Integrations

Ways to give Minnow capabilities it does not ship with, and to connect it to things outside itself. All of these live under Settings → Integrations.

MCP servers

The Model Context Protocol is a standard for exposing tools to an AI client. Any MCP server you add contributes its tools to Minnow, named mcp__<server>__<tool>.

Context7 ships enabled by default. It fetches up-to-date documentation for libraries, which is the fix for a model confidently using an API that changed two versions ago. It works without a key; adding one raises your rate limits.

Under Settings → Integrations → MCP servers, paste a standard JSON configuration and choose Add servers:

{
  "mcpServers": {
    "cloudflare-api": { "url": "https://mcp.cloudflare.com/mcp" },
    "linear": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://mcp.linear.app/mcp"]
    }
  }
}

You can also give this configuration to an agent and ask it to add the servers. Agents can use the new tools in the same task. Configurations can be saved directly in ~/.minnow/mcp.json using the same mcpServers object; existing Minnow server configurations remain supported.

Adding a server approves its tools. MCP tools are available across modes and agents without per-tool permission prompts. Disable or remove the server to stop access.

Remote servers support Streamable HTTP and legacy SSE ("type": "sse"). Local servers accept command, args, env, and optional cwd; remote servers accept url and optional headers. Local commands must be installed and available on your PATH.

When a remote server requires OAuth, choose Sign in and complete the provider’s login in your browser. Minnow handles discovery, dynamic client registration, PKCE, and token refresh, with tokens encrypted locally. Servers that need a registered client can include an oauth object with clientId, optional clientSecret, scope, or clientMetadataUrl. Service accounts can specify grantType: "client_credentials" in that object. Command-based bridges such as mcp-remote manage their own provider login and credential storage.

Language servers

Real language intelligence in the Code editor: diagnostics, hover, signature help, go to definition, workspace symbols.

Enabled by default and bundled: TypeScript/JavaScript, Pyright, HTML, CSS, GraphQL, YAML, Bash, Dockerfile.

Available but off until you enable them, because they need the toolchain installed: Rust Analyzer, gopls, clangd, Lua, Terraform, Zig.

Configure under Settings → Integrations → Language servers. The agent gets get_lsp_diagnostics, so “fix the type errors” can be grounded in what the language server actually reports rather than what the model guesses. On a board with worktree isolation, language servers are started per checkout so diagnostics match the code that task is editing.

Browser automation

Minnow has two browser surfaces. The visible preview uses the Electron Chromium view; the isolated Agent Browser uses a server-owned headless Chrome, Edge, Brave, or Chromium session. The browser_* tools cover navigation, snapshots, clicks, fills, screenshots, evaluation, and tab management on either surface.

Use surface: "agent" for private work: call browser_reserve_tab first, keep the returned tab_id, and pass it explicitly to every later action. Agent browser_list shows only tabs owned by that run. Use surface: "user" only when you intentionally want the visible preview; list or create a tab, then pass its explicit tab_id. A tab id does not grant control over another agent’s tab, and an agent should not navigate or close tabs it does not own. Release a finished agent tab for inspection or reassignment, or close it to release its browser resources.

Agent Browser tabs use disposable session profiles, do not restore between sessions, allow up to 8 tabs per service, and close popup/page targets. The service does not download a browser; install Chrome, Edge, Brave, or Chromium, or set MINNOW_BROWSER_PATH. browser_screenshot can capture an Agent Browser tab even when its viewer is closed. Open the viewer from the browser sidebar button; Watch, Guide, and Take control are deliberate user controls. The viewer can assign or unassign a tab, close one tab, or clear all tabs. Closing the viewer leaves the service running; quitting Minnow shuts it down.

Both surfaces use the browser navigation allowlist. Localhost is allowed by default. For a new external origin, use the structured ask_question flow and then request_browser_origin_access before retrying navigation; unattended Agent Browser work cannot approve its own blocked origin. The preview tools require the Electron desktop app, while Agent Browser actions are server-dispatched and need Minnow’s local server.

Settings → Integrations → Browser:

The allowlist starts at localhost only. Anything else has to be added, or approved when the agent asks. The restoreBrowserTabs setting applies to the visible preview; Agent Browser sessions are disposable.

The /browser-automation skill has the recipes.

Web search

Settings → Integrations → Search sets the provider for web_search.

A fallback chain — Tavily, Brave, DuckDuckGo — covers the primary failing. Result count and API keys are set here.

Settings → Integrations → Servers manages the local processes Minnow runs for you: SearXNG (auto-starts) and llama-cpp (on demand). Enable, auto-start and port for each.

Dev servers

Registered per project and managed from the Code app’s dev-server screen: command, working directory, port, auto-start, and which git worktree to run in. Logs and listening ports in one view.

The manage_dev_servers tool gives the model the same controls — list, create, update, delete, start, stop, restart. See Code.

Webhooks

Settings → Integrations → External sends HTTP POSTs when things happen in Minnow.

Subscribable events:

Deliveries are HMAC-signed so your receiver can verify them, time out after 10 seconds, and retry three times with backoff. Outgoing URLs are checked against SSRF — you cannot point a webhook at internal network addresses.

Useful for wiring a scheduled job’s result into Slack, or logging completions somewhere central.

Native plugins

Tool plugins register as plugin__<tool>. Like MCP, they bypass the mode allowlist and are governed by your permission settings. Authoring guide: the plugin documentation in the repository.

Document handling

Reading and writing PDF, Word and Excel is built in rather than an integration, but it is worth knowing it exists:

• read_document extracts text from PDFs and office files, either from disk or from a composer attachment.
• create_pdf, create_spreadsheet and create_word_document write real binary files. PDF text uses subsetted fonts covering Latin, Cyrillic, Greek, CJK and emoji.
• The file viewer previews PDFs inline and renders spreadsheets and Word documents as sanitized HTML in a locked-down sandbox.

Related

• Tools and permissions
• Privacy and security
• Code app
• Settings app