I made the official kSuite MCP servers work from claude.ai (self-hosted bridge), plus a question about OAuth scopes
First, thanks to the Infomaniak team for publishing official MCP servers for mail, calendar, contacts, kChat and kDrive. They work great in Claude Desktop.
I wanted them in claude.ai and on my phone, which needs a remote server with OAuth. While trying, I found that OAuth apps created in the Manager can only request `openid profile email phone`; every API scope (`user_info`, `workspace:mail`, `workspace:calendar`, ...) is refused with `invalid_scope`. So a third-party app can't get API access through OAuth at all, only through a static API token.
My workaround is a small open-source bridge you host yourself: it runs the official packages unmodified, uses Infomaniak login for identity, asks the user for a scoped API token once, and exposes everything as one remote MCP endpoint with the OAuth flow claude.ai needs.
The token are stored on the bridge encrypted via AES-256
GIthub repo : https://github.com/xdubois/infomaniak-mcp-bridge
Quick questions for the community and, if anyone from Infomaniak reads this, for them.
Is there a plan to let OAuth apps request product scopes, or to offer a hosted remote MCP endpoint? Either would make this bridge unnecessary, which would be a good outcome !