# MCP Allowlist Request - Chat with Work

**URL:** <https://developer.squareup.com/forums/t/mcp-allowlist-request-chat-with-work/28229>\
**Category:** MCP\
**Created:** [October 15, 2026, 9:10pm UTC](https://developer.squareup.com/forums/t/mcp-allowlist-request-chat-with-work/28229 "2026-10-15T21:10:44Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![carminepaolino](https://sea1.discourse-cdn.com/square/forums/user_avatar/developer.squareup.com/carminepaolino/32/12394_2.png) [@carminepaolino](https://developer.squareup.com/forums/u/carminepaolino)\
**Post date:** [October 15, 2026, 9:10pm UTC](https://developer.squareup.com/forums/t/mcp-allowlist-request-chat-with-work/28229/1 "2026-10-15T21:10:44Z")

</div>

Hi Square team,

Please allowlist Chat with Work, an EU-hosted private AI assistant run by PlentyLabs UG (haftungsbeschränkt) & Co. KG in Germany, for your remote MCP server.

Client name: Chat with Work  
Homepage: `https://chatwithwork.com`  
Client metadata: `https://chatwithwork.com/oauth/client-metadata.json`

Redirect URIs:  
`https://chatwithwork.com/mcp/oauth/callback`  
`https://staging.chatwithwork.com/mcp/oauth/callback`  
`https://chatwithwork.localhost/mcp/oauth/callback`

We support dynamic client registration and authorization code flow with S256 PKCE. People connect their own Square accounts. Tokens are encrypted per user; Read is the default and every change requires their approval.

If you require a pre-registered client, please advise which flow to use. We can register /square\_authorization/callback on those same origins instead.

Contact: [carmine@paolino.me](mailto:carmine@paolino.me). Thank you!

---

<div class="post-metadata">

**Author:** ![jaeha](https://avatars.discourse-cdn.com/v4/letter/j/ebca7d/32.png) [@jaeha](https://developer.squareup.com/forums/u/jaeha)\
**Post date:** [October 25, 2026, 3:08pm UTC](https://developer.squareup.com/forums/t/mcp-allowlist-request-chat-with-work/28229/3 "2026-10-25T15:08:19Z")

</div>

Hi Carmine,

Thanks for your patience here. I’ve made the request to allowlist your URIs and it usually takes a few days to get completed. Please check back again next week and let us know here if you still don’t have access by the end of next week.