AI Access with MCP

MCP lets an AI assistant work with your CRM data through a safe set of tools. This page explains what MCP is, what an AI can do with it, and how FlyCRM keeps it safe. The next page connects a client.

CRM concept: MCP (Model Context Protocol) is a standard way for an AI assistant to use an outside tool. FlyCRM acts as an MCP server. An AI client, such as Claude, connects to it and uses the tools FlyCRM offers.

What MCP lets an AI do

With MCP turned on, you can ask an AI assistant to work with your CRM in plain language. For example:

• "Find every open deal worth more than 5000."
• "Create a lead for Jane Doe at Acme, source Referral."
• "Log a call on the Acme deal and move it to Negotiation."
• "Show me the pipeline report for this month."

The AI does not touch your database directly. It calls the FlyCRM tools, and FlyCRM does the work.

How MCP keeps your data safe

FlyCRM controls what an AI can do through four layers:

• You turn it on. MCP is off until you enable it. An AI cannot reach your CRM by default.
• Authorization. A client must sign in and get a token before it can call any tool. See Connecting an AI client to MCP.
• The same permissions. An AI acts with the CRM permissions of the user it signs in as. A CRM Agent's AI sees only that agent's records.
• A tool allowlist. You can turn off any tool you do not want an AI to use.

CAUTION: MCP gives an AI real access to real customer data. Turn on only the tools you need. Give access only to clients you trust.

The tools, in short

FlyCRM offers three kinds of tool:

• Read tools — search and fetch records, list pipelines, tags, and users, and pull reports.
• Write tools — create and update contacts, companies, leads, deals, and tasks.
• Action tools — convert a lead, move a deal stage, close a deal, log an activity, and tag a record.

For the full list, see MCP tools reference.

An audit log

FlyCRM records every MCP action in an audit log. The log shows which client did what and when. Use it to review AI activity and to check that access stays within bounds.