Open this page on a computer. You add Summo to these apps there, not on your phone.
Connect another AI app to Summo
MCP is how AI apps connect to services like Summo. This is Summo’s server address:
https://mcp.summo.cashApps that support MCP sign-in, such as Claude Code and Codex, add this address and then open Summo’s sign-in page. OpenClaw and Hermes Agent connect with an access code instead.
Apps that sign in
Claude Code
Run:
claude mcp add --transport http summo https://mcp.summo.cashThen run /mcp and choose Summo to sign in.
Codex
Run:
codex mcp add summo --url https://mcp.summo.cashcodex mcp login summoThen, on your phone
The app opens a Summo page with a code.
- 1In the Summo app, tap Enter sign-in code, then type the code or scan it.
- 2Check which app is asking, then approve. Go back to the app, which finishes signing in.
- Summo shows an app it hasn’t checked by its web address, as “an app from example.com”. Connect only apps you trust.
- Left that screen? In the Summo app, go to More, then Connected agents, and tap Enter sign-in code.
- A code works once and expires after 10 minutes. Never enter a code from a sign-in page someone else sent you.
Apps that use an access code
OpenClaw and Hermes Agent don’t open a sign-in page. They connect with an access code from the Summo app.
- 1In the Summo app, tap Enter sign-in code. It is also under More, then Connected agents.
- 2Tap No sign-in page? Get an access code. Name the agent and approve with Face ID.
- 3Add the code to the agent’s settings, as below. The app shows the code only once.
OpenClaw
Set SUMMO_ACCESS_CODE to the access code in the environment OpenClaw runs in, then run:
openclaw mcp set summo '{"url":"https://mcp.summo.cash","transport":"streamable-http","headers":{"Authorization":"Bearer ${SUMMO_ACCESS_CODE}"}}'Hermes Agent
Add to ~/.hermes/config.yaml, with the access code in place of YOUR_ACCESS_CODE:
mcp_servers:
summo:
url: "https://mcp.summo.cash"
headers:
Authorization: "Bearer YOUR_ACCESS_CODE"Then run /reload-mcp in Hermes.
Any other agent
Connect to the server address and send this header on every request:
Authorization: Bearer YOUR_ACCESS_CODE- Anyone with the code can act as that agent, so keep it private.
- There is no sign-in page to scan: you approved the agent when you got its code.
Your AI never holds your keys. Payments are signed on your phone.