Connect an MCP server
Point Spiich at an external Model Context Protocol server over HTTPS and the assistant can call that service's tools inside Chat. Connections are either private to you or shared with the whole workspace.
Before you start
- The server has a public HTTPS address, speaks MCP over streamable HTTP, and exposes at least one tool.
MCP, the Model Context Protocol, is an open standard that lets an outside service publish tools an AI assistant can call. Connect one to Spiich and the assistant can use that service inside Chat alongside your CRM.
Add a connection
Open the MCP section
Go to
Settings > Integrationsand scroll to Model Context Protocol. You can also get there from the Chat composer: Tools, then Manage MCP connections.Choose personal or shared
Click Add under Your connections for a connection only you can use, or under Workspace connections to share it with everyone.
Name it
Enter a Name. This is the label you will see in Chat when the assistant uses the server, so keep it short and distinctive. Names are capped at 80 characters.
Paste the Server URL
Enter the server's streamable HTTP endpoint, for example the address a provider publishes as its MCP endpoint. It must start with
https://.Pick how it authenticates
Choose None, Bearer token and paste the token the provider issued you, or OAuth to be sent to the provider's own consent screen.
Add the connection
Click Add connection, or Continue to authorize for OAuth. Spiich connects once to verify the server and list its tools, then confirms with Connection added.
Check the switch is on
The row shows the server's host name and how many tools it offered. Make sure the switch on the row is on, which is what makes the tools available to the assistant.
An OAuth connection sits in an Authorizing state while you are away at the provider. It cannot be switched on until the handshake finishes. If it comes back Authorization failed, remove the row and try again, or use a bearer token instead: not every provider offers OAuth for MCP.
Personal versus workspace connections
| Your connections | Workspace connections | |
|---|---|---|
| Who sees it | Only you | Everyone in the workspace |
| Who can use its tools | Only your assistant | Anyone's assistant |
| Who can add one | You | Any active workspace member |
| Who can switch it on or off | You | Only the person who added it |
| Who can remove it | You | Only the person who added it |
No admin approval is required for either kind. Shared rows show who added them, and turning one off or removing it takes effect for the whole workspace immediately. If you need a shared connection changed and you did not create it, ask the person named on the row or add your own copy.
What enabling a connection actually grants
This is the part to read twice.
Two practical consequences. First, prefer a personal connection while you are trying a server out, and promote it to a workspace connection once you know what it does. Second, if a server exposes tools whose names collide with another server's, switch off the one you do not need for that task so the assistant is not choosing between two identically named tools.
When the assistant does use a server, the chat shows a tool row labelled with your connection name and a plain-language action, so you can always see which server answered.
The rules the form enforces
- HTTPS only. A plain
http://address is refused with MCP URL must use HTTPS. - Public internet only. The address must resolve to a public address. Localhost, loopback, private networks, link-local, cloud metadata and reserved ranges are all rejected. Internal-only MCP servers cannot be connected.
- No credentials in the URL. A username or password embedded in the address is refused with MCP URL cannot include credentials. Put the token in the Bearer token field instead. Browser autofill is the usual culprit here.
- At least one tool. A server that responds correctly but lists no tools is refused with MCP server did not expose any tools.
- Tools only. Spiich uses MCP tools. MCP resources, prompts and other capabilities are not used.
- Name under 80 characters.
Limits
- Spiich waits up to 30 seconds when first probing a server for its tool list.
- At most 50 connections per person are made available to the assistant in a single request; beyond that the most recently added are used.
- Bearer tokens and OAuth credentials are encrypted before they are stored and are never returned to the browser or included in API responses.
- Removing a connection deletes the credentials Spiich holds, but does not revoke the token or OAuth grant at the provider. Revoke it there too if you want it fully cut off.
If something goes wrong
A connection is stuck on `Authorizing`. The OAuth handshake never finished, usually because the tab was closed or consent was declined. Open the row's menu, choose Remove, then add it again and complete the provider's screen.
The assistant ignores a connection that is in the list. Its switch is off, so it is hidden from agents, or it is still authorizing. Turn the switch on in Settings > Integrations.
A teammate's shared connection has greyed-out controls. Only the person who added a connection can enable, disable or remove it. Ask whoever is named as Added by on the row.
The bearer token field says it is required though you typed one. The field holds only spaces, or Authentication was switched away from Bearer token after typing. Select Bearer token again and paste with no leading or trailing spaces.