Connect Hackways
to your workspace.

Use these settings when adding Hackways as a remote MCP server in ChatGPT. Start with automatic discovery; every manual field is listed below.

Quick setup

Enter https://mcp.hackways.in/mcp as the server URL and choose OAuth.
Choose Client Identifier Metadata Document (CIMD) when available. Dynamic Client Registration (DCR) is also supported.
Use token endpoint auth method none and leave the client secret empty. Enable PKCE with S256.
Save, connect your Hackways account and review the requested permissions.

Use the full URL ending in /mcp. The bare domain opens the Hackways landing page.

Client registration

Choose one registration method. Your client ID depends on that choice.

CIMD

ChatGPT supplies its metadata URL as the OAuth client ID. No client secret or manual registration is needed. Hackways accepts ChatGPT’s published public-client method, none.

The stable metadata URL is https://chatgpt.com/oauth/client.json. Some connections use a callback-specific metadata URL supplied by ChatGPT; keep that exact value.

Dynamic Client Registration (DCR)

ChatGPT registers itself at https://mcp.hackways.in/oauth/register and saves the returned client ID. Leave manual client credentials empty.

User-Defined OAuth Client

If you select this method, first register a public client for the exact callback URL shown in your ChatGPT connection. Replace the marked value in this command, run it once, then paste the returned client_id into ChatGPT. Keep that client ID for the connection.

curl https://mcp.hackways.in/oauth/register \
  -H 'Content-Type: application/json' \
  --data '{"client_name":"ChatGPT","redirect_uris":["PASTE_YOUR_EXACT_CHATGPT_CALLBACK_URL"],"token_endpoint_auth_method":"none","grant_types":["authorization_code","refresh_token"],"response_types":["code"]}'

This command creates an OAuth client registration. It does not sign in or authorize your account.

Callback URL: Copy the exact callback URL shown in your ChatGPT connection.
OAuth client ID: CIMD metadata URL, or the client_id returned by DCR.
OAuth client secret: Leave empty.
Token endpoint auth method: none

Callbacks are specific to your connection. Register the complete URL exactly, including its path. A client ID is not your Hackways email address.

OAuth endpoints

Discovery fills these automatically. If ChatGPT asks for manual settings, use these exact values.

Server URL: https://mcp.hackways.in/mcp
Auth URL: https://mcp.hackways.in/oauth/authorize
Token URL: https://mcp.hackways.in/oauth/token
Registration URL: https://mcp.hackways.in/oauth/register
Authorization server base: https://mcp.hackways.in
Resource: https://mcp.hackways.in/mcp
Authorization server metadata: https://mcp.hackways.in/.well-known/oauth-authorization-server
Protected resource metadata: https://mcp.hackways.in/.well-known/oauth-protected-resource/mcp

Scopes

Tools declare the permissions they need. Use profile:read for base scopes so the connection can identify your account. Default scopes can stay empty when ChatGPT uses the tool declarations, or use the minimal read permissions below.

Base scopes: profile:read
Default scopes (optional): profile:read registrations:read

Enter scopes one per line or separated by commas in ChatGPT. Request organizer or admin scopes only for workflows you need; account roles and ownership still determine access.

profile:read: Read your name and email.
profile:write: Update your profile and preferences.
registrations:read: Read your registrations and pass links.
registrations:write: Register, accept invitations and manage your attendance.
organizer:read: Read events, guests and Spaces you manage.
organizer:write: Manage your events, questions, invitations and check-in.
admin:read: Read platform records and analytics as an administrator.
admin:write: Manage authorized platform operations as an administrator.

Administrator access requires a separate admin sign-in and daily verification. Every change also needs approval on Hackways.

PKCE & OpenID support

PKCE: Enabled; S256 required.
OIDC enabled: Off.
OIDC configuration URL: Leave empty.
OIDC userinfo endpoint: Leave empty.
OIDC scopes supported: None. Do not add openid or email scopes.

Hackways uses OAuth authorization and the authenticated get_my_profile tool to return your account ID, name and email. An OpenID Connect provider is not configured.

If discovery fails

Check that the server URL is https://mcp.hackways.in/mcp, with HTTPS and the final path.
Open the authorization server metadata and protected resource metadata. Both must return JSON. If either is unavailable, retry after service recovery.
Retry discovery in ChatGPT. If it still fails, enter the endpoints above and select CIMD or DCR.
For User-Defined OAuth Client, use a registered client ID and matching callback. Keep client secret empty and token auth method none.
If admin permissions are omitted on account consent, use the separate admin authorization link shown there.

Settings follow the official OpenAI authentication guide. Manage or revoke access from connected apps.