Run your bookings from your AI.
Calavai is the first booking platform with a native Model Context Protocol server. Ask Claude, Cursor, or ChatGPT to show your bookings, revenue, schedule, and clients — without opening the dashboard.
What you can ask
Schedule
“What are my next 5 bookings?”
Revenue
“How much did I make this month?”
Clients
“Who hasn't booked in 60 days?”
Services
“Show services with low conversion.”
Availability
“When am I free Tuesday afternoon?”
Packages
“Which clients have packages running out?”
Subscriptions
“List all active subscriptions.”
Per-client
“Total revenue from María this year.”
Revenue
“How much did I refund this quarter?”
Connect in 30 seconds
- 1
Generate an API key from your dashboard. Save it — you'll see it once.
- 2
Paste the snippet for your AI client below. Replace
YOUR_KEY. - 3
Restart the client and ask “What are my bookings this week?”
{
"mcpServers": {
"Calavai": {
"command": "npx",
"args": [
"-y",
"mcp-remote",
"https://www.calavai.com/api/mcp/pro",
"--header",
"Authorization:Bearer calv_live_YOUR_KEY"
]
}
}
}{
"mcpServers": {
"Calavai": {
"url": "https://www.calavai.com/api/mcp/pro",
"headers": {
"Authorization": "Bearer calv_live_YOUR_KEY"
}
}
}
}URL: https://www.calavai.com/api/mcp/pro
Authorization: Bearer calv_live_YOUR_KEY
Transport: Streamable HTTPEndpoint: https://www.calavai.com/api/mcp/pro
Header: Authorization: Bearer calv_live_YOUR_KEY
Protocol: 2025-11-25 (also accepts 2025-06-18, 2024-11-05)Why mcp-remotefor Claude Desktop? Claude Desktop's built-in transport still requires the local mcp-remote bridge to talk to HTTP MCP servers. Cursor, ChatGPT, and Cline speak HTTP directly.
Built secure by default
Read-only in v1
No tool can cancel a booking, refund a client, or modify your schedule in this phase.
Per-key revocation
Lose your laptop? Revoke the key in one click — the agent loses access instantly.
Tenant-locked queries
Every database call is bound to your account on the server. Agents can never read another Pro's data.
IP allowlist
Optionally restrict each key to specific CIDR blocks. Bind a key to your office IP, your home, or your VPN egress.
Audit log + tamper chain
Every call recorded with timestamp, tool, IP, ASN. SHA-256 chained for tamper evidence. Surfaced on your dashboard.
Per-tool rate limits
60/min per key, 30/min per individual tool, 120/min per account. Daily byte cap prevents silent exfiltration.
Auto-revoke idle keys
Keys unused for 90 days are automatically revoked. Forgotten keys can't leak.
Anomaly detection
Daily cron flags unusual traffic patterns. New country, sudden spike, atypical ASN — you get emailed.
See the full security disclosure page for our reporting policy and threat model.
Tools available now
calavai_list_bookingsList bookings
calavai_get_bookingGet booking detail
calavai_get_revenueGet revenue summary
calavai_list_clientsList clients
calavai_get_scheduleGet schedule
calavai_list_servicesList services
calavai_list_subscriptionsList subscriptions
calavai_list_packagesList client packages
calavai_get_client_revenueGet client lifetime revenue
Full catalog with descriptions: /mcp/tools (machine-readable at /api/mcp/catalog). Write and destructive tools (create, reschedule, cancel, refund) are on the roadmap with mandatory two-phase confirmation and per-day dollar caps.
Troubleshooting
Claude Desktop says ‘Server disconnected’
Make sure you used the npx mcp-remote snippet (not a raw URL), the key is prefixed with `Bearer `, and the URL uses `www.calavai.com`. Then quit Claude Desktop completely (Cmd+Q on macOS) and reopen — closing the window is not enough.
Cursor returns ‘Not enrolled’
Your account is not yet in the beta allowlist. We are rolling out gradually. Email [email protected] (subject 'MCP beta') with the email you signed up with.
Daily byte cap reached
A single key has a daily anti-exfiltration cap. Generate a second key for high-throughput automations, or wait until 00:00 UTC.
I revoked a key by accident
Generate a new one. Old keys cannot be un-revoked by design — that would defeat the kill switch. Update your client config with the new key.
What protocol version do you support?
MCP 2025-11-25 (current), 2025-06-18, 2025-03-26, and 2024-11-05. Older versions refused with 400.
FAQ
What is MCP?
Model Context Protocol — an open standard introduced by Anthropic in November 2024 that lets AI agents call your tools securely. Think of it as USB for AI: one protocol, every client.
Does my AI client see all my data?
Only what the active scopes allow. Scopes are per-key; you choose. Agents never see passwords, Stripe secrets, Google OAuth tokens, or another Pro's data.
Can agents accidentally cancel bookings?
Not in this phase. We do not ship any write or destructive tools yet. When we do, every destructive call will require a two-phase confirmation token plus a magic-link step-up.
Does this cost extra?
No. Calavai MCP is included with every account at no additional charge. Our platform fee on bookings is unchanged.
Can I use this with my own AI app?
Yes — any MCP-compatible HTTP client. The catalog at /api/mcp/catalog is unauthenticated so your code can discover the tool surface before connecting.
What about ChatGPT and Gemini?
ChatGPT (Developer Mode → Connectors) supports MCP natively. Gemini is adding support — when they ship, our endpoint works as-is.
Where do you store the key?
We store only the SHA-256 hash. The plaintext key is shown to you once at creation and never persisted. If you lose it, generate a new one.
GDPR / data export?
Every Pro can download a CSV of every MCP call against their account (last 30 days) from the dashboard. Right of access (Art. 15) honored.
Ready to connect?
Generate your first key and ask your AI for your next booking.
Generate API key →