Plain MCP server for AI agents

Live

OAUTH 2.1

CUSTOMER SUPPORT

Customer Support

Every customer, thread, tenant, and help center article your support team works in lives in Plain. Plain MCP gives your agent per-user OAuth access to customer records, threads, and help center content scoped to the authorizing user.

  • Acts as the user: Customer updates and thread edits stay attributed to the Plain user who authorized the agent.
  • Credentials stay vaulted: AES-256, resolved at request time, never in LLM context.
  • Scoped before every call: User permissions enforced. 90-day audit trail.
Plain MCP
agent · Acme Q3
Run
Mark all threads for tenant_acme as priority:high and tag them billing-issue.
S
plainmcp_upsertthreadfield
104ms
Support agent
Updated 14 open threads for tenant_acme. priority=high, tag=billing-issue applied. 3 threads were already high priority.
Sources: Plain, tenant_acme open threads
plainmcp
14
18:29
Message Claude...

Tools your agent reaches for on Plain MCP, scoped per user.

CALL ANY TOOL
Read and upsert customers, threads, tenants, custom fields, and help center articles. Same toolkit, every framework, no auth plumbing.
plainmcp_addgeneratedreply
Addgeneratedreply
Add an AI-generated reply to a thread in Plain.
Parameters
Name
Type
Required
Description
input
string
Required
No description.
plainmcp_assignthread
Assignthread
plainmcp_createBroadcast
Createbroadcast
plainmcp_createlabeltype
Createlabeltype
plainmcp_createtask
Createtask
plainmcp_deleteBroadcast
Deletebroadcast
plainmcp_deletethreadlink
Deletethreadlink
plainmcp_getBroadcastAudiences
Getbroadcastaudiences
plainmcp_getBroadcastSendDeliveries
Getbroadcastsenddeliveries
plainmcp_getBroadcasts
Getbroadcasts
plainmcp_getcustomers
Getcustomers
plainmcp_gethelpcenterarticlebyslug
Gethelpcenterarticlebyslug
plainmcp_gethelpcenters
Gethelpcenters
plainmcp_getlabels
Getlabels
plainmcp_getmyuser
Getmyuser
plainmcp_getsnippet
Getsnippet
plainmcp_gettaskdetailsbyref
Gettaskdetailsbyref
plainmcp_gettenants
Gettenants
plainmcp_getthreads
Getthreads
plainmcp_markCustomerAsSpam
Markcustomerasspam
plainmcp_mergethread
Mergethread
plainmcp_removelabels
Removelabels
plainmcp_resubscribeBroadcastRecipient
Resubscribebroadcastrecipient
plainmcp_searchknowledgesources
Searchknowledgesources
plainmcp_searchthreads
Searchthreads
plainmcp_snoozethread
Snoozethread
plainmcp_unmarkCustomerAsSpam
Unmarkcustomerasspam
plainmcp_updateBroadcastAudience
Updatebroadcastaudience
plainmcp_updatethreadfieldschema
Updatethreadfieldschema
plainmcp_upserthelpcenterarticle
Upserthelpcenterarticle

For more tools, view docs.

Build your Agent
Drop the toolkit in, point it at the user, and your agent can read and update Plain customers, threads, and help center content from the first run.
Python · LlamaIndex
import { ScalekitClient } from "@scalekit-sdk/node";
import { DynamicStructuredTool } from "@langchain/core/tools";
import { createReactAgent } from "@langchain/langgraph/prebuilt";
import { z } from "zod";

const sk = new ScalekitClient(envUrl, clientId, clientSecret);

const { tools } = await sk.tools.listScopedTools("user_123", {
filter: { connectionNames: ["plainmcp"], toolNames: ["plainmcp_getcustomers", "plainmcp_upsertcustomer", "plainmcp_upsertthreadfield"] },
pageSize: 100,
});

const lcTools = tools.map((t) => new DynamicStructuredTool({
name: t.tool.definition.name,
description: t.tool.definition.description,
schema: z.object({}).passthrough(),
func: async (args) => {
const { data } = await sk.tools.executeTool({
toolName: t.tool.definition.name,
identifier: "user_123",
params: args,
});
return JSON.stringify(data);
},
}));

const agent = createReactAgent({ llm, tools: lcTools });
import { ScalekitClient } from "@scalekit-sdk/node";
import OpenAI from "openai";

const sk = new ScalekitClient(envUrl, clientId, clientSecret);
const openai = new OpenAI();

const { tools } = await sk.tools.listScopedTools("user_123", {
filter: { connectionNames: ["plainmcp"], toolNames: ["plainmcp_getcustomers", "plainmcp_upsertcustomer", "plainmcp_upsertthreadfield"] },
pageSize: 100,
});

const llmTools = tools.map((t) => ({
type: "function",
function: {
name: t.tool.definition.name,
description: t.tool.definition.description,
parameters: t.tool.definition.input_schema,
},
}));

const resp = await openai.responses.create({
model: "gpt-4o", input: prompt, tools: llmTools,
});
import { ScalekitClient } from "@scalekit-sdk/node";
import Anthropic from "@anthropic-ai/sdk";

const sk = new ScalekitClient(envUrl, clientId, clientSecret);
const anthropic = new Anthropic();

const { tools } = await sk.tools.listScopedTools("user_123", {
filter: { connectionNames: ["plainmcp"], toolNames: ["plainmcp_getcustomers", "plainmcp_upsertcustomer", "plainmcp_upsertthreadfield"] },
pageSize: 100,
});

const llmTools = tools.map((t) => ({
name: t.tool.definition.name,
description: t.tool.definition.description,
input_schema: t.tool.definition.input_schema,
}));

const msg = await anthropic.messages.create({
model: "claude-sonnet-4-6", max_tokens: 1024,
tools: llmTools,
messages: [{ role: "user", content: prompt }],
});
import { Agent } from "@google/adk/agents";
import {
MCPToolset, StreamableHTTPConnectionParams,
} from "@google/adk/tools/mcp";

const toolset = new MCPToolset({
connectionParams: new StreamableHTTPConnectionParams({
url: "https://mcp.scalekit.com/plainmcp",
headers: { Authorization: `Bearer ${userScopedToken}` },
}),
});

const agent = new Agent({
name: "agent", model: "gemini-2.0-flash",
tools: await toolset.getTools(),
});
Try these prompts
Paste any prompt into your agent to start managing Plain support data from your workflows.
Customer & thread updates
Copy the prompt
Copied
Find all open threads for tenant [name] and set priority to high.
Copy the prompt
Copied
Tag every thread mentioning [keyword] with [tag].
Copy the prompt
Copied
Update customer [email] with company=[name] and plan=[tier].
Help center
Copy the prompt
Copied
Draft a help center article for [topic] and publish it.
Copy the prompt
Copied
Update the [slug] article with a new troubleshooting section.
Copy the prompt
Copied
List all help center articles tagged [category].
SEE HOW AUTH WORKS
Users authorize Plain once. Their credentials stay vaulted, every call is checked, and every action is logged.
1
Authorize
Your user connects
Plain MCP
once. We tie it to their identity and the meetings they approved — no shared bot account, no org-wide access
Who:
user ‘A’
when:
Once per user
access:
Limited to user
2
Store
Their
Plain MCP
token lives in a vault scoped to them. User A's meetings are never reachable by an agent acting for user B, even on the same connection
vault:
encrypted
scope:
per-user
tokens:
auto-refreshed
3
Resolve
When your agent calls a
Plain MCP
tool, we fetch the right token server-side. It never touches your agent, never appears in the LLM context, never shows up in your logs
speed:
~40ms
check:
before every call
seen by:
nobody
4
Audit
Every
Plain MCP
tool call is logged — who triggered it, which meeting was fetched, what came back. 90 days of history, tied to the user who authorized it
history:
90 days
export:
SIEM-ready
logged:
every call
Test other agents
Same per-user auth pattern across other CRM and support connectors.
Support and Ops Teams
Support triage agent
Fetches new Zendesk tickets, classifies them by type and urgency, searches the Notion knowledge base for an answer, and routes what it cannot resolve to Slack. Every call runs on the support agent's own delegated OAuth.
Support and Ops Teams
Support ticket automation agent
Fetches new Zendesk tickets, drafts a reply from Notion knowledge base articles, digests what it cannot answer to Slack, and archives the rest, acting as the support agent rather than a shared API key.
Support and Ops Teams
Freshdesk CSAT agent
Watches Freshdesk for resolved tickets, emails each requester a CSAT survey from Gmail, and writes the score and the verbatim back onto the ticket, every call on the support rep's own delegated OAuth.
Engineering Teams
Slack triage
Polls Slack for new messages, classifies bugs and support requests with a LangGraph router, files GitHub issues or Zendesk tickets, and confirms in the thread.
Test other agents
Same per-user auth pattern across other CRM and support connectors.
SUPPORT
Support triage agent
Classify new Zendesk tickets, search the Notion knowledge base for an answer, and route what it cannot resolve to Slack.
SUPPORT
Support ticket automation (Google ADK)
Fetch, annotate, and archive Zendesk tickets with Notion context, digesting anything it cannot answer to Slack.
SUPPORT
Freshdesk CSAT follow-up agent
Spot resolved Freshdesk tickets, email the CSAT survey from Gmail, and write the score back onto the ticket.
ENGINEERING
Slack triage agent
Classify new Slack messages as bugs or support requests, file the GitHub issue or Zendesk ticket, and reply in the thread.
Why Scalekit
Secure your agent's access. Connectors ship in minutes
01.
Shared tokens break per-user analytics
A shared token looks fine in a demo. In production every call looks like a service account. Scalekit resolves the real user credential so attribution, audit, and scope stay accurate.
// shared token
 audit → bot_service_account
 user_filter → broken

 // scalekit
 audit → user_abc
 scope → enforced ✓
02.
Authentication is not authorization
03.
Multi-tenancy is architectural
04.
Plain MCP today. Others tomorrow.
“Our agents act across Salesforce, Gong, Google Drive, and more, on behalf of every customer. Scalekit behind the scenes meant we can keep adding tools without ever rebuilding how credentials or tool calling work.”
Venu Madhav Kattagoni
Head of Engineering / Von
FAQs
Frequently Asked Questions
Does the agent act as the user or a shared key?
As the user. Each Plain user authorizes once and Scalekit resolves their credential at request time. All updates are attributed to that user.
Where is the Plain OAuth token stored?
In Scalekit's AES-256 vault, namespaced per tenant. Refresh is automatic. Tokens never appear in prompts or LLM context.
Can I restrict the agent to read-only operations?
Yes. Use listScopedTools to allow get_customers without granting any upsert tools.
What happens when a user revokes Plain access?
The connection is invalidated on the next tool call. Subsequent requests fail closed with a clear error.
Can the agent combine Plain data with other systems in one workflow?
Yes. A single agent can read Plain threads and update records in another connector in the same workflow, each using the same user identity.
Start in your coding agent
Up and running in one command
Install the Scalekit skill in your editor of choice. Connector, auth, tools, prompt, all wired up
Claude Code REPL
/plugin marketplace add scalekit-inc/claude-code-authstack
/plugin install agentkit@scalekit-auth-stack
Cursor Code REPL
# ~/.cursor/mcp.json
{
""mcpServers"": {
""plainmcp"": {
""url"": ""https://mcp.scalekit.com/plainmcp"",
""headers"": { ""Authorization"": ""Bearer $SCALEKIT_TOKEN"" }
}
}
}
Codex Code REPL
# ~/.codex/config.toml
[mcp_servers.plainmcp]
url = ""https://mcp.scalekit.com/plainmcp""
auth_env = ""SCALEKIT_TOKEN""
Copilot Code REPL
# .vscode/mcp.json
{
""servers"": {
""plainmcp"": {
""url"": ""https://mcp.scalekit.com/plainmcp"",
""type"": ""http""
}
}
}