MCP ready
The MCP endpoint exposes bounded tools for account work: onboarding a business, checking a slug, creating a redirect QR, building a menu from a template, drafting landing-page blocks, and auditing performance.
list_businesses, create_business, list_qr_links, check_slug, create_redirect_qr, create_wallet_pass, export_wallet_pass, create_product_passport, validate_gs1_digital_link, export_product_passport, create_scan_notification_preference, and create_table_qr_pack.
create_menu_from_template and create_landing_page_from_template let an agent set up a useful account in minutes.
ai_summary, ai_analyze_link, ai_draft_landing_page, ai_draft_menu_copy, ai_accessibility_review, and ai_experiment_suggestions turn raw account data into action.
export_qr_design returns SVG, PNG, JPEG, PDF, or EPS payloads for print workflows and agency automation. export_wallet_pass returns WalletCard fallback readiness for JSON, vCard, calendar, printable, Apple, and Google wallet paths. export_product_passport returns JSON-LD, EPCIS-style, CSV, and PDF-ready product passport data.
create_order_intent, export_kitchen_ticket, query_kitchen_queue, and create_report_bundle let scoped agents run request-only restaurant queues and client report workflows without payment or mail credentials.
list_help_guides, list_integration_guides, list_integration_credentials, create_integration_credential, send_sample_integration_event, list_integration_deliveries, install_integration_recipe, test_integration, preview_bulk_qr_import, import_bulk_qr_links, query_analytics_summary, and create_report_schedule let agents set up client-owned integrations without exposing secrets.
create_service_request and query_kitchen_queue let an agent support table QR operations, service queues, and request-only ordering workflows without payment credentials.
create_product_passport_batch and publish_recall_notice support GS1-style product passports, batch workflows, manuals, warranty, safety sheets, and recall-safe destination updates.
upload_asset, invite_team_member, preview_report, test_custom_domain, and create_widget_config cover asset libraries, client handoff, report previews, domain health, and embeddable acquisition widgets.
POST /api/mcp/execute
Authorization: Bearer YOUR_TOKEN
{"tool":"check_slug","parameters":{"slug":"MapleRestaurant"}}
MCP tokens are bearer tokens with scopes, optional business restrictions, expiration, revocation, rate limits, and audit logs. A restricted token can only see or mutate the allowed business ids.
MCP calls use the mcp throttle. AI-backed tools also sit behind the AI endpoint limits, so agents should queue work and retry only after a 429 reset.
Tool execution returns 403 when the token lacks the tool scope or the target business id. Agents should stop and request a broader token instead of probing ids.
Read context, check slug availability, create one object, verify the returned id, then continue. Avoid bulk retries, avoid guessed ids, and keep external URLs as HTTPS public hosts.