Stable Baseline

---

How to use Stable Baseline

Pick the surface that matches how you work. Every option talks to the same handlers, the same auth and the same data:

Surface	What it's for	Install
MCP server	AI agents (Claude Code, Cursor, Windsurf, ChatGPT, Gemini, Smithery, …). Native protocol with prompts and resources.	Endpoint: api.stablebaseline.io/functions/v1/cloud-serve/mcp. See Quick start below.
REST API	Any HTTP client, Postman, OpenAPI codegen, Zapier-style integrators. Tool-RPC + idiomatic resource routes.	Live spec: /api/v1/openapi.json · Interactive docs: /api/v1/docs
TypeScript SDK	Node, browsers, Deno, Bun. Typed client.tools.<toolName>(...) surface.	npm i @stablebaseline/sdk, see packages/sdk-typescript
CLI (sb)	Shells, scripts, CI/CD. sb tool call <name> --json '{...}'.	npm i -g @stablebaseline/cli, see packages/cli
Python SDK	Python apps, data work. Sync + async clients.	pip install stablebaseline, see packages/sdk-python

222 tools across 20 categories. Same brain, same Knowledge Graph, same RBAC on every surface.

---

One workspace where humans and any MCP-compatible AI agent (Claude Code, Cursor, Windsurf, VS Code, Warp, OpenCode, Antigravity, OpenAI Codex, ChatGPT Developer Mode, Gemini CLI/Extensions and more) co-author living documents (Markdown-native with a rich superset on top), 40+ visual diagrams (Mermaid, BPMN 2.0, D2, PlantUML, GraphViz, cloud architecture, sequence, state, ERD, Gantt, freehand sketches), databases with views, forms and live dashboards, plans, timelines, tasks, improvements, the organisation's own agents, and a self-learning Knowledge Graph that IS the company brain.

Lean, fast, secure and affordable: flexible enough for one person organising a personal mind, through to small businesses, growing businesses and enterprise.

222 MCP tools across 20 categories let an agent drive end-to-end: sign-up → billing → org/workspace/project → members → teams → permissions → brain scope → docs → diagrams → whiteboards → plans → databases → agents, all without a human touching the UI.

Endpoint

https://api.stablebaseline.io/functions/v1/cloud-serve/mcp

Transport: Streamable HTTP (with SSE fallback) Auth: OAuth 2.1 with Dynamic Client Registration, or Bearer API key (sta_*) Discovery manifest: https://stablebaseline.io/.well-known/mcp.json

Quick start

Create an API key (skip OAuth)

1. Sign up free, no credit card
2. Open Organisation settings, Connected apps, Developers, then the API keys tab, and press Create Key. Choose what it may reach; databases start unticked, so tick them if your agent should use databases
3. Copy the sta_... key

(Or skip this: every client below also supports interactive OAuth on first call.)

Claude Desktop

Edit ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):

{
  "mcpServers": {
    "stable-baseline": {
      "url": "https://api.stablebaseline.io/functions/v1/cloud-serve/mcp",
      "headers": {
        "Authorization": "Bearer sta_YOUR_KEY"
      }
    }
  }
}

Or use the Claude Desktop OAuth flow: set just url and Claude will prompt you to authorise on first call.

Claude Code

claude mcp add --transport http stable-baseline \
  https://api.stablebaseline.io/functions/v1/cloud-serve/mcp \
  --header "Authorization: Bearer sta_YOUR_KEY"

Or via OAuth:

claude mcp add --transport http stable-baseline \
  https://api.stablebaseline.io/functions/v1/cloud-serve/mcp

For skills that teach Claude Code the workflows (documents, diagrams, whiteboards, databases, dashboards and agents), install the Stable Baseline plugin for Claude Code.

Cursor

~/.cursor/mcp.json:

{
  "mcpServers": {
    "stable-baseline": {
      "url": "https://api.stablebaseline.io/functions/v1/cloud-serve/mcp",
      "headers": { "Authorization": "Bearer sta_YOUR_KEY" }
    }
  }
}

Windsurf

~/.codeium/windsurf/mcp_config.json:

{
  "mcpServers": {
    "stable-baseline": {
      "serverUrl": "https://api.stablebaseline.io/functions/v1/cloud-serve/mcp",
      "headers": { "Authorization": "Bearer sta_YOUR_KEY" }
    }
  }
}

VS Code (Copilot Chat)

.vscode/mcp.json (workspace) or user settings:

{
  "servers": {
    "stable-baseline": {
      "type": "http",
      "url": "https://api.stablebaseline.io/functions/v1/cloud-serve/mcp",
      "headers": { "Authorization": "Bearer ${input:sta_key}" }
    }
  }
}

Other clients

Recipes for Warp, OpenCode, Antigravity, OpenAI Codex, ChatGPT Developer Mode, Gemini CLI/Extensions, and a generic recipe are at stablebaseline.io/docs/mcp/setup.

What you get

Category	Sample tools	Docs
navigation	listOrganisations, getProjectHierarchy, searchTools	→
folders	createFolder, listFolders, setPlanItemParent	→
documents	createDocument, editDocument, exportDocument	→
diagrams	insertDiagramInDocument, listDiagramTypes, getCdmdLanguageGuide	→
whiteboards	createWhiteboard, addWhiteboardElements, designDeckInWhiteboard	→
images	createImageUploadSession, insertImageInDocument	→
data	createVegaDataUploadSession (CSV/JSON/TSV → Vega charts)	→
improvements	createImprovement, searchImprovements, addImprovementEvidence	→
plans	createPlan, createPlanPhase, previewTaskDependencyCascade	→
databases	createDatabase, queryDatabaseRows, saveDatabaseDashboard	→
agents	listAgents, delegateToAgent, approveAgentAction	→
knowledge_graph	kg_search, kg_get_entity, kg_related_documents	→
organization	createOrganisation, createWorkspace, createProject	→
members	inviteMember, updateMemberRole, setMemberActive	→
teams	createTeam, grantTeamWorkspaceAccess	→
permissions	upsertResourcePermission, setResourcePermissionOverride	→
billing	previewSubscriptionChange, applySubscriptionChange, purchaseCreditPackage	→
kg_admin	setKgWorkspaceScope, triggerKgRebuild, previewKgRebuild	→
settings	getOrgSettings, updateOrgFeatureFlags, createBrandKit	→
signup	startSignup, pollSignupStatus	→

Full live catalogue: stablebaseline.io/docs/mcp/tools

Highlights

• End-to-end agent-managed: agents drive sign-up → billing → org/workspace/project lifecycle → members → teams → permissions → Knowledge Graph scope. No human touching the UI.
• Living documents: AI-native rich-text editor (CDMD = Markdown + inline diagrams, data tables, media, version history, real-time multi-author edits), with PDF and Word export.
• Visual diagram creation & editing: 40+ types, AI-generated, diagram-as-code, or freehand.
• Databases: tables of typed fields with views, row rules, forms and live dashboards. Import CSV or Excel, and get counts, totals and groups in one call.
• Agents: the organisation's own AI workers, each with a mandate, scoped access and approvals. Ask one or delegate a job from any MCP client, follow the run, decide its proposals, and undo a whole job.
• Plans, timelines, tasks, improvements & bugs: Day/Week/Month/Quarter/Year zoom Gantt, drag-to-reschedule, dependency cascades.
• Self-learning Knowledge Graph (Enterprise): auto-built from every doc, plan, improvement and database record; read by every connected agent. Stops hallucinations around gaps. Run one brain workspace-wide, one per department, or one per project, with RBAC end to end.
• Compliance Readiness (Enterprise): scans against OWASP ASVS, NIST SSDF, CIS Controls, ISO 27001, SOC 2, TISAX. Readiness only: not legal advice, not an attestation.
• Bring your own agent, no lock-in: any MCP-compatible client.
• Credit-cost preview ritual for every spending operation: previewX → confirm token → applyX.

Auth

Method	When to use
OAuth 2.1 + Dynamic Client Registration	Default for desktop apps and IDE extensions. Smithery handles it automatically.
Bearer API key (sta_...)	CI/CD, headless agents, server-to-server. Create one under Organisation settings, Connected apps, Developers (app.stablebaseline.io/settings/developers). Scope it to a workspace, project or folder, or let it reach the whole organisation.

OAuth endpoints:

• authorize: https://api.stablebaseline.io/functions/v1/cloud-serve/oauth/authorize
• token: https://api.stablebaseline.io/functions/v1/cloud-serve/oauth/token
• register (DCR): https://api.stablebaseline.io/functions/v1/cloud-serve/oauth/register
• Scopes: openid, profile, email, phone. These identify the signed-in user and do NOT decide what an agent may do: authorisation comes from the read/write/delete permissions per content type and the organisation capability toggles chosen on the consent screen.
• Authoritative metadata (always prefer this over the list above): https://api.stablebaseline.io/functions/v1/cloud-serve/.well-known/oauth-authorization-server

Discovery

Surface	URL
.well-known/mcp.json (manifest)	https://stablebaseline.io/.well-known/mcp.json
Official MCP Registry	https://registry.modelcontextprotocol.io/v0/servers?search=io.stablebaseline
Smithery	https://smithery.ai/servers/stablebaseline/sb-mcp
llms.txt	https://stablebaseline.io/llms.txt
robots.txt	https://stablebaseline.io/robots.txt
sitemap.xml	https://stablebaseline.io/sitemap.xml
security.txt	https://stablebaseline.io/.well-known/security.txt

Pricing

• Free: A$0, no credit card. AI runs through your organisation's own AI provider account.
• Plus: A$39 a month (excl. GST), with 300 credits a month.
• Pro: A$79 per user a month (excl. GST), with 500 credits per user a month.
• Enterprise: custom. Adds the Knowledge Graph, Compliance Readiness and audit logs. Contact.

Every limit, plan by plan: stablebaseline.io/pricing.

Status

• 🟢 MCP Registry: io.stablebaseline/sb, active, isLatest. Listed.
• 🟢 Smithery: published with configSchema (Quick Setup). The live server lists 222 tools, 11 prompts and 8 resources.
• 🟢 .well-known/mcp.json: live, schema 2025-06-18.
• 🟢 Endpoint: api.stablebaseline.io/functions/v1/cloud-serve/mcp accepts POST with mcp-protocol-version: 2025-06-18.

Issues & support

• Bug or feature request: open an issue here.
• Security report: see .well-known/security.txt (the RFC 9116 contact).
• General support: https://stablebaseline.io/contact

License

This repository (README, llms-install.md, brand assets, and any documentation) is licensed under the MIT License, see LICENSE. You can copy, fork, and adapt these docs freely.

The Stable Baseline product itself (the SaaS application, the MCP server implementation and the company brain Knowledge Graph) is proprietary, closed-source and provided as a service at https://stablebaseline.io under the Stable Baseline Terms of Service.

---

Built by Orixian Solutions Pty Ltd, Sydney, Australia.