GOLDSHORE

    GoldShore Integration Registry

    Canonical, copy-ready public values for GoldShore application integrations. This page never publishes client secrets, API tokens, signing secrets, private keys, refresh tokens, or Access service-token values.

    Secret boundary: values ending in _SECRET, _TOKEN,_KEY, or PRIVATE_KEY belong in Cloudflare Worker secrets or the provider's encrypted secret store—not in source, Builder.io, documentation, KV, query strings, or chat.

    Application identity

    Public identifiers used when configuring Cloudflare, GitHub, Google, and MCP clients.

    OrganizationGold Shore Labs
    Repositoryhttps://github.com/marzton/goldshore-ai
    Cloudflare account IDf77de112d2019e5456a3198a8bb50bd2
    Cloudflare Access team domainhttps://goldshore.cloudflareaccess.com
    Admin Access application nameGold Shore Admin Production
    Admin Access application IDfeacb3a3-0896-4590-91c0-3fac2e62d74f
    Cloudflare OAuth client nameGoldShore Secret Sync
    Cloudflare OAuth client ID91d893bc7f74869c9913d3820d0697f2
    Cloudflare OAuth publisher ID94a68f151cb5ee9c6e761629716bccdc
    Google OAuth client ID1054833139648-gt5o3k9uqhltt08nne0sigh8l3vodji7.apps.googleusercontent.com

    Canonical application URLs

    Use these origins for app homepages, allowed origins, documentation links, and API clients.

    Public application URLhttps://goldshore.ai
    Organization URLhttps://goldshore.org
    Admin originhttps://admin.goldshore.ai
    Admin dashboardhttps://admin.goldshore.ai/app/dashboard
    API originhttps://api.goldshore.ai
    API healthhttps://api.goldshore.ai/health
    API readinesshttps://api.goldshore.ai/ready
    Agent originhttps://agent.goldshore.ai
    Agent MCP endpointhttps://agent.goldshore.ai/mcp
    Canonical MCP originhttps://mcp.goldshore.ai
    Canonical MCP endpointhttps://mcp.goldshore.ai/mcp
    Developer hubhttps://goldshore.ai/developer/
    Developer documentationhttps://goldshore.ai/developer/docs/

    OAuth and login callbacks

    Redirect URIs are exact values. Do not add wildcards, trailing paths, or substitute an admin page for a callback.

    Cloudflare Access IdP callbackhttps://goldshore.cloudflareaccess.com/cdn-cgi/access/callback
    GitHub OAuth callbackhttps://api.goldshore.ai/auth/github/callback
    GoldClaw Google callbackhttps://api.goldshore.ai/goldclaw/oauth/google/callback
    Google Business Profile callbackhttps://api.goldshore.ai/admin/google/oauth/callback
    Schwab callbackhttps://trading.goldshore.ai/oauth/schwab/callback
    Robinhood callbackhttps://trading.goldshore.ai/oauth/robinhood/callback
    Post-login admin destinationhttps://admin.goldshore.ai/app/dashboard

    Cloudflare Access SAML IdP

    Values parsed from the signed Cloudflare metadata document. The service provider must sign authentication requests.

    Entity ID / Issuerhttps://goldshore.cloudflareaccess.com/14fe63cce321f681a596e04ca0ac0df291d09587a51c0188063f390b2c7eb85d
    SSO URL (HTTP-Redirect)https://goldshore.cloudflareaccess.com/cdn-cgi/access/sso/saml/14fe63cce321f681a596e04ca0ac0df291d09587a51c0188063f390b2c7eb85d
    SSO URL (HTTP-POST)https://goldshore.cloudflareaccess.com/cdn-cgi/access/sso/saml/14fe63cce321f681a596e04ca0ac0df291d09587a51c0188063f390b2c7eb85d
    Single logout URLhttps://goldshore.cloudflareaccess.com/cdn-cgi/access/logout
    Name ID formaturn:oasis:names:tc:SAML:1.1:nameid-format:unspecified
    Authentication requests signedtrue
    Signing algorithmRSA-SHA256
    Metadata certificate valid until2035-11-05T19:46:45.000Z

    Webhook endpoints

    Configure only the event-specific endpoint needed by the provider. Every production webhook must use its matching signature secret.

    GitHub pushhttps://api.goldshore.ai/webhooks/github/push
    GitHub pull requestshttps://api.goldshore.ai/webhooks/github/pull_request
    GitHub issueshttps://api.goldshore.ai/webhooks/github/issues
    GitHub workflow runshttps://api.goldshore.ai/webhooks/github/workflow_run
    Stripehttps://api.goldshore.ai/webhooks/stripe
    Googlehttps://api.goldshore.ai/webhooks/google
    Cloudflarehttps://api.goldshore.ai/webhooks/cloudflare

    MCP client values

    The canonical transport is Streamable HTTP behind Cloudflare Access. Prefer mcp.goldshore.ai for new clients; agent.goldshore.ai remains an API alias.

    Server namegoldshore-mcp
    Transportstreamable-http
    Server URLhttps://mcp.goldshore.ai/mcp
    Authorization headerBearer ${MCP_GOLDSHORE_TOKEN}
    Token environment variableMCP_GOLDSHORE_TOKEN
    Access client ID headerCF-Access-Client-Id
    Access client secret headerCF-Access-Client-Secret

    MCP client example

    Copy this template, then provide the bearer token through the named environment variable.

    [mcp_servers."mcp.goldshore.ai"]
url = "https://mcp.goldshore.ai/mcp"
bearer_token_env_var = "MCP_GOLDSHORE_TOKEN"