diff --git a/k8s/librechat/configmap-app.yaml b/k8s/librechat/configmap-app.yaml
index 33dfbeb..5ef9721 100644
--- a/k8s/librechat/configmap-app.yaml
+++ b/k8s/librechat/configmap-app.yaml
@@ -9,6 +9,7 @@ data:
     mcpSettings:
       allowedDomains:
         - "https://catalog-dev.sttlab.local"
+        - "https://customers-dev.sttlab.local"
         - "https://keycloak.sttlab.local"
     mcpServers:
       catalog-mcp:
@@ -23,6 +24,18 @@ data:
           scope: 'openid mcp-catalog-audience kong-token-exchange-broker-audience'
           grant_types_supported: ['authorization_code', 'refresh_token']
           token_endpoint_auth_methods_supported: ['client_secret_post']
+      customers-mcp:
+        type: streamable-http
+        url: https://customers-dev.sttlab.local/customers-mcp
+        oauth:
+          authorization_url: https://keycloak.sttlab.local/realms/classic-models/protocol/openid-connect/auth
+          token_url: https://keycloak.sttlab.local/realms/classic-models/protocol/openid-connect/token
+          client_id: librechat
+          client_secret: '${LIBRECHAT_OIDC_CLIENT_SECRET}'
+          redirect_uri: https://librechat.sttlab.local/api/mcp/customers-mcp/oauth/callback
+          scope: 'openid mcp-customers-audience kong-token-exchange-broker-audience'
+          grant_types_supported: ['authorization_code', 'refresh_token']
+          token_endpoint_auth_methods_supported: ['client_secret_post']
     endpoints:
       custom:
         # kong-v2's platform-llm proxy (not the old kube/llms/openrouter lab)