An astronaut overseeing a futuristic data hub
Download PDFMarkdown Version

Connect PiLAB to ChatGPT, Claude and Gemini

Set it up once and it works in ChatGPT, Claude, Cursor, and any other client you love. It all runs safely in the background, so you can relax and focus on what really matters. Manage VMs and security policies through natural conversation.

Ask AI about this Connector

Developed, maintained, and hosted by Vinkius.

MCP VERIFIED · PRODUCTION READY · VINKIUS GUARANTEED

Waiting for input…

Works with modern AI clients that support MCP, including ChatGPT, Claude, Cursor, and more.

ChatGPTClaudeCursorPerplexityGeminiMicrosoft CopilotRaycastMeta AI

Your AI does the work. We keep it safe and sound.

No other AI tool gives you this. Your workflow runs in the client you already love, your account stays protected, and you decide what the agent can and cannot do. It is the whole reason to make the switch.

Each Connector lives inside our infrastructure, the same place where your workflow runs. The three things below are already part of it, working quietly in the background so you never have to think about them. Nothing to add, nothing to set up, nothing to worry about.

A futuristic MCP client docking bay
V8 Isolate01

Each Connector runs inside its own sealed environment.

Each Connector runs inside its own sealed V8 runtime — no access to your files, your system, or other servers. A Connector never sees past its own request.

Kill Switch02

One switch stops every agent. Instantly.

One action deactivates every Connector, revokes every token, and ends every session at once. AI Governance keeps the record.

FinOps per User03

Spending limits that pause instead of surprise.

Every user keeps their own connections and credentials, isolated from everyone else. Anything that would cross your spending limit is held for your approval, not billed.

Three controls, built into the layer your AI connects through.

Curated set · 12 capabilities

We ship only the actions that matter.

Capability set01 / 03

01-04

4 capabilities in this set.

Part of 12 available through PiLAB.

  1. 01

    Get vm details

    Retrieves specific hardware and configuration data for a single virtual machine.

  2. 02

    List certificates

    Fetches a list of all TLS/SSL certificates currently managed by PiTrust.

  3. 03

    List hosts

    Returns a list of all available PiVirt virtualization hosts.

  4. 04

    List active sessions

    Provides a list of all currently active user sessions within the 3SO identity system.

Capability set02 / 03

05-08

4 capabilities in this set.

Part of 12 available through PiLAB.

  1. 05

    List oauth clients

    Shows all OAuth 2.0 clients registered in the 3SO system.

  2. 06

    List virtual machines

    Lists all virtual machines across the PiVirt environment, with an option to filter by host ID.

  3. 07

    Control vm

    Executes lifecycle commands like start, stop, restart, pause, or resume on a specific VM.

  4. 08

    Get host details

    Provides detailed information about a specific PiVirt host.

Capability set03 / 03

09-12

4 capabilities in this set.

Part of 12 available through PiLAB.

  1. 09

    Get oauth client

    Fetches the configuration and details for a specific OAuth 2.0 client.

  2. 10

    Introspect token

    Validates an OAuth 2.0 access token to check its expiry and associated scopes.

  3. 11

    List access policies

    Retrieves the list of configured ZeroTrust access policies in PiTrust.

  4. 12

    Get certificate details

    Returns the full metadata and chain information for a specific certificate.

Real work

What teams actually run

01

Rapid VM Recovery

A DevOps engineer tells the agent to restart a stalled VM instead of logging into a management console.

02

Certificate Expiry Monitoring

A security analyst asks the agent to identify all TLS certificates expiring within the next month.

03

OAuth Troubleshooting

An architect uses the agent to introspect a specific access token to debug permission issues.

04

Identity Auditing

An IT admin checks active user sessions in 3SO to verify current authentication activity.

Automate a task

Put PiLAB to work on one thing.

Step-by-step automations your AI runs through this Connector: the workflow, the prompts to start with, and the exact capabilities behind each move.

One connector, every AI

PiLAB works with the most popular AI clients.

These are the most popular clients, each with a step-by-step guide: one link, set up once, with governance and visibility built in. And because everything runs on the MCP standard, the same connection also works in any other compatible client — nothing to rebuild.

ClaudeClaudeChatGPTChatGPTGeminiGeminiPerplexityPerplexityGrokGrokMicrosoft CopilotMicrosoft CopilotCursorCursorVS CodeVS CodeWindsurfWindsurfJetBrainsJetBrainsClineClineLangChainLangChainVercel AI SDKVercel AI SDKLovableLovableZ.aiZ.aiRaycastRaycastQwen CodeQwen CodeKimi CodeKimi CodeLe ChatLe Chat

Building your own app? The connector is yours to use.

You don't need a client to put PiLAB to work: the same hosted connection plugs into your own applications and agent code, with the same governance on every request. Build with it, chat with it — one connection for both.

Observed, not estimated

929ms average. Fast in production.

PiLAB is checked daily against the live service.

Daily averagePeak 1165ms
Oct 3Today
Fastest day
722ms
Slowest day
1165ms
14-day trend
Stable+1%

Connect your client

One URL. Every client.

Activate the Connector, copy your link, and paste it into the client you already use. 12 capabilities arrive ready to run.

Preview access · not provider authentication

The vk_preview_* token belongs to Vinkius preview infrastructure. It lets Claude discover and display the capabilities of PiLAB, so you can see the experience inside your AI.

It does not authenticate your account with PiLAB. Actions requiring credentials or live account data may not run until you activate the Connector and authorize the service.

PiLAB Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_iVEAhkTURIdQXYKBTK9hoOvL4teobdypKfkwNzpe/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — PiLAB capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "pilab-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_iVEAhkTURIdQXYKBTK9hoOvL4teobdypKfkwNzpe/mcp"
    }
  }
}
  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Step-by-step instructions for each client are in the guide. How to connect

Guided setup for Claude? Set up PiLAB in Claude and other AIs

See all the AI clients this connector works with ↑

Who it's for

Built for the work PiLAB owners hand off.

This MCP is built for technical teams managing hybrid infrastructure and ZeroTrust security models.

  • 01

    DevOps Engineers

    They hand off VM lifecycle tasks and host resource checks to the agent.

  • 02

    Security Teams

    They use the agent to audit certificate rotations and verify token validity.

  • 03

    Platform Architects

    They rely on the agent to review OAuth client setups and identity landscapes.

FAQ

Questions PiLAB owners ask.

  • 01

    How do I connect my PiLAB account?

    After subscribing, the setup wizard will guide you through 3 simple steps: 1) Enter your PiLAB Instance Base URL. 2) Enter the Client ID and Client Secret from your PiLAB SSO (3SO) application. 3) Click the Connect with PiLAB button. a popup will open where you approve access via the Shadow SSO authorization flow. That's it! No manual token exchange or curl commands required.

  • 02

    Where do I find the Redirect URI for my PiLAB SSO application?

    When registering your application in the PiLAB SSO admin console, set the Redirect URI to: https://api.vinkius.com/marketplace/oauth/callback. This is the platform's secure callback endpoint that completes the OAuth authorization automatically.

  • 03

    How do I get my Client ID and Client Secret?

    Sign in to your PiLAB SSO admin console at https://sso.pilab.hu/primary/ and navigate to Client Management. Click New Application, give it a name, and set the Redirect URI to https://api.vinkius.com/marketplace/oauth/callback. Save the app and copy the Client ID and Client Secret (the secret is shown only once. copy it immediately).

  • 04

    Can my AI control virtual machines on PiVirt?

    Yes! Use list_virtual_machines to see all VMs, get_vm_details to inspect a specific VM's resources, and control_vm with actions like start, stop, restart, pause, or resume. Your AI can manage the full VM lifecycle from the conversation.

  • 05

    How do I check if a TLS certificate is about to expire?

    Use the list_certificates capability to see all certificates managed by PiTrust with their expiry dates and rotation status. For a specific certificate, use get_certificate_details with the certificate ID to see the full chain and rotation policy.

  • 06

    Do I need to refresh my tokens manually?

    No. The platform automatically refreshes your access token in the background using the 3SO (Shadow SSO) refresh token flow. You only need to click Connect with PiLAB once during setup, and the integration will keep working indefinitely.

  • 07

    What PiLAB products are supported?

    This MCP covers three PiLAB products: PiVirt (KVM virtualization. hosts, VMs, lifecycle control), PiTrust (ZeroTrust. certificates, access policies), and 3SO / Shadow SSO (OAuth 2.0. clients, token introspection, active sessions). The PiLAB platform also includes Hackergate (WAF), which is not yet exposed via this MCP.

Explore

More in Infrastructure

Suggestions

Connect PiLAB to Claude, Cursor, ChatGPT & more