← All postsEngineering

How our MCP integration works

How the Ettex MCP server works: every REST endpoint becomes a tool an agent can call, public storefront endpoints excluded, with the tools grouped by product.

EngineeringH

The Model Context Protocol is a way for an assistant to call tools rather than guess. Our implementation takes the least surprising route available: the Ettex MCP server exposes the Platform API as tools, one tool per REST endpoint, so anything the API can do an agent can do — with your key and within the same permissions.

How the MCP integration is built

  • Every REST endpoint in the Platform API becomes one MCP tool, with its name derived from the method and path.
  • Public storefront endpoints are excluded: they need no authentication, so exposing them as agent tools adds risk without adding capability.
  • Tools are grouped by product, which is what makes a long list navigable when an agent lists capabilities.
  • Authentication is the same API key the REST interface uses — there is no second credential model to reason about.

Setting it up

  1. Create an API key in the developer area.
  2. Add the server to your MCP client configuration — Claude Desktop and other MCP clients read the same shape of config file.
  3. Restart the client so it picks up the new server.
  4. Ask the client to list its tools, and check the groups you expect are there before relying on it.

Why one tool per endpoint, rather than a few clever ones

It is tempting to design a small set of high-level tools — "do the invoicing" — and hide the detail. We did not, for two reasons. A thin mapping stays truthful as the API changes: a new endpoint is a new tool with no extra work and no drift between what the docs say and what the server offers. And narrow tools fail more usefully. When an agent calls one endpoint and gets a validation error, that is a readable failure; when it calls a composite tool that did four things and stopped halfway, you are left reconstructing what happened.

Give an agent its own key rather than reusing yours, and scope what it can reach. The question to ask is not whether the assistant is trustworthy but what the blast radius is when a prompt goes wrong — and a separate key is what makes that answerable.

What to be careful about

  • Write operations deserve review. Reading data to summarise it is a different risk from sending email on your behalf.
  • Content an agent reads — a document, an inbox — can contain instructions. Treat it as data, not as direction.
  • Keep an eye on what the agent actually called; a tool list is a capability surface, not a plan.

The same catalogue drives both interfaces, so the Ettex Api portal and the MCP tool list never disagree about what exists. If you are deciding between them: use REST when you are writing code, and MCP when you want an assistant to do the thing without you writing the code.

Frequently asked

Which tools does the MCP server expose?

One per authenticated REST endpoint, grouped by product. Public storefront endpoints are deliberately left out.

Which clients work with it?

Any MCP client, including Claude Desktop. The server is added to the client's config and the client discovers the tools itself.

Does an agent get its own permissions?

It uses the API key you give it, so scope the key rather than assuming the agent will be careful. A dedicated key per agent is the practical minimum.

AS
Written by Alex S.

Part of the Ettex team — writing about product, engineering and the future of work.

More posts
Get the best of the Ettex blogProduct news, guides and tips — straight to your inbox, no spam.