# CP-MCP

> MCP server (Claude connector) for the Cloudpath Enrollment System REST API. Google sign-in; discovers and calls any Core, Tenant Portal, or Property Management endpoint.

All of these pages as one Markdown file: https://docs.neuralconfig.com/cp-mcp/llms-full.txt
Support: https://support.neuralconfig.com/cp-mcp

## Pages

- [What is CP-MCP?](https://docs.neuralconfig.com/cp-mcp/): CP-MCP is a hosted MCP server that gives Claude access to your Cloudpath Enrollment System REST API — the Core, Tenant Portal, and Property Management surfaces — through a single connector URL.
- [Getting started](https://docs.neuralconfig.com/cp-mcp/getting-started/): Sign in to CP-MCP with Google, save your Cloudpath FQDN and admin credentials, verify them, and get your MCP URL.
- [Connecting to Claude](https://docs.neuralconfig.com/cp-mcp/connecting-claude/): Add CP-MCP as a custom connector in Claude — the MCP URL, the OAuth consent flow, and what to do when the connector won't authorize.
- [How code mode works](https://docs.neuralconfig.com/cp-mcp/how-code-mode-works/): Why CP-MCP exposes a single code_mode tool, how Claude's TypeScript runs in a sandboxed isolate, and the six discovery-and-call primitives on each surface.
- [The three API surfaces](https://docs.neuralconfig.com/cp-mcp/surfaces/): How CP-MCP's core, tenant, and property objects map to the Cloudpath Core, Tenant Portal, and Property Management APIs — path prefixes and why property calls need a portal GUID.
- [Calling conventions](https://docs.neuralconfig.com/cp-mcp/calling-conventions/): How CP-MCP's call primitive behaves — its return shape, the Cloudpath pagination envelope, filter and sort query syntax, structured error handling, and the automatic token retry.
- [Limits and quotas](https://docs.neuralconfig.com/cp-mcp/limits/): Every limit that applies to a CP-MCP request — the code_mode wall-clock budget and code size, the per-request Cloudpath timeout, Cloudpath's own rate limits, and the caps on generate_passphrase and generate_image.
- [Generating passphrases](https://docs.neuralconfig.com/cp-mcp/generate-passphrase/): How CP-MCP's core.generate_passphrase utility mints memorable word-list passphrases for Cloudpath DPSK pools, MPSK entries, and registration passwords — parameters, entropy, and return shape.
- [Generating portal images](https://docs.neuralconfig.com/cp-mcp/generate-image/): How CP-MCP's core.generate_image utility renders branded logos and favicons for Cloudpath property and management portals — the four targets, parameters, and the multipart upload gotcha.
- [Examples](https://docs.neuralconfig.com/cp-mcp/examples/): Worked examples of asking Claude to do real Cloudpath work through CP-MCP — inventory, DPSK seeding, branded portal images, and property-scoped calls.
- [Security model](https://docs.neuralconfig.com/cp-mcp/security/): How CP-MCP protects your Cloudpath credentials — encryption at rest, the short-lived JWT lifecycle, the TLS requirement, and how access is controlled and revoked.
- [Troubleshooting](https://docs.neuralconfig.com/cp-mcp/troubleshooting/): Fixes for common CP-MCP problems — failed credential verification, self-signed certificates, connector authorization loops, missing credentials, and property-surface errors.