Skip to main content

Adding Custom Remote Connectors

Connect Perplexity to external data sources and tools using MCP remote connectors

Written by Emilio Morales
Updated over a month ago

Custom remote connectors let you extend Perplexity by connecting it to additional data sources and tools beyond the built-in (first-party) connectors. With the Model Context Protocol (MCP), you can integrate Perplexity with virtually any compatible service, whether it runs locally on your machine or on a remote server.

Adding Custom Remote Connectors

Organization members can add custom remote connectors if admins enable them for the organization.

How you add a remote connector depends on whether an admin adds it for the entire organization or a user (including admins) adds it for their own account.

In both cases, the steps are largely the same. The main difference is that only admins can share connectors with the entire organization.

Hot to Add a Remote Connector

  1. Navigate to the correct settings page:

    • For your account: Account settings → Connectors

    • For the organization (admins only): Enterprise settings → PermissionsConnectors permissions

  2. Click + Custom connector in the top-right corner.

  3. In the modal pop-up, select Remote.

  4. Fill in the required fields:

    • Name — A display name for your connector (e.g., "Acme CRM").

    • MCP Server URL — The URL of the remote MCP server (e.g., https://myapp.com/sse). HTTPS is required.

  5. Optionally, fill in these additional fields:

    • Description — A short explanation of what the connector does.

    • Authentication — Choose between OAuth, API Key, or None (see the Authentication section below).

    • Transport — Choose between Streamable HTTP or SSE.

    • Icon — Choose an icon for the connector. Note: Maximum image size is 128 KB.

  6. Check the acknowledgement box to confirm you understand the risks of custom connectors.

  7. Click Add. The connector will appear in the Connectors screen in your Account settings.

  8. Click the connector card to start the authentication flow and enable it. To modify or remove the connector later, click the ellipsis (⋮) and choose the appropriate option.

Organization-wide connectors added by admins may not appear right away for other organization members.

The connector creator must share the connector with the organization from the Permissions screen in Enterprise settings before others can access it.

Authentication Options

Remote custom connectors support three authentication methods:

  • None — No authentication required. The MCP server is accessible without credentials.

  • API Key — Authenticate using a static API key provided during setup.

  • OAuth 2.0 — Authenticate using the OAuth 2.0 protocol. You may need to supply a Client ID and Client Secret if the MCP server does not support dynamic client registration. If the server supports OAuth discovery (via /.well-known/oauth-authorization-server), endpoints and scopes can be detected automatically.

For organization-scoped connectors with OAuth, an admin can authenticate once on behalf of the entire organization, or require each member to authenticate individually.

 

Custom connector OAuth redirect URL

When you create an OAuth application in an external system for a custom connector, the callback/redirect path is always /rest/connections/oauth_callback.

The redirect URL to register is: https://www.perplexity.ai/rest/connections/oauth_callback

For organizations on the Enterprise subdomain, use: https://enterprise.perplexity.ai/rest/connections/oauth_callback

Cloudflare Access (Network access)

If your remote MCP server sits behind Cloudflare Access, you can authenticate Perplexity to your zero-trust edge before any application-layer auth runs. This is configured through the new Network access dropdown on the + Custom connector form.

Add custom connector modal with Network access set to Cloudflare Access, showing the CF-Access-Client-Id and CF-Access-Client-Secret fields

What admins can do

  • Add a remote MCP server that lives behind Cloudflare Access by selecting Cloudflare Access in the new Network access dropdown on the + Custom connector form.

  • Paste in their CF-Access-Client-Id and CF-Access-Client-Secret (both required) — Perplexity injects those headers on every request, including the create-time verification probe, so a bad token fails immediately instead of silently later.

  • Stack this with normal app-layer authentication (OAuth, API Key, or None) — for example, PayPal’s pilot uses Cloudflare Access headers and OAuth together.

  • Header values are stored encrypted and redacted in the UI, following the same handling path as other connector secrets.

Sharing and Permissions

Custom connectors can be scoped in two ways:

  • Individual — The connector is private to the user who created it. Only that user can see and use it.

  • Organization — The connector is shared with all organization members (remote connectors only). Only admins can share connectors organization-wide.

Admin Controls

Organization admins have additional management capabilities:

  • Allow members to add custom connectors — Use this toggle to control whether non-admin members can add their own remote custom connectors. This is disabled by default.

  • Add organization-wide remote connectors — Add remote connectors that are shared with the entire organization.

These settings are accessible from Enterprise settings → Connectors under the Connector permissions section.

Security Considerations

Custom connectors introduce additional risks because Perplexity cannot verify third-party MCP servers or guarantee answer quality. Keep the following in mind:

  • Only use connectors from sources you trust. Perplexity is not responsible for issues caused by custom connectors.

  • Remote MCP server URLs must use HTTPS.

  • Users can edit or delete only their own connectors. Admins can manage organization-wide connectors.

  • If server validation fails during setup, the connector will show an error tag with a message prompting you to reconfigure it.

  • Admins should review member-added connectors and restrict or remove any that pose a security risk.