diff --git a/k8s/librechat/configmap-app.yaml b/k8s/librechat/configmap-app.yaml
index 5ef9721..4db6202 100644
--- a/k8s/librechat/configmap-app.yaml
+++ b/k8s/librechat/configmap-app.yaml
@@ -10,6 +10,9 @@ data:
       allowedDomains:
         - "https://catalog-dev.sttlab.local"
         - "https://customers-dev.sttlab.local"
+        - "https://payments-dev.sttlab.local"
+        - "https://sales-dev.sttlab.local"
+        - "https://workforce-dev.sttlab.local"
         - "https://keycloak.sttlab.local"
     mcpServers:
       catalog-mcp:
@@ -36,6 +39,42 @@ data:
           scope: 'openid mcp-customers-audience kong-token-exchange-broker-audience'
           grant_types_supported: ['authorization_code', 'refresh_token']
           token_endpoint_auth_methods_supported: ['client_secret_post']
+      payments-mcp:
+        type: streamable-http
+        url: https://payments-dev.sttlab.local/payments-mcp
+        oauth:
+          authorization_url: https://keycloak.sttlab.local/realms/classic-models/protocol/openid-connect/auth
+          token_url: https://keycloak.sttlab.local/realms/classic-models/protocol/openid-connect/token
+          client_id: librechat
+          client_secret: '${LIBRECHAT_OIDC_CLIENT_SECRET}'
+          redirect_uri: https://librechat.sttlab.local/api/mcp/payments-mcp/oauth/callback
+          scope: 'openid mcp-payments-audience kong-token-exchange-broker-audience'
+          grant_types_supported: ['authorization_code', 'refresh_token']
+          token_endpoint_auth_methods_supported: ['client_secret_post']
+      sales-mcp:
+        type: streamable-http
+        url: https://sales-dev.sttlab.local/sales-mcp
+        oauth:
+          authorization_url: https://keycloak.sttlab.local/realms/classic-models/protocol/openid-connect/auth
+          token_url: https://keycloak.sttlab.local/realms/classic-models/protocol/openid-connect/token
+          client_id: librechat
+          client_secret: '${LIBRECHAT_OIDC_CLIENT_SECRET}'
+          redirect_uri: https://librechat.sttlab.local/api/mcp/sales-mcp/oauth/callback
+          scope: 'openid mcp-sales-audience kong-token-exchange-broker-audience'
+          grant_types_supported: ['authorization_code', 'refresh_token']
+          token_endpoint_auth_methods_supported: ['client_secret_post']
+      workforce-mcp:
+        type: streamable-http
+        url: https://workforce-dev.sttlab.local/workforce-mcp
+        oauth:
+          authorization_url: https://keycloak.sttlab.local/realms/classic-models/protocol/openid-connect/auth
+          token_url: https://keycloak.sttlab.local/realms/classic-models/protocol/openid-connect/token
+          client_id: librechat
+          client_secret: '${LIBRECHAT_OIDC_CLIENT_SECRET}'
+          redirect_uri: https://librechat.sttlab.local/api/mcp/workforce-mcp/oauth/callback
+          scope: 'openid mcp-workforce-audience kong-token-exchange-broker-audience'
+          grant_types_supported: ['authorization_code', 'refresh_token']
+          token_endpoint_auth_methods_supported: ['client_secret_post']
     endpoints:
       custom:
         # kong-v2's platform-llm proxy (not the old kube/llms/openrouter lab)