Connectors

Fullhouse has one control surface: fullhouse mcp, a stdio MCP server that talks to the running desktop app. Every assistant below is a config entry on top of it; nothing else can start, stop or approve a chat.

Requirement everywhere: the fullhouse CLI on PATH (the Mac app installs it).

Setup per platform

Platform	Command
Claude Code	`claude mcp add --transport stdio fullhouse -- fullhouse mcp`
Codex CLI / ChatGPT desktop	`codex mcp add fullhouse -- fullhouse mcp`
Grok	Coming soon
Cursor	add the entry below to `~/.cursor/mcp.json`
Any other MCP client	Settings → Connections → Fullhouse preset in the app

{
  "mcpServers": {
    "fullhouse": {
      "command": "fullhouse",
      "args": ["mcp", "--client", "cursor", "--scope", "read,write,execute"]
    }
  }
}

What codex mcp add writes to ~/.codex/config.toml:

[mcp_servers.fullhouse]
command = "fullhouse"
args = ["mcp"]
startup_timeout_sec = 10
tool_timeout_sec = 60

Tools and scopes

stdio clients get read,write by default. --scope approve adds approvals, --scope admin the webhook test, --scope execute run_task and run_tests. Scopes are default deny; a call outside the granted scopes fails with denied and still writes a receipt.

Tool	Scope	Notes
`list_projects`, `list_chats`, `chat_status`, `get_transcript`, `list_pending_approvals`, `list_automations`, `get_receipts`	read	answer from disk when the app is closed; transcripts are redacted and labelled untrusted
`send_prompt`, `handoff`, `start_automation`	write	new chats start in plan mode
`stop_run`, `cancel_automation_run`	write (destructive)	clients that honour `destructiveHint` ask first
`approve_permission`	approve (destructive)	only after the human said so
`task_status`, `get_diff`, `memory_read`	read	only projects Fullhouse knows; diff and memory text are redacted
`memory_write`	write	keys that decide what runs (test/build/run commands) are refused
`run_task`, `run_tests`	execute	opt-in; runs in a fresh worktree in the default non-bypass mode, with a timeout

Every write and approve call appends to a sha256-chained receipt log; fullhouse mcp receipts prints and verifies it.