Configure and verify authenticated Parallel MCP connections. The first supported setup path is Parallel Search MCP through Bifrost; the steps below apply to that path. Tool descriptions supplied by the MCP server govern search and fetch usage; this skill covers installation and gateway configuration.

Identify the target Bifrost instance, its configuration source (dashboard or ), and the intended downstream agent or virtual key. Inspect existing MCP clients before changing anything; update the matching Parallel connection instead of adding duplicates. Preserve unrelated clients, access rules, and tool approval settings.

Confirm access to Bifrost management and a Parallel account credential. These are separate from the downstream agent's Bifrost credential. If access or a secret is missing, prepare the configuration and report what is needed without claiming installation succeeded. Keep secrets in the deployment's secret manager or environment; never put them in skill files, source control, prompts, or tool arguments.

Use , which requires authentication. Choose Headers auth for a shared Parallel API key, or Bifrost's OAuth flow when that is the deployment's chosen authentication method. Do not change an authentication failure into an unauthenticated connection.

For shared-key configuration, provision in the Bifrost server environment with the complete value . The reference substitutes the whole header value; it does not prepend .

In MCP Gateway → New MCP Server, choose HTTP, the URL above, and Headers auth. Set to the environment-variable reference using the UI's env-var picker. Allow and for this connection.

For a file-managed deployment, merge this client entry into the existing array:

{
  "name": "parallel-search",
  "connection_type": "http",
  "connection_string": "https://search.parallel.ai/mcp-oauth",
  "auth_type": "headers",
  "headers": {
    "Authorization": "env.PARALLEL_MCP_AUTHORIZATION"
  },
  "is_ping_available": false,
  "tools_to_execute": ["web_search", "web_fetch"]
}

For OAuth, use the same endpoint with Bifrost's OAuth auth type and complete its admin verification/sign-in flow. Use per-user authentication only when each caller should use their own Parallel account. See Bifrost authentication for the chosen flow.

Respect the deployment's reload procedure. Existing connection URL/auth-type changes may require replacing the client because Bifrost treats those fields as immutable; plan that replacement without deleting a working client first. File-managed entries must be updated in the file as well, or a restart can recreate the old configuration.

Keep Parallel’s defaults by omitting search-setting headers and URL parameters. When the user explicitly requests a particular search mode, source policy, or response budget, read gateway search controls. Apply these as upstream connection settings. Keep the chosen credential and search policy under gateway administration; do not enable caller-supplied overrides of these headers unless explicitly intended.

Confirm Bifrost discovers both tools and grants the intended downstream client or virtual key access to them. Connect the agent to the deployment's Bifrost MCP gateway with its configured downstream authentication. Use the actual discovered tool names, which may be prefixed. Installing this skill does not itself register or expose the MCP tools.

On a 401/403, check the Parallel credential, account access, and upstream auth configuration. On a handshake 400, check the configured search overrides. For missing tools, inspect connection health and gateway filtering. Keep existing access controls while diagnosing failures.

In Skills Repository → New Skill, copy this file's name and description into Details, paste only the Markdown body into the SKILL.md editor, and attach . For an existing skill, create a new version. Publish an initial version such as , then use Register as Marketplace and the dashboard's installation commands; the plugin name is .

Bifrost serves newly created skills immediately and documents marketplace/download routes as public. Keep deployment credentials and private configuration out of published files. Skill publication is separate from MCP connection setup.