# Connect a generic MCP client to Govna

Configure any standards-compliant MCP client to reach Govna's governed endpoint.

Author: Govna
Published: 2026-08-10
Updated: 2026-08-23

Evidence:
- [MCP-001](https://govna.io/solutions/security-leaders#MCP-001)
- [AUD-001](https://govna.io/solutions/security-leaders#AUD-001)

Endpoint: `https://agw.govna.io/mcp`

Govna exposes this Streamable HTTP endpoint behind OAuth and exact consent
([MCP-001](/solutions/security-leaders#MCP-001)).

1. Configure the Govna URL as a remote Streamable HTTP MCP server.
2. Let the client discover Govna OAuth metadata and complete authorization
   code with PKCE in the browser.
3. Use the returned grant. Only tools selected at consent are exposed for
   that session.

```
URL: https://agw.govna.io/mcp
Transport: Streamable HTTP
Authorization: OAuth 2.1 + PKCE S256
Grant: exact consent selection
```

Then, for every client: Govna opens in the browser. Sign in, choose
identities, tools, and duration, then approve. An audit intent is committed
before your first dispatched call, or the call is denied rather than run
un-audited ([AUD-001](/solutions/security-leaders#AUD-001)).

Check the [authorization specification for Govna's supported 2025-11-25 protocol version](https://modelcontextprotocol.io/specification/2025-11-25/basic/authorization).