Back to CalavaiNew — Beta

Run your bookings from your AI.

Calavai is the first booking platform with a native Model Context Protocol server. Ask Claude, Cursor, or ChatGPT to show your bookings, revenue, schedule, and clients — without opening the dashboard.

Claude DesktopCursorChatGPTClineZedVS Code

What you can ask

Schedule

What are my next 5 bookings?

Revenue

How much did I make this month?

Clients

Who hasn't booked in 60 days?

Services

Show services with low conversion.

Availability

When am I free Tuesday afternoon?

Packages

Which clients have packages running out?

Subscriptions

List all active subscriptions.

Per-client

Total revenue from María this year.

Revenue

How much did I refund this quarter?

Connect in 30 seconds

  1. 1

    Generate an API key from your dashboard. Save it — you'll see it once.

  2. 2

    Paste the snippet for your AI client below. Replace YOUR_KEY.

  3. 3

    Restart the client and ask “What are my bookings this week?”

Claude Desktop — ~/Library/Application Support/Claude/claude_desktop_config.json (macOS)json
{
  "mcpServers": {
    "Calavai": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://www.calavai.com/api/mcp/pro",
        "--header",
        "Authorization:Bearer calv_live_YOUR_KEY"
      ]
    }
  }
}
Cursor — Settings → MCP → Add serverjson
{
  "mcpServers": {
    "Calavai": {
      "url": "https://www.calavai.com/api/mcp/pro",
      "headers": {
        "Authorization": "Bearer calv_live_YOUR_KEY"
      }
    }
  }
}
ChatGPT (Developer Mode → Connectors)text
URL:           https://www.calavai.com/api/mcp/pro
Authorization: Bearer calv_live_YOUR_KEY
Transport:     Streamable HTTP
Cline / Zed / any HTTP-MCP clienttext
Endpoint: https://www.calavai.com/api/mcp/pro
Header:   Authorization: Bearer calv_live_YOUR_KEY
Protocol: 2025-11-25 (also accepts 2025-06-18, 2024-11-05)

Why mcp-remotefor Claude Desktop? Claude Desktop's built-in transport still requires the local mcp-remote bridge to talk to HTTP MCP servers. Cursor, ChatGPT, and Cline speak HTTP directly.

Built secure by default

Read-only in v1

No tool can cancel a booking, refund a client, or modify your schedule in this phase.

Per-key revocation

Lose your laptop? Revoke the key in one click — the agent loses access instantly.

Tenant-locked queries

Every database call is bound to your account on the server. Agents can never read another Pro's data.

IP allowlist

Optionally restrict each key to specific CIDR blocks. Bind a key to your office IP, your home, or your VPN egress.

Audit log + tamper chain

Every call recorded with timestamp, tool, IP, ASN. SHA-256 chained for tamper evidence. Surfaced on your dashboard.

Per-tool rate limits

60/min per key, 30/min per individual tool, 120/min per account. Daily byte cap prevents silent exfiltration.

Auto-revoke idle keys

Keys unused for 90 days are automatically revoked. Forgotten keys can't leak.

Anomaly detection

Daily cron flags unusual traffic patterns. New country, sudden spike, atypical ASN — you get emailed.

See the full security disclosure page for our reporting policy and threat model.

Tools available now

calavai_list_bookings

List bookings

calavai_get_booking

Get booking detail

calavai_get_revenue

Get revenue summary

calavai_list_clients

List clients

calavai_get_schedule

Get schedule

calavai_list_services

List services

calavai_list_subscriptions

List subscriptions

calavai_list_packages

List client packages

calavai_get_client_revenue

Get client lifetime revenue

Full catalog with descriptions: /mcp/tools (machine-readable at /api/mcp/catalog). Write and destructive tools (create, reschedule, cancel, refund) are on the roadmap with mandatory two-phase confirmation and per-day dollar caps.

Troubleshooting

Claude Desktop says ‘Server disconnected’

Make sure you used the npx mcp-remote snippet (not a raw URL), the key is prefixed with `Bearer `, and the URL uses `www.calavai.com`. Then quit Claude Desktop completely (Cmd+Q on macOS) and reopen — closing the window is not enough.

Cursor returns ‘Not enrolled’

Your account is not yet in the beta allowlist. We are rolling out gradually. Email [email protected] (subject 'MCP beta') with the email you signed up with.

Daily byte cap reached

A single key has a daily anti-exfiltration cap. Generate a second key for high-throughput automations, or wait until 00:00 UTC.

I revoked a key by accident

Generate a new one. Old keys cannot be un-revoked by design — that would defeat the kill switch. Update your client config with the new key.

What protocol version do you support?

MCP 2025-11-25 (current), 2025-06-18, 2025-03-26, and 2024-11-05. Older versions refused with 400.

FAQ

What is MCP?

Model Context Protocol — an open standard introduced by Anthropic in November 2024 that lets AI agents call your tools securely. Think of it as USB for AI: one protocol, every client.

Does my AI client see all my data?

Only what the active scopes allow. Scopes are per-key; you choose. Agents never see passwords, Stripe secrets, Google OAuth tokens, or another Pro's data.

Can agents accidentally cancel bookings?

Not in this phase. We do not ship any write or destructive tools yet. When we do, every destructive call will require a two-phase confirmation token plus a magic-link step-up.

Does this cost extra?

No. Calavai MCP is included with every account at no additional charge. Our platform fee on bookings is unchanged.

Can I use this with my own AI app?

Yes — any MCP-compatible HTTP client. The catalog at /api/mcp/catalog is unauthenticated so your code can discover the tool surface before connecting.

What about ChatGPT and Gemini?

ChatGPT (Developer Mode → Connectors) supports MCP natively. Gemini is adding support — when they ship, our endpoint works as-is.

Where do you store the key?

We store only the SHA-256 hash. The plaintext key is shown to you once at creation and never persisted. If you lose it, generate a new one.

GDPR / data export?

Every Pro can download a CSV of every MCP call against their account (last 30 days) from the dashboard. Right of access (Art. 15) honored.

Ready to connect?

Generate your first key and ask your AI for your next booking.

Generate API key →