Connect AI apps
Connect Claude, ChatGPT, Codex, or Cursor to your SRVO workspace through MCP. The connection uses your SRVO sign-in and permissions.
Connect an app
- In Claude, ChatGPT, Codex, or Cursor, add a remote MCP server and paste
https://api.srvo.app/mcp. - Continue to SRVO and sign in with your SRVO account.
- Choose the workspace the app can access.
- Review the access level, then select Allow.
The app asks you to sign in and approve access in a browser. Pick Read only if it only needs to find and read information. Pick Read and write if you also want it to create or update supported records, links, and time entries. Your SRVO permissions still apply, and the connection stays within the workspace you chose.
What the app can do
The available tools depend on your workspace, role, permissions, and the access level you approved. Current MCP tools are:
- Identity and search:
whoami,searchWorkspace - Boards records:
getRecord,listRecords,createRecord,updateRecord,trashRecord - Workspace structure:
getTree, field and view reads and writes, spaces, recents, and favourites - Links:
listLinks,createLink,removeLink,reorderLink - Files: metadata, folders, versions, direct uploads, and short-lived download/preview URLs. File bytes go directly to storage. Share links can be created, read, updated and revoked.
- Modules:
setWorkspaceModule, for workspace owners and admins. - Track timer:
startTimer,stopTimer - Track time entries:
getTimeEntry,listTimeEntries,createTimeEntry,updateTimeEntry,summarizeTimeEntries
SRVO checks your current access for every tool call. Search only returns items you can open. Hidden fields stay hidden. The app can only use actions enabled for MCP and allowed by your approved scope. It acts with your current SRVO access. Sign-in, API key management, payments, workspace deletion, signatures, third-party credentials, and live voice remain human-only.
Before a destructive change, the app must ask SRVO for a preview. Review the preview before confirming the change. For example, trashRecord first shows what will be moved to Trash. SRVO requires a confirmation token. An app can request and submit that token itself, so only connect apps you trust.
Risky actions such as permanent deletion, ownership transfer, sharing and publishing a form create an Inbox notice naming the app. Review the notice if you did not expect the action.
Review or disconnect an app
Open Settings → API, MCP & webhooks and find MCP connections. The list shows each connected app and whether it has Read only or Read and write access. Select Revoke to end that app’s connection to this workspace.
Safety
Only connect an app you trust. Give it read-only access when it does not need to make changes. You can revoke access from Settings → API, MCP & webhooks at any time. Revoking ends the app’s active sessions for this workspace.