# Install Candor in Grok Bot

This guide applies when the user asks to connect Candor. Read it together with
[START](https://candor.money/START.md?v=0.1.47), which owns the boundary and consent
rules: Candor is your own financial memory, the `candor-finance` skill is
static operating guidance and grants no access by itself, browser OAuth is not
bank or broker OAuth, no Candor tool can move money, and credentials never go
in chat. Every install and OAuth step is visible before it takes effect; once
setup is complete, use Candor quietly. Pause for browser OAuth, for any step
only the user can perform in their app, and before replacing an existing
Candor configuration.

Grok Bot runs on its own cloud computer with a browser, filesystem, and
terminal, and it connects only to remote MCP servers reachable over the public
internet. Candor's MCP server is public, so the complete route is the skill
plus the remote MCP server, and the Bot can do all of it itself. The catalog at
`https://api.candor.money/agents/candor/bootstrap.json` lists every material.

## Install

1. Fetch the skill into your computer:
   `git clone https://github.com/candorsystems/candor-finance`, or download
   the skill ZIP listed in the catalog. Load `skills/candor-finance/SKILL.md`
   and keep its `methods/` and `references/` directories beside it; the skill
   links to them just in time.
2. Add the MCP server with your MCP tool: name `candor`, URL
   `https://api.candor.money/mcp`, no headers, no client id or secret.
3. Authenticate it. Candor opens its consent page and the user chooses
   **Allow and continue**. Wait for that; do not ask the user to paste
   anything back.

If Candor is listed under **Settings > Plugins > Marketplace**, that plugin
carries the skill and the MCP server together; prefer it and connect through
it.

Update later by pulling the clone, or by downloading the ZIP again when the
catalog's digest changes; the MCP server entry needs no change.

## Finish

1. Call `candor_open`. Setup is verified only when it returns the workspace
   opening or a precise Candor `action_required` step.
2. Continue into the user's finance task as START describes.

Grok Bot requires SuperGrok Plus or Heavy or an eligible Cursor plan.
Passwords, one-time codes, and payment steps belong to the user through the
agent computer handoff, never in chat; Candor's OAuth needs none of them.

Current platform references:

- https://docs.x.ai/grok-bot/get-started
- https://docs.x.ai/grok-bot/computer-and-apps
- https://docs.x.ai/grok-bot/approvals-security-and-privacy
- https://cursor.com/help/grok-bot/connect-plugins