XBASE MCP: use XBASE from Claude and Cursor
Connect Claude Code, Cursor or another MCP client to your XBASE workspace: access token, server address and the list of tools.
Updated on
The XBASE MCP lets an AI agent, like Claude Code or Cursor, read and edit your workspace through plain-language conversation: WhatsApp, Instagram, AI agents, automations, contacts, conversations and funnels. There are 198 tools.
MCP (Model Context Protocol) is the open standard these agents use to connect to other systems.
How it works
- Server address:
https://mcp.xbase.app/mcp(HTTP transport). - Token access: each connection uses a workspace MCP access token, which starts with
xmcp_. - Locked to the workspace: the token only reads and edits the workspace where it was created, even if the agent asks for another one.
- Your roles apply: the token acts as the person who created it. If that person cannot edit agents in XBASE, the AI agent cannot either.
- You revoke it whenever you want: the token stops working right away.
Create the token
- In XBASE, open Integrations, go to the Agents & APIs tab and find the MCP access card. You need permission to manage integrations.
- Click New token (or Connect integration, if it is your first one).
- In Name, write something that identifies the use, like "Marco's Claude Code", and click Create token.
- The Token created window shows the Token, the MCP server URL and the ready-made command for Claude Code (terminal). Copy it now: the token is not shown again.
- Click Done, I copied it.
The card lists the tokens with their last 4 characters, the creation date and the last use. To cut access, click Revoke.
Connect in Claude Code
In the terminal, run the command shown in the Token created window, replacing xmcp_... with your token:
claude mcp add --transport http xbase https://mcp.xbase.app/mcp --header "Authorization: Bearer xmcp_..."Then ask in plain language. Examples:
- "List the approved WhatsApp templates in my workspace."
- "Create a quick reply called hours with our business hours."
- "Show today's conversations that are in the Proposal stage."
Connect in Cursor and other MCP clients
Any MCP client with HTTP transport works. Enter the server URL and the authorization header. In Cursor, in the MCP configuration file (.cursor/mcp.json):
{
"mcpServers": {
"xbase": {
"url": "https://mcp.xbase.app/mcp",
"headers": { "Authorization": "Bearer xmcp_..." }
}
}
}Tools
The full list, generated from the server code, has one page per area (on the side, under Tools). Where a tool asks for workspaceId, only the token's workspace id is accepted: if the agent sends another, the MCP refuses and answers with the right id.
AI agents
View and adjust the workspace's AI agents: model, instructions, guardrails and Dcision. 9 tools.
WhatsApp numbers, templates and Flows through the MCP. 22 tools.
Instagram accounts, profile, comments and DM automations through the MCP. 11 tools.
Webhooks
Create, edit and monitor the workspace webhooks through the MCP. 6 tools.
Conversations
List, read, move and update the workspace conversations through the MCP. 7 tools.
Contacts
Search, create and edit contacts (and raw contacts) through the MCP. 10 tools.
Funnels, stages and tags
Funnels, stages, tags and contact channels through the MCP. 28 tools.
Organizations
Companies (organizations) and their contacts through the MCP. 9 tools.
Calendar
Availability, meetings and transcripts through the MCP. 5 tools.
Quick replies
Chatcenter canned messages through the MCP. 4 tools.
Files
Workspace files through the MCP. 3 tools.
Automations
Create, edit, version and monitor automations through the MCP. 11 tools.
AI usage
AI token and credit usage through the MCP. 1 tool.
Marketing
Marketing strategy, identity, audiences, products and actions through the MCP. 32 tools.
Ads
Ad accounts, performance, audits and changes through the MCP. 22 tools.
Creative Studio
Creative Studio productions through the MCP. 8 tools.
Post scheduler
Schedule and publish social posts through the MCP. 10 tools.
Rules and limits
- The token does not pick tools: it unlocks every tool on the list, always limited to the roles of the person who created it.
- Actions have real effects: sending, editing and deleting through MCP is the same as doing it on screen. Delete actions cannot be undone.
- When someone stops being a member of the workspace, the tokens they created stop working.
- Keep the token like a password. If it leaks, revoke it in Integrations → MCP access and create another one.