✨ New Feature: End-User Credentials for MCP Servers

We’re excited to introduce a powerful new capability: end-user MCP authentication. You can now let your end users connect to MCP servers with their own credentials.

When connecting an MCP server to your Pickaxe, you’ll now see a new option in the setup flow:

Credentials source
Select whether the action should run using the owner’s credentials or the end user’s credentials.

How it works:

When an end user attempts to use a connected MCP server that supports this new feature, the Pickaxe will prompt them with:


From there, the user can click Connect, which opens an authentication window where they can sign in with their own account. Once connected, the Pickaxe will always run the action using their credentials.

Please note that this feature is not yet available for all actions. If you have a specific action or an MCP server where you’d like to see this supported, feel free to let us know in the replies.

We’re excited to see how this unlocks new possibilities in your Pickaxes. :sparkles:

6 Likes

Have the team got any classic use case for this or thought how this could be used. TY

It looks great, but I have a question. As an administrator, where can I see the MCP accounts that end users have linked? Can end users unlink their MCP accounts from the Pickaxe Studio dashboard? For example, Google Calendar from MCP.

I’m asking because the linking of MCP for end users is done through composio

1 Like

When or how do you trigger this? I mean if I connect the AI to Google Search Console and tell the bot to connect to it it doesn’t seem to trigger this “permission window”? I was testing “Smithery - Google Search Console” MCP.

Second question, is there a way for us to translate those messages to our own language and if not will there be way later on?

PS. Even a list of strings used would be cool so users could translate and send them to you for easy implementation.

Hi @landed ,
Great question, thank you for asking.

For example, a Pickaxe used for reporting or automation could let each user authenticate with their own Google Drive, Notion, or CRM account, so actions run against their personal data rather than the creator’s. This keeps data isolated per user while allowing a single Pickaxe to scale across many users.

Hi @bruno12345 ,
Thank you for the great question!

At the moment, there isn’t a way for Studio owners to view which MCP accounts an end user has linked, nor can end users manage or unlink their MCP connections. The team is aware of this limitation, and the engineers are actively investigating ways to make this possible.

We’ll be sure to share updates as this functionality becomes available.

Hi @hurmuli ,
Thank you for your questions!

I was able to trigger the end-user authentication flow for the Google Search Console MCP on my side.

In my case, all that was required was adding a clear instruction in the Pickaxe’s role prompt that explains when and how the MCP action should be used. Once the Pickaxe attempts to call that action for the first time, the authentication modal appears for the end user.

If you’re seeing different behavior, please feel free to share the role prompt you’re testing with here, or reach out to us at info@pickaxe.co, and we can take a closer look together.

Regarding language changes: if you’re referring to the text shown in the authentication modal itself, that’s not currently customizable. That said, it’s a great idea. I’d recommend posting this as a feature request so the team can keep track of it easier.