The MCP server

Back to the guide

Deeluge exposes an MCP server, so AI applications can work with the CRM directly.

https://<your Deeluge address>/api/mcp

Two ways to connect

As a person, over OAuth. The app sends them to Deeluge, they approve on the consent screen, and the app then acts as them. This is what Claude, ChatGPT and Grok do, and what somebody is doing when they follow Connected apps.

As a service account, with an API key. Tools such as Claude Code and Cursor send a key as a bearer token to the same address. Those calls act as the key, and appear in its usage under Settings → API keys rather than on the Connected apps page.

The tools

list_objects What object types exist
search Find records
fetch Read a record
get_timeline A record's history
read_email An email logged on a record
create_record Create one
update_record Update one
add_note Add a note
list_tasks List tasks
save_task Create or update a task

search and fetch follow the naming MCP clients expect for retrieval, so apps that do their own retrieval can use them without configuration.

Permissions apply exactly as elsewhere

Nothing is relaxed because the caller is an AI.

  • Over OAuth, the connection sees what that person sees, checked on every request
  • With an API key, it sees what that key's service account sees
  • Restricted records stay invisible
  • read_email follows the firm's email visibility level, so it cannot be used to read a body the person could not open themselves

This is worth stating plainly to anyone nervous about connecting an AI tool: the server does not widen access, and an assistant cannot see anything its user could not already open.

Two things to think about

Writes are real. create_record, update_record, add_note and save_task change the CRM, and a model can call them from a misread instruction as easily as a correct one. Grant write access deliberately rather than by default, and remember every change lands on the record's timeline with the connection named, so it can be traced and undone.

Grant the narrowest set that works. A tool that only needs to answer questions needs reading, not writing.

Next