Cursor and other clients

The generic configuration that connects BrightSite to Cursor or any other AI tool that supports MCP, plus the sign-in alternative to pasting a key.

BrightSite works with any AI tool that supports MCP, the open standard for connecting assistants to outside services. This page has the configuration those tools expect, and covers Cursor specifically.

For Claude, see Claude. For ChatGPT, see ChatGPT. Both have their own pages because both have a point-and-click route that avoids config files entirely.

What every client needs

PieceValue
Server namebrightsite (anything you like, it is just a label)
URLhttps://onbrightsite.com/api/mcp
TransportHTTP (sometimes listed as "remote", "streamable HTTP" or "URL")
Authorization headerBearer YOUR_API_KEY

The URL is the same for every customer. You do not put your own domain in it.

The generic configuration

Nearly every MCP client accepts this JSON shape. Paste it into whichever file your tool uses, replacing YOUR_API_KEY:

{
  "mcpServers": {
    "brightsite": {
      "url": "https://onbrightsite.com/api/mcp",
      "headers": {
        "Authorization": "Bearer YOUR_API_KEY"
      }
    }
  }
}

Some tools name the top-level key servers rather than mcpServers, and some want an explicit "type": "http" line alongside the URL. If your tool rejects the block above, check its own MCP documentation for the exact key names. The URL and header stay the same either way.

Get your key from the user menu in the top-right corner of BrightSite, under Profile Settings, on the API Keys tab. It is shown only once, when you create it, so copy it immediately. See API keys.

Signing in instead of pasting a key

If your tool supports it, you can connect by signing in through your browser rather than handling a key at all. BrightSite supports the standard OAuth sign-in flow that MCP clients use, including automatic client registration, so a tool that offers this handles the whole thing for you.

In practice: you add https://onbrightsite.com/api/mcp as a server with no key, the tool notices that authorization is required and opens a BrightSite page in your browser, you approve while signed in, and the tool is connected. You never see or store a key.

This is the better option wherever it is available. There is no secret sitting in a file, and you can withdraw access without disturbing your other tools. If your tool asks for a URL and nothing else, try it. If it needs a key it will say so, and you can fall back to the header method above.

Cursor

Cursor supports MCP servers and reads them from a JSON file. You can add BrightSite either through Cursor's own settings interface, under its MCP section, or by editing that file directly with the block above.

Cursor has moved the location of that file between versions, so rather than trusting a path printed here, open Cursor's settings, find the MCP section, and use the button it gives you to open or edit the configuration. That always points at the right file for the version you are running.

Restart Cursor after saving. New MCP connections are read at startup.

Before your first real request

Ask your tool to list your accounts first. Every action needs an account id and your assistant cannot guess it:

List my BrightSite accounts.

Then check the connection with something that only reads:

List my BrightSite accounts, then show me the pages on the first one.

Real account names and real page titles means you are connected.

If it does not connect

  • No BrightSite tools listed. Restart the tool completely, because MCP configuration is read at startup. Then check your JSON is valid: one missing comma makes the whole file be ignored without a warning.
  • Authentication rejected. The header must be the word Bearer, a single space, then the key. Keys start with bs_mcp_. If you are not certain the key was copied whole, revoke it and make a new one.

Missing accounts, billing refusals, permission errors and rate limits are the same for every tool, and are covered on Connecting an AI tool.

One thing to watch

Unlike Lumi, an outside tool does not necessarily ask before making a change. Whatever confirmation your client offers is the only checkpoint you get, so find out what it does before pointing it at a live client site. See Working safely with AI.

Last updated September 9, 2026