ZCode MCP server for Shopify, HubSpot and 100+ business tools

Add PopMCP as an HTTP server under Settings, then MCP Servers, and authorize it with OAuth. ZCode's agent can then read real orders, contacts, issues and analytics while it works on your code. No headers, and no keys.

https://app.popmcp.com/mcp

Connect PopMCP to ZCode See the setup steps

Steps checked against Z.ai's documentation on 12 October 2026

Connect ZCode to PopMCP

Add it in the settings form, or import it from an agent you already set up. Both end with the same PopMCP sign-in.

Add PopMCP in ZCode's settings

ZCode has a form for this. Choose User to have PopMCP in every workspace, or Workspace for the current project only.

Sign in at app.popmcp.com, connect the tools you want ZCode to reach, and check each one shows as Verified.
In ZCode, go to Settings, then MCP Servers, and click New MCP Server in the upper right.
Set the scope, name it PopMCP, set Type to HTTP and enter the URL below as the service URL. Leave Headers and Environment variables empty: PopMCP signs in with OAuth, not a static key.
Service URL
```
https://app.popmcp.com/mcp
```
Click Add, then confirm PopMCP shows as enabled under Configured MCP servers.
When the row shows Open authorization, click it and sign in to PopMCP. Tick only the connectors ZCode should reach. ZCode's docs note that it never opens a browser window on its own.
Ask ZCode to run list_connections, then start with a read-only request.
Try this prompt
```
Run list_connections and tell me which tools you can use.
```

In ZCode, Settings then MCP Servers has New MCP Server in the upper right. Set Type to HTTP, enter the URL, and leave Headers empty. Drawn from ZCode's MCP docs, not a screenshot. Your layout may differ.

ZCode docs: MCP

Import PopMCP from another agent

If PopMCP is already set up in Claude Code, the Codex CLI or OpenCode, ZCode can read that config and add the server for you.

In ZCode, go to Settings, then MCP Servers, and click the Import icon in the top right.
ZCode scans ~/.claude/settings.json, ~/.codex/config.toml, ~/.config/opencode/opencode.json and ~/.agents/mcp.json, and lists the servers it finds. Select popmcp and choose a scope.
The imported server is enabled by default and saved to ZCode's own config. Click Open authorization on its row and approve the PopMCP consent screen. The original file is left unchanged.
Ask ZCode to run list_connections, then start with a read-only request.
Try this prompt
```
Run list_connections and tell me which tools you can use.
```

What you send, in order. Drawn from the steps beside it, not a screenshot.

ZCode docs: MCP

The short answer

ZCode, Z.ai's desktop coding app, supports the Model Context Protocol (MCP) for local and remote servers: you add a remote server with type HTTP and its URL under Settings, then MCP Servers, and authorize it with OAuth. PopMCP is a hosted MCP server that puts 100+ business tools behind one URL, https://app.popmcp.com/mcp, so one entry reaches every tool you connect in PopMCP. You choose which connectors ZCode may use on the PopMCP consent screen.

What to ask ZCode

ZCode calls PopMCP's tools, PopMCP reads your connected accounts, and the answer comes back in the chat. The tool names are the real ones ZCode calls.

ZCodePopMCP connected

Compare our Postman collection with what a HubSpot contact actually returns.

PopMCP, 2 tool calls

postman_get_collectionThe contacts collection and its example responsesread
hubspot_contacts_getOne live contact with all propertiesread

Ask ZCode about your tools

The reply is drawn as bars on purpose: the figures come from your own accounts, so this page does not make any up.

More to paste into ZCode

Show me a HubSpot contact with every property we use.
Pull three recent Shopify orders so I can type the order model.
List the Stripe products and prices this checkout should offer.

PopMCP's consent screen. Tick only the connections ZCode should reach, then Authorize. Drawn from PopMCP's own consent screen, not a screenshot. Your layout may differ.

You decide what ZCode can reach

That is set in PopMCP, not in ZCode. The sign-in ends on a consent screen that lists your connections.

OAuth sign-in, no API keys: ZCode signs in to PopMCP with OAuth 2.1. There is nothing to paste, and your Shopify or Stripe credentials stay encrypted inside PopMCP.
You pick the connectors: The consent screen lists your connections. ZCode reaches only the ones you tick.
Read-only where you want it: A workspace owner or admin sets each teammate to no access, read, or read and write, per connection.
Every call is on the record: Usage shows each request by user, connector and tool. Removing someone's access applies on the next request.

Where PopMCP works in ZCode

Each row is one place ZCode runs, and what its vendor says about adding a remote MCP server there.

Where	Remote MCP	How it signs in
ZCode, added in SettingsSettings, then MCP Servers	Supported	OAuth, from the Open authorization button
ZCode, imported from another agentThe Import icon on MCP Servers	Supported	Reads Claude Code, Codex CLI and OpenCode configs

Before you connect ZCode

Four details from ZCode's docs worth knowing before you start.

You start the sign-in yourself: ZCode's docs say it never opens a browser window on its own. After you add PopMCP, look for the Open authorization button on its row under Settings, then MCP Servers.
User scope or Workspace scope: A User server is saved to ~/.zcode/cli/config.json and applies to every workspace. A Workspace server is saved to .zcode/config.json in the project root and applies to that project only.
PopMCP sits beside the plugin servers: Servers you add appear under Configured MCP servers, where you can edit, disable or delete them. Servers installed by plugins are listed separately and managed by the plugin.
Writes run when ZCode calls them: PopMCP does not hold a write for approval. Keep connections read-only until you need a write, and give a coding agent only the connectors the task needs.

Questions about ZCode and PopMCP

Answered from Z.ai's documentation, checked on 12 October 2026.

Does ZCode support remote MCP servers?

Yes. ZCode's MCP settings take stdio servers and remote HTTP or SSE servers. For a remote server that does not take a static key, you authorize it with OAuth from the server's row.

How do I add an MCP server to ZCode?

Go to Settings, then MCP Servers, and click New MCP Server. Name it PopMCP, set Type to HTTP, enter https://app.popmcp.com/mcp as the service URL and click Add. Then click Open authorization on its row and sign in to PopMCP.

Do I need to add headers or environment variables?

No. PopMCP signs ZCode in with OAuth 2.1, so the Headers and Environment variables sections stay empty and there is no API key to store.

Can I paste a JSON config instead of using the form?

Yes. ZCode's New MCP Server dialog has a Full configuration mode that accepts JSON, either as a server-name object or under an mcpServers key.

I already use PopMCP in Claude Code or Codex. Do I have to set it up again?

No. Click the Import icon on the MCP Servers page. ZCode reads the Claude Code, Codex CLI and OpenCode config files and lists their servers, so you can import PopMCP and authorize it.

Which of my tools can ZCode reach?

Only the connectors you tick on the PopMCP consent screen. A workspace owner or admin can also set each teammate to no access, read, or read and write per connection.

Sources

3 references, checked 12 October 2026

Every step on this page comes from these sources. Community sources are labelled, and we used them only where the vendor has not documented a step.

ZCode docs: MCPThe Settings, MCP Servers, New MCP Server path, the form's scope, name, type, headers and environment sections, Full configuration mode, the Open authorization button, the Import feature and the config file locations.zcode.z.ai
Model Context Protocol: AuthorizationThe MCP OAuth 2.1 flow, with PKCE, protected resource metadata and dynamic client registration, that PopMCP implements.modelcontextprotocol.io
PopMCP docs: ZCodeThe form values PopMCP documents for ZCode: type HTTP, the service URL, and empty headers.docs.popmcp.com