Serve MCP Documentation
How to connect Serve MCP to Claude and other MCP-compatible AI clients, what each integration can do, and how your data is protected.
What is Serve MCP?
Serve MCP is a hosted Model Context Protocol (MCP) server platform. You connect your business tools — Shopify, GitHub, Klaviyo, a UniFi network, and more — to a Serve MCP workspace. We give you a single hosted MCP endpoint URL and a bearer token; paste those into Claude, Cursor, or any MCP-compatible client, and your AI assistant can immediately call tools against your connected services.
Quick start
- Create a Serve MCP account and a workspace.
- From your workspace, go to Connections and add a service (e.g. Shopify, Klaviyo, UniFi). You'll authorize it via OAuth or by entering an API key/credential, depending on the service.
- Go to MCP Endpoint in your dashboard to get your endpoint URL and generate a bearer token.
- Paste the URL and token into your AI client's MCP configuration (examples below).
Connecting your AI client
Step-by-step for each client: the setup guide covers Claude on web, desktop, mobile and Claude Code, plus ChatGPT and Cursor. On Claude you paste one URL and sign in — no token needed. The config below is for clients that read a JSON file.
Your endpoint URL is workspace-specific and looks like https://servemcp.com/api/mcp/your-workspace. Every request must include your bearer token in the Authorization header.
A ?token= query parameter also works, but treat it as a last resort for clients that cannot set headers. URLs are written to web server and CDN access logs in plaintext and can leak through the Referer header, so a token sent this way should be considered exposed — revoke and replace it once the client is fixed.
Claude Desktop (claude_desktop_config.json) / Cursor (.cursor/mcp.json)
{
"mcpServers": {
"serve-mcp": {
"url": "https://servemcp.com/api/mcp/your-workspace",
"transport": "http",
"headers": {
"Authorization": "Bearer <YOUR_TOKEN>"
}
}
}
}Testing with curl
curl -X POST https://servemcp.com/api/mcp/your-workspace \
-H "Authorization: Bearer <YOUR_TOKEN>" \
-H "Content-Type: application/json" \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/list","params":{}}'Both the endpoint URL and a token generator are available on the MCP Endpoint page inside your workspace dashboard — you never need to construct or copy them from anywhere else.
Available integrations
Each integration exposes a curated set of tools — never a generic API passthrough. Tools are individually enabled per connection, and every tool is annotated as read-only or write so your AI client (and you) always know what it can do before calling it.
Cisco Meraki
Every read in the Meraki Dashboard API, across every product line. No write tools exist.
DigitalOcean
The whole DigitalOcean account, at the same depth as DigitalOcean's own MCP server.
Klaviyo
The deepest connector here: an entire email and SMS programme, readable end to end.
GitHub
The same reach GitHub's own MCP server has, on a token you issue and can revoke.
WordPress
Diagnose and maintain a WordPress site over SSH, WP-CLI and the REST APIs.
Meta (Facebook & Instagram)
Facebook Pages, Instagram and Meta Ads behind a single connection.
Microsoft Azure
The core-infrastructure slice of Azure Resource Manager, on your own tenant's consent.
Stripe
Read your Stripe account freely; move money only with the amount typed back.
Perfex CRM
Your CRM's clients, invoices and tickets in front of an assistant -- without the outbound email surprises.
Loops
Loops' whole API as named, individually toggleable tools -- not one generic execute().
3CX
Ask your phone system what happened, without logging into the PBX.
WHM (WebHost Manager)
Ask about every cPanel account on a server without opening WHM.
Amazon Ads
Sponsored Products, Brands and Display -- plus the analysis that explains a ROAS drop.
Printify
Print-on-demand shops, products, orders and the catalogue behind them.
Microsoft Advertising
Search campaigns and async reporting on the Microsoft Advertising API.
Cloudflare
DNS, WAF, Workers and analytics -- scoped to the zones you explicitly authorise.
UniFi Network
Read-only visibility into a UniFi deployment, plus one carefully fenced RF write.
Shopify
Ask your store a question instead of clicking through the admin.
Brevo
Contacts, lists and campaign results in front of your assistant -- and the next send drafted when you want one.
Google Search Console
How people find the site -- the half of the story analytics can't tell you.
cPanel Hosting
The hosting account underneath the site: backups, DNS, SSL and cron.
Threads
Also Meta's, but a separate app and a separate login -- so it gets its own connection.
Amazon Selling Partner API
Retail-side analytics for a seller account, read-only by construction.
PostgreSQL
Read-only SQL, enforced by the connector rather than promised in a description.
Every tool name and description, machine-readable: /llms-full.txt.
Setting up a UniFi Network connection
UniFi is a direct-connection, credential-based integration (no OAuth): you provide your UniFi console's public URL and an API key generated from the console. Serve MCP tests the connection, discovers the sites visible to that key, and lets you choose exactly which sites — and how much detail (Basic or Advanced) — your AI assistant can access. You can revise that site selection at any time from the connection's Manage Sites button. All UniFi tools are read-only.
Security
- All connection credentials are encrypted at rest (AES-256-GCM) and are never returned by any API response or MCP tool call.
- MCP tool calls are logged (tool name, status, duration) for auditing — we don't log the arguments you pass or the data returned from your connected services. When a call fails we store the error message the provider returned, which can occasionally quote a value from the request.
- Every tool is annotated read-only or write, and destructive actions (delete, remove, revoke, block) are flagged distinctly from ordinary creates/updates.
- Bearer tokens can be revoked at any time from the MCP Endpoint page, and take effect immediately.
- Integrations with site- or resource-level scoping (like UniFi) enforce that scoping on every tool call server-side, not just in the UI.
For the full details, see our Privacy Policy.
Need help?
Check the FAQ for common questions, or contact us directly if you run into an issue connecting a service or an AI client.
Get started