Platform MCP
Platform MCP is a remote MCP server provided by Guppycubed. After a user authorizes it, an external AI client (Claude, ChatGPT, Cursor, Claude Code, Codex, and others) can read workspace data and create drafts and tasks within the authorized scope.
Endpoint
| Item | Value |
|---|---|
| MCP endpoint | https://mcp.guppycubed.com/mcp |
| Transport | Streamable HTTP |
| Authorization | OAuth 2.1 Authorization Code + PKCE (S256) |
| Client registration | Dynamic Client Registration (DCR) supported |
| Protected resource metadata | /.well-known/oauth-protected-resource/mcp |
| Authorization server metadata | /.well-known/oauth-authorization-server/api/platform-mcp/oauth |
The endpoint does not redirect; connect directly to the URL above.
Connection flow
- In your MCP client, add a remote MCP server using the endpoint above.
- The client registers itself through DCR and opens the authorization page.
- Sign in with your Guppycubed account, choose the workspace and scopes to grant, and confirm.
- Once the client holds an access token, it can call tools.
Authorized connections can be reviewed and revoked under Settings → Connections (/portal/settings/connections). After a scope change, reconnect for it to take effect.
Scopes
Select scopes individually during authorization. A client can only use tools within the scopes granted.
| Category | Scopes |
|---|---|
| Workspace | workspace:read, members:read |
| Projects and activities | projects:read, activities:read |
| Tasks | tasks:read, tasks:write, tasks:assign |
| Questionnaires | questionnaires:read, questionnaires:analysis:read, questionnaires:responses:read, questionnaires:publish |
| Knowledge base | knowledge:read, knowledge:write |
| Websites | websites:read |
| Drafts | drafts:write |
| Notifications | notifications:send |
| Skills | skills:read |
| Digital employees | employees:read, employees:memory:read |
The authorization page shows only the scopes currently available.
Tools
Tools are exposed according to granted scopes. Common tools include:
| Tools | Required scope |
|---|---|
get_connection_context | A valid authorized connection; no additional named scope. Returns only the connection's already-authorized workspaces and permissions |
search, fetch, list_knowledge_sources | knowledge:read |
save_knowledge_link | knowledge:write |
list_projects, get_project | projects:read |
list_activities | activities:read |
list_tasks | tasks:read |
create_task, assign_task | tasks:assign |
update_task_status | tasks:write |
list_questionnaires, get_questionnaire | questionnaires:read |
get_questionnaire_analysis, get_questionnaire_results | questionnaires:analysis:read |
list_websites, get_website | websites:read |
create_website_draft, update_website_draft | drafts:write |
list_skills, get_skill | skills:read |
list_employees, get_employee_context | employees:read |
Call tools/list for the available tools and parameter descriptions under your current authorization. Workspace policies and service configuration also apply; a granted scope does not guarantee that a tool is available.
If a tool is missing, call get_connection_context and inspect the target workspace's permissions: missing_scopes requires reconnecting with consent for the missing scopes; policy_blocked_scopes requires a workspace administrator; server_disabled_scopes requires a service configuration change. Refresh tools/list after the correction. Do not repeatedly broaden consent to work around policy or service restrictions.
Safety and approval
- All reads and writes are limited to the workspace and scopes the user authorized.
- Creating a draft never publishes it. Outward-facing actions such as publishing a questionnaire, sending a notification, or publishing a post require a
prepare_*step and the user's approval inside Guppycubed before they run. - List tools return at most 50 items per call with pagination, and each response has a size limit.
- Member lookups return names and user IDs by default; email addresses are available only to workspace owners or admins.
- Individual questionnaire responses (
questionnaires:responses:read) may contain personal data respondents typed into their answers, but never account, IP, or device records.
Troubleshooting
| Symptom | What to do |
|---|---|
| A tool is missing after authorizing | Follow the get_connection_context permission diagnostics above, then refresh tools/list. |
| Network connection fails or is refused | Check the endpoint hostname, network connectivity, and service availability. |
| An HTTP redirect is returned | Use the HTTPS MCP endpoint above directly and check whether a proxy rewrites or redirects the request. |
| Need to revoke access | Remove the client under Settings → Connections. |