Connect Konstantly to Claude, Cursor, and other AI agents (MCP)
Use the Konstantly MCP server to let Claude Desktop, Claude Code, Cursor, and other Model Context Protocol agents query your training data and take actions on your behalf — without anyone logging into Konstantly
The Konstantly MCP server brings your training data into the AI tools you already use. Ask Claude Desktop *"who's overdue on the OSHA refresher?"* and it answers from your real data. Tell Cursor *"assign the safety training to the warehouse team, deadline Friday"* and it happens — with the same permissions you'd have in the browser.
> MCP (Model Context Protocol) is an open standard from Anthropic that lets AI agents talk to outside systems through a shared interface. Think of it as a universal port: any AI tool that speaks MCP can connect to any service that exposes an MCP server. Today that includes Claude Desktop, Claude Code, Cursor, and any custom internal agent you build.
What you can do
Once connected, your AI agent has 18 tools to read and act on Konstantly data:
Read (always available):
- Search users and courses by name
- Pull compliance reports for any course or group ("who's done OSHA training?")
- Check certificate expiry dates ("what's expiring in the next 60 days?")
- View team statistics and leaderboards
- Inspect the audit log
Write (Enterprise plan):
- Assign single courses or whole learning paths to learners or groups
- Ban/unban users and update emails (e.g. for offboarding)
- Clone courses to fork a copy for a new audience
Coming in v1.5 — generate complete courses from PDFs, prompts, or web pages directly through your AI agent. We'll update this guide when it ships.
Before you start
You'll need:
- A Konstantly workspace on Pro or Enterprise plan (the MCP integration is gated by license tier; Free and Starter don't see it)
- Admin or super-user access to that workspace (the
mcp_managepermission, which Konstantly grants to the Administrator role by default) - One of the supported AI tools installed: Claude Desktop, Claude Code, or Cursor
- Node.js 18 or higher on the machine where the AI tool runs (used to run the MCP server via
npx) - About 5 minutes
Step 1: Generate your MCP key
In your Konstantly workspace:
- Go to Settings → MCP Keys
- Click Generate key
- Give it a recognizable name — e.g. *"My MacBook"*, *"Production agent"*, *"Slack bot"*
- Choose scopes:
- Read — for analysis, reporting, lookups (always available)
- Write — for assignments, user management, course operations (Enterprise plan only)
- Click Generate
The full key appears once. It looks like:
kmcp_a8f3b2k9X7yZqWpL3mN8RvU2sT5dH6jK4F1gA9oPCopy it immediately. Closing the dialog without copying means you'll have to revoke and regenerate.
> Treat MCP keys like passwords. The key acts as you — anyone holding it inherits your permissions in Konstantly. Don't paste keys into Slack, don't commit them to git, don't share them with teammates (each person should generate their own).
Step 2: Install in your AI tool
Pick the tool you use most. The MCP server itself is published to npm as @konstantly/mcp-server — you don't need to install anything manually; the config below tells your AI tool to fetch it on demand via npx.
Claude Desktop (most common)
Open the Claude Desktop config file:
- macOS:
~/Library/Application Support/Claude/claude_desktop_config.json - Windows:
%APPDATA%\Claude\claude_desktop_config.json
If the file doesn't exist, create it. Add (or merge into) the following:
{
"mcpServers": {
"konstantly": {
"command": "npx",
"args": ["-y", "@konstantly/mcp-server"],
"env": {
"KONSTANTLY_MCP_KEY": "kmcp_a8f3b2k9X7yZ...",
"KONSTANTLY_URL": "https://your-instance.konstantly.com"
}
}
}
}Replace:
KONSTANTLY_MCP_KEYwith the key you copied in step 1KONSTANTLY_URLwith your Konstantly workspace URL (the same one you type into your browser)
Quit and reopen Claude Desktop. The 🔌 menu in the conversation window now shows konstantly with its tool list.
Claude Code
One-line install:
claude mcp add konstantly \
--env KONSTANTLY_MCP_KEY=kmcp_a8f3b2k9X7yZ... \
--env KONSTANTLY_URL=https://your-instance.konstantly.com \
-- npx -y @konstantly/mcp-serverClaude Code picks it up automatically.
Cursor
Open (or create) ~/.cursor/mcp.json:
{
"mcpServers": {
"konstantly": {
"command": "npx",
"args": ["-y", "@konstantly/mcp-server"],
"env": {
"KONSTANTLY_MCP_KEY": "kmcp_a8f3b2k9X7yZ...",
"KONSTANTLY_URL": "https://your-instance.konstantly.com"
}
}
}
}Restart Cursor. The Konstantly tools appear in the agent panel.
Step 3: Try it
Open your AI tool and ask something. Start with a read-only query — these work on any plan:
> *"Find a user named Sarah Chen and tell me her training status."*
The agent uses two tools in sequence (find_user then list_assignments) and answers in plain English.
A few more to try:
> *"How many people in the warehouse group have completed the safety refresher this year? I need this for the audit."*
> *"Show me everyone whose certificates are expiring in the next 60 days, sorted by date."*
> *"What's my own training status?"*
If you have write access:
> *"Assign the new-hire bundle to user 42, deadline two weeks from now."*
> *"Roll out the Q4 compliance refresher to the entire Sales team — due in 30 days."*
Each action writes an entry to your audit log (Settings → Action Log), tagged as MCP-driven so you can separate agent actions from human admin actions later.
Verifying it works
If something looks off — the agent says it can't find tools, or queries fail — turn on debug mode by adding to your env block:
"env": {
"KONSTANTLY_MCP_KEY": "kmcp_...",
"KONSTANTLY_URL": "https://your-instance.konstantly.com",
"KONSTANTLY_MCP_DEBUG": "1"
}Restart your AI tool. The MCP server logs every request and response to its error output — you'll see auth attempts, retries, and tool calls. Most issues fall out immediately:
| What you see | What it means |
|---|---|
| *"Konstantly rejected the API key"* | The key was revoked or never existed. Generate a new one. |
| *"license does not include MCP access"* | Your plan doesn't include MCP. Upgrade in Settings → Billing. |
| *"KONSTANTLY_URL must use https://"* | You typed http:// (or no scheme at all). Fix the URL. |
| Tool list shows fewer tools than expected | Either your role doesn't have the permission (check Settings → Roles) or your plan is Pro (read-only tools only). |
| Agent says *"Permission denied"* on a write tool | Same as above — your role doesn't have the underlying Konstantly permission. |
Managing keys
The Settings → MCP Keys page shows all keys you've issued, with:
- The friendly name you gave each one
- The first few characters of the key (so you can identify it without seeing the full secret)
- When it was created and last used
- A revoke button
Revoke a key
Click the trash icon next to any key and confirm. The key stops working within seconds — the next call from any agent using it returns 401.
You don't need to update the AI tool's config beforehand. The key just becomes invalid; the agent will surface the error on the next prompt.
Rotate keys regularly
We recommend rotating keys every 90 days, and immediately when:
- A teammate who held a key leaves the company
- A device with a stored key is lost, stolen, or sold
- You suspect a leak (e.g. accidentally committed to git)
Rotation = generate a new key → update your tool's config → revoke the old key. Total time: under a minute.
Per-device keys
Best practice is one key per device per agent. If you have Claude Desktop on your laptop AND Cursor on your desktop AND a Slack bot, that's three keys. Revoking one (e.g. if you lose the laptop) doesn't break the others.
Security at a glance
A few facts about how MCP integrates with Konstantly's existing security model:
- Same permissions as the UI. Each key inherits the permissions of the user who created it. A learner-issued key cannot access admin data. A manager-issued key can only ban users below them in the role hierarchy.
- Every write tool call is audited. Compliance reports can filter "actions taken by an agent" by querying audit event type 88 (
MCP_TOOL_CALL). - License downgrades are silent and immediate. Drop from Enterprise to Pro and every existing key automatically loses write capability — no re-issue required.
- Rate-limited per key. Pro: 60 calls per minute, 1,000 per day. Enterprise: 600 per minute, 100,000 per day. The MCP server retries on 429 with backoff, so legitimate usage rarely sees these.
- 256 bits of entropy per key. Brute-forcing is mathematically infeasible. Failed-auth attempts are throttled per source IP to catch enumeration attempts in telemetry.
For the full security model, see the MCP Security documentation. For how Konstantly handles AI processing across all features (Ask Konstantly, course generation, and the MCP integration with third-party agents like Claude and Cursor), see our AI Policy.
Pricing
| Plan | MCP access |
|---|---|
| Free / Starter | Not included |
| Pro | Read tools only — perfect for compliance reporting, lookups, and analytics |
| Enterprise | Read + write — automate assignments, user management, course operations |
Upgrade from Settings → Billing, or talk to sales.
Common patterns
Daily compliance check
Ask your AI tool every Monday morning:
> *"Pull this week's compliance status for the warehouse OSHA training, and tell me who's overdue."*
Five seconds, no dashboard hunting. Pair with a weekly calendar reminder and you have an effortless compliance check-in.
Onboarding automation (HRIS-integrated setups)
If your team uses Claude or Cursor as part of a broader workflow with HRIS-aware tools (Workday, BambooHR, etc.), you can chain them:
> *"For every new hire created in Workday this week, assign the new-hire onboarding chain in Konstantly with a 30-day deadline."*
The agent calls Workday's MCP (or API) for the user list, then calls Konstantly's assign_chain for each new hire.
Recurring certification reminders
> *"Show me everyone whose forklift certification expires in the next 60 days. Then assign them the recertification course with a deadline two weeks before expiry."*
Two tools in sequence — list_certificates then assign_training per learner.
Audit prep (the killer scenario)
> *"I have an OSHA inspection Tuesday. Generate a compliance summary for confined-spaces and working-at-heights training across all warehouse staff over the last 12 months. Format it as a single document I can hand to the inspector."*
get_compliance_status + the agent's built-in document-formatting → finished report in under a minute.
Troubleshooting
The MCP Keys tab isn't visible
Either:
- Your plan doesn't include MCP (Pro or Enterprise required), OR
- Your role doesn't have the
mcp_managepermission. Talk to a workspace owner / administrator.
Claude Desktop doesn't show the konstantly tools after install
- Did you fully quit and reopen Claude Desktop? (On macOS, ⌘Q — not just closing the window.)
- Is the config file valid JSON? Open it in a JSON validator. A trailing comma or missing brace breaks the entire config.
- Run
KONSTANTLY_MCP_DEBUG=1and check Claude Desktop's MCP logs (Help → Show Logs).
"Permission denied" on a write tool I should have access to
- Your Konstantly role must include the underlying permission (e.g.
user_assignforassign_training). Check Settings → Roles. - Your MCP key must have
writescope. Check Settings → MCP Keys — if the key was generated when your plan was Pro and you've since upgraded, you need to revoke + regenerate to gain write capability. Stored scopes are not upgraded automatically. - Your license tier must be Enterprise (
mcpAccess: "full"). Check Settings → Billing.
Rate limited
If you're hitting 429s in normal use:
- Pro plans have 60 calls/min — a chatty agent can hit this. Either upgrade to Enterprise (600/min) or batch your queries.
- Enterprise hitting 600/min usually means a runaway agent. Check
KONSTANTLY_MCP_DEBUG=1logs for an infinite loop.
"Too many failed MCP authentication attempts"
Your tool is sending an invalid key (revoked, typo, or wrong URL). Fix the env var. The block lifts after 60 seconds.
What MCP doesn't do (yet)
A few capabilities aren't in v1. We'll update this guide as they ship:
- Course generation from prompts/PDFs — coming in v1.5, brings Konstantly's existing AI course-builder into your agent
- Extending deadlines, sending reminders — coming in v1.1
- Hosted MCP transport — currently the MCP server runs on the same machine as your AI tool. v1.5 adds HTTP transport for hosted scenarios (Slack bots, internal dashboards)
See also
- MCP technical reference — full tool list, authentication details, security model
- Connect to Zapier — for no-code automation across 8,500+ other apps
- Konstantly API — the underlying REST API that MCP wraps
If you run into anything not covered here, get in touch — we'll add it.