MCP · OAUTH 2.1 · APPROVAL GUARD
Stop exporting CSVs into chat windows. FavCRM exposes dedicated OAuth 2.1 Model Context Protocol (MCP) endpoints so Claude, ChatGPT, and Cursor work against live client context—within the exact scopes you grant.
01 / DEDICATED OAUTH 2.1 RESOURCES
Instead of handing an AI tool a single admin key, FavCRM separates read-only inspection, booking operations, and full CRM workspace tools at the resource URL level.
https://mcp.favcrm.io/mcp/oauth/viewIncluded on Starter ($0), Simply Booking & FavCRM Pro
Safe daily briefing mode. Your AI assistant can inspect client history, upcoming schedules, open deals, and session pack balances—with zero write tools exposed.
contacts:readdeals:readtasks:readbooking:readWrite tools are structurally absent on /mcp/oauth/view.
https://mcp.favcrm.io/mcp/oauth/manageIncluded on Simply Booking (US$20/mo) & FavCRM Pro (US$29/mo)
Lets an operator create bookings, reschedule appointments, adjust weekly service hours, and update attendance status from a natural-language prompt.
booking:readbooking:writeservices:readavailability:writeEvery booking mutation records the connected OAuth client in the workspace audit log.
https://mcp.favcrm.io/mcp/oauth/crmIncluded on FavCRM Pro (US$29/mo · US$290/yr)
Full client lifecycle coordination: log meeting notes onto contact timelines, advance deal stages, queue follow-up tasks, and prepare personalised renewal drafts.
contacts:readcontacts:writedeals:writetasks:writemessages:draftEnable Approval Guard in Settings → Integrations so sensitive writes and outbound messages wait for human confirmation.
02 / CONNECT IN TWO MINUTES
No proprietary AI seat add-on. Paste the resource URL into Claude, ChatGPT, or Cursor and sign in with your FavCRM workspace account.
Open Claude Settings → Connectors (or Integrations) → Add custom connector.
Paste https://mcp.favcrm.io/mcp/oauth/view (read-only) or /mcp/oauth/crm (Pro).
Complete the FavCRM OAuth 2.1 browser sign-in and confirm the requested workspace scopes.
https://mcp.favcrm.io/mcp/oauth/viewIn ChatGPT Settings → Connectors → Create custom MCP connector.
Enter the FavCRM MCP resource URL matching the permission level you want.
Sign in with OAuth 2.1; revoke or narrow scopes anytime in FavCRM Settings → Integrations.
https://mcp.favcrm.io/mcp/oauth/crmFor local IDEs or internal scripts, generate an MCP key in FavCRM Settings → Integrations.
Select at least one explicit scope preset (Read-Only, Booking Ops, or CRM Follow-Up).
Add the server block to .cursor/mcp.json and keep the key in your local environment.
{
"mcpServers": {
"favcrm": {
"url": "https://mcp.favcrm.io/mcp",
"headers": {
"Authorization": "Bearer $FAVCRM_MCP_KEY"
}
}
}
}03 / SECURITY & GOVERNANCE
Designed for service businesses where a hallucinated discount or premature message costs real client trust.
When Approval Guard is enabled for your workspace, sensitive writes, outbound customer messages, discounts, and refunds pause as reviewable drafts until a team member approves.
Every OAuth 2.1 token and API key must carry explicit module scopes. Empty or wildcard scope requests are rejected at creation.
View every connected AI client in Settings → Integrations, see when it last accessed your workspace, and revoke access immediately.
Every MCP tool call is scoped to your tenant ID and logged with actor source, timestamp, and affected record.
04 / REAL OPERATOR WORKFLOWS
“Show today’s confirmed appointments and flag any client with 1 session left on their pack or an overdue follow-up task.”
Reads live bookings, session pack balances, and open tasks without modifying a single record.
“Summarise my call notes with Studio K, move their deal to Proposal Sent, and create a follow-up task for Thursday at 10:00.”
Attaches structured notes to the contact timeline and schedules the follow-up task.
“Find clients who visited 3+ times this quarter whose pack expires within 14 days, and draft renewal messages for my review.”
Prepares personalised drafts in the approval queue—nothing sends until you tap Approve.
FavCRM does not use your workspace customer records to train public foundation models. When you connect an external client such as Claude or ChatGPT via MCP, the data returned to your session is governed by your own account terms with that AI provider—which is why read-only and scoped endpoints keep exposure minimal.
It depends on the endpoint and your workspace settings. On /mcp/oauth/view, no write tools exist at all. On /mcp/oauth/manage, authorised booking changes execute directly so you can manage your schedule conversationally. On FavCRM Pro, enabling Approval Guard routes sensitive CRM mutations, discounts, refunds, and outbound customer messages into an approval queue first.
Starter ($0 forever) includes Read-Only MCP (/mcp/oauth/view). Simply Booking (US$20/month or US$200/year) adds Booking MCP (/mcp/oauth/manage). FavCRM Pro (US$29/month or US$290/year) unlocks Full Workspace CRM MCP (/mcp/oauth/crm) and Approval Guard.
Open Settings → Integrations in the FavCRM merchant portal and click Revoke next to the connected OAuth app or MCP key. Access terminates immediately.
MCP + APPROVAL GUARD
Open a $0 Starter CRM workspace, import a CSV, and connect Claude or Cursor in under five minutes.