Skip to main content

MCP Server

The Journeybee MCP server lets AI assistants like Claude manage your partners, leads, deals, and more through the Model Context Protocol. There are two ways to connect, both to the same per-region URL — pick by client:
  • OAuth 2.1 — for interactive clients (Claude, ChatGPT, Cursor). Sign in and approve access; no install, no API keys, nothing to run locally.
  • API key — for open-source models, headless runtimes (Ollama, Llama, Mistral, LangChain), and CI. Any MCP-capable client points at the region URL with an Authorization: Bearer header. See Connect with an API key.

Connect the hosted server (OAuth)

The hosted server runs one endpoint per region and authenticates with OAuth 2.1 — you log in with your normal Journeybee account and approve access, so there are no API keys to copy. Use the URL for the region your company’s data lives in:
  1. In your AI client (Claude, ChatGPT, or any MCP-compatible client), add a remote MCP server / custom connector with your region’s URL from the table above.
  2. The client opens Journeybee’s sign-in page. Log in as usual.
  3. On the consent screen, choose which company the connection may access and click Allow.
  4. You’re returned to your client, connected. Tokens refresh automatically; revoke access any time by removing the connector.
Access is scoped to the one company you pick at consent, with the same permissions your account has. Nothing is shared across tenants — and your data never leaves its region.

Connect with an API key (open-source models, headless, CI)

Open-source models and headless runtimes can’t do the browser sign-in, so they connect with a Journeybee API key instead of OAuth. The endpoint is the same — the API key is just sent as the Bearer token. Requirements
  • The API & MCP module (api_mcp) enabled on your company.
  • An API key from Settings > API Keys in app.journeybee.io (see Authentication). Use a Read key for read-only access; a Write key to create and update.
Configure your client Point any MCP-capable client at your region’s /mcp endpoint over Streamable HTTP, with the key in the Authorization header. Most clients accept a config like this:
Use the /mcp path on your region’s host from the table above (https://au.mcp.journeybee.io/mcp for Australia). The same key formats the REST API accepts work here — Authorization: Bearer YOUR_API_KEY or Authorization: Api-Key YOUR_API_KEY. To check connectivity without a client, list the tools directly:
Same guarantees as OAuth: the key is scoped to one company, carries exactly its own Read/Write permission (a read-only key never sees write tools), and reaches only its own region. The only difference is how you obtain the token — a pre-issued key instead of an interactive consent screen.

Architecture

The MCP server is organized into four layers: Total: 23 tools — all 207 API endpoints accessible via discovery, common operations optimized with composites.

Composite tools

Start here. Composites combine multiple API calls into a single, high-level operation with formatted markdown output.

Overview tools (get full entity context)

Workflow tools (multi-step operations)

Access control tools

Discovery tools

For any operation not covered by composites, use the 3 discovery tools to access all 207+ API endpoints:

list_endpoints

Browse all available API endpoints grouped by domain.

get_endpoint_schema

Get the full parameter schema for any endpoint before calling it.
Returns: parameter names, types, required/optional, descriptions.

call_endpoint

Execute any endpoint by operationId.

Naming conventions

OperationIds follow predictable patterns:

Resources

Resources provide read-only configuration data that the AI can reference without making tool calls. Access them through the MCP client’s resource browser.

Dynamic resources (fetched from API)

Static resources (enum values)

Prompts

Select a prompt template from the MCP client for guided workflows:
  • Analyze my pipeline — deal distribution, revenue forecasting
  • Partner quarterly review — partner performance summary
  • Set up a new partner — step-by-step partner creation
  • Create a learning path — certification with resources
  • Find and update — search + modify entities
  • Commission report — commission rules analysis
  • Bulk update leads — batch lead modifications
  • Build a portal room — room creation with blocks
  • Check access settings — room/resource access audit
  • Manage tasks — task creation and assignment

Error handling

When operations fail, the MCP returns actionable error messages:
  • Validation errors list the specific fields that are wrong and suggest using get_endpoint_schema
  • Not found errors suggest using searchEverything to find the entity
  • Conflict errors explain what’s blocking the operation (e.g., “Stage in use by 12 deals”)
  • Auth errors indicate whether your session is missing/invalid or lacks write permission — reconnect or re-authorize the connector
  • Module-disabled errors mean the company’s API & MCP access (api_mcp) is off (every call fails) or a specific feature module is disabled — contact your admin

Markdown support

All text content fields accept markdown. Use markdown for:
  • Notes (lead, deal, partner) — the content field
  • Tasks — the content field
  • Resource text blocks — use the markdown field
  • Room text blocks — use the markdown field
Markdown is converted to rich text automatically. Supports headings, bold, italic, lists, links, code blocks, blockquotes.

Security

  • OAuth 2.1 (Authorization Code + PKCE). Each request carries the caller’s own short-lived token — the server never holds a shared cross-tenant key. Tokens are scoped to the single company chosen at consent and refresh-rotate; revoke by removing the connector.
  • API keys get the same per-request, company-scoped, region-resident guarantees — the only difference is how the token is obtained (a pre-issued key versus an OAuth consent screen), not what it can reach. The server forwards your key to the same regional API as the SDK; it stores no key and shares nothing across tenants.
  • Account permissions apply. The connection has exactly the permissions your Journeybee account has — a read-only account can only reach read tools.
  • Access requires the API & MCP module (api_mcp) on your company — enforced on every /v1 call.
  • Region-resident. Each region runs its own isolated endpoint; you connect your region’s URL and it only reaches that region’s API and database. A company’s data never crosses regions.
  • All data is scoped to your company; the MCP server calls the same public API as the SDK — no additional access, no internal-only tools exposed.
  • Tool annotations indicate read-only, destructive, and idempotent operations.