FavCRM MCP Server

OAuth 2.1 MCP gateway for client CRM, branded bookings, prepaid session packs, and human-in-the-loop Approval Guard.

View on favcrm.io

Documentation

Skip to main content

MCP · OAUTH 2.1 · APPROVAL GUARD

Connect your AI assistant. Keep your client records governed.

Stop exporting CSVs into chat windows. FavCRM exposes dedicated OAuth 2.1 Model Context Protocol (MCP) endpoints so Claude, ChatGPT, and Cursor work against live client context—within the exact scopes you grant.

Start free ($0)→ Step-by-step setup guide→

  • OAuth 2.1 + PKCE
  • Read-only on Starter ($0)
  • Approval Guard
  • 1-click revoke

API.FAVCRM.IO/MCP · OAUTH 2.1 + PKCE

CLIENT 01ClaudeCLIENT 02ChatGPTCLIENT 03Cursor IDE

SCOPED GATE/oauth/view/oauth/manage/oauth/crmApproval Guard

TENANT SPINEContactsBookingsPacksDealsAUDIT LOG ✓Least-privilege scopes · 1-click revoke · Per-call audit trail

01 / DEDICATED OAUTH 2.1 RESOURCES

Three endpoints, separated by blast radius.

Instead of handing an AI tool a single admin key, FavCRM separates read-only inspection, booking operations, and full CRM workspace tools at the resource URL level.

READ-ONLY · STARTER $0+

View Resource

https://api.favcrm.io/mcp/oauth/viewCopy

Included on Starter ($0), Simply Booking & FavCRM Pro

Safe daily briefing mode. Your AI assistant can inspect client history, upcoming schedules, open deals, and session pack balances—with zero write tools exposed.

  • contacts:read
  • deals:read
  • tasks:read
  • booking:read

Write tools are structurally absent on /mcp/oauth/view.

BOOKING OPS · SIMPLY BOOKING+

Booking Manage Resource

https://api.favcrm.io/mcp/oauth/manageCopy

Included on Simply Booking (US$20/mo) & FavCRM Pro (US$29/mo)

Lets an operator create bookings, reschedule appointments, adjust weekly service hours, and update attendance status from a natural-language prompt.

  • booking:read
  • booking:write
  • services:read
  • availability:write

Every booking mutation records the connected OAuth client in the workspace audit log.

FULL WORKSPACE · FAVCRM PRO

CRM & Approval Guard Resource

https://api.favcrm.io/mcp/oauth/crmCopy

Included on FavCRM Pro (US$29/mo · US$290/yr)

Full client lifecycle coordination: log meeting notes onto contact timelines, advance deal stages, queue follow-up tasks, and prepare personalised renewal drafts.

  • contacts:read
  • contacts:write
  • deals:write
  • tasks:write
  • messages:draft

Enable Approval Guard in Settings → Integrations so sensitive writes and outbound messages wait for human confirmation.

02 / CONNECT IN TWO MINUTES

Works with the AI tools you already pay for.

No proprietary AI seat add-on. Paste the resource URL into Claude, ChatGPT, or Cursor and sign in with your FavCRM workspace account.

Claude Desktop / WebChatGPT ConnectorsCursor / API Key

  1. 01

    Open Claude Settings → Connectors (or Integrations) → Add custom connector.

  2. 02

    Paste https://api.favcrm.io/mcp/oauth/view (read-only) or /mcp/oauth/crm (Pro).

  3. 03

    Complete the FavCRM OAuth 2.1 browser sign-in and confirm the requested workspace scopes.

Claude MCP connector URLCopy

https://api.favcrm.io/mcp/oauth/view

  1. 01

    In ChatGPT Settings → Connectors → Create custom MCP connector.

  2. 02

    Enter the FavCRM MCP resource URL matching the permission level you want.

  3. 03

    Sign in with OAuth 2.1; revoke or narrow scopes anytime in FavCRM Settings → Integrations.

ChatGPT MCP server endpointCopy

https://api.favcrm.io/mcp/oauth/crm

  1. 01

    For local IDEs or internal scripts, generate an MCP key in FavCRM Settings → Integrations.

  2. 02

    Select at least one explicit scope preset (Read-Only, Booking Ops, or CRM Follow-Up).

  3. 03

    Add the server block to .cursor/mcp.json and keep the key in your local environment.

.cursor/mcp.jsonCopy

{
  "mcpServers": {
    "favcrm": {
      "url": "https://api.favcrm.io/mcp",
      "headers": {
        "Authorization": "Bearer $FAVCRM_MCP_KEY"
      }
    }
  }
}

03 / SECURITY & GOVERNANCE

Explicit scopes, human gates, verifiable logs.

Designed for service businesses where a hallucinated discount or premature message costs real client trust.

01Human gate

Configurable Approval Guard

When Approval Guard is enabled for your workspace, sensitive writes, outbound customer messages, discounts, and refunds pause as reviewable drafts until a team member approves.

02Least privilege

Zero blank-check keys

Every OAuth 2.1 token and API key must carry explicit module scopes. Empty or wildcard scope requests are rejected at creation.

03Instant cut-off

One-click revocation

View every connected AI client in Settings → Integrations, see when it last accessed your workspace, and revoke access immediately.

04Audited

Workspace-isolated audit trail

Every MCP tool call is scoped to your tenant ID and logged with actor source, timestamp, and affected record.

04 / REAL OPERATOR WORKFLOWS

What teams ask their connected AI every morning.

MORNING BRIEFING · /mcp/oauth/view

“Show today’s confirmed appointments and flag any client with 1 session left on their pack or an overdue follow-up task.”

Reads live bookings, session pack balances, and open tasks without modifying a single record.

PIPELINE HYGIENE · /mcp/oauth/crm

“Summarise my call notes with Studio K, move their deal to Proposal Sent, and create a follow-up task for Thursday at 10:00.”

Attaches structured notes to the contact timeline and schedules the follow-up task.

RETENTION DRAFTS · APPROVAL GUARD ON

“Find clients who visited 3+ times this quarter whose pack expires within 14 days, and draft renewal messages for my review.”

Prepares personalised drafts in the approval queue—nothing sends until you tap Approve.

Frequently asked questions

Is FavCRM data used to train public AI models?

FavCRM does not use your workspace customer records to train public foundation models. When you connect an external client such as Claude or ChatGPT via MCP, the data returned to your session is governed by your own account terms with that AI provider—which is why read-only and scoped endpoints keep exposure minimal.

Does every MCP write require human approval?

It depends on the endpoint and your workspace settings. On /mcp/oauth/view, no write tools exist at all. On /mcp/oauth/manage, authorised booking changes execute directly so you can manage your schedule conversationally. On FavCRM Pro, enabling Approval Guard routes sensitive CRM mutations, discounts, refunds, and outbound customer messages into an approval queue first.

Which plans include MCP?

Starter ($0 forever) includes Read-Only MCP (/mcp/oauth/view). Simply Booking (US$20/month or US$200/year) adds Booking MCP (/mcp/oauth/manage). FavCRM Pro (US$29/month or US$290/year) unlocks Full Workspace CRM MCP (/mcp/oauth/crm) and Approval Guard.

How do I disconnect an AI assistant?

Open Settings → Integrations in the FavCRM merchant portal and click Revoke next to the connected OAuth app or MCP key. Access terminates immediately.

MCP + APPROVAL GUARD

Try Read-Only MCP on a free workspace today.

Open a $0 Starter CRM workspace, import a CSV, and connect Claude or Cursor in under five minutes.

Start free ($0)→ Read Simply Booking MCP spec↗Starter $0 forever · FavCRM Pro US$29/mo (US$290/yr, 2 months free)

Privacy & data

You decide whether to share usage data.

If accepted, we use Google Analytics and Meta Pixel to understand site and campaign performance. Declining does not affect access. Read our privacy policy →

Allow analytics & marketingReject optional tracking

{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://favcrm.io/#organization","name":"FavCRM","url":"https://favcrm.io/","logo":{"@type":"ImageObject","url":"https://favcrm.io/brand/favcrm-logo-on-light.svg"},"foundingLocation":{"@type":"Place","name":"Hong Kong"},"email":"info@favcrm.io","sameAs":["https://github.com/favcrm","https://github.com/favcrm/mcp","https://glama.ai/mcp/connectors/io.favcrm/favcrm","https://apps.apple.com/us/app/team-inbox-favcrm-fleet/id6808833043","https://play.google.com/store/apps/details?id=io.favcrm.teaminbox"]},{"@type":"SoftwareApplication","@id":"https://favcrm.io/en/ai-agents/#app","name":"FavCRM MCP","applicationCategory":"BusinessApplication","operatingSystem":"Web","description":"OAuth 2.1 Model Context Protocol server connecting Claude, ChatGPT, and Cursor to FavCRM client records, deals, tasks, and bookings with OAuth 2.1 permissions and Approval Guard.","url":"https://favcrm.io/en/ai-agents/","inLanguage":"en","publisher":{"@id":"https://favcrm.io/#organization"},"featureList":["OAuth 2.1 authorization code + PKCE sign-in across three MCP resources","Read-only inspection endpoint (/mcp/oauth/view) included on Starter ($0)","Booking management endpoint (/mcp/oauth/manage) for Simply Booking & Pro","Workspace CRM endpoint (/mcp/oauth/crm) for contacts, deals, tasks & drafts","Configurable Approval Guard for sensitive writes, outbound messages, discounts & refunds","One-click token revocation and per-action audit log"],"offers":[{"@type":"Offer","name":"Starter (Read-Only MCP)","price":0,"priceCurrency":"USD","url":"https://favcrm.io/en/ai-agents/","priceSpecification":{"@type":"UnitPriceSpecification","price":0,"priceCurrency":"USD","unitCode":"MON"}},{"@type":"Offer","name":"Simply Booking (Booking MCP)","price":20,"priceCurrency":"USD","url":"https://favcrm.io/en/ai-agents/","priceSpecification":{"@type":"UnitPriceSpecification","price":20,"priceCurrency":"USD","unitCode":"MON"}},{"@type":"Offer","name":"FavCRM Pro (Full CRM MCP + Approval Guard)","price":29,"priceCurrency":"USD","url":"https://favcrm.io/en/ai-agents/","priceSpecification":{"@type":"UnitPriceSpecification","price":29,"priceCurrency":"USD","unitCode":"MON"}}]},{"@type":"BreadcrumbList","@id":"https://favcrm.io/en/ai-agents/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"FavCRM","item":"https://favcrm.io/en/"},{"@type":"ListItem","position":2,"name":"FavCRM MCP","item":"https://favcrm.io/en/ai-agents/"}]},{"@type":"FAQPage","@id":"https://favcrm.io/en/ai-agents/#faq","mainEntity":[{"@type":"Question","name":"Is FavCRM data used to train public AI models?","acceptedAnswer":{"@type":"Answer","text":"FavCRM does not use your workspace customer records to train public foundation models. When you connect an external client such as Claude or ChatGPT via MCP, the data returned to your session is governed by your own account terms with that AI provider—which is why read-only and scoped endpoints keep exposure minimal."}},{"@type":"Question","name":"Does every MCP write require human approval?","acceptedAnswer":{"@type":"Answer","text":"It depends on the endpoint and your workspace settings. On /mcp/oauth/view, no write tools exist at all. On /mcp/oauth/manage, authorised booking changes execute directly so you can manage your schedule conversationally. On FavCRM Pro, enabling Approval Guard routes sensitive CRM mutations, discounts, refunds, and outbound customer messages into an approval queue first."}},{"@type":"Question","name":"Which plans include MCP?","acceptedAnswer":{"@type":"Answer","text":"Starter ($0 forever) includes Read-Only MCP (/mcp/oauth/view). Simply Booking (US$20/month or US$200/year) adds Booking MCP (/mcp/oauth/manage). FavCRM Pro (US$29/month or US$290/year) unlocks Full Workspace CRM MCP (/mcp/oauth/crm) and Approval Guard."}},{"@type":"Question","name":"How do I disconnect an AI assistant?","acceptedAnswer":{"@type":"Answer","text":"Open Settings → Integrations in the FavCRM merchant portal and click Revoke next to the connected OAuth app or MCP key. Access terminates immediately."}}]}]}