MCP 服务器

Kilo IoT Platform MCP Server

Enables AI clients to connect to live IoT deployments, read devices, provision hardware, deploy automation rules, manage alarms, and send commands to physical equipment.

README

Kilo IoT Platform MCP Server

Connect an AI client to a live IoT deployment and let it work the real thing: read devices, provision hardware, deploy automation rules, work the alarm queue, and send commands to physical equipment.

The server is hosted by Kilo IoT — there is nothing to install and no API key to mint. You sign in with your usual Kilo account in the browser, and the connection carries your own permissions.

https://mcp-auth.kiloiot.io/mcp

This repository holds the public metadata for that server: its registry manifest, its icon, and the setup instructions below. The service itself is closed-source.

What is the Model Context Protocol?

MCP is an open standard that lets an AI client discover and call tools on a remote server. Because it is a standard rather than a per-vendor integration, any MCP client can connect — Claude Code, Claude Desktop, ChatGPT, Codex, Cursor and others — over Streamable HTTP.

What can an AI agent do with the Kilo MCP server?

Area	What the connected client can do
Devices	List and inspect devices, read telemetry and diagnostics, provision LoRaWAN devices, MQTT devices and GPS trackers, manage device profiles
Commands	List the commands a device supports, send one, and check how it completed — this is where the assistant acts on physical equipment
Connectors	Review connectors, create connections for a device to report through
Rules	Review rules, generate and deploy automation, simulate logic against real sensor values before it reaches production, stop a running rule, read execution history
Alarms	List and resolve alarms, summarize activity for a shift or a site, manage alarm rules and notification channels, send a test notification
Dashboards	List dashboards and query the data behind any widget
Sensors	Inspect and change sensor mappings, manage sensor templates
Organization	Read organization details, list teams, invite users, assign roles

Every tool is annotated, so a client knows which ones only read and which ones change something. Read-only tools run without interrupting you; anything destructive asks first.

How do I connect Claude Code to Kilo?

claude mcp add --transport http kilo https://mcp-auth.kiloiot.io/mcp

Then run /mcp inside Claude Code, pick kilo, and authorize in the browser window that opens. Run /mcp again to confirm it reports connected.

How do I connect Claude Desktop, ChatGPT, Cursor or Codex?

Clients with a connector dialog — Claude Desktop, ChatGPT, Cursor — take the URL directly: open Settings → Connectors (or Integrations / MCP servers), choose Add custom connector, paste https://mcp-auth.kiloiot.io/mcp, and authorize in the browser.

Clients configured from a file or a terminal, such as Codex, register the same URL as a Streamable HTTP server. Your client's own documentation says where its MCP settings live; nothing about this endpoint is client-specific.

Which organization does the connection see?

By default, whichever organization is currently selected in the Kilo web app. Switch organizations there and reconnect the client to follow it.

To pin a client to one organization regardless of what is selected in the web app:

https://mcp-auth.kiloiot.io/o/{organizationId}/mcp

The organization ID comes from the web app. Pinning is worth doing for a workstation that must always operate against one production organization — and it cannot be moved by a stray click in the organization switcher. Requests for an organization you are not a member of are refused.

Is it safe to give an AI agent access to my IoT devices?

You sign in, not a service account. Authorization happens in your browser against your normal Kilo account. No key is generated, copied or stored for the connection.
Your permissions are the ceiling. The client can only do what your account can do. If you cannot deploy a rule or invite a user, neither can it.
Organization boundaries hold, on the default endpoint and the pinned one alike.
Actions keep their normal records. Rule changes and executions appear in rule history, device commands in command execution history, and access changes in the Audit Trail.

Treat an authorized client like a signed-in session: it belongs on machines you control.

MCP server vs REST API — which should I use?

The Public REST API is for programs you write: a sync job, a reporting pipeline, a bridge to another system. It authenticates with a scoped API key that runs unattended. MCP is for an AI client acting on your behalf, authorized by your own sign-in. If you are writing code, use REST. If you are working with an assistant, use MCP.