v1.0 · Live now

Talk to OneHub360 from Claude or ChatGPT

OneHub360 ships a hosted MCP (Model Context Protocol) server so AI agents can read and write your CRM, pipeline, inbox, and proposals in plain language. Endpoint: https://onehub360.com/api/mcp. Mint a key in Settings → API Keys, paste the config below into Claude Desktop / Claude Code / ChatGPT.

Questions, integration help, or feedback? Email dev@onehub360.com - it routes to a human.

Bring Your Own Agent
Claude Desktop, Claude Code, ChatGPT with MCP, or any custom agent. The protocol is open, the connector is ours.
Scoped By API Key
Each MCP key locks to a single business. Revoke from your dashboard the second you stop trusting an environment.
Read & Write | Live
19 read tools + 10 write tools (create/update contacts, move deals, send proposals/invoices, log calls). Mutations require Growth plan; destructive actions require explicit confirm:true.

Connect in 30 seconds

Mint a key in Settings → API Keys, paste the snippet, restart your agent. The hosted endpoint is live; a local stdio server is also available for self-host scenarios.

Hosted MCP (recommended)
Live
Zero install. Mint a key in Settings → API Keys, paste this snippet into your agent's MCP config, restart. Available now on Starter (read), Growth (read + write), Pro (full incl. destructive). Plan tier filters tools - agents only see what you can call.
{
  "mcpServers": {
    "onehub360": {
      "url": "https://onehub360.com/api/mcp",
      "headers": {
        "Authorization": "Bearer nhk_<your_key>"
      }
    }
  }
}
Local MCP (advanced)
Optional
Want to run the server on your own machine for air-gapped access or self-host? The local Node/TypeScript stdio server is in private preview - email dev@onehub360.com for source access. Public open-source release after the hosted version stabilizes.
{
  "mcpServers": {
    "onehub360": {
      "command": "node",
      "args": ["/path/to/oh360-mcp/dist/index.js"],
      "env": {
        "OH360_API_KEY": "nhk_<your_key>",
        "OH360_DEFAULT_BUSINESS_ID": "<your_business_id>"
      }
    }
  }
}
Tools available now (33 total)
Tenant-scoped. Rate-limited per plan. Same auth as the REST API. Changes are logged. Read tools are listed below - write/destructive tools (oh360_create_contact, oh360_send_proposal, oh360_delete_contact, etc.) appear once you connect on a Growth+ plan.
ToolWhat it does
oh360_whoamiDiagnostic: confirm the MCP is wired up and which business it points at.
oh360_search_contactsSearch by name, email, phone, or company. Paginated.
oh360_get_contactFetch a single contact by id.
oh360_list_dealsList pipeline deals, optionally filtered by stage.
oh360_get_dealFetch a single deal with linked contact and history.
oh360_list_tasksList tasks and reminders, filterable by status or assignee.
oh360_get_taskFetch a single task with assignee and business.
oh360_list_proposalsList proposals (lite) with status, sent/viewed timestamps, version.
oh360_get_proposalFetch a proposal with full sections, HTML, cover email, and linked contact/deal.
oh360_list_invoicesList invoices, filterable by status or contact.
oh360_get_invoiceFetch an invoice with line items, payments, and linked contact/deal.
oh360_list_email_threadsList inbox conversations (email/SMS/call) with last-message preview.
oh360_get_email_threadFetch all messages in an inbox conversation thread.
oh360_list_chatsList live-chat conversations (visitor sessions).
oh360_get_chat_messagesFetch messages in a chat conversation. Read-only - does not mark as read.
oh360_list_businessesList businesses the API key / user can access.
oh360_get_tenantFetch tenant: plan, subscription, branding, custom domain.
oh360_dashboard_statsAggregate metrics: pipeline value, revenue this/last month, pending tasks, today’s appointments.
oh360_global_searchCross-object search across contacts, businesses, deals, tasks, conversations.
Coming next
Write tools, idempotency keys, confirm:true on send and delete actions, plan gating and the hosted server at https://onehub360.com/api/mcp are all live today. Still in the works: replying to an email thread from your agent. Signing in with your OneHub360 account instead of an API key is planned.
  • oh360_reply_to_email
Security model

API key auth, scoped per business.

Every MCP key is bound to a single business in your tenant. An agent connected with that key cannot read or write to any other business, even if you have multiple. Keys are SHA-256 hashed on our side - we never store the raw value.

Plan tier gating.

Read tools are available on Starter and above. Write tools need Growth or higher, and delete tools need Pro or higher. The Free plan has no API access. The MCP's tools/list response is filtered by your plan, so agents only ever see what they're allowed to call.

Mutation safety.

Send and delete actions require an explicit confirm: true. Without it, the call is refused and nothing is sent or removed. Combined with idempotency keys, agents can't accidentally fire the same proposal twice or hit the wrong contact in a retry loop.

Idempotency.

If you set an Idempotency-Key header on the outer MCP request, OneHub360 derives per-tool-call keys from it (${outerKey}:${toolName}:${callIndex}). A retry with the same outer key produces the same response per tool call - agents get safe retries on flaky networks without double-creating contacts, deals, or invoices. Different bodies under the same outer key + tool combo return 409 IDEMPOTENCY_CONFLICT; generate a fresh key rather than reusing one for a different operation. Read tools never forward the key.

Audit log.

Write and delete calls are recorded in your audit log with the API key, tool name, arguments (secrets redacted) and response status. The API key cache lasts 60 seconds, so revoking a key from Settings → API Keys kills it within a minute.

Open source - when it's ready
The local MCP server will be open source once we cut a public release. It's currently in private preview while we harden it against the OneHub360 v1 API. If you want to audit, fork, or self-host before then, email dev@onehub360.com for source access. We'll also announce the public drop on the changelog.

Ready to talk to your CRM?