Manage Firezone from Claude

Use directory OAuth for Claude on the web, desktop, and mobile, or connect Claude Code through MCP. Both methods require a Firezone admin account. See the AI & MCP overview for permissions and supported operations.

Method 1: Directory OAuth

Connect Firezone to Claude through the Claude directory.

1. Open Firezone in the Claude directory.
2. Select Connect.
3. Enter your Firezone Cloud US account slug if prompted, then sign in with your usual method.
4. Review the permissions on the consent screen. Select write permissions only for the operations you want Claude to perform, then select Connect.
5. Ask Claude to list your Firezone Sites and check the result against the admin portal.

On Team and Enterprise plans of Claude, an owner of your Claude organization may need to add the connector first.

Method 2: Claude Code with MCP

This method supports Firezone Cloud US and EU. In a terminal, run the command for your account's region.

For Firezone Cloud US:

claude mcp add --transport http firezone https://rest-api.firezone.dev/mcp

For Firezone Cloud EU:

claude mcp add --transport http firezone https://eu.rest-api.firezone.dev/mcp

1. Start Claude Code and run /mcp.
2. Select firezone to open the Firezone sign-in flow in your browser.
3. Enter your account slug if prompted, then sign in with your usual method.
4. Review the permissions, then select Connect. Select write permissions only for the operations you want Claude Code to perform.
5. Ask Claude Code to list your Firezone Sites and check the result against the admin portal.

For other MCP clients, see the Universal MCP guide.

Disconnect Claude

1. In the Firezone admin portal, select your user avatar in the upper right, then select Your settings.
2. Under Connected apps, find the Claude connection and select Disconnect.

Credentials created through the connection remain valid after disconnection. Revoke any Client or Gateway tokens you no longer need separately.

Need help? See all support options.