MCP allowlist request — LUMEN / UNCHAINED

Hi Square team,

Please allowlist the OAuth callback below for LUMEN, our private internal AI agent at UNCHAINED.

Redirect URI HTTPS:
app.unchained.co.jp/rest/oauth2-credential/callback

LUMEN accesses our own company’s Square account and is not a public service.

Dynamic client registration returns:
400 invalid_redirect_uri — domain not in allowlist

Could you add this callback to the allowlist?

Thank you.

Hi @kotashiratsuka,

Square now reviews new MCP clients before adding them to the MCP server allowlist, so your request is currently in that queue. I’ll update this thread when there’s a decision.