ETL: MCP Server

​

Verified clients

​

Endpoint

​

Prerequisites

• Reach out to the Integrate.io team to enable this for your account.
• A way to authenticate. You have two options:
  • OAuth browser sign-in (easiest) - supported clients like Claude Code authenticate interactively, no token to manage. See Connecting with OAuth.
  • A Personal Access Token (PAT) - a long-lived bearer token for clients that need a static credential (Claude Desktop manual config, MCP Inspector, curl). The recommended way to mint one is Connected Applications in the dashboard (see Step 1).
• An MCP-capable client. The setup below covers Claude Desktop 0.7.0 or later (0.10 or later for the one-click extension), Claude Code, and the MCP Inspector.

​

Connecting with OAuth (browser sign-in)

claude mcp add --transport http integrateio \
  https://api.xplenty.com/YOUR_ACCOUNT_ID/api/mcp

​

What OAuth grants

• Access is account-wide with the same permissions as the signed-in user - identical in scope to a Personal Access Token.
• Tokens are short-lived and refreshed automatically by the client, so you won’t be prompted again every couple of hours during normal use.
• The connection appears in Settings → Developer Settings → Connected Applications under the client’s name (e.g. “Claude Code”), alongside any Personal Access Tokens, so you can audit and revoke it in one place.

​

Revoking and re-authenticating

• Revoke: open Connected Applications, find the client, and click Revoke. Access stops immediately and the client must authorize again to reconnect.
• Re-authenticate: if you authorize the same client again, the new session replaces the previous one for that client name, so you won’t accumulate duplicate entries in Connected Applications. The consent screen still appears each time; that approval is the security checkpoint and is expected on every authorization.

​

Step 1: Get a Personal Access Token

1. Sign in to your dashboard and navigate to Settings → Developer Settings → Connected Applications. (Direct URL: https://dashboard.xplenty.com/<your-account>/settings/developer/connected_applications) If you don’t see the Connected Applications link in the sidebar, contact Integrate.io support to request access.
2. Click + Create new connection.
3. Give it a recognizable name (e.g. “Claude Desktop on Macbook”) and click Create token.
4. The token is displayed once in a reveal modal. Click Copy before closing the modal. Integrate.io does not store the plaintext token and cannot show it again. If you lose it, revoke the connection and create a new one.

• PATs are account-wide and carry the same permissions as the user who created them.
• There is currently no option to create a read-only PAT or restrict a PAT to a subset of MCP tools. Contact Integrate.io support if you need scoped access.
• PATs have a 10-year lifetime by default. Treat them like passwords: store in a secrets manager, not in plain text.
• Token rotation: revoke the existing connection in Connected Applications and create a new one. Update your MCP client config with the new token.

​

Alternative: OAuth password grant (legacy)

curl -X POST 'https://api.xplenty.com/oauth/token' \
  -H 'Content-Type: application/json' \
  -d '{
    "grant_type": "password",
    "email": "you@your-org.com",
    "password": "your-password"
  }'

{
  "access_token": "ABC123...",
  "token_type": "Bearer",
  "expires_in": 7200,
  "created_at": 1234567890
}

​

Step 2: Configure your MCP client

​

Claude Desktop (one-click extension)

1. In the Integrate.io dashboard, go to Settings → Developer Settings → Connected Applications.
2. In the Quick install for Claude Desktop card, click Download Claude Desktop extension. The browser downloads integrate-io-mcp.mcpb.
3. Open Claude Desktop and go to Settings → Extensions. Drag the downloaded .mcpb file onto that page. Claude Desktop opens the extension install dialog.
4. When prompted:
   • Account Subdomain - your Integrate.io account subdomain or numeric id (the value in your dashboard URL).
   • Personal Access Token - a PAT from Step 1. If you haven’t minted one yet, click + Create new connection on the Connected Applications page first.
5. Click Install, then restart Claude Desktop (fully quit and reopen).

​

Updating or removing the extension

• Update: download the latest .mcpb from the Connected Applications page and drag it onto Settings → Extensions again. The version field in the bundle increments on each release, so Claude Desktop treats it as an update rather than a duplicate. Your subdomain + token entered at first install are preserved.
• Remove: go to Settings → Extensions in Claude Desktop, find Integrate.io in the list, and click the remove/uninstall control. Optionally revoke the underlying Personal Access Token from Connected Applications in the Integrate.io dashboard.

​

Claude Desktop (manual config)

• macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
• Windows: %APPDATA%\Claude\claude_desktop_config.json

{
  "mcpServers": {
    "integrateio": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://api.xplenty.com/YOUR_ACCOUNT_ID/api/mcp",
        "--header",
        "Authorization: Bearer YOUR_ACCESS_TOKEN"
      ]
    }
  }
}

​

Claude Code

claude mcp add --transport http integrateio \
  https://api.xplenty.com/YOUR_ACCOUNT_ID/api/mcp \
  --header "Authorization: Bearer YOUR_ACCESS_TOKEN"

​

MCP Inspector

npx @modelcontextprotocol/inspector

• Transport: Streamable HTTP
• URL: https://api.xplenty.com/YOUR_ACCOUNT_ID/api/mcp
• Headers: Authorization: Bearer YOUR_ACCESS_TOKEN

​

Cursor

​

ChatGPT (custom connector)

https://api.xplenty.com/YOUR_ACCOUNT_ID/api/mcp

​

OpenAI Codex

[mcp_servers.integrateio]
command = "npx"
args = [
  "-y",
  "mcp-remote",
  "https://api.xplenty.com/YOUR_ACCOUNT_ID/api/mcp",
  "--header",
  "Authorization: Bearer YOUR_ACCESS_TOKEN"
]

​

Any other MCP client

https://api.xplenty.com/YOUR_ACCOUNT_ID/api/mcp

• Native remote (Streamable HTTP) support: point the client straight at the endpoint URL. No bridge needed.
• Local / stdio only: run the mcp-remote bridge in front of the URL, exactly as the Claude Desktop, Cursor, and Codex examples above do. mcp-remote turns the remote HTTP endpoint into the local stdio server these clients expect.

• Supports OAuth: add the server with no credentials and let the client run browser sign-in. It self-registers and stores its own tokens, see Connecting with OAuth. This is the same flow Claude Code and ChatGPT use.
• Needs a static credential: create a Personal Access Token (see Step 1) and send it as an Authorization: Bearer YOUR_ACCESS_TOKEN header. For stdio clients, pass it through mcp-remote with --header as shown in the Codex snippet.

​

Step 3: Verify the connection

List the workspaces in my Integrate.io account.

​

What you can do with it

​

Available tools

​

Account inventory (read-only)

​

Run inspection (read-only)

​

Schedule inspection (read-only)

​

Pipeline diagnostics (read-only)

​

Pipeline mutations (write - agent edits the package itself)

​

Schedule mutations (write)

​

Execution + recovery (write)

​

Safety, audit, and read-only mode

• All MCP-driven changes appear in the PaperTrail audit log.
• Tokens can be revoked instantly from Settings → Developer Settings → Connected Applications.
• No credentials, TLS certificates, or SSL keys are ever returned by any tool.

​

Inline secret redaction in get_package

• Values under keys whose name matches a secret pattern (password, token, api_key, client_secret, authorization, and similar).
• The value side of { name, value } header pairs when the name side names a credential header (Authorization, X-API-Key, apikey, and similar). Non-credential headers like Content-Type are preserved.
• URL userinfo credentials (https://user:pass@host).
• URL query-string secret parameters (?api_key=..., &token=..., and similar).
• Bearer and Basic tokens of 8 or more characters found anywhere in a string value.

{
  "url": "https://api.example.com/export?api_key=[REDACTED]",
  "username": "demo_user",
  "password": "[REDACTED]",
  "headers": [
    { "name": "Authorization", "value": "[REDACTED]" },
    { "name": "Content-Type", "value": "application/json" }
  ]
}

​

Recommended first prompts

​

Example: Calling a tool with curl

curl -X POST 'https://api.xplenty.com/YOUR_ACCOUNT_ID/api/mcp' \
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN' \
  -H 'Content-Type: application/json' \
  -d '{
    "jsonrpc": "2.0",
    "id": 1,
    "method": "tools/call",
    "params": {
      "name": "list_packages",
      "arguments": { "status": "active", "limit": 10 }
    }
  }'

curl -X POST 'https://api.xplenty.com/YOUR_ACCOUNT_ID/api/mcp' \
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN' \
  -H 'Content-Type: application/json' \
  -d '{
    "jsonrpc": "2.0",
    "id": 2,
    "method": "tools/call",
    "params": {
      "name": "explain_job_failure",
      "arguments": { "run_id": 123456, "log_tail_lines": 100 }
    }
  }'

curl -X POST 'https://api.xplenty.com/YOUR_ACCOUNT_ID/api/mcp' \
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN' \
  -H 'Content-Type: application/json' \
  -d '{
    "jsonrpc": "2.0",
    "id": 3,
    "method": "tools/call",
    "params": {
      "name": "preview_data",
      "arguments": {
        "connection_id": 42,
        "table": "orders",
        "row_count": 20,
        "where_clause": "amount > 1000"
      }
    }
  }'

curl -X POST 'https://api.xplenty.com/YOUR_ACCOUNT_ID/api/mcp' \
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN' \
  -H 'Content-Type: application/json' \
  -d '{
    "jsonrpc": "2.0",
    "id": 4,
    "method": "tools/call",
    "params": {
      "name": "preview_transformation",
      "arguments": {
        "package_id": 12345,
        "component_name": "clean_orders"
      }
    }
  }'

​

Troubleshooting