MCP install: one less step, no more device-code copy
Small but nice: installing the Simple Product MCP no longer makes you copy a device code between your terminal and your browser. The CLI passes the code in the URL automatically, the browser auto-fills it, and you just confirm a workspace and click Authorize.
What changed
Before:
- Run
npx @simple-product/mcp --install - Terminal shows a device code
- Press Enter, browser opens
- Browser asks you to type the code into a form field
- Pick a workspace, click Authorize
- Wait for CLI to confirm
Now:
- Run
npx @simple-product/mcp@latest --install - Browser opens straight to the workspace picker (code already known)
- Click Authorize, done
One less step in your terminal, one less form field in your browser, one less variable to keep track of. The whole install runs in about 15 seconds without you typing anything you didn't already.
Why we kept the npx installer (and didn't switch to a different OAuth flow)
A quick architectural note for anyone curious. We considered a few alternatives:
- Localhost-callback OAuth — what most modern CLIs (gh, vercel, supabase) use. Marginal UX gain, but works in fewer environments (some locked-down corporate networks block port binding) and the success page lives on a
localhost:NNNNURL that looks weird. Net not better than what we shipped. - Pure browser-side OAuth via the MCP Authorization Spec — the eventual destination for spec-compliant clients (Claude Desktop, Code), which can handle their own OAuth in-protocol. We're set up to support that on the server side, but it doesn't replace the npx installer for two reasons. First, multi-tool fan-out: our installer detects every MCP-supporting tool on your machine (Claude Code, Claude Desktop, Cursor, Windsurf, VS Code, etc.) and writes config to all of them in one auth step. Spec-native flows do per-tool credential isolation by design — you'd auth once per tool. Second, pre-auth at first launch: by the time your AI client boots, MCP is already authenticated. No first-call 401, no
/mcpinterruption mid-conversation.
So the npx installer stays as the primary install vehicle. We just shaved the friction off it.
Upgrade
npx @simple-product/mcp@latest --install
If you have an existing install, this will detect and update your client configs. After install, restart your AI client (Claude Code, Claude Desktop, Cursor, etc.) once and the new tools/auth are picked up.
This release ships in @simple-product/mcp@0.1.19.
What's next
The bigger picture: a hosted MCP endpoint at simpleproduct.dev/api/mcp/v1 that becomes the substrate behind the npx installer. New tools and updated descriptions ship server-side and reach every existing install instantly — no more "please reinstall the MCP" when we improve a tool. Coming soon.