CrmLeaf MCP Server

npx add-mcp 'https://mcp.crmleaf.com/mcp'

For AI agents: the complete documentation index is at llms.txt, and every page has a markdown variant at its .md URL.

MCP Server: Talk to Your CRM from Any AI Assistant | CrmLeaf

Developers · MCP Server

MCP Server: talk to your CRM from any AI assistant

CrmLeaf 's MCP Server gives Claude, Claude Code, Cursor and VS Code structured access to your Leads, Deals, Invoices, Projects, Tasks, Time Logs and seven more areas. Add one address, sign in, and read, create and update records in plain language - as you, within your permissions, with every change audited. https://mcp.crmleaf.com/mcp Start Free Trial → Book a 30-min Demo

• Sign in with OAuth 2.1
• No credit card
• Free onboarding
• No deletes by design AI agent? Bots are welcome. Agent instructions · llms.txt · MCP manifest Claude Desktop · CrmLeaf MCP 68 tools · 25 resources Log 2 hours on the homepage task in Website Redesign and move it to Review.
• Find the task "Homepage" · Website Redesign read
• Log a time entry 2h · 10:00–12:00 today create
• Move the task In Progress → Review update Done - 2 hours are logged on "Homepage" and it is now in Review. You · signed in · 2 changes in the audit trail How it works

From prompt to CRM action in five steps

The MCP Server translates natural-language requests into authenticated API calls.

• 01

You prompt

Ask your AI assistant a question or give it an instruction about your data

• 02

Tool selected

The assistant picks the right tool from 68 MCP tools

• 03

Permission checked

CrmLeaf applies your role permissions and add-on modules, exactly as in the web app

• 04

Runs as you

The request runs in CrmLeaf as you - the MCP server holds none of your records

• 05

Write audited

Every create or update is recorded, with field names but never values Connect

Add one address, then sign in

Every account and every assistant uses the same server address. Add it, sign in with your CrmLeaf account when prompted, and your assistant lists the CrmLeaf tools. MCP server address https://mcp.crmleaf.com/mcp Copy

• 01 Add the address to your assistant - see the setup for yours.
• 02 Sign in with your CrmLeaf account when prompted (OAuth 2.1 with PKCE).
• 03 Test with a read you can check, such as your open deals. Full setup guide → Access tokens guide Building an agent that reads our docs? A separate, read-only documentation server at https://www.crmleaf.app/mcp needs no account or sign-in. It searches the help manual and returns any public page as markdown, and cannot reach customer data. MCP manifest · Agent instructions · llms.txt Claude.ai & Desktop Claude Code Cursor VS Code Settings → Connectors → Add custom connector, paste the server address and save. Server address Copy

https://mcp.crmleaf.com/mcp

A connection made by signing in can read and write, within your permissions. Want read-only? Use an access token instead. Capabilities

What the MCP Server delivers

01

68 Structured Tools

Read, create and update across Leads, Deals, Invoices, Projects, Tasks, Time Logs, Products, Customers, Vendors, POs, Bills, Payments and Budgets. See details 02

25 Reference Resources

Lead sources, pipelines and stages, statuses, categories, assignable people and units, so an assistant fills fields correctly. See details 03

No-Delete Safety

Create and update only - there are no delete tools, so an assistant cannot remove a record. See details 04

Works With Your Assistant

Claude.ai, Claude Desktop, Claude Code, Cursor and VS Code - any client that supports remote MCP over HTTP. See details 05

Sign In or Use a Token

Sign in with your account (OAuth 2.1 with PKCE), or use a personal access token - read-only by default. See details 06

Write Audit Trail

Every create, update, send and payment is logged - who, which connection, which record, and the outcome. See details In detail

How the MCP Server works, section by section

01 / 05

68 Tools and 25 Reference Resources

The MCP Server exposes 68 tools that let an AI assistant read, create and update records across 13 areas of CrmLeaf - from leads, deals and invoices to projects, tasks and time logs. The assistant calls a named tool with typed parameters; the server translates that into a CrmLeaf request made as you. Lists return up to 100 records at a time, newest first, and the assistant can ask for the next page. Alongside the tools, 25 reference resources expose the lists an assistant needs to fill fields correctly: lead sources, deal pipelines and stages, project and task statuses, categories and labels, the people a task can be assigned to, and units of measure. Vendors, purchase orders, bills and payments need the Purchase add-on; budgets need the Budget add-on.

• Leads
• Deals
• Invoices
• Projects
• Tasks
• Time Logs
• Products
• Customers
• Vendors
• Purchase Orders
• Bills
• Payments
• Budgets What you can ask your AI assistant
• “ Summarise this week's deals by stage ”
• “ What is overdue on the website project? ”
• “ Add a task for Priya due Friday ”
• “ Log an hour on this task and move it to Review ”
• “ Which invoices are overdue, and by how much? ”
• “ How is the Atlas project tracking against its budget? ” 02 / 05

No-Delete Safety Model

The MCP Server has no delete tools. An assistant can read your data, create new records and update existing ones - but it cannot remove a lead, a deal or a project. This is a design decision, not a limitation: it prevents accidental data loss when an assistant acts on an ambiguous instruction. Every write is also re-checked against your own add or edit permission, so a read-write connection never goes further than you could in the web app. A few things stay in the web interface on purpose: deleting anything, running timers (an assistant logs a finished time entry instead), task files and notes, tax rows, recurring invoices, and turning time or expenses into an invoice.

• Read - always
• Create - read-write connection
• Update - read-write connection
• Delete - never Why no deletes matter
• An assistant cannot turn "clean up old leads" into "delete all leads"
• A prompt injection cannot escalate to data destruction
• A read-only token removes write access entirely
• Deleting a record needs a person, in CrmLeaf itself
• Status changes follow the same dependency and approval rules as the web forms 03 / 05

Supported AI Clients

CrmLeaf's MCP Server works with Claude.ai, Claude Desktop, Claude Code, Cursor and VS Code - and with any other client that supports remote MCP servers over HTTP. Every client uses the same server address, https://mcp.crmleaf.com/mcp, for every account; there is no per-account URL to look up. The server is a stateless translation layer. It holds none of your records and keeps no copies: each request is made to CrmLeaf as you, and the client keeps the conversation context.

• Claude.ai
• Claude Desktop
• Claude Code
• Cursor
• VS Code
• Any remote MCP client Getting connected
• Add https://mcp.crmleaf.com/mcp to your assistant
• Sign in with your CrmLeaf account when prompted
• Claude.ai and Claude Desktop: Settings → Connectors → Add custom connector
• Test with something you can already see, such as your open deals
• Long lists come 100 records at a time - ask for the next page 04 / 05

Sign In with OAuth 2.1, or Use an Access Token

The recommended route is to sign in: add the server address to your assistant and log in with your CrmLeaf account when it asks. This uses OAuth 2.1 with PKCE, and assistants register themselves automatically - there is no token to copy or store. A connection made by signing in can read and write, always within your own permissions. The alternative is a personal access token, created under Profile → Access Tokens and sent as a bearer token. Use one when your assistant cannot sign in interactively, or when you want a read-only connection. Tokens are read-only by default, last 30 days, and are pinned to the company and organisation they were created in.

• OAuth 2.1 + PKCE
• Personal access tokens
• Read-only by default
• Read-write on request
• 30-day token expiry
• Pinned to one workspace Token management
• Create tokens at Profile → Access Tokens
• Choose read-only unless the assistant must create or update records
• Issue a new token before the 30 days are up, and update the assistant
• Revoke any connection or token from the same page, at any time
• Treat a token like a password - anyone holding it acts as you 05 / 05

Write Audit Trail

Every change an assistant makes - create, update, send or pay - is recorded in an audit trail: who acted, which token or connection was used, the action, the record, the outcome and the names of the fields submitted. The values themselves are never captured, and looking records up is not audited. Changes made through MCP are ordinary record changes, so your workflow automation rules fire on them exactly as they would on an edit in the web app, the mobile app or the API.

• Writes audited
• User & connection
• Record & outcome
• Field names only
• Automation rules fire What the audit trail captures
• Which user acted, and through which token or connection
• The action - create, update, send or pay
• The record affected, and whether the action succeeded
• The names of the fields submitted
• Never the field values themselves Part of the developer platform

MCP alongside REST, tokens, webhooks and automation

The MCP Server is one surface of CrmLeaf 's developer platform. It shares the same permission model, the same audit trail and the same token authentication as the REST API and webhooks - so an AI-driven workflow is governed by the same access controls as everything else. See Developer Hub →

REST API Versioned endpoints, token-authenticated

API Tokens Self-issued, read-only or read-write scopes

Webhooks Outbound & inbound event-driven hooks

Automation No-code When → If → Then rules

What is a Model Context Protocol (MCP) server and how does CrmLeaf's work?

Which AI assistants work with the CrmLeaf MCP Server?

How do I connect, and should I sign in or use a token?

Can the MCP Server delete records from CrmLeaf?

Can an AI assistant log my time or update my tasks?

Does connecting an assistant give it more access than I have?

Is there an audit trail for actions taken through the MCP Server?

Is MCP access included in my plan?

Related

Explore further

Setup guide

Connect an AI assistant, step by step

Personal access tokens

Create, scope and revoke tokens

REST API

Versioned endpoints over api/v1

Workflow Automation

Rules that also fire on MCP changes

Talk to your CRM - connect an AI assistant in minutes

Add https://mcp.crmleaf.com/mcp to your assistant, sign in, and start reading and updating your CrmLeaf data in plain language. Start Free Trial → Book a 30-min Demo

• 68 tools
• 25 resources
• No deletes by design
• Every write audited
• OAuth 2.1 sign-in