MCP Server

Nexor’s public MCP (Model Context Protocol) server lets an AI client inspect and operate your Nexor account. It uses the same underlying resources as the REST API, but the two catalogs are not identical. Production server URL: https://mcp.getnexor.ai/mcp

Browse every listed tool

Review the 348 non-admin tools listed to customer sessions, including scopes, required inputs, operation mode, safeguards, and the current availability exception.

REST authentication

Use this separate guide for REST API keys. REST and MCP keys are not interchangeable.

Watch the connection walkthrough

The configurations below are the current reference for each supported client.

Create an MCP key

Click MCP in the left sidebar. The window creates a key named MCP access with full setup access, so your assistant can finish the setup.
Copy the snippet for your client. It includes the key; the full key is not shown again. Store it in a password manager or secret store.
To reduce the key’s access, trim its scopes in the same window or open Manage keys. Revoke the keys you no longer use: opening the window again in a new session can create another key.

MCP keys start with nxr_mcp_. They are separate from REST keys and carry their own scopes. Use least privilege: when a client only needs to inspect the account, keep only read scopes.

Send the key only through the X-API-Key header. The public MCP server does not authenticate Authorization: Bearer. Never paste a real key into source control, screenshots, or shared chat.

Connect a client

Use one of the four client-specific configurations below. Replace nxr_mcp_YOUR_KEY locally.

Claude Code

Run in a terminal:

claude mcp add --transport http nexor https://mcp.getnexor.ai/mcp --header "X-API-Key: nxr_mcp_YOUR_KEY"

Codex

Add this to ~/.codex/config.toml:

[mcp_servers.nexor]
command = "npx"
args = ["-y", "mcp-remote", "https://mcp.getnexor.ai/mcp", "--header", "X-API-Key: nxr_mcp_YOUR_KEY"]

Cursor

Add this to ~/.cursor/mcp.json:

{
  "mcpServers": {
    "nexor": {
      "url": "https://mcp.getnexor.ai/mcp",
      "headers": {
        "X-API-Key": "nxr_mcp_YOUR_KEY"
      }
    }
  }
}

Claude Desktop

Claude Desktop uses a local stdio bridge for this header-authenticated remote server. Open Developer → Edit Config and add this to claude_desktop_config.json:

{
  "mcpServers": {
    "nexor": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://mcp.getnexor.ai/mcp",
        "--header",
        "X-API-Key:${NEXOR_MCP_KEY}"
      ],
      "env": {
        "NEXOR_MCP_KEY": "nxr_mcp_YOUR_KEY"
      }
    }
  }
}

Keep the header argument exactly space-free in the Claude Desktop configuration. mcp-remote substitutes ${NEXOR_MCP_KEY} from env when it starts.

How the connection works

Nexor implements session-based Streamable HTTP:

The client sends an MCP initialize request by HTTP POST with X-API-Key.
Nexor authenticates the key, binds its client identity and scopes to the new session, and returns an mcp-session-id.
Later POST requests reuse that session. GET opens the server event stream, and DELETE closes the session.

Most MCP clients manage the session header and reconnect automatically. A customer-callable tool never accepts a client ID as authority; Nexor derives the tenant from the authenticated session. Seven internal-administration tools exist outside the generated customer catalog, and only trusted internal-admin sessions may use their tenant-context controls.

Scopes

An MCP key can call a tool only when it has the tool’s required scope. Tools without a named scope still require a valid MCP key.

Scope	Grants
`workflows:read`	Read Agents, configuration, tools, jobs, functions, and related setup
`workflows:write`	Create or change Agents, configuration, tools, jobs, functions, and related setup
`rules:read`	Read reminder, recontact, and status-timeout rules
`rules:write`	Create or change those rules
`people:read`	Read team members and pending invitations
`invites:write`	Invite people or revoke invitations
`leads:read`	Read leads, history, conversations, meetings, conversions, campaigns, and templates
`leads:write`	Create or change leads, tags, statuses, assignment, and automation state
`leads:delete`	Permanently erase leads and their related data after explicit confirmation
`messages:send`	Send messages or trigger calls
`meetings:write`	Create, change, cancel, or annotate meetings
`reports:read`	Read account, funnel, call, field, and lead reports
`numbers:read`	Read phone-number inventory and availability
`numbers:write`	Provision, assign, configure, or deactivate phone numbers
`whatsapp:read`	Read WhatsApp numbers, templates, and health
`whatsapp:write`	Connect, assign, configure, or deactivate WhatsApp resources
`imessage:read`	Read iMessage numbers, availability, and status
`imessage:write`	Provision, assign, configure, or deactivate iMessage numbers
`senders:read`	Read email senders and verification state
`senders:write`	Register, verify, set defaults, or delete email senders
`calendars:read`	Read connected calendars and connection state
`calendars:write`	Connect, change, or disconnect calendars

The server’s tools/list response contains 355 tools at the revision pinned by this documentation. Seven are reserved for internal administration and reject customer keys. The generated non-admin catalog contains the other 348.

The pinned catalog still lists create_client_tool, update_client_tool, assign_tool_to_workflow, configure_customer_api_tool, create_workflow_tool, and update_workflow_tool because those tools exist in tools/list. Creating, editing, or assigning a custom HTTP destination is temporarily not a supported public operation while Nexor hardens destination validation. Do not use these tools to configure a destination until this notice is removed.

Confirmations and sensitive actions

A write scope authorizes a class of actions. It does not replace operator approval. Before a destructive, billable, outbound, or operational action, explain the effect and obtain explicit approval. The generated catalog shows these safeguards directly from the tool contract:

Safeguard	Tools	Required behavior
`confirm: true`	`hard_delete_lead`, `bulk_hard_delete_leads`, `create_whatsapp_templates_batch`, `cancel_meeting`, `book_meeting`, `reschedule_meeting`, `change_meeting_host`, `delete_whatsapp_template`, `delete_workflow`, `connect_calendar`, `disconnect_calendar`, `disconnect_calendly`, `disconnect_crm`, `run_hubspot_import`, `run_scheduled_function`	Call without confirmation for a preview when supported. Set `confirm: true` only after the operator approves the exact action.
`accept_charge: true`	`provision_imessage_number`	State the recurring charge and obtain approval before accepting it.
`confirm_transfer_side_effects: true`	`bulk_set_lead_status`	Confirm that status changes may trigger configured transfer side effects.
`dry_run` preview	`invite_user`	Validate and report the invitation outcome without writing. The preview is not approval for a later invitation.
`dry_run` execution mode	`create_background_job`, `update_background_job`	These calls write job configuration immediately. Setting `dry_run` makes later job executions log without acting; it is not a preview of creating or updating the job.

Some destructive tools require approval in their instructions but do not expose a common confirmation field: run_background_job, delete_agent_group, delete_cloud_function, clear_cloud_function_runs, delete_function_environment_variable, delete_scheduled_function, and clear_scheduled_function_runs. Ask first and do not infer approval from the absence of a schema field.

Tool errors

A tool failure sets MCP isError: true and returns JSON text shaped as { "error": { "code": "...", "message": "..." } }.

Code	Meaning
`UNAUTHORIZED`	The MCP key is missing or invalid
`FORBIDDEN`	The key is valid but lacks the required scope, or the tool is internal-only
`NOT_FOUND`	The resource does not exist or does not belong to the authenticated client
`INVALID_INPUT`	Arguments are missing or malformed
`CONFLICT`	The request conflicts with the resource’s current state
`RATE_LIMITED`	Too many requests; slow down and retry later
`UPSTREAM_ERROR`	Nexor could not complete a dependency call; retry only when the action is safe to repeat
`INTERNAL_ERROR`	The server encountered an unexpected error

Transport errors

Handshake and session failures are JSON-RPC errors, separate from tool errors.

JSON-RPC code	Meaning	What to do
`-32001`	Credential bootstrap failed; the HTTP status distinguishes a missing or invalid key (`401`), insufficient access (`403`), throttling (`429`), or temporarily unavailable authentication (`503`)	For `401`, check `X-API-Key` and rotate only if the key is invalid or disabled. For `403`, correct the access or key type. Back off for `429`; retry a safe connection later for `503`. Do not rotate a key because of a transient failure.
`-32000`	The session header is missing or the session is no longer valid	Let the client reconnect and initialize a new session
`-32603`	The HTTP transport encountered an unhandled server error	Retry after reconnecting; report the failure if it persists

Troubleshooting

The client connects but a tool returns `FORBIDDEN`

Compare the tool’s scope in the catalog with the key’s granted scopes. Add only the missing scope. If the tool is reserved for internal administration, a customer key cannot call it.

Claude Desktop does not start the server

Use the stdio mcp-remote configuration above, not Cursor’s remote { "url", "headers" } shape. Confirm that Node.js and npx are available, and keep X-API-Key:${NEXOR_MCP_KEY} free of spaces.

The client reports an invalid session

Restart or reconnect the MCP client so it sends a new initialize request. Do not reuse a saved mcp-session-id across client processes. Tool calls and error rates for the last 30 days are available per tool, across all MCP keys, under Manage keys.

Start here

Quickstart

API reference

Build and launch

WhatsApp

Channels

Agents

Meetings

Integrations

Account

Inbox

Developer tools

Support reference

Browse every listed tool

REST authentication

Watch the connection walkthrough

Create an MCP key

Connect a client

Claude Code

Codex

Cursor

Claude Desktop

How the connection works

Scopes

Confirmations and sensitive actions

Tool errors

Transport errors

Troubleshooting

The client connects but a tool returns `FORBIDDEN`

Claude Desktop does not start the server

The client reports an invalid session

Browse every listed tool

REST authentication

​Watch the connection walkthrough

​Create an MCP key

​Connect a client

​Claude Code

​Codex

​Cursor

​Claude Desktop

​How the connection works

​Scopes

​Confirmations and sensitive actions

​Tool errors

​Transport errors

​Troubleshooting

​The client connects but a tool returns FORBIDDEN

​Claude Desktop does not start the server

​The client reports an invalid session

Watch the connection walkthrough

Create an MCP key

Connect a client

Claude Code

Codex

Cursor

Claude Desktop

How the connection works

Scopes

Confirmations and sensitive actions

Tool errors

Transport errors

Troubleshooting

The client connects but a tool returns `FORBIDDEN`

Claude Desktop does not start the server

The client reports an invalid session