The MCP server
Back to the guide
Deeluge exposes an MCP server, so AI applications can work with the CRM directly.
https://<your Deeluge address>/api/mcp
Two ways to connect
As a person, over OAuth. The app sends them to Deeluge, they approve on the consent screen, and the app then acts as them. This is what Claude, ChatGPT and Grok do, and what somebody is doing when they follow Connected apps.
As a service account, with an API key. Tools such as Claude Code and Cursor send a key as a bearer token to the same address. Those calls act as the key, and appear in its usage under Settings → API keys rather than on the Connected apps page.
The tools
list_objects |
What object types exist |
search |
Find records |
fetch |
Read a record |
get_timeline |
A record's history |
read_email |
An email logged on a record |
create_record |
Create one |
update_record |
Update one |
add_note |
Add a note |
list_tasks |
List tasks |
save_task |
Create or update a task |
search and fetch follow the naming MCP clients expect for retrieval, so apps
that do their own retrieval can use them without configuration.
Permissions apply exactly as elsewhere
Nothing is relaxed because the caller is an AI.
- Over OAuth, the connection sees what that person sees, checked on every request
- With an API key, it sees what that key's service account sees
- Restricted records stay invisible
read_emailfollows the firm's email visibility level, so it cannot be used to read a body the person could not open themselves
This is worth stating plainly to anyone nervous about connecting an AI tool: the server does not widen access, and an assistant cannot see anything its user could not already open.
Two things to think about
Writes are real. create_record, update_record, add_note and save_task
change the CRM, and a model can call them from a misread instruction as easily as a
correct one. Grant write access deliberately rather than by default, and remember
every change lands on the record's timeline with the connection named, so it can be
traced and undone.
Grant the narrowest set that works. A tool that only needs to answer questions needs reading, not writing.
Next
- Back to the guide