool with native HTTP MCP support. The mcp-remote stdio bridge that the other Kanzi MCP servers can use for tools without native HTTP support does not work here, because it cannot perform the OAuth sign-in.
What you can do¶
Through the Kanzi Portal MCP server you can, within your Kanzi Portal permissions:
Licenses — list your organization’s licenses and your own assignments, assign and release licenses, list the hosts holding a license, and check platform entitlements.
Organizations — read an organization and its members, branches, hierarchy, and metadata; create sub-organizations; change an organization’s parent; share licenses with a sub-organization; and manage verified email domains.
Downloads — list Kanzi Studio versions and the files your licenses entitle you to, get install and download URLs, download platform packages, and request custom platforms and builds.
Support — list, read, and create support tickets, comment on them, change collaborators, and upload attachments.
API keys — list, create, rename, and delete your API keys.
Setting up the Kanzi Portal MCP server¶
Register the server in your AI tool with its native HTTP MCP configuration, then sign in when the tool first uses the server.
Setting up in Claude Code¶
Add the server:
claude mcp add --scope user --transport http kanzi-portal https://portal.kanzi.com/api/mcp
Run
/mcp, selectkanzi-portal, and follow the browser sign-in.
Setting up in VS Code¶
Open the Command Palette (Ctrl Shift P) and select MCP: Open User Configuration.
In the
mcp.jsonfile, add the server configuration:{ "servers": { "kanzi-portal": { "type": "http", "url": "https://portal.kanzi.com/api/mcp" } }, "inputs": [] }
Reload the window, then invoke any
kanzi-portaltool. VS Code prompts you to sign in on the first call.
Setting up in Cursor¶
In the
~/.cursor/mcp.jsonfile, add the server configuration:{ "mcpServers": { "kanzi-portal": { "url": "https://portal.kanzi.com/api/mcp" } } }
The first
kanzi-portaltool call opens a browser for you to sign in.
Setting up in Windsurf¶
In the
~/.codeium/windsurf/mcp_config.jsonfile, add the server configuration:{ "mcpServers": { "kanzi-portal": { "serverUrl": "https://portal.kanzi.com/api/mcp" } } }
The first
kanzi-portaltool call opens a browser for you to sign in.
Setting up in Codex¶
In the
~/.codex/config.tomlfile, add the server configuration:[mcp_servers.kanzi-portal] url = "https://portal.kanzi.com/api/mcp" auth = "oauth"
Sign in:
codex mcp login kanzi-portal
Permissions and errors¶
The Kanzi Portal MCP server acts as the signed-in user, so it can do only what that user can do in the Kanzi Portal. If a request returns a permission error, your Kanzi Account does not have the role for that action — it is not a problem with your AI tool. Product-catalog tools are for Rightware-internal use and refuse requests from other accounts.