NewDeveloper API and MCP

Connect your tools and AI agents to GuardenerAI.

The Developer API lets your own scripts and integrations read and update your CRM, and the MCP server lets Claude and other AI agents work with it too. Both use the same API keys, under the same permissions as the rest of your team.

Get started → View API reference

Your API reference lives inside your organization at https://<your-org>.guardenerai.com/developers/

What you can build

Your CRM, available to the tools you already use.

Sync records with another system, automate a routine from a script, or let an AI agent work a queue. The API covers the records your team works with every day.

Records

Read and update companies, people, leads, opportunities, tasks, cases and notes.

Work queues

List the items waiting in a queue, then claim one to work on or release it back.

Files

Attach files to records, so documents land next to the customer they belong to.

Invoices

Read invoices from your built-in books. Accounting data is read-only in this version.

AI agents

Connect Claude or another MCP-capable agent so it can search, read and update records for you.

Try it in the browser

Every organization has its own API reference with in-browser try-it, an OpenAPI spec and a Postman collection.

API keys

One kind of key, controlled by your admin.

An organization admin creates keys under Settings, API keys. Send the key with every request in the X-Api-Key header.

Each key is shown once, when it is created.
Choose read-only or read-and-write.
Rotate a key, revoke it, or set it to expire.
A key can never do more than a Member of the organization.

Your API reference

Each organization's reference lives at its own address:

https://<your-org>.guardenerai.com/developers/

It includes in-browser try-it, an OpenAPI spec download and a Postman collection. Authenticate with:

X-Api-Key: <your key>

Connect an AI agent

Bring Claude and other agents into your CRM.

The MCP (Model Context Protocol) server lets MCP-capable AI agents work with your records, using the same API keys as the Developer API. No separate credential.

Connection details

Server URL: https://<your-org>.guardenerai.com/mcp (streamable HTTP)
Headers: x-api-key and x-org-base-url: https://<your-org>.guardenerai.com

For example, with Claude Code:

claude mcp add guardenerai --transport http https://<your-org>.guardenerai.com/mcp \
  --header "x-api-key: <your key>" \
  --header "x-org-base-url: https://<your-org>.guardenerai.com"

Tools the agent can use

Search recordsFind records across your CRM.
Get a recordRead one record in full.
Create a recordAdd a new record.
Update a recordChange fields on an existing record.
Add a noteAttach a note to a record.
List a worklistSee the items waiting in a queue.
Claim a recordTake a queue item to work on.
Release a recordHand a queue item back.

Security and permissions

An integration never gets more than your team does.

Member-level at most

A key can never do more than a Member of the organization. Read-only keys cannot change anything.

Keys you control

Only an admin creates keys. Rotate them, set them to expire, or revoke one and access ends immediately.

Agents follow the same rules

Everything an AI agent does follows its key's permissions, read-only scope, usage limits and rate limits.

Want the wider picture? Read how we approach security.

Getting started

Three steps to your first call.

1Admin

Create a key

An organization admin opens Settings, API keys, creates a key and copies it. It is shown once.

2Explore

Open your reference

Go to /developers on your organization's address to browse endpoints and try them in the browser.

3Build

Call the API or connect MCP

Send the key in the X-Api-Key header from your code, or add the MCP server to your AI agent.

FAQ

Questions developers ask first.

Can I write accounting data through the API?

No. In this version accounting data is read-only: you can read invoices, but you cannot create or change them through the API.

Does the MCP server need a separate login?

No. An AI agent connects with the same API keys your organization admin creates for the Developer API. There is no second credential to manage.

What happens when a key is revoked?

Access ends immediately. Any script, integration or AI agent using that key stops working until it is given a new one.

Who can create API keys?

An organization admin, under Settings, API keys. Each key is shown once when it is created, so store it somewhere safe straight away.

Can an API key do more than a person on my team?

No. A key can never do more than a Member of the organization, and a read-only key cannot change anything at all.