Sat, October 17, 2026
AI & Agentic Intelligence — English Edition

Two Ways to Wire Claude Code into Paperclip — The MCP Connection [Part 3]

Since Part 1 and Part 2 went out in July, Paperclip has shipped twelve releases (patches included — nine if you count only feature releases). The most structural of them is the “Assistant Connection (MCP)” in the October 12, 2026 release. In one line: Claude Code can now log into Paperclip as a user and act like a member of the team.

This is where people get confused. Paperclip could already connect to Claude Code. But that connection runs the other way around. Telling those two directions apart is the whole point of this article.

⚠️ Up front: this is not a write-up of an installation I ran myself. It is assembled from Paperclip’s official documentation and GitHub release notes, and every screen, config key, and step below is quoted from primary sources. Where something may differ from the live product, I say so in the text.

The three questions that need answering first

QuestionAnswer
What’s new?An “Assistant Connection (MCP)” card under Connections. Claude Code, Codex, OpenCode, and generic MCP clients can connect via browser OAuth or device-code consent and act as the logged-in user
How is that different from before?The direction is reversed. The old path (Process Adapter) has Paperclip spawn Claude Code as a child process; the new one has Claude Code connect to Paperclip
Can I use it today?It is still experimental. You have to enable Settings → Experimental → "Assistant connections (MCP)", and it requires an HTTPS PAPERCLIP_PUBLIC_URL

A team in a meeting room Photo by Pavel Danilyuk on Pexels

Two Directions — Who Is Hiring Whom

Answer first: with the Process Adapter, Paperclip is the boss; with the MCP connection, Claude Code is a colleague.

Same two tools, opposite directions — which way the arrow points is the whole story Existing — Process Adapter (adapterType: claude_local) Paperclip The boss — assigns work spawned as a child process (same machine) Claude Code The employee — receives work work comes down from above driven by the heartbeat New (2026-10-12) — Assistant Connection (MCP) Paperclip The workplace — connected to connects via OAuth / device code (as a logged-in user) Claude Code The colleague — creates and delegates the Claude Code you already use reaches into the company's work ※ The two are not mutually exclusive. You can run agents as employees and connect your own Claude Code at the same time. ※ The MCP side still sits behind an Experimental flag.
The same two names appear in both rows, but the roles swap. In the old path Claude Code is the employee taking orders; in the new one it is the side creating and delegating tasks. Sources: Paperclip official documentation and the v2026.1012.0 release notes (checked 2026-10-15).

Why does the distinction matter? The “company of AI employees” from Part 2 is the top row — you define agents, run them on a heartbeat, and keep them in check with budgets. What is new is the bottom row: a path for the Claude Code you use every day to reach directly into that company’s work system.

The Existing Path — Running Claude Code as an “Employee” via the Process Adapter

Answer first: set adapterType: "claude_local" and Paperclip spawns your local claude CLI as a child process. The official docs describe it as running “Anthropic’s Claude CLI, including session support and skill integration.”

The config keys look like this.

Config keyWhat it does
adapterTypeclaude_local — the adapter for Claude Code
commandThe command to run (claude)
cwdWorking directory. Participates in the session-resume condition
instructionsFilePathWhatever is in this file is prepended to every prompt
model / effortModel and thinking effort
maxTurnsPerRunMaximum turns allowed in a single run
promptTemplateSupports {{agent.name}}, {{agent.id}}, {{context.*}} substitution
envEnvironment variables (API keys, etc.)
timeoutSec / graceSecRun time limit, and the grace period after SIGTERM
dangerouslySkipPermissionsSkips permission prompts. The documented example is false. It is tempting to flip for autonomous runs, but it means the agent executes files and commands without human approval — consider it only inside an isolated environment

Four constraints worth knowing (per the official docs)

  1. The timeout defaults to 900 seconds. Past that it sends SIGTERM, then SIGKILL after the grace period. Long jobs need this raised
  2. Exceeding maxTurnsPerRun resets the session
  3. Session resume is conditional — it continues only when the agent has a stored sessionId and cwd matches the saved working directory. Change the work folder and the context does not carry over
  4. It assumes a single machine. The docs say the Process Adapter is “suitable for development” and point to the HTTP adapter for distributed execution

One thing to watch here: the official docs trail the releases. The docs list Claude Opus 4.6, Sonnet 4.5 (recommended), and Haiku 4.5, while the October 12 release notes say Claude Code agents can select Claude Sonnet 5.5 at Low through Max effort.

That does not mean “just copy the release notes into your config,” though. The release notes give display names only — they do not publish the model ID strings you put in the config. So the safer move is to read the model value off the model menu in the product UI. Two more things to keep in mind:

  • The allowed effort values differ. The Process Adapter config in the docs gives low, medium, and high as examples. Whether the “Max effort” from the release notes maps straight onto a Process Adapter config value I could not confirm
  • There is a sandbox image rebuild condition. From the release notes: “Custom sandbox images built with a Claude Code version older than 2.1.284 must be rebuilt before Sonnet 5.5 works on the CLI path.” The same release bumped the harness pin to Claude Code 2.1.286

The New Path — Joining the Team via Assistant Connection (MCP)

Answer first: Claude Code connects through the “Assistant Connection (MCP)” card under Connections. Here is the release note verbatim:

A new “Assistant Connection (MCP)” card in Connections lets Claude Code, Codex, OpenCode, and generic MCP clients connect to Paperclip through browser OAuth or device-code consent and act as the logged-in user.

What a connected Claude Code can do

What it can doWhat that means
Read and search tasksLook up what work is moving through the company
Create and delegate workCreate a task and hand it to another agent
Leave human commentsComments as a person, not as an agent
Read documents and artifactsAccess the output agents produced
Track results via signed event webhooksFollow whether the work finished

Controls ship alongside it — write-scope restriction (pin it to read-only) and single-company pinning (limit access to one company) are both options. Since the structure lends out your logged-in user’s privileges wholesale, those two are the ones to turn on before you start.

How to enable it (per the official release notes)

  1. Enable Settings → Experimental → "Assistant connections (MCP)" — still experimental (config key enablePublicMcp). The release notes state that this switch “exposes a public MCP endpoint and requires PAPERCLIP_PUBLIC_URL to be an HTTPS origin”
  2. Set an HTTPS PAPERCLIP_PUBLIC_URL — OAuth redirects mean an HTTP localhost will not do
  3. Connect your client from the Assistant Connection (MCP) card under Connections (browser OAuth or device code)
  4. Local stdio clients use the paperclip mcp CLI bridge together with device login

Step 2 is the real gate. If you are running locally the way Part 2 described — npx to start it, localhost to reach it — you have to arrange a public HTTPS URL first.

One thing is easy to mix up here. The August 24 release added Tailscale-based HTTPS exposure (PAPERCLIP_MANAGED_RUNTIME_HTTPS), but that is a different layer. The release notes are explicit about the target: it exposes the “managed worktree runtime” over tailscale_https, and the problem it solves is “not being able to view an agent’s branch preview from your phone or another computer.” In other words it is for previewing agent output, and it has nothing to do with the PAPERCLIP_PUBLIC_URL that MCP requires (the HTTPS origin of Paperclip itself).

Putting it behind a TLS-terminating platform (Railway, Render, Fly, and so on), which the same release mentions, looks like the more direct route to a public HTTPS origin. That part, though, I could not verify — this is not the result of standing one up.

Automation machinery in a factory Photo by Simon Kadula on Unsplash

So Which One Do You Pick

Answer first: Process Adapter if you want work to run itself; MCP if you want to drive the company yourself.

GoalPickWhy
Work that runs overnight without a humanProcess AdapterYou need an “employee” that fires on a heartbeat. The MCP connection appears to operate while your client is connected (the sources do not state this explicitly)
Querying and directing company work from the Claude Code you useAssistant Connection (MCP)Searching, creating, and delegating tasks happens right in your session
Distributed execution across remote or multiple machinesHTTP adapterThe official docs state the Process Adapter is single-machine and development-oriented
Pulling output into your own pipelineMCP + event webhooksReading documents and artifacts and tracking signed webhooks live on the same path
Minimum privileges, experiments onlyMCP (read-only + single-company pin)Those two options narrow the scope

They are not mutually exclusive. Leaving your employee agents running and attaching your own Claude Code on top as a colleague is, in practice, the most natural picture.

What Changed Since Part 2 — For Readers Who Followed Along

Answer first: the default UI changed. The screens described in Part 2 no longer match what you will see.

ChangeWhenWhat a Part 2 reader should know
Chat-style tasks became the default8/24The issue-style screen from Part 2 (page header + comment thread + Properties sidebar) has been demoted to an option. The enableClassicTaskInterface setting brings it back, but chat-only features do not work there
Decisions — a propose/decide workflow8/17Decision-making became a first-class feature. Worth revisiting your approval flow
Import/Export replaced Cloud Sync8/17The way you move company data changed
Release channels split8/17canary → nightly → beta → stable. Pin a channel if you want stability
AI credentials moved into Connections9/16Key management is no longer where Part 2’s environment-variable approach put it
GitHub access went from “shared token” to “identity”9/16It is no longer a single token passed around
Dedicated agent email (AgentMail)9/16Agents get their own mail addresses
Agents review PRs (scheduled bot)10/1You can put an agent on code review permanently
Skill sync with GitHub10/5Your skill library syncs from a repository
Two-way Slack10/5Not just notifications — traffic flows both ways

Of these, the first row is what trips up readers following Part 2 the most. The article’s logic still holds, but the default screen moved, so the description and what is in front of you no longer line up.

Prerequisites and Pitfalls

Things to check before you actually wire this up.

  1. It is experimental. You have to enable it under Settings → Experimental, and experimental specs change. Safer to try it in a separate company before dropping it into real operations
  2. A public HTTPS URL is mandatory. On a local localhost setup, this is the step that takes the longest
  3. The privileges are those of the logged-in user. The connected assistant acts as “you,” so turn on read-only restriction and single-company pinning first, then widen the scope
  4. The official docs trail the releases. As of the date checked (2026-10-15), the hosted docs index has no MCP-specific page, and the model list is out of date. The GitHub release notes are more current
  5. Screens that are not in the docs can move. The steps here follow the release-note descriptions, so the actual card placement and wording may vary by version

So What — The Reversal of Roles Is the Point

Paperclip’s original picture was “I manage a company staffed by AI employees.” That was Parts 1 and 2. What the MCP connection adds is not one more feature but an inversion of the relationship. Now the coding agent I use has direct access to that company’s work system.

Why does that matter in practice? Until now, the weak spot of the “AI agent company” was that it sat apart from my day-to-day work. The company ran on its own, I worked separately in my terminal, and the thing joining them was a human hand. The MCP connection erases that hand — my Claude Code reads the company’s tasks, creates them, delegates them, and pulls back the output.

So the order I would recommend is this:

  1. Connect with read-only plus a single-company pin first, and let your Claude Code only query the company’s state
  2. Once querying proves useful, open up writes and widen to creating and delegating tasks
  3. Keep overnight work with the Process Adapter employees, and use MCP as the console you command from

Mixing the two directions is the destination; trying to replace one with the other is reading the design wrong. One is autonomous execution, the other is the console you drive.


Related reading

Sources

※ This article is based on official documentation and release notes as of October 15, 2026, not on a hands-on installation. Because the feature is experimental, screens and specs may change — re-check the release notes before you apply any of this.

광고

댓글

  • 불러오는 중…