Skip to main content
Glama
Ceveto

Ceveto MCP Server

Official
by Ceveto

Ceveto MCP Server

MCP (Model Context Protocol) server for AI agent access to the Ceveto business management API.

Quick Start

uvx --from git+https://github.com/Ceveto/mcp-server ceveto-mcp

Related MCP server: LangGraph FastAPI MCP Server

Claude Code Setup

Add to your .mcp.json:

{
  "mcpServers": {
    "ceveto": {
      "command": "uvx",
      "args": ["--from", "git+https://github.com/Ceveto/mcp-server", "ceveto-mcp"],
      "env": {
        "CEVETO_MCP_BASE_URL": "https://api.ceveto.com",
        "CEVETO_MCP_USERNAME": "<your-api-username>",
        "CEVETO_MCP_PRIVATE_KEY": "<your-api-private-key>"
      }
    }
  }
}

Or install the Ceveto Claude Plugin for automated setup.

Getting Credentials

  1. Log in to your Ceveto dashboard

  2. Go to Settings → API Keys

  3. Click Create API Key

  4. Save the username and private key (shown once)

Environment Variables

Variable

Required

Default

Description

CEVETO_MCP_USERNAME

Yes

API user username

CEVETO_MCP_PRIVATE_KEY

Yes

Ed25519 private key (hex)

CEVETO_MCP_BASE_URL

No

https://api.ceveto.com

API base URL

CEVETO_MCP_DEFAULT_ACCOUNT

No

Default account slug/UUID

CEVETO_MCP_MODULES

No

Comma-separated OpenAPI tags to filter

CEVETO_MCP_TRANSPORT

No

stdio

Transport: stdio or sse

CEVETO_MCP_PORT

No

8500

Port for SSE mode

How It Works

  1. On startup, fetches the OpenAPI schema from the Ceveto API

  2. Checks your permissions via /company-api/me/

  3. Generates MCP tools for each permitted API endpoint

  4. Tools include parameter schemas, descriptions, and permission limits

Docker (SSE mode)

docker build -t ceveto-mcp .
docker run -p 8500:8500 \
  -e CEVETO_MCP_USERNAME=... \
  -e CEVETO_MCP_PRIVATE_KEY=... \
  -e CEVETO_MCP_BASE_URL=https://api.ceveto.com \
  ceveto-mcp

Hosted Instances

Environment

MCP Server

Backend API

Production

https://mcp.ceveto.com

https://api.ceveto.com

Staging

https://mcp.ceveto.dev

https://api.ceveto.dev

Hosted mode (multi-tenant, no credentials needed on server):

ceveto-mcp --hosted --transport sse --port 8500

Security

  • Ed25519 signatures — every API request is cryptographically signed

  • OAuth 2.1 — browser-based authorization with PKCE

  • Permission-filtered tools — only endpoints you have access to become tools

  • Method-level filtering — read-only keys don't see write operations

  • No secrets stored — credentials only in environment variables

Available Tools

3 tools
list_accountsA

List all accounts this API key has access to.

Each entry includes the account id, name, slug, and whether the API user is an owner.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the burden of behavioral disclosure. It transparently describes the scope ('accounts this API key has access to') and the output contents (id, name, slug, owner status). The 'list' wording clearly indicates a read-only operation, and no side-effect concerns are relevant for this simple tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two short sentences. The first sentence states the primary purpose, and the second adds useful detail about entry contents. There is no fluff or redundant information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple list tool with no parameters and an existing output schema, the description covers the essential information: what is listed and what fields each entry contains. It does not need to explain return values or parameter behavior, and the sibling tool names provide sufficient context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema is empty (0 parameters), so there are no parameter semantics to explain. The description correctly omits parameter details, and the baseline for a 0-parameter tool is 4.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool lists all accounts accessible by the API key, with a specific verb ('list') and resource ('accounts'). It does not explicitly contrast with sibling tools whoami and switch_default_account, but the action and scope are evident, making this strong but not fully differentiated.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies when to use the tool (when you need to enumerate accounts) but offers no explicit guidance on alternatives or exclusions. The sibling tools are different in purpose, but the description does not actively direct the agent toward this one.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

switch_default_accountA

Switch the active account for all subsequent tool calls.

Args: account: Account slug (e.g. "acme-corp") or UUID.

ParametersJSON Schema
NameRequiredDescriptionDefault
accountYes

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description discloses a key behavioral trait: the switch affects all subsequent tool calls, which is not immediately obvious from the tool name. It also clarifies the accepted account format (slug or UUID). However, it does not mention error handling, persistence, or authentication requirements.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise and front-loaded with the primary action, followed by a brief parameter explanation. Every sentence adds value, and there is no redundant information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

This is a simple one-parameter tool with an output schema, so the description need not detail return values. It captures the essential behavior and side effect. It could hint at using list_accounts to obtain valid slugs, but this is inferable from sibling context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema provides only the parameter name and type (string), with zero schema-level description. The description compensates by specifying the expected format ('slug or UUID') and giving an example, which is critical for correct usage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Switch') and clearly identifies the resource ('active account') and scope ('for all subsequent tool calls'). This distinctively differentiates it from sibling tools like whoami and list_accounts, which serve different purposes.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies the usage context by stating that the switch affects all subsequent tool calls, but it does not explicitly mention when to use this tool versus alternatives, such as first listing accounts with list_accounts. The guidance is adequate but not fully explicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

whoamiA

Show the current API user's identity, active account, and permissions.

Use this first to understand which account you're operating on and what permissions are available.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A4.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description discloses that the tool reveals identity, active account, and permissions. With no annotations, the description carries the burden; it implies a non-mutating read operation but does not explicitly state no side effects or prerequisite authentication, though the verb 'Show' makes this clear.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences, front-loaded with the core action, and the second sentence adds practical usage guidance without fluff. Every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers what the tool does and when to use it. The output schema exists, so return values need not be explained. It doesn't explicitly compare with siblings, but the 'use this first' guidance provides context. For a zero-parameter tool, this is adequate.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There are zero parameters, and schema coverage is 100% vacuously. The description correctly avoids discussing parameters. Baseline for zero params is 4, and nothing more is needed.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb 'Show' and clearly identifies the resource: current API user's identity, active account, and permissions. This distinguishes it from sibling tools like list_accounts and switch_default_account, making the tool's purpose unmistakable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It explicitly says 'Use this first' to understand the account and permissions, providing a clear when-to-use directive. It doesn't explicitly mention when not to use it or name alternatives, but the contextual guidance is clear enough for a 0-parameter tool.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. 3 tool updatesv0.1.0
    • First observedlist_accounts
    • First observedswitch_default_account
    • First observedwhoami

TDQS

A4.2/5.0
Disambiguation5/5

Each tool has a clearly distinct role: whoami reports the current user, list_accounts enumerates accessible accounts, and switch_default_account changes the active account. No overlap or ambiguity.

Naming Consistency4/5

Two tools follow the verb_noun pattern (list_accounts, switch_default_account), while whoami is a standard Unix command rather than verb_noun. This is a minor deviation from an otherwise consistent, readable convention.

Tool Count5/5

Three tools is perfectly scoped for account identity and switching functionality. Each tool is necessary and there is no redundancy or bloat.

Completeness5/5

The tool surface covers the complete lifecycle of account context: discovering identity, listing available accounts, and switching the active account. No obvious gaps for the stated domain.

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Connectors

Related MCP Servers

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/Ceveto/mcp-server'

If you have feedback or need assistance with the MCP directory API, please join our Discord server