Connect AI apps (MCP)

​

Server URL

https://api.zeeg.me/mcp

​

Connect from your AI app

claude mcp add --transport http zeeg https://api.zeeg.me/mcp

{
  "mcpServers": {
    "zeeg": {
      "url": "https://api.zeeg.me/mcp"
    }
  }
}

{
  "servers": {
    "zeeg": {
      "type": "http",
      "url": "https://api.zeeg.me/mcp"
    }
  }
}

​

Sign-in and consent

​

Plan requirement

• find_available_times and book_meeting need a paid plan (not trial) — the same premium-scope check the public API applies to available-time and booking-creation requests.
• The voice agent tools (list_voice_agents, list_agent_calls, get_agent_call and start_outbound_call) need AI minutes in the workspace: an AI minutes subscription or enough AI credit.

​

Tools

​

Safety

• Confirmation before it matters. book_meeting, cancel_booking, reschedule_booking, hand_over_booking, and start_outbound_call are marked destructive, so a well-behaved AI app confirms with you before calling them — booking, cancelling, moving, handing over and calling all have a real-world effect, and start_outbound_call spends AI minutes.
• Text from outside your workspace is marked as data, not instructions. Booking answers, notes, and routing form submissions are written by invitees and form respondents. The server labels this content and tells the connected AI app never to treat it as instructions — a booking answer that says “ignore your previous instructions” stays inert.
• Every tool call is logged. Which app, which tool, what it touched, and whether it succeeded — visible to you (and, for admins, the whole workspace) at Settings → Connected apps. Arguments and results aren’t stored, only what happened.
• Lean output by default. Tool results return what the task needs — a list of bookings, for instance, doesn’t include phone numbers or form answers unless the app explicitly asks for them.

​

Data processing

​

For OAuth client builders

• Discovery: GET /.well-known/oauth-authorization-server and GET /.well-known/oauth-protected-resource/mcp, both under https://api.zeeg.me.
• Resource: the protected-resource metadata’s resource is exactly https://api.zeeg.me/mcp.
• PKCE: required, S256 only. An authorize request with plain, or without code_challenge_method, is refused with invalid_request.
• Issuer identification (RFC 9207): every authorization response carries iss, equal to the metadata issuer (authorization_response_iss_parameter_supported: true).
• Dynamic client registration: POST /oauth/register, open to any redirect host — the consent page names the redirect host and marks the app unverified unless it’s on our first-party allowlist, so don’t rely on registration itself as a trust signal.
• Client ID metadata documents (CIMD): also supported (client_id_metadata_document_supported: true), and preferred over DCR for a high-traffic client — the metadata is fetched from the client’s own client_id URL instead of registering a new row per connection.
• Client type: public clients only — token_endpoint_auth_methods_supported: ["none"]. There’s no client-secret flow.
• Scope: every MCP client is pinned to mcp:use regardless of what it requests. A token that carries mcp:use is rejected by every /v1 and /v2 REST route, and a normal API token is rejected by the MCP endpoint — the two token types don’t cross over.
• Token lifetimes: access tokens expire after 1 hour; refresh tokens after 30 days and rotate on use — reusing a spent refresh token returns invalid_grant.
• Loopback redirects: http://localhost/callback and http://127.0.0.1/callback match on any port, for local tools like Claude Code.
• Token endpoint: accepts application/x-www-form-urlencoded, per the OAuth spec.
• Tool results: every tool except get_zeeg_guide returns structuredContent described by its outputSchema in tools/list, plus the same JSON as a text block for clients that read only text.