Plain MCP

Live

OAUTH 2.1

CUSTOMER SUPPORT

CRM & Sales

Every customer, thread, tenant, and help center article your support team works in lives in Plain. Plain MCP gives your agent per-user OAuth access to customer records, threads, and help center content scoped to the authorizing user.

  • Acts as the user: Customer updates and thread edits stay attributed to the Plain user who authorized the agent.
  • Credentials stay vaulted: AES-256, resolved at request time, never in LLM context.
  • Scoped before every call: User permissions enforced. 90-day audit trail.
Plain MCP
agent · Acme Q3
Run
Mark all threads for tenant_acme as priority:high and tag them billing-issue.
S
plainmcp_upsert_thread_field
104ms
Support agent
Updated 14 open threads for tenant_acme. priority=high, tag=billing-issue applied. 3 threads were already high priority.
Sources: Plain, tenant_acme open threads
plainmcp
14
18:29
Message Claude...

Tools your agent reaches for on Plain MCP, scoped per user.

CALL ANY TOOL
Read and upsert customers, threads, tenants, custom fields, and help center articles. Same toolkit, every framework, no auth plumbing.
plainmcp_addgeneratedreply
Addgeneratedreply
Add an AI-generated reply to a thread in Plain.
Parameters
Name
Type
Required
Description
input
string
Required
No description.
plainmcp_archivelabeltype
Archivelabeltype
plainmcp_bulkupsertthreadfields
Bulkupsertthreadfields
plainmcp_createlabeltype
Createlabeltype
plainmcp_createsnippet
Createsnippet
plainmcp_createthreadfieldschema
Createthreadfieldschema
plainmcp_deletethreadfieldschema
Deletethreadfieldschema
plainmcp_getattachmentdownloadurl
Getattachmentdownloadurl
plainmcp_getcustomers
Getcustomers
plainmcp_gethelpcenterarticle
Gethelpcenterarticle
plainmcp_gethelpcenterarticles
Gethelpcenterarticles
plainmcp_getlabels
Getlabels
plainmcp_getmyuser
Getmyuser
plainmcp_getsidekicksession
Getsidekicksession
plainmcp_getsnippets
Getsnippets
plainmcp_gettenants
Gettenants
plainmcp_getthreadfieldschemas
Getthreadfieldschemas
plainmcp_getthreads
Getthreads
plainmcp_listsidekicksessions
Listsidekicksessions
plainmcp_markthreadastodo
Markthreadastodo
plainmcp_removelabels
Removelabels
plainmcp_replytothread
Replytothread
plainmcp_searchcustomers
Searchcustomers
plainmcp_searchthreadlinkcandidates
Searchthreadlinkcandidates
plainmcp_sendsidekickmessage
Sendsidekickmessage
plainmcp_startsidekicksession
Startsidekicksession
plainmcp_unassignthread
Unassignthread
plainmcp_updatethreadfieldschema
Updatethreadfieldschema
plainmcp_upsertcustomer
Upsertcustomer
plainmcp_upserttenant
Upserttenant

For more tools, view docs.

Build your Agent
Drop the toolkit in, point it at the user, and your agent can read and update Plain customers, threads, and help center content from the first run.
Python · LlamaIndex
import { ScalekitClient } from "@scalekit-sdk/node";
import { DynamicStructuredTool } from "@langchain/core/tools";
import { createReactAgent } from "@langchain/langgraph/prebuilt";
import { z } from "zod";

const sk = new ScalekitClient(envUrl, clientId, clientSecret);

const { tools } = await sk.tools.listScopedTools("user_123", {
filter: { connectionNames: ["plainmcp"], toolNames: ["plainmcp_get_customers", "plainmcp_upsert_customer", "plainmcp_upsert_thread_field"] },
pageSize: 100,
});

const lcTools = tools.map((t) => new DynamicStructuredTool({
name: t.tool.definition.name,
description: t.tool.definition.description,
schema: z.object({}).passthrough(),
func: async (args) => {
const { data } = await sk.tools.executeTool({
toolName: t.tool.definition.name,
identifier: "user_123",
params: args,
});
return JSON.stringify(data);
},
}));

const agent = createReactAgent({ llm, tools: lcTools });
import { ScalekitClient } from "@scalekit-sdk/node";
import OpenAI from "openai";

const sk = new ScalekitClient(envUrl, clientId, clientSecret);
const openai = new OpenAI();

const { tools } = await sk.tools.listScopedTools("user_123", {
filter: { connectionNames: ["plainmcp"], toolNames: ["plainmcp_get_customers", "plainmcp_upsert_customer", "plainmcp_upsert_thread_field"] },
pageSize: 100,
});

const llmTools = tools.map((t) => ({
type: "function",
function: {
name: t.tool.definition.name,
description: t.tool.definition.description,
parameters: t.tool.definition.input_schema,
},
}));

const resp = await openai.responses.create({
model: "gpt-4o", input: prompt, tools: llmTools,
});
import { ScalekitClient } from "@scalekit-sdk/node";
import Anthropic from "@anthropic-ai/sdk";

const sk = new ScalekitClient(envUrl, clientId, clientSecret);
const anthropic = new Anthropic();

const { tools } = await sk.tools.listScopedTools("user_123", {
filter: { connectionNames: ["plainmcp"], toolNames: ["plainmcp_get_customers", "plainmcp_upsert_customer", "plainmcp_upsert_thread_field"] },
pageSize: 100,
});

const llmTools = tools.map((t) => ({
name: t.tool.definition.name,
description: t.tool.definition.description,
input_schema: t.tool.definition.input_schema,
}));

const msg = await anthropic.messages.create({
model: "claude-sonnet-4-6", max_tokens: 1024,
tools: llmTools,
messages: [{ role: "user", content: prompt }],
});
import { Agent } from "@google/adk/agents";
import {
MCPToolset, StreamableHTTPConnectionParams,
} from "@google/adk/tools/mcp";

const toolset = new MCPToolset({
connectionParams: new StreamableHTTPConnectionParams({
url: "https://mcp.scalekit.com/plainmcp",
headers: { Authorization: `Bearer ${userScopedToken}` },
}),
});

const agent = new Agent({
name: "agent", model: "gemini-2.0-flash",
tools: await toolset.getTools(),
});
Try these prompts
Paste any prompt into your agent to start managing Plain support data from your workflows.
Customer & thread updates
Copy the prompt
Copied
Find all open threads for tenant [name] and set priority to high.
Copy the prompt
Copied
Tag every thread mentioning [keyword] with [tag].
Copy the prompt
Copied
Update customer [email] with company=[name] and plan=[tier].
Help center
Copy the prompt
Copied
Draft a help center article for [topic] and publish it.
Copy the prompt
Copied
Update the [slug] article with a new troubleshooting section.
Copy the prompt
Copied
List all help center articles tagged [category].
SEE HOW AUTH WORKS
Users authorize Plain once. Their credentials stay vaulted, every call is checked, and every action is logged.
1
Authorize
Your user connects
Plain MCP
once. We tie it to their identity and the meetings they approved — no shared bot account, no org-wide access
Who:
user ‘A’
when:
Once per user
access:
Limited to user
2
Store
Their
Plain MCP
token lives in a vault scoped to them. User A's meetings are never reachable by an agent acting for user B, even on the same connection
vault:
encrypted
scope:
per-user
tokens:
auto-refreshed
3
Resolve
When your agent calls a
Plain MCP
tool, we fetch the right token server-side. It never touches your agent, never appears in the LLM context, never shows up in your logs
speed:
~40ms
check:
before every call
seen by:
nobody
4
Audit
Every
Plain MCP
tool call is logged — who triggered it, which meeting was fetched, what came back. 90 days of history, tied to the user who authorized it
history:
90 days
export:
SIEM-ready
logged:
every call
Test other agents
Same per-user auth pattern across other CRM and support connectors.
Support and Ops Teams
Support triage agent
Fetches new Zendesk tickets, classifies them by type and urgency, searches the Notion knowledge base for an answer, and routes what it cannot resolve to Slack. Every call runs on the support agent's own delegated OAuth.
Support and Ops Teams
Support ticket automation agent
Fetches new Zendesk tickets, drafts a reply from Notion knowledge base articles, digests what it cannot answer to Slack, and archives the rest, acting as the support agent rather than a shared API key.
Support and Ops Teams
Freshdesk CSAT agent
Watches Freshdesk for resolved tickets, emails each requester a CSAT survey from Gmail, and writes the score and the verbatim back onto the ticket, every call on the support rep's own delegated OAuth.
Engineering Teams
Slack triage
Polls Slack for new messages, classifies bugs and support requests with a LangGraph router, files GitHub issues or Zendesk tickets, and confirms in the thread.
Test other agents
Same per-user auth pattern across other CRM and support connectors.
SUPPORT
Support triage agent
Classify new Zendesk tickets, search the Notion knowledge base for an answer, and route what it cannot resolve to Slack.
SUPPORT
Support ticket automation (Google ADK)
Fetch, annotate, and archive Zendesk tickets with Notion context, digesting anything it cannot answer to Slack.
SUPPORT
Freshdesk CSAT follow-up agent
Spot resolved Freshdesk tickets, email the CSAT survey from Gmail, and write the score back onto the ticket.
ENGINEERING
Slack triage agent
Classify new Slack messages as bugs or support requests, file the GitHub issue or Zendesk ticket, and reply in the thread.
Why Scalekit
Secure your agent's access. Connectors ship in minutes
01.
Shared tokens break per-user analytics
A shared token looks fine in a demo. In production every call looks like a service account. Scalekit resolves the real user credential so attribution, audit, and scope stay accurate.
// shared token
 audit → bot_service_account
 user_filter → broken

 // scalekit
 audit → user_abc
 scope → enforced ✓
02.
Authentication is not authorization
03.
Multi-tenancy is architectural
04.
Plain MCP today. Others tomorrow.
“Our agents act across Salesforce, Gong, Google Drive, and more, on behalf of every customer. Scalekit behind the scenes meant we can keep adding tools without ever rebuilding how credentials or tool calling work.”
Venu Madhav Kattagoni
Head of Engineering / Von
FAQs
Frequently Asked Questions
Does the agent act as the user or a shared key?
As the user. Each Plain user authorizes once and Scalekit resolves their credential at request time. All updates are attributed to that user.
Where is the Plain OAuth token stored?
In Scalekit's AES-256 vault, namespaced per tenant. Refresh is automatic. Tokens never appear in prompts or LLM context.
Can I restrict the agent to read-only operations?
Yes. Use listScopedTools to allow get_customers without granting any upsert tools.
What happens when a user revokes Plain access?
The connection is invalidated on the next tool call. Subsequent requests fail closed with a clear error.
Can the agent combine Plain data with other systems in one workflow?
Yes. A single agent can read Plain threads and update records in another connector in the same workflow, each using the same user identity.
Start in your coding agent
Up and running in one command
Install the Scalekit skill in your editor of choice. Connector, auth, tools, prompt, all wired up
Claude Code REPL
/plugin marketplace add scalekit-inc/claude-code-authstack
/plugin install agentkit@scalekit-auth-stack
Cursor Code REPL
# ~/.cursor/mcp.json
{
""mcpServers"": {
""plainmcp"": {
""url"": ""https://mcp.scalekit.com/plainmcp"",
""headers"": { ""Authorization"": ""Bearer $SCALEKIT_TOKEN"" }
}
}
}
Codex Code REPL
# ~/.codex/config.toml
[mcp_servers.plainmcp]
url = ""https://mcp.scalekit.com/plainmcp""
auth_env = ""SCALEKIT_TOKEN""
Copilot Code REPL
# .vscode/mcp.json
{
""servers"": {
""plainmcp"": {
""url"": ""https://mcp.scalekit.com/plainmcp"",
""type"": ""http""
}
}
}