ETL: MCP Server

​

Supported clients

​

Endpoint

POST /:account_id/api/mcp

​

Prerequisites

• Reach out to the Integrate.io team to enable this for your account.
• A way to authenticate. You have two options:
  • OAuth browser sign-in (easiest) - supported clients like Claude Code authenticate interactively, no token to manage. See Connecting with OAuth.
  • A Personal Access Token (PAT) - a long-lived bearer token for clients that need a static credential (Claude Desktop manual config, MCP Inspector, curl). The recommended way to mint one is Connected Applications in the dashboard (see Step 1).
• An MCP-capable client. The setup below covers Claude Desktop 0.7.0 or later (0.10 or later for the one-click extension), Claude Code, and the MCP Inspector.

​

Connecting with OAuth (browser sign-in)

claude mcp add --transport http integrateio \
  https://api.xplenty.com/YOUR_ACCOUNT_ID/api/mcp

​

What OAuth grants

• Access is account-wide with the same permissions as the signed-in user - identical in scope to a Personal Access Token.
• Tokens are short-lived and refreshed automatically by the client, so you won’t be prompted again every couple of hours during normal use.
• The connection appears in Settings → Developer Settings → Connected Applications under the client’s name (e.g. “Claude Code”), alongside any Personal Access Tokens, so you can audit and revoke it in one place.

​

Revoking and re-authenticating

• Revoke: open Connected Applications, find the client, and click Revoke. Access stops immediately and the client must authorize again to reconnect.
• Re-authenticate: if you authorize the same client again, the new session replaces the previous one for that client name, so you won’t accumulate duplicate entries in Connected Applications. The consent screen still appears each time; that approval is the security checkpoint and is expected on every authorization.

​

Step 1: Get a Personal Access Token

1. Sign in to your dashboard and navigate to Settings → Developer Settings → Connected Applications. (Direct URL: https://dashboard.xplenty.com/<your-account>/settings/developer/connected_applications) If you don’t see the Connected Applications link in the sidebar, contact Integrate.io support to request access.
2. Click + Create new connection.
3. Give it a recognizable name (e.g. “Claude Desktop on Macbook”) and click Create token.
4. The token is displayed once in a reveal modal. Click Copy before closing the modal. Integrate.io does not store the plaintext token and cannot show it again. If you lose it, revoke the connection and create a new one.

• PATs are account-wide and carry the same permissions as the user who created them.
• There is currently no option to create a read-only PAT or restrict a PAT to a subset of MCP tools. Contact Integrate.io support if you need scoped access.
• PATs have a 10-year lifetime by default. Treat them like passwords: store in a secrets manager, not in plain text.
• Token rotation: revoke the existing connection in Connected Applications and create a new one. Update your MCP client config with the new token.

​

Alternative: OAuth password grant (legacy)

curl -X POST 'https://api.xplenty.com/oauth/token' \
  -H 'Content-Type: application/json' \
  -d '{
    "grant_type": "password",
    "email": "you@your-org.com",
    "password": "your-password"
  }'

{
  "access_token": "ABC123...",
  "token_type": "Bearer",
  "expires_in": 7200,
  "created_at": 1234567890
}

​

Step 2: Configure your MCP client

​

Claude Desktop (one-click extension)

1. In the Integrate.io dashboard, go to Settings → Developer Settings → Connected Applications.
2. In the Quick install for Claude Desktop card, click Download Claude Desktop extension. The browser downloads integrate-io-mcp.mcpb.
3. Open Claude Desktop and go to Settings → Extensions. Drag the downloaded .mcpb file onto that page. Claude Desktop opens the extension install dialog.
4. When prompted:
   • Account Subdomain - your Integrate.io account subdomain or numeric id (the value in your dashboard URL).
   • Personal Access Token - a PAT from Step 1. If you haven’t minted one yet, click + Create new connection on the Connected Applications page first.
5. Click Install, then restart Claude Desktop (fully quit and reopen).

​

Updating or removing the extension

• Update: download the latest .mcpb from the Connected Applications page and drag it onto Settings → Extensions again. The version field in the bundle increments on each release, so Claude Desktop treats it as an update rather than a duplicate. Your subdomain + token entered at first install are preserved.
• Remove: go to Settings → Extensions in Claude Desktop, find Integrate.io in the list, and click the remove/uninstall control. Optionally revoke the underlying Personal Access Token from Connected Applications in the Integrate.io dashboard.

​

Claude Desktop (manual config)

• macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
• Windows: %APPDATA%\Claude\claude_desktop_config.json

{
  "mcpServers": {
    "integrateio": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://api.xplenty.com/YOUR_ACCOUNT_ID/api/mcp",
        "--header",
        "Authorization: Bearer YOUR_ACCESS_TOKEN"
      ]
    }
  }
}

​

Claude Code

claude mcp add --transport http integrateio \
  https://api.xplenty.com/YOUR_ACCOUNT_ID/api/mcp \
  --header "Authorization: Bearer YOUR_ACCESS_TOKEN"

​

MCP Inspector

npx @modelcontextprotocol/inspector

• Transport: Streamable HTTP
• URL: https://api.xplenty.com/YOUR_ACCOUNT_ID/api/mcp
• Headers: Authorization: Bearer YOUR_ACCESS_TOKEN

​

Cursor

​

Other MCP clients

​

Step 3: Verify the connection

List the workspaces in my Integrate.io account.

​

What you can do with it

​

Available tools

​

Account inventory (read-only)

​

Run inspection (read-only)

​

Schedule inspection (read-only)

​

Pipeline diagnostics (read-only)

​

Pipeline mutations (write - agent edits the package itself)

​

Schedule mutations (write)

​

Execution + recovery (write)

​

Safety, audit, and read-only mode

• All MCP-driven changes appear in the PaperTrail audit log.
• Tokens can be revoked instantly from Settings → Developer Settings → Connected Applications.
• No credentials, TLS certificates, or SSL keys are ever returned by any tool.

​

Recommended first prompts

​

Example: Calling a tool with curl

curl -X POST 'https://api.xplenty.com/YOUR_ACCOUNT_ID/api/mcp' \
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN' \
  -H 'Content-Type: application/json' \
  -d '{
    "jsonrpc": "2.0",
    "id": 1,
    "method": "tools/call",
    "params": {
      "name": "list_packages",
      "arguments": { "status": "active", "limit": 10 }
    }
  }'

curl -X POST 'https://api.xplenty.com/YOUR_ACCOUNT_ID/api/mcp' \
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN' \
  -H 'Content-Type: application/json' \
  -d '{
    "jsonrpc": "2.0",
    "id": 2,
    "method": "tools/call",
    "params": {
      "name": "explain_job_failure",
      "arguments": { "run_id": 123456, "log_tail_lines": 100 }
    }
  }'

curl -X POST 'https://api.xplenty.com/YOUR_ACCOUNT_ID/api/mcp' \
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN' \
  -H 'Content-Type: application/json' \
  -d '{
    "jsonrpc": "2.0",
    "id": 3,
    "method": "tools/call",
    "params": {
      "name": "preview_data",
      "arguments": {
        "connection_id": 42,
        "table": "orders",
        "row_count": 20,
        "where_clause": "amount > 1000"
      }
    }
  }'

​

Troubleshooting