MCP Server
Connect Codex, Claude, Cursor, VS Code, Windsurf, and other MCP clients to Workestra using the public workestra-mcp server.
MCP Server
Workestra provides a public MCP server for AI tools such as Codex, Claude Code, Claude Desktop, Cursor, VS Code, and Windsurf.
The MCP server exposes 350 tools across 35 feature groups. These tools let an AI assistant search and update workspace data across CRM, finance, support, projects, time, planning, recruiting, stock, procurement, field service, marketing, automations, and more.
What You Need
You only need:
- A Workestra API key from your workspace.
- An MCP client such as Codex, Claude, Cursor, VS Code, or Windsurf.
- The public npm package:
workestra-mcp.
You do not need to install or host workestra-tools. It is bundled into workestra-mcp at build time.
Create an API Key
- Open Settings -> Administration -> API.
- Click Create API Key.
- Name the key, for example
Codex MCPorClaude Code MCP. - Choose a permission preset:
- MCP Default for normal agent access.
- Read Only if the assistant should only view data.
- Set an expiry date if the key is temporary.
- Copy the key immediately. It starts with
sk_live_and is only shown once.
Keep this key private. Do not paste it into public chat logs, Git commits, screenshots, or support tickets.
How It Works
Your computer Workestra cloud
Codex / Claude / Cursor
|
| stdio
v
workestra-mcp
local adapter installed by npx
|
| HTTPS + Workestra API key
v
workestra.app/api/mcp/*
Vercel server routes
|
| server-side Supabase access
v
Workspace databaseThe local MCP package is a thin adapter. It registers the Workestra tool names and schemas with your AI client, then forwards tool calls to Workestra's hosted API.
Your Supabase service role key is never installed on the user's computer. It stays on the Workestra server side.
Codex Setup: Choose STDIO
In Codex, open Connect to a custom MCP and choose STDIO.
Do not choose Streamable HTTP for Workestra. Workestra uses the local npx MCP adapter, so Codex must launch it with STDIO.
Where to Find the Values
All values are fixed except your Workestra API key:
| Codex field | What to enter | Where it comes from |
|---|---|---|
| Name | workestra | Fixed value |
| Transport tab | STDIO | Select the STDIO tab in Codex |
| Command to launch | npx | Fixed value |
| Arguments | -y, workestra-mcp | Fixed values |
| Environment variable key | WORKESTRA_API_URL | Fixed value |
| Environment variable value | https://www.workestra.app | Fixed value |
| Environment variable key | WORKESTRA_API_KEY | Fixed value |
| Environment variable value | sk_live_your-key-here | Copy it from Workestra after creating an API key |
| Environment variable passthrough | Leave blank | Nothing needed |
| Working directory | Leave as default | Nothing needed |
Codex Field Reference
Fill the Codex screen exactly like this:
| Field | Value |
|---|---|
| Name | workestra |
| Type | STDIO |
| Command to launch | npx |
| Arguments | -y, workestra-mcp |
| Environment variables | WORKESTRA_API_URL = https://www.workestra.app |
| Environment variables | WORKESTRA_API_KEY = sk_live_your-key-here |
| Environment variable passthrough | Leave blank |
| Working directory | Leave as default |
Prompt to Give Codex
If you want Codex to help you set it up, copy this prompt:
Connect Workestra as a custom MCP server in Codex.
Use STDIO. Do not use Streamable HTTP.
Fill the Codex fields like this:
Name: workestra
Command to launch: npx
Arguments:
-y
workestra-mcp
Environment variables:
WORKESTRA_API_URL=https://www.workestra.app
WORKESTRA_API_KEY=sk_live_your-key-here
Environment variable passthrough: leave blank
Working directory: leave as default
After adding it, reconnect or restart the MCP server and verify that Workestra tools are available. Do not print or expose the API key.Claude Code Setup
Run this command:
claude mcp add workestra -- npx -y workestra-mcp --api-key=sk_live_your-key-here --api-url=https://www.workestra.appPrompt to Give Claude Code
If you want Claude Code to install it for you, copy this prompt:
Install the Workestra MCP server for Claude Code.
Use this command:
claude mcp add workestra -- npx -y workestra-mcp --api-key=sk_live_your-key-here --api-url=https://www.workestra.app
After installing it, verify that the Workestra MCP server is listed and that Workestra tools are available. Do not print or expose the API key.Claude Desktop Setup
Add this to claude_desktop_config.json:
{
"mcpServers": {
"workestra": {
"command": "npx",
"args": ["-y", "workestra-mcp", "--api-key=sk_live_your-key-here", "--api-url=https://www.workestra.app"]
}
}
}Cursor Setup
Add this to ~/.cursor/mcp.json:
{
"mcpServers": {
"workestra": {
"command": "npx",
"args": ["-y", "workestra-mcp"],
"env": {
"WORKESTRA_API_URL": "https://www.workestra.app",
"WORKESTRA_API_KEY": "sk_live_your-key-here"
}
}
}
}VS Code Setup
Add this to .vscode/mcp.json in your workspace:
{
"servers": {
"workestra": {
"command": "npx",
"args": ["-y", "workestra-mcp"],
"env": {
"WORKESTRA_API_URL": "https://www.workestra.app",
"WORKESTRA_API_KEY": "sk_live_your-key-here"
}
}
}
}Windsurf Setup
Add this to ~/.codeium/windsurf/mcp_config.json:
{
"mcpServers": {
"workestra": {
"command": "npx",
"args": ["-y", "workestra-mcp"],
"env": {
"WORKESTRA_API_URL": "https://www.workestra.app",
"WORKESTRA_API_KEY": "sk_live_your-key-here"
}
}
}
}Other MCP Clients
Use the same pattern:
{
"command": "npx",
"args": ["-y", "workestra-mcp"],
"env": {
"WORKESTRA_API_URL": "https://www.workestra.app",
"WORKESTRA_API_KEY": "sk_live_your-key-here"
}
}The server also accepts --api-key=sk_live_your-key-here as a CLI flag.
CLI Options
npx -y workestra-mcp [options]| Option | Description |
|---|---|
--api-key=KEY | Workestra API key. Alternative to WORKESTRA_API_KEY. |
--api-url=URL | Workestra API URL. Defaults to https://www.workestra.app. |
--read-only | Register only read tools. |
--features=LIST | Comma-separated feature groups. Defaults to all groups. |
--version | Show the MCP package version. |
--help | Show help. |
Environment variables:
| Variable | Description |
|---|---|
WORKESTRA_API_KEY | Workestra API key. |
WORKESTRA_API_URL | Workestra API URL. Use https://www.workestra.app. |
Feature Groups
The default setup exposes all feature groups allowed by your API key permissions.
| Feature group | Tool count |
|---|---|
contacts | 5 |
deals | 6 |
companies | 5 |
activities | 5 |
pipeline | 3 |
invoicing | 9 |
tickets | 10 |
projects | 12 |
analytics | 12 |
recruiting | 8 |
knowledge | 5 |
quotations | 6 |
workspace | 7 |
email | 3 |
people | 11 |
expenses | 5 |
banking | 3 |
credit_notes | 4 |
payments | 3 |
peppol | 3 |
time | 10 |
bookings | 14 |
planning | 15 |
assets | 16 |
contracts | 11 |
order_forms | 2 |
procurement | 14 |
stock | 17 |
subscriptions | 21 |
surveys | 10 |
goals | 13 |
fsm | 28 |
marketing | 18 |
automations | 17 |
sequences | 19 |
Example: only expose CRM basics:
npx -y workestra-mcp --api-key=sk_live_your-key-here --features=contacts,deals,companies,activities,pipelineExample: read-only mode:
npx -y workestra-mcp --api-key=sk_live_your-key-here --read-onlyPermissions
Every tool is checked against the permissions on your Workestra API key.
For example:
| Permission | Allows |
|---|---|
read_contacts | Search and view contacts. |
create_contacts | Create contacts. |
update_contacts | Update contacts. |
delete_contacts | Delete contacts. |
read_deals | List deals, view deals, and read deal analytics. |
create_deals | Create deals. |
update_deals | Update deals. |
read_invoices | List invoices, view invoices, and read invoice reports. |
create_invoices | Create invoices. |
read_tickets | List and view support tickets. |
create_tickets | Create support tickets. |
update_tickets | Update support tickets. |
Use Read Only if you want the assistant to answer questions but not change data.
Security Best Practices
- Use one API key per AI client.
- Prefer read-only keys for exploration and reporting.
- Give write permissions only when the workflow requires them.
- Set expiry dates for temporary access.
- Revoke keys immediately if a device or AI client is compromised.
- Do not paste API keys into public prompts, screenshots, commits, or shared documents.
Testing the Connection
After setup, restart or reconnect the MCP server in your AI client. Then try:
- "Show me my pipeline summary."
- "Search for contacts named John."
- "List open support tickets assigned to me."
- "Show overdue invoices this month."
- "Find candidates for the React developer role."
If the assistant says no Workestra tools are available, check:
- The MCP server name is
workestra. - The command is
npx. - The arguments are
-yandworkestra-mcp. - The API key is set as
WORKESTRA_API_KEY. - The API key has the permissions required by the tool you are trying to use.
Publishing and Updates
End users do not publish anything. They run the public npm package with npx.
Workestra publishes workestra-mcp. When Workestra adds new tool names or changes tool schemas, a new package version is published. If Workestra only changes the behavior of an existing tool, users normally only need the hosted Workestra API update.