Skip to main content

Getting Started

Try it without credentials

The Local Sandbox runs the same tools on your machine with test data and no client ID. Start there, then come back here for production.

Prerequisites​

  • Your OAuth client_id, issued individually by the Careem team (request one; public client, PKCE enforced, no client secret needed).
  • An MCP client or library that supports Streamable HTTP transport and OAuth.

Quick-start checklist​

  1. Fetch https://mcp.careemapis.com/.well-known/oauth-protected-resource, then Identity's /.well-known/openid-configuration from the authorization_servers entry, and verify the endpoints.
  2. Implement Authorization Code + PKCE (S256) against Careem Identity; request openid profile offline_access (+ locations if needed). Use a registered callback URL as your redirect_uri.
  3. Point your MCP client at https://mcp.careemapis.com/mcp with transport streamable_http and header Authorization: Bearer <token>.
  4. initialize → tools/list → verify you see the 50 tools in the Tool Catalog.
  5. Wire refresh-token rotation before access-token expiry.
  6. Gate all ⚠️ mutating tools behind explicit user confirmation.

Example client config​

{
  "mcpServers": {
    "careem": {
      "type": "streamable_http",
      "url": "https://mcp.careemapis.com/mcp",
      "headers": {
        "Authorization": "Bearer ${CAREEM_ACCESS_TOKEN}"
      }
    }
  }
}

Next steps​