Ceveto MCP Server
OfficialClick on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@Ceveto MCP Serverget my recent invoices"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Ceveto MCP Server
MCP (Model Context Protocol) server for AI agent access to the Ceveto business management API.
Quick Start
uvx --from git+https://github.com/Ceveto/mcp-server ceveto-mcpRelated MCP server: LangGraph FastAPI MCP Server
Claude Code Setup
Add to your .mcp.json:
{
"mcpServers": {
"ceveto": {
"command": "uvx",
"args": ["--from", "git+https://github.com/Ceveto/mcp-server", "ceveto-mcp"],
"env": {
"CEVETO_MCP_BASE_URL": "https://api.ceveto.com",
"CEVETO_MCP_USERNAME": "<your-api-username>",
"CEVETO_MCP_PRIVATE_KEY": "<your-api-private-key>"
}
}
}
}Or install the Ceveto Claude Plugin for automated setup.
Getting Credentials
Log in to your Ceveto dashboard
Go to Settings → API Keys
Click Create API Key
Save the username and private key (shown once)
Environment Variables
Variable | Required | Default | Description |
| Yes | — | API user username |
| Yes | — | Ed25519 private key (hex) |
| No |
| API base URL |
| No | — | Default account slug/UUID |
| No | — | Comma-separated OpenAPI tags to filter |
| No |
| Transport: |
| No |
| Port for SSE mode |
How It Works
On startup, fetches the OpenAPI schema from the Ceveto API
Checks your permissions via
/company-api/me/Generates MCP tools for each permitted API endpoint
Tools include parameter schemas, descriptions, and permission limits
Docker (SSE mode)
docker build -t ceveto-mcp .
docker run -p 8500:8500 \
-e CEVETO_MCP_USERNAME=... \
-e CEVETO_MCP_PRIVATE_KEY=... \
-e CEVETO_MCP_BASE_URL=https://api.ceveto.com \
ceveto-mcpHosted Instances
Environment | MCP Server | Backend API |
Production |
|
|
Staging |
|
|
Hosted mode (multi-tenant, no credentials needed on server):
ceveto-mcp --hosted --transport sse --port 8500Security
Ed25519 signatures — every API request is cryptographically signed
OAuth 2.1 — browser-based authorization with PKCE
Permission-filtered tools — only endpoints you have access to become tools
Method-level filtering — read-only keys don't see write operations
No secrets stored — credentials only in environment variables
Available Tools
3 toolslist_accountsA
List all accounts this API key has access to.
Each entry includes the account id, name, slug, and whether the API user is an owner.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the burden of behavioral disclosure. It transparently describes the scope ('accounts this API key has access to') and the output contents (id, name, slug, owner status). The 'list' wording clearly indicates a read-only operation, and no side-effect concerns are relevant for this simple tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two short sentences. The first sentence states the primary purpose, and the second adds useful detail about entry contents. There is no fluff or redundant information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple list tool with no parameters and an existing output schema, the description covers the essential information: what is listed and what fields each entry contains. It does not need to explain return values or parameter behavior, and the sibling tool names provide sufficient context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema is empty (0 parameters), so there are no parameter semantics to explain. The description correctly omits parameter details, and the baseline for a 0-parameter tool is 4.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool lists all accounts accessible by the API key, with a specific verb ('list') and resource ('accounts'). It does not explicitly contrast with sibling tools whoami and switch_default_account, but the action and scope are evident, making this strong but not fully differentiated.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies when to use the tool (when you need to enumerate accounts) but offers no explicit guidance on alternatives or exclusions. The sibling tools are different in purpose, but the description does not actively direct the agent toward this one.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
switch_default_accountA
Switch the active account for all subsequent tool calls.
Args: account: Account slug (e.g. "acme-corp") or UUID.
| Name | Required | Description | Default |
|---|---|---|---|
| account | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses a key behavioral trait: the switch affects all subsequent tool calls, which is not immediately obvious from the tool name. It also clarifies the accepted account format (slug or UUID). However, it does not mention error handling, persistence, or authentication requirements.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise and front-loaded with the primary action, followed by a brief parameter explanation. Every sentence adds value, and there is no redundant information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This is a simple one-parameter tool with an output schema, so the description need not detail return values. It captures the essential behavior and side effect. It could hint at using list_accounts to obtain valid slugs, but this is inferable from sibling context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema provides only the parameter name and type (string), with zero schema-level description. The description compensates by specifying the expected format ('slug or UUID') and giving an example, which is critical for correct usage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Switch') and clearly identifies the resource ('active account') and scope ('for all subsequent tool calls'). This distinctively differentiates it from sibling tools like whoami and list_accounts, which serve different purposes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the usage context by stating that the switch affects all subsequent tool calls, but it does not explicitly mention when to use this tool versus alternatives, such as first listing accounts with list_accounts. The guidance is adequate but not fully explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
whoamiA
Show the current API user's identity, active account, and permissions.
Use this first to understand which account you're operating on and what permissions are available.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses that the tool reveals identity, active account, and permissions. With no annotations, the description carries the burden; it implies a non-mutating read operation but does not explicitly state no side effects or prerequisite authentication, though the verb 'Show' makes this clear.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loaded with the core action, and the second sentence adds practical usage guidance without fluff. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers what the tool does and when to use it. The output schema exists, so return values need not be explained. It doesn't explicitly compare with siblings, but the 'use this first' guidance provides context. For a zero-parameter tool, this is adequate.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There are zero parameters, and schema coverage is 100% vacuously. The description correctly avoids discussing parameters. Baseline for zero params is 4, and nothing more is needed.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb 'Show' and clearly identifies the resource: current API user's identity, active account, and permissions. This distinguishes it from sibling tools like list_accounts and switch_default_account, making the tool's purpose unmistakable.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly says 'Use this first' to understand the account and permissions, providing a clear when-to-use directive. It doesn't explicitly mention when not to use it or name alternatives, but the contextual guidance is clear enough for a 0-parameter tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
3 tool updates
v0.1.0- First observed
list_accounts - First observed
switch_default_account - First observed
whoami
TDQS
Each tool has a clearly distinct role: whoami reports the current user, list_accounts enumerates accessible accounts, and switch_default_account changes the active account. No overlap or ambiguity.
Two tools follow the verb_noun pattern (list_accounts, switch_default_account), while whoami is a standard Unix command rather than verb_noun. This is a minor deviation from an otherwise consistent, readable convention.
Three tools is perfectly scoped for account identity and switching functionality. Each tool is necessary and there is no redundancy or bloat.
The tool surface covers the complete lifecycle of account context: discovering identity, listing available accounts, and switching the active account. No obvious gaps for the stated domain.
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Zero-setup MCP gateway securely connecting AI to your tools with authentication and workflows
Let AI agents query data and act across all your business apps via MCP.
One MCP tool for verified AI-agent outcomes with success-only charging.
Pay-per-use tool marketplace for AI agents. Search, price-check, and call APIs via MCP.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceEnables AI agents to discover and execute tools via a secure MCP server with JWT authentication, RBAC, rate limiting, and audit logging.1MIT
- FlicenseNot gradedqualityCmaintenanceEnables LLM-powered agents to securely communicate with and orchestrate downstream microservices via FastAPI endpoints exposed as MCP tools.-
- FlicenseCqualityCmaintenanceAutomatically generates MCP tools from JSON API configs, manages authentication (API Key, OAuth 2.0), and controls access for AI agents like Hermes.7-
- AlicenseNot gradedqualityDmaintenanceEnables AI agents to access a unified catalog of tools from various APIs (OpenAPI, GraphQL, MCP, Google Discovery) through the MCP protocol.MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/Ceveto/mcp-server'
If you have feedback or need assistance with the MCP directory API, please join our Discord server