> ## Documentation Index
> Fetch the complete documentation index at: https://codebeans-customer-cart-manager.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# MCP integration

> Connect Claude, Cursor, ChatGPT and other AI assistants to your carts and draft orders with scoped, expiring access tokens.

The **Model Context Protocol (MCP)** is an open standard that lets AI assistants use tools safely. With Cart Manager's MCP integration you can ask an assistant things like:

* *"Which carts were abandoned today, and what was in them?"*
* *"Show me cart #1042 and log that we called the customer."*
* *"Turn cart #1042 into a draft order for Jane Doe and add two more of the blue mug."*

You decide exactly what each assistant is allowed to do by creating **access tokens** with a chosen set of tools and an optional expiry date.

## Turn it on

Go to **Settings → MCP Integration**.

1. Check the **Status** badge. If it says **Disabled**, click **Turn on**.
2. Copy the **MCP server URL** with the **Copy** button. You'll need it to connect your assistant.

> [!WARNING]
>
> **Turn off** blocks every token immediately — AI assistants can't connect or run any tools until you turn it back on. Use it as an emergency stop.

## Create an access token

**1. Name the token**

Under **Create an access token**, enter a **Token name** that says who or what uses it — for example *Claude Desktop — read only*.

**2. Choose the tools**

Under **Tools this token can use**, tick the tools this token may call. Tools are grouped into **Read** and **Write (mutating)**. Hover the ⓘ icon next to a tool to see what it does.

Shortcuts: **Select all**, **Read-only** (every read tool, no write tools) and **Clear**.

**3. Set an expiry**

Choose **Never expires**, **30 days**, **60 days**, **90 days**, or **Custom date…** and pick a date.

**4. Create and copy**

Click **Create token**. A yellow banner shows the full token **once** — click **Copy token** and store it somewhere safe, such as a password manager.

The banner also includes a ready-made **Claude Desktop config** with your token filled in. Click **Copy config** to grab it.

> [!WARNING]
>
> **Copy your token now — it won't be shown again.** The app keeps only the last four characters. If you lose a token, revoke it and create a new one.

## Connect your assistant

> [tab] Claude Desktop
>
> 1. In Claude Desktop, open **Settings → Developer → Edit Config**.
> 2. Add the block below to `claude_desktop_config.json` (or paste the config you copied when you created the token).
> 3. Replace the URL and `<YOUR_TOKEN>` with your values, save the file, and restart Claude Desktop.
>
> ```json claude_desktop_config.json theme={null}
> {
>   "mcpServers": {
>     "cart-manager": {
>       "command": "npx",
>       "args": ["-y", "mcp-remote", "<MCP server URL>", "--header", "Authorization:${AUTH}"],
>       "env": { "AUTH": "Bearer <YOUR_TOKEN>" }
>     }
>   }
> }
> ```
>
> > [!NOTE]
> >
> > This uses `npx`, so [Node.js](https://nodejs.org) must be installed on the computer running Claude Desktop.

> [tab] Cursor, ChatGPT & others
>
> Add a **Streamable HTTP** MCP server with:
>
> | Setting | Value |
> | - | - |
> | **URL** | Your **MCP server URL** from the app |
> | **Header** | `Authorization: Bearer <YOUR_TOKEN>` |
>
> Refer to your client's documentation for where to add remote MCP servers.

Ask your assistant *"What's my Cart Manager shop overview?"* to check the connection.

## Manage your tokens

**Your tokens** lists every token:

| Column | Shows |
| - | - |
| **Name** | The token's name and its last four characters (`••••a1b2`). |
| **Tools** | **All tools**, or how many tools it can use — hover to see which. |
| **Expires** | The expiry date, if any. |
| **Status** | **Active**, **Disabled** or **Expired**. |
| **Last used** | When an assistant last used it, or **Never**. |

**Actions:**

* **Disable** / **Enable** — pause a token without deleting it.
* **Revoke** — delete the token permanently. Confirm with **Yes**.

## Security best practices

> [card] Least privilege
>
> Give each token only the tools it needs. Start with **Read-only** and add write tools only when you need them.

> [card] One token per assistant
>
> Create a separate token for each person or tool, so you can revoke one without affecting the others.

> [card] Set an expiry
>
> Use 30–90 day expiries for anything other than long-term, trusted setups.

> [card] Treat tokens like passwords
>
> Never paste a token into a chat, email or shared document. If one leaks, revoke it straight away.

## Plans and rate limits

The MCP integration is available on every plan, with a per-token request limit that grows with your plan — from 30 requests per minute on Free up to 1,000 on Enterprise. Each tool still respects your plan: for example, analytics needs a plan with Analytics, and draft order tools need a plan with draft orders and count towards your monthly allowance. See [Plans & billing](https://codebeans-customer-cart-manager.mintlify.site/plans-and-billing.md).

If your plan doesn't include MCP, the tab shows **MCP Integration is a premium feature** with an **Upgrade plan** button.

See the full [tool reference](https://codebeans-customer-cart-manager.mintlify.site/ai/mcp-tools.md).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.