# MCP Allowlist Request - littlebird.ai **URL:** \ **Category:** MCP\ **Created:** [May 17, 2026, 8:37am UTC](https://developer.squareup.com/forums/t/mcp-allowlist-request-littlebird-ai/26125 "2026-05-17T08:37:08Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![raja](https://avatars.discourse-cdn.com/v4/letter/r/9de0a6/32.png) [@raja](https://developer.squareup.com/forums/u/raja)\ **Post date:** [May 17, 2026, 8:37am UTC](https://developer.squareup.com/forums/t/mcp-allowlist-request-littlebird-ai/26125/1 "2026-05-17T08:37:08Z")
Hi Square Team! We’re the engineering team at Littlebird (littlebird.ai) - an AI productivity assistant. We’d love to enable our users to connect their Square accounts and access Square tools (orders, customers, catalog, payments) through your MCP server. **Domain to allow:** `littlebird.ai` **Client name:** `Littlebird` We’ve already verified that `https://mcp.squareup.com/.well-known/oauth-authorization-server` returns 200 and surfaces a `/register` endpoint, but our DCR attempts return a 400 - which we understand is the allowlist gate. Happy to provide any additional info or credentials needed. Thanks! ---
**Author:** ![rsata](https://avatars.discourse-cdn.com/v4/letter/r/57b2e6/32.png) [@rsata](https://developer.squareup.com/forums/u/rsata)\ **Post date:** [May 26, 2026, 5:13pm UTC](https://developer.squareup.com/forums/t/mcp-allowlist-request-littlebird-ai/26125/2 "2026-05-26T17:13:24Z")
@raja all set! Please let us know if you run into any issues. Thanks! ---
**Author:** ![raja](https://avatars.discourse-cdn.com/v4/letter/r/9de0a6/32.png) [@raja](https://developer.squareup.com/forums/u/raja)\ **Post date:** [May 29, 2026, 7:10pm UTC](https://developer.squareup.com/forums/t/mcp-allowlist-request-littlebird-ai/26125/3 "2026-05-29T19:10:16Z")
Hi Square Team, Following up on our approved allowlist request for littlebird.ai - we realized our production redirect URI actually uses a different domain: `app.lilbird.co` Could you also add the following to the allowlist? - `lilbird.co` - `app.lilbird.co` The redirect URI being sent during DCR is: `https://app.lilbird.co/mcp/oauth/callback` Thanks!