> ## Documentation Index
> Fetch the complete documentation index at: https://docs.meshpilot.app/llms.txt
> Use this file to discover all available pages before exploring further.

# Developers & MCP

> Drive the whole operator cockpit from the AI client you already use.

Mesh Pilot exposes a **Model Context Protocol (MCP) server**. Connect your ad accounts to Mesh Pilot once, then drive the same operator surface — audits, proposals, approvals, rollbacks — from Claude, Cursor, Gemini CLI, ChatGPT, or any MCP-aware AI client, in plain English.

The cockpit and the AI chat are two views on one operating system. Anything you do over MCP lands in the same Inbox, respects the same guardrails, and is written to the same audit log.

<CardGroup cols={2}>
  <Card title="Mint an MCP key" icon="key" href="/developers/mcp-keys">
    Create a key in Settings → MCP and copy it once.
  </Card>

  <Card title="Connect your client" icon="plug" href="/developers/connect-client">
    Paste the endpoint + key into Claude, Cursor, or any MCP client.
  </Card>

  <Card title="Scopes & roles" icon="shield" href="/developers/scopes-and-roles">
    Constrain a key to specific brands, platforms, and read vs write.
  </Card>

  <Card title="Audit log" icon="list-checks" href="/developers/audit-log">
    See exactly what every key did, per key and org-wide.
  </Card>
</CardGroup>

## The endpoint

```
https://mcp.meshpilot.app/mcp
```

It speaks streamable-HTTP MCP and authenticates with a bearer key you mint in the cockpit. One endpoint — every MCP-aware client accepts the same URL.

## How it fits together

1. **Connect once, in the cockpit.** OAuth your platforms (Meta, Amazon, Google, LinkedIn, TikTok, Shopify) under Settings → Integrations. The MCP server acts on those same connections — it never asks your AI client for platform credentials.
2. **Mint a scoped key.** In Settings → MCP, create a key bounded to the brands, platforms, and access level you want that client to have.
3. **Ask in natural language.** "Audit my Ayurpet Meta account." "Show approval-pending actions." "Approve the scale on campaign 9234, reject the rest." The server translates the sentence into the audit / approval / rollback operations Mesh Pilot runs internally.
4. **Same guardrails, same Inbox.** Write operations still land as proposals in your Inbox (unless an autonomy threshold lets them auto-run), still respect spend/channel guardrails, and are always reversible.

## Why scoped keys matter

A key is a **capability ceiling**, not just an auth token. You can hand an outside consultant a key that reads one brand's Amazon Ads and nothing else — no write, no other brands, no other platforms — with an expiry date, a daily call cap, and a full activity log. Revoke it in one click and see everything it ever did.

<Card title="Read about scopes & roles" icon="arrow-right" href="/developers/scopes-and-roles">
  The full capability model.
</Card>
