Configuring an Agent in PrimeCal
Use this flow to prepare a secure PrimeCal MCP connection for one external MCP host.
Before You Start
- Sign in as
mayblatein a local/demo environment. - Open
More->AI Agents (MCP).
MCP is always available when PrimeCal is deployed and configured. You do not turn MCP on with a feature flag. Access is controlled only by agent profiles, API keys, and permission scope.
Step 1: Create an Agent Profile
- Click
Create agent. - Name it clearly, for example
May.B.Late Chrome MCP. - Add a short description with host and purpose.
Recommended naming pattern:
- Agent name:
<user/workspace> <host> <purpose> - Key label:
<machine or browser>-<date>

Step 2: Scope Permissions (Least Privilege)
Enable only the capabilities that host needs.
Typical starter scope for daily planning assistants:
- Calendar read: list calendars and list events
- Task read/write: list/create/update/delete tasks
- Profile read
- Context snapshot read
Add automation trigger permissions only for rules you trust.

Step 3: Generate and Store an API Key
- Open the
API keyssection. - Click
Generate key. - Copy the plaintext key immediately.
- Store it in your host secret store.
The key is shown once. If lost, revoke and create a new one.

Step 4: Validate With a Safe MCP Call
After host connection, call a low-risk tool first:
primecal.profile.getprimecal.calendars.list
Then continue with read/write tools only after verification.
PrimeCal also provides a generated MCP configuration panel that you can copy into host setup screens.

May.B.Late Demo Expectations
In seeded environments, validation should show:
- calendars named
Work,Personal,Side projects - profile timezone set to
Europe/Budapest - 24-hour time format (
24h)
Profile UI reference:

Rotate and Revoke
- Revoke unused keys immediately.
- Keep one key per host instance.
- Use separate agent profiles for browser vs desktop hosts.