MCP Server
The Journeybee MCP server lets AI assistants like Claude manage your partners, leads, deals, and more through the Model Context Protocol. There are two ways to connect, both to the same per-region URL — pick by client:- OAuth 2.1 — for interactive clients (Claude, ChatGPT, Cursor). Sign in and approve access; no install, no API keys, nothing to run locally.
- API key — for open-source models, headless runtimes (Ollama, Llama,
Mistral, LangChain), and CI. Any MCP-capable client points at the region URL
with an
Authorization: Bearerheader. See Connect with an API key.
Connect the hosted server (OAuth)
The hosted server runs one endpoint per region and authenticates with OAuth 2.1 — you log in with your normal Journeybee account and approve access, so there are no API keys to copy. Use the URL for the region your company’s data lives in:- In your AI client (Claude, ChatGPT, or any MCP-compatible client), add a remote MCP server / custom connector with your region’s URL from the table above.
- The client opens Journeybee’s sign-in page. Log in as usual.
- On the consent screen, choose which company the connection may access and click Allow.
- You’re returned to your client, connected. Tokens refresh automatically; revoke access any time by removing the connector.
Connect with an API key (open-source models, headless, CI)
Open-source models and headless runtimes can’t do the browser sign-in, so they connect with a Journeybee API key instead of OAuth. The endpoint is the same — the API key is just sent as the Bearer token. Requirements- The API & MCP module (
api_mcp) enabled on your company. - An API key from Settings > API Keys in app.journeybee.io (see Authentication). Use a Read key for read-only access; a Write key to create and update.
/mcp endpoint over Streamable
HTTP, with the key in the Authorization header. Most clients accept a config
like this:
/mcp path on your region’s host from the table above
(https://au.mcp.journeybee.io/mcp for Australia). The same key formats the REST
API accepts work here — Authorization: Bearer YOUR_API_KEY or
Authorization: Api-Key YOUR_API_KEY.
To check connectivity without a client, list the tools directly:
Architecture
The MCP server is organized into four layers:
Total: 23 tools — all 207 API endpoints accessible via discovery, common operations optimized with composites.
Composite tools
Start here. Composites combine multiple API calls into a single, high-level operation with formatted markdown output.Overview tools (get full entity context)
Analytics & search
Workflow tools (multi-step operations)
Access control tools
Discovery tools
For any operation not covered by composites, use the 3 discovery tools to access all 207+ API endpoints:list_endpoints
Browse all available API endpoints grouped by domain.
get_endpoint_schema
Get the full parameter schema for any endpoint before calling it.
call_endpoint
Execute any endpoint by operationId.
Naming conventions
OperationIds follow predictable patterns:Resources
Resources provide read-only configuration data that the AI can reference without making tool calls. Access them through the MCP client’s resource browser.Dynamic resources (fetched from API)
Static resources (enum values)
Prompts
Select a prompt template from the MCP client for guided workflows:- Analyze my pipeline — deal distribution, revenue forecasting
- Partner quarterly review — partner performance summary
- Set up a new partner — step-by-step partner creation
- Create a learning path — certification with resources
- Find and update — search + modify entities
- Commission report — commission rules analysis
- Bulk update leads — batch lead modifications
- Build a portal room — room creation with blocks
- Check access settings — room/resource access audit
- Manage tasks — task creation and assignment
Error handling
When operations fail, the MCP returns actionable error messages:- Validation errors list the specific fields that are wrong and suggest using
get_endpoint_schema - Not found errors suggest using
searchEverythingto find the entity - Conflict errors explain what’s blocking the operation (e.g., “Stage in use by 12 deals”)
- Auth errors indicate whether your session is missing/invalid or lacks write permission — reconnect or re-authorize the connector
- Module-disabled errors mean the company’s API & MCP access (
api_mcp) is off (every call fails) or a specific feature module is disabled — contact your admin
Markdown support
All text content fields accept markdown. Use markdown for:- Notes (lead, deal, partner) — the
contentfield - Tasks — the
contentfield - Resource text blocks — use the
markdownfield - Room text blocks — use the
markdownfield
Security
- OAuth 2.1 (Authorization Code + PKCE). Each request carries the caller’s own short-lived token — the server never holds a shared cross-tenant key. Tokens are scoped to the single company chosen at consent and refresh-rotate; revoke by removing the connector.
- API keys get the same per-request, company-scoped, region-resident guarantees — the only difference is how the token is obtained (a pre-issued key versus an OAuth consent screen), not what it can reach. The server forwards your key to the same regional API as the SDK; it stores no key and shares nothing across tenants.
- Account permissions apply. The connection has exactly the permissions your Journeybee account has — a read-only account can only reach read tools.
- Access requires the API & MCP module (
api_mcp) on your company — enforced on every/v1call. - Region-resident. Each region runs its own isolated endpoint; you connect your region’s URL and it only reaches that region’s API and database. A company’s data never crosses regions.
- All data is scoped to your company; the MCP server calls the same public API as the SDK — no additional access, no internal-only tools exposed.
- Tool annotations indicate read-only, destructive, and idempotent operations.