URLPivot MCP
Keep the same public link and QR while your campaign destination changes. Connect your desktop agent to your URLPivot workspace to manage links, generate QR codes, prepare private Pages and review campaign traffic.
The hosted endpoint is available at https://urlpivot.app/api/agent/mcp. Native HTTP clients can connect directly; this package provides a stdio bridge for desktop clients.
Choose your connection
- Native HTTP clients: use
https://urlpivot.app/api/agent/mcp and Authorization: Bearer <workspace token>. No installation required.
- Local stdio clients, including Claude Desktop configurations: this package bridges to the same hosted service using the official MCP SDK. It does not replace the service or host your data locally.
- Browser connectors that require OAuth: not supported by this Bearer-token bridge. This is not a Claude.ai or ChatGPT OAuth connector.
Start in five minutes
- Sign in at URLPivot and open the desired workspace.
- Open AI agents → Agent access. Create a workspace token with only the permissions you need. For your first connection, choose Read only.
- Store the token in the client's private environment as
URLPIVOT_TOKEN. Never paste it into a conversation, URL, QR code or command argument.
- Configure an MCP stdio client (Node.js 22 or later):
{
"mcpServers": {
"urlpivot": {
"command": "npx",
"args": ["-y", "urlpivot-mcp@0.1.0"],
"env": { "URLPIVOT_TOKEN": "upv_YOUR_TOKEN" }
}
}
}
Replace the placeholder only in your private client configuration. Restart the client, then read urlpivot://capabilities and run tools/list. The exposed tools depend on your token, workspace plan and backend; the public catalog is not an authorization grant.
To run from source, use node /absolute/path/to/packages/mcp/bin/urlpivot-mcp.mjs as your client's command after npm ci --ignore-scripts in this package directory. No token is needed for --help or --version.
Useful first tasks
- Workspace checkup: “Review my links, active campaigns and configured expiry. Prioritize what I should fix. Make no changes.”
- Campaign setup: “Prepare a Facebook campaign link. Suggest UTMs, show the final destination before saving, then return the short link and QR if my token permits it.”
- Traffic review: “Compare the available completed days for this campaign. Separate human clicks and bots, explain retention and suggest one next action.”
- Private Page draft: “Prepare a private Page from my existing links and approved brief. Return the editor URL for review. Do not publish.”
Native prompts/list / prompts/get become available when the connected server advertises prompts. Until then, use the text requests above with existing tools. This package forwards only advertised features and works with servers that expose tools/resources without prompts.
Permissions and limitations
The hosted catalog has 27 tools for workspace links, folders, QR, Pages, images, analytics, audit, domains and billing-access reads. Your token may expose fewer. New tools do not silently expand existing tokens. Page edits require the saved revision; publishing requires separate publication permissions. Domain tools return DNS/certificate instructions and request reconciliation; they do not edit DNS.
No billing mutations, account administration, workspace switching, bulk deletion, arbitrary browser access or native AI Page generation are provided by this package. Analytics counts retained classified events, not unique visitors or sales. A Free workspace can begin using scoped tools; paid product limits still apply. Installing the bridge does not upgrade a plan.
Troubleshooting
- Cannot connect / 401: check the endpoint, token validity and revocation.
- Permission failure / 403: check the token scopes and workspace plan; never try another workspace to bypass a denial.
- Stale Page revision: read the Page again before editing.
- Uncertain or timed-out write: read back before a manual retry. This bridge does not automatically retry writes.
- Native HTTP works but desktop does not: check Node.js 22+, private environment and the client's stdio config. Windows clients may require the absolute path to
npx.cmd.
- Prompts missing: use
prompts/list only when initialization advertises prompts. Older server versions have tools/resources without prompts.
URLPIVOT_MCP_URL optionally selects a trusted endpoint. HTTPS is required except loopback HTTP for development. URL credentials, query strings and fragments are rejected; redirects are rejected. Tokens are sent only as Authorization headers. No local token storage, telemetry or analytics collection is added by the bridge.
Contribute and get help
Connection guide and tool catalog · Machine-readable guide · Support
For a bug report, include the package version, Node/client version, operation, sanitized error code and steps to reproduce. Omit tokens and private visitor data. Public repository/contribution links will be added after their actual publication; no community membership or certification is implied.
License: MIT for this bridge. URLPivot hosted service terms and plan limits remain separate.