Grok Bot

Ask the bot to connect with a single-use pairing code.

Use a one-time pairing code from Connections → Access keys. Paste only the setup message, not a key. The agent must keep its returned key in private credential storage; if it cannot do that, do not connect using a chat credential.

Paste into the chat

Pair with Hark: POST https://harkstudio.io/api/v1/pair { "code": "<8-character pairing code>" } without authentication. This code works once within 15 minutes. Store the returned access_key privately; never repeat it in chat or logs. Connect to https://harkstudio.io/mcp using that stored credential, then call list_workspaces.

The setup message never contains an access key. New pairing code makes a fresh code; Regenerate key stops the old key immediately. Pair only with agents that can store credentials privately.

xAI's remote MCP does not support require_approval, so writes run without a confirmation step. Start with a read-only Hark token (Connections → Tokens) and switch to read + write once you trust the flow.

Grok Build and Grok Bot carry no separate app identity, so Hark labels their activity from the connection: OAuth connections show as Grok Build or Grok, and token-based runs show the token's name — name the token Grok so the activity log reads clearly.

Verify it works

Ask your client: "List my Hark workspaces." Expected: your workspace names.

Then: "Create a project called Connection test in <workspace>." Expected: a new V-### appears in the app and the activity log shows the source ("via Claude Code", "via Codex", etc.). Delete the test venture afterward.

Troubleshooting

"Unauthorized request origin" — the client origin isn't allowlisted; retry from the latest app version, or email hello@harkstudio.io.
Consent screen loops / stale token — remove the connector in the client, sign out of Hark, sign back in, re-add the connector.
Tools list is empty — the connector isn't enabled for this chat (Claude and ChatGPT require enabling it per conversation).
Plan cap error — you've hit the monthly agent-call cap for this workspace; see billing.
Old endpoint — anything pointing at a lovable.app URL must be updated to harkstudio.io/mcp.

What Hark keeps clear

Evidence on every line

Every record shows Agreed / Observed / Proposed and a source you can open: where did this come from? Agreed means accepted, not independently verified. Observed is reserved for system evidence such as a merged pull request. An agent's claim is never shown as verified simply because it was accepted.

Learn more

Repo-native rules

Once linked and selected as the source, the repo's CLAUDE.md or AGENTS.md is authoritative. Hark mirrors it on pushes and retains history rather than authoring competing edits. Optional .hark/ export carries accepted handoff state and decisions into the repo. Repo activity suggests drafts with commit evidence. Agent briefs include mirrored instruction documents and linked repo metadata. Arbitrary repo-document browsing is not exposed by the current tools: Hark never serves source code. Automatic session hooks and compaction protection in the Hark mod are Claude Code-only; other tools follow their connection guide and explicit session tools.

Learn more

Scoped, expiring agent access

New agent keys default Propose: suggest changes, never approve them. An eight-character pairing code expires after 15 minutes and works once; no key is pasted into a setup chat. One-link agent approval asks you to sign in, choose permissions, projects and expiry, then approve. The agent still completes pairing. Keys normally expire after 90 days and can be revoked or rotated. The separate show-once Copy key path is for private storage, not chat.

Learn more