Two Ways to Wire Claude Code into Paperclip — The MCP Connection [Part 3]
Since Part 1 and Part 2 went out in July, Paperclip has shipped twelve releases (patches included — nine if you count only feature releases). The most structural of them is the “Assistant Connection (MCP)” in the October 12, 2026 release. In one line: Claude Code can now log into Paperclip as a user and act like a member of the team.
This is where people get confused. Paperclip could already connect to Claude Code. But that connection runs the other way around. Telling those two directions apart is the whole point of this article.
⚠️ Up front: this is not a write-up of an installation I ran myself. It is assembled from Paperclip’s official documentation and GitHub release notes, and every screen, config key, and step below is quoted from primary sources. Where something may differ from the live product, I say so in the text.
The three questions that need answering first
| Question | Answer |
|---|---|
| What’s new? | An “Assistant Connection (MCP)” card under Connections. Claude Code, Codex, OpenCode, and generic MCP clients can connect via browser OAuth or device-code consent and act as the logged-in user |
| How is that different from before? | The direction is reversed. The old path (Process Adapter) has Paperclip spawn Claude Code as a child process; the new one has Claude Code connect to Paperclip |
| Can I use it today? | It is still experimental. You have to enable Settings → Experimental → "Assistant connections (MCP)", and it requires an HTTPS PAPERCLIP_PUBLIC_URL |
Photo by Pavel Danilyuk on Pexels
Two Directions — Who Is Hiring Whom
Answer first: with the Process Adapter, Paperclip is the boss; with the MCP connection, Claude Code is a colleague.
Why does the distinction matter? The “company of AI employees” from Part 2 is the top row — you define agents, run them on a heartbeat, and keep them in check with budgets. What is new is the bottom row: a path for the Claude Code you use every day to reach directly into that company’s work system.
The Existing Path — Running Claude Code as an “Employee” via the Process Adapter
Answer first: set adapterType: "claude_local" and Paperclip spawns your local claude CLI as a child process. The official docs describe it as running “Anthropic’s Claude CLI, including session support and skill integration.”
The config keys look like this.
| Config key | What it does |
|---|---|
adapterType | claude_local — the adapter for Claude Code |
command | The command to run (claude) |
cwd | Working directory. Participates in the session-resume condition |
instructionsFilePath | Whatever is in this file is prepended to every prompt |
model / effort | Model and thinking effort |
maxTurnsPerRun | Maximum turns allowed in a single run |
promptTemplate | Supports {{agent.name}}, {{agent.id}}, {{context.*}} substitution |
env | Environment variables (API keys, etc.) |
timeoutSec / graceSec | Run time limit, and the grace period after SIGTERM |
dangerouslySkipPermissions | Skips permission prompts. The documented example is false. It is tempting to flip for autonomous runs, but it means the agent executes files and commands without human approval — consider it only inside an isolated environment |
Four constraints worth knowing (per the official docs)
- The timeout defaults to 900 seconds. Past that it sends SIGTERM, then SIGKILL after the grace period. Long jobs need this raised
- Exceeding
maxTurnsPerRunresets the session - Session resume is conditional — it continues only when the agent has a stored
sessionIdandcwdmatches the saved working directory. Change the work folder and the context does not carry over - It assumes a single machine. The docs say the Process Adapter is “suitable for development” and point to the HTTP adapter for distributed execution
One thing to watch here: the official docs trail the releases. The docs list Claude Opus 4.6, Sonnet 4.5 (recommended), and Haiku 4.5, while the October 12 release notes say Claude Code agents can select Claude Sonnet 5.5 at Low through Max effort.
That does not mean “just copy the release notes into your config,” though. The release notes give display names only — they do not publish the model ID strings you put in the config. So the safer move is to read the model value off the model menu in the product UI. Two more things to keep in mind:
- The allowed
effortvalues differ. The Process Adapter config in the docs giveslow,medium, andhighas examples. Whether the “Max effort” from the release notes maps straight onto a Process Adapter config value I could not confirm - There is a sandbox image rebuild condition. From the release notes: “Custom sandbox images built with a Claude Code version older than 2.1.284 must be rebuilt before Sonnet 5.5 works on the CLI path.” The same release bumped the harness pin to Claude Code 2.1.286
The New Path — Joining the Team via Assistant Connection (MCP)
Answer first: Claude Code connects through the “Assistant Connection (MCP)” card under Connections. Here is the release note verbatim:
A new “Assistant Connection (MCP)” card in Connections lets Claude Code, Codex, OpenCode, and generic MCP clients connect to Paperclip through browser OAuth or device-code consent and act as the logged-in user.
What a connected Claude Code can do
| What it can do | What that means |
|---|---|
| Read and search tasks | Look up what work is moving through the company |
| Create and delegate work | Create a task and hand it to another agent |
| Leave human comments | Comments as a person, not as an agent |
| Read documents and artifacts | Access the output agents produced |
| Track results via signed event webhooks | Follow whether the work finished |
Controls ship alongside it — write-scope restriction (pin it to read-only) and single-company pinning (limit access to one company) are both options. Since the structure lends out your logged-in user’s privileges wholesale, those two are the ones to turn on before you start.
How to enable it (per the official release notes)
- Enable
Settings → Experimental → "Assistant connections (MCP)"— still experimental (config keyenablePublicMcp). The release notes state that this switch “exposes a public MCP endpoint and requiresPAPERCLIP_PUBLIC_URLto be an HTTPS origin” - Set an HTTPS
PAPERCLIP_PUBLIC_URL— OAuth redirects mean an HTTP localhost will not do - Connect your client from the Assistant Connection (MCP) card under Connections (browser OAuth or device code)
- Local stdio clients use the
paperclip mcpCLI bridge together with device login
Step 2 is the real gate. If you are running locally the way Part 2 described — npx to start it, localhost to reach it — you have to arrange a public HTTPS URL first.
One thing is easy to mix up here. The August 24 release added Tailscale-based HTTPS exposure (PAPERCLIP_MANAGED_RUNTIME_HTTPS), but that is a different layer. The release notes are explicit about the target: it exposes the “managed worktree runtime” over tailscale_https, and the problem it solves is “not being able to view an agent’s branch preview from your phone or another computer.” In other words it is for previewing agent output, and it has nothing to do with the PAPERCLIP_PUBLIC_URL that MCP requires (the HTTPS origin of Paperclip itself).
Putting it behind a TLS-terminating platform (Railway, Render, Fly, and so on), which the same release mentions, looks like the more direct route to a public HTTPS origin. That part, though, I could not verify — this is not the result of standing one up.
Photo by Simon Kadula on Unsplash
So Which One Do You Pick
Answer first: Process Adapter if you want work to run itself; MCP if you want to drive the company yourself.
| Goal | Pick | Why |
|---|---|---|
| Work that runs overnight without a human | Process Adapter | You need an “employee” that fires on a heartbeat. The MCP connection appears to operate while your client is connected (the sources do not state this explicitly) |
| Querying and directing company work from the Claude Code you use | Assistant Connection (MCP) | Searching, creating, and delegating tasks happens right in your session |
| Distributed execution across remote or multiple machines | HTTP adapter | The official docs state the Process Adapter is single-machine and development-oriented |
| Pulling output into your own pipeline | MCP + event webhooks | Reading documents and artifacts and tracking signed webhooks live on the same path |
| Minimum privileges, experiments only | MCP (read-only + single-company pin) | Those two options narrow the scope |
They are not mutually exclusive. Leaving your employee agents running and attaching your own Claude Code on top as a colleague is, in practice, the most natural picture.
What Changed Since Part 2 — For Readers Who Followed Along
Answer first: the default UI changed. The screens described in Part 2 no longer match what you will see.
| Change | When | What a Part 2 reader should know |
|---|---|---|
| Chat-style tasks became the default | 8/24 | The issue-style screen from Part 2 (page header + comment thread + Properties sidebar) has been demoted to an option. The enableClassicTaskInterface setting brings it back, but chat-only features do not work there |
| Decisions — a propose/decide workflow | 8/17 | Decision-making became a first-class feature. Worth revisiting your approval flow |
| Import/Export replaced Cloud Sync | 8/17 | The way you move company data changed |
| Release channels split | 8/17 | canary → nightly → beta → stable. Pin a channel if you want stability |
| AI credentials moved into Connections | 9/16 | Key management is no longer where Part 2’s environment-variable approach put it |
| GitHub access went from “shared token” to “identity” | 9/16 | It is no longer a single token passed around |
| Dedicated agent email (AgentMail) | 9/16 | Agents get their own mail addresses |
| Agents review PRs (scheduled bot) | 10/1 | You can put an agent on code review permanently |
| Skill sync with GitHub | 10/5 | Your skill library syncs from a repository |
| Two-way Slack | 10/5 | Not just notifications — traffic flows both ways |
Of these, the first row is what trips up readers following Part 2 the most. The article’s logic still holds, but the default screen moved, so the description and what is in front of you no longer line up.
Prerequisites and Pitfalls
Things to check before you actually wire this up.
- It is experimental. You have to enable it under
Settings → Experimental, and experimental specs change. Safer to try it in a separate company before dropping it into real operations - A public HTTPS URL is mandatory. On a local localhost setup, this is the step that takes the longest
- The privileges are those of the logged-in user. The connected assistant acts as “you,” so turn on read-only restriction and single-company pinning first, then widen the scope
- The official docs trail the releases. As of the date checked (2026-10-15), the hosted docs index has no MCP-specific page, and the model list is out of date. The GitHub release notes are more current
- Screens that are not in the docs can move. The steps here follow the release-note descriptions, so the actual card placement and wording may vary by version
So What — The Reversal of Roles Is the Point
Paperclip’s original picture was “I manage a company staffed by AI employees.” That was Parts 1 and 2. What the MCP connection adds is not one more feature but an inversion of the relationship. Now the coding agent I use has direct access to that company’s work system.
Why does that matter in practice? Until now, the weak spot of the “AI agent company” was that it sat apart from my day-to-day work. The company ran on its own, I worked separately in my terminal, and the thing joining them was a human hand. The MCP connection erases that hand — my Claude Code reads the company’s tasks, creates them, delegates them, and pulls back the output.
So the order I would recommend is this:
- Connect with read-only plus a single-company pin first, and let your Claude Code only query the company’s state
- Once querying proves useful, open up writes and widen to creating and delegating tasks
- Keep overnight work with the Process Adapter employees, and use MCP as the console you command from
Mixing the two directions is the destination; trying to replace one with the other is reading the design wrong. One is autonomous execution, the other is the console you drive.
Related reading
- Building a Company Staffed by AI Employees — A Paperclip Primer [Part 1]
- Paperclip Hands-On — From Setup to Running an AI-Staffed Company [Part 2]
Sources
- Paperclip v2026.1012.0 release notes — Assistant Connection (MCP): connection methods, privileges, prerequisites, model support
- Paperclip release list — change history since July (chat-style default, Decisions, Connections rework, and more)
- Process Adapter documentation —
claude_localconfig keys and constraints (timeout, turn limit, session resume, single machine) - Agent Integration documentation — the adapter system
- Paperclip documentation index — the basis for saying there was no MCP-specific page at the time of checking
- Paperclip GitHub repository
※ This article is based on official documentation and release notes as of October 15, 2026, not on a hands-on installation. Because the feature is experimental, screens and specs may change — re-check the release notes before you apply any of this.
댓글
✍️ 편집자 모드 — 이 댓글은 공개되지 않고 편집자에게만 전달됩니다.