Skip to main content
Managed Deep Agents deployments run on LangSmith Agent Server, so every deployment serves the Agent Server Model Context Protocol (MCP) endpoint at /mcp. Any MCP client that supports the Streamable HTTP transport can call the deployed agent as a tool, so another assistant or agent can delegate work to it without calling the deployment API directly. This page covers how to find the Managed Deep Agents URL and authenticate. For protocol behavior and generic Agent Server client setup, see MCP endpoint in Agent Server.
Managed Deep Agents is in public beta and available on LangSmith Cloud in the US region only.
The endpoint is the outbound direction. An MCP connector points the other way: it adds tools from a remote MCP server to your agent. A deployment can use both.

Find the endpoint URL

The endpoint is /mcp on the deployment’s API URL:
mda deploy prints the LangSmith deployment dashboard URL, not the API URL. Open that dashboard, copy the API URL from the deployment details view, then append /mcp. The local server started by mda dev serves the same endpoint. Append /mcp to the local server URL the CLI prints.

Authenticate requests

The MCP endpoint uses the deployment’s identity configuration, the same as every other route on the deployment. Send the credential that matches the configured mode: For the LangSmith API-key default, the key must belong to the workspace that owns the deployment. A key that is valid for another workspace is rejected. Authentication failures return one of three responses: The local server started by mda dev requires no credential. It grants every caller an unscoped local service principal, so any client on the machine can call /mcp and every other route. Only a deployment enforces the header.
Anyone holding the LangSmith API key can reach the deployment, and an MCP client stores the header in its own configuration. Treat a key added to a client config as a shared secret for the whole workspace.
Supabase identity expects an access token that a person obtains by signing in to your app. An MCP client that stores only static headers cannot mint one, so use the LangSmith API-key default for deployments that MCP clients call.

Understand what the agent exposes

The Agent Server exposes the agent as an MCP tool:
  • Tool name: The agent name set in the agent definition.
  • Tool input schema: The agent’s input schema.
For transport details and other Agent Server MCP behavior, see MCP endpoint in Agent Server.

Add the agent to Claude Code

Register the endpoint as an HTTP MCP server:
Claude Code lists the agent as a tool once the server connects. In a JSON configuration, Claude Code expands ${VAR} in header values, so the key stays in the environment instead of the config file:

Add the agent to another MCP client

Clients that read an mcpServers configuration accept the endpoint and header directly:
A client that accepts only a URL and negotiates OAuth cannot authenticate to the endpoint, which requires a header credential. Configure the header explicitly. Without one, a client may fall back to OAuth and report a Dynamic Client Registration failure rather than the missing header, which obscures the real cause.

Call the endpoint from code

Load the agent’s tool through an MCP client library, then pass the tools to a model or another agent:
Read credentials from the environment. Do not hard-code them in client code.

Understand session behavior

Agent Server MCP requests are stateless: separate calls do not share thread state. To retain knowledge across calls, opt in to durable memory. Durable memory is optional and shared by every caller of the deployment. Do not enable it when MCP clients should not influence one another.

When to use the MCP endpoint

Next steps

Agent Server

Explore the runtime that hosts every Managed Deep Agents deployment.

Agent Server MCP

Read the Agent Server MCP protocol reference.

MCP connectors

Add tools from remote MCP servers to the agent.

Identity

Authenticate callers to the deployment.