Tendabot ships an MCP server. Connect it once and Claude can read your inbox, rewrite a bot's instructions, fix a wrong answer and tell you what any of it cost — in the same conversation where you noticed the problem.
There is no separate service to run and nothing to install. The server is an endpoint on the platform you already have an account on.
In the console, go to Settings → Claude & API access and create a key. Choose read-only if you want Claude to look but never touch.
Point Claude at the endpoint below. The key travels either in the URL path or as a Bearer header — both work, so use whichever your client supports.
Start with “list my bots”. Nearly every other tool takes a botId from that first call, which is exactly what the server tells Claude to do.
https://platform.tendabot.com/api/mcp/YOUR_KEY
# or, with a header instead of the path
https://platform.tendabot.com/api/mcp
Authorization: Bearer YOUR_KEYEvery tool declares a scope, and the server checks it before the tool runs — it is not a label on the docs page. Hand Claude a read-only key and a call to send_reply comes back refused, by name, telling you to create a write key if you meant it.
That matters more here than in most integrations, because some of these tools talk to your customers. send_reply posts a real message to a real person.
No. It is a route on the platform, not a separate process — nothing to deploy, host or keep alive. If you can reach tendabot.com you can reach the MCP server.
It speaks standard MCP over JSON-RPC, so any MCP client can connect. We test against Claude because that is what our customers use, and the setup instructions above are written for it.
Nothing extra. MCP is included on every plan. The only usage that costs anything is a tool that generates an AI reply — test_bot spends credits because it runs the model. Reading your inbox is free.
It can only call send_reply with a write key, and only on a conversation you name. The honest advice: have Claude draft the reply and show it to you first. That is one sentence in your prompt and it removes the risk entirely.
Only the ones the key belongs to. A key created in one workspace cannot read another, and an OAuth token resolves your memberships live — so removing someone from a workspace removes their access immediately.