Prepare a least-privilege token first
No suitable credential was available on the course machine, so the verified state remains zero installed and an empty vault.
Define the connector
MCP is a standard that lets an AI use an outside tool through a connector called an MCP server.
Get the direction right
An integration brings a tool into ArmaraOS. The next module exposes ArmaraOS to another MCP client.
Search the catalog
armaraos integrations
armaraos integrations github
There is no JSON or installed-only flag. Search by connector name.
Install only with a real scoped token
armaraos add <NAME> --key <REAL_SCOPED_TOKEN>
Create a minimal-permission token at the source service first. The token is persisted in the vault.
Verify observable state
armaraos integrations <NAME>
armaraos vault list
The course capture stops here because a fake credential would prove nothing and create unsafe state.
Begin with one read-only task
Keep approvals enabled and logs visible. The CLI does not reproduce the interactive per-call prompt, so use a narrowly scoped token and a read-only first request.
Remove connector and credential
armaraos remove <NAME>
armaraos vault remove <KEY>
Then revoke the token at the source service. Removing the connector alone does not erase or revoke it.
Check it / write the cleanup before install
Name all three removal steps.
Remove the connector, remove the exact vault entry, then revoke the token at its source. Install only when a real scoped token is ready.
An integration gives an agent a real outside-service credential. Add one at a time, begin read-only, and remove both local pieces plus the source token when finished.
Troubleshooting for this sitting
| What you see | Likely cause | What to do |
|---|---|---|
| Catalog is long | No installed-only filter exists. | Search by name. |
| No scoped token | Credential is not prepared. | Stop before add. |
| Key remains after remove | Cleanup has two local steps. | Remove the exact vault key. |
| No CLI per-call prompt | Verified CLI limitation. | Keep permissions narrow and inspect logs. |