Connect an AI agent (MCP)

NextGen CRM can be exposed as an MCP server so an AI agent (Claude Code, Cowork, or any MCP client) can work with your CRM through a standard interface — always under your account’s existing access rules. This first version is read-only: an agent can search partners and list tickets, only within your own tenant.

What you need

An MCP access key (ing_…) for your organization. Keys are issued by the NextGen CRM team once MCP is enabled for your account. Treat the key like a password — it can be revoked at any time.
Your cell’s endpoint:
- EU tenants: https://eu.ngcrm.ai/mcp
- BR tenants: https://br.ngcrm.ai/mcp

Authentication is a single HTTP header: Authorization: Bearer ing_<your-key>.

Connect

Claude Code

claude mcp add --transport http ngcrm https://eu.ngcrm.ai/mcp \
  --header "Authorization: Bearer ing_YOUR_KEY"

The tools search_partners and list_tickets then become available.

Cowork / other MCP clients

Add a remote MCP server (Streamable HTTP):

URL: https://eu.ngcrm.ai/mcp
Header: Authorization: Bearer ing_YOUR_KEY

The client performs the handshake (initialize → tools/list → tools/call) automatically.

Available tools

Tool	Input	Returns
`ping`	—	your tenant id (proves auth + connection)
`search_partners`	`value` (e.g. a tax id), optional `scheme`, `entityType`	matching partner + registry/dedup status, within your tenant
`list_tickets`	optional `priority`	up to 200 active tickets (subject, priority, stage, partner, SLA), within your tenant

Security & limits

You only ever see your own tenant’s data — scope comes from your key, enforced by row-level security. There is no way to reach another tenant’s data.
Read-only in this version — nothing is changed.
Rate-limited per key (and at the edge) — bursts return 429.
Fail-closed — a missing/invalid/revoked key returns 401; a key without MCP access returns an error. Disabling MCP for the account revokes every key immediately.

Quick check (curl)

curl -sS https://eu.ngcrm.ai/mcp \
  -H "Authorization: Bearer ing_YOUR_KEY" \
  -H "Content-Type: application/json" -H "Accept: application/json, text/event-stream" \
  -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-06-18","capabilities":{},"clientInfo":{"name":"curl","version":"1"}}}'

A valid key returns "serverInfo": { "name": "NGCRM MCP" … }. Without a key you get 401.