A clickable walk-through of the MCP server: the dashboard surface where an org turns MCP on, and the agent-side flow showing prompt → tool → internal service → response → formatted answer, for the read-only tools that exist today.
Toggle MCP off on the Dashboard tab, then run any prompt on the Agent tab — you'll see the exact failure behavior from the spec (MCP access disabled for this company). The state pill in the header reflects it everywhere.
Let AI agents (Claude Desktop, ChatGPT, custom agents) query this organization's data in natural language, inheriting each user's dashboard permissions.
🔒 Only an organization administrator can change this setting. Members with settings access can view the current state.
Point any MCP-compatible client at the FRU remote server. (v1, on staging, authenticates via the dashboard session.)
Tools inherit your dashboard permissions and are scoped to your companyId.
Pick a plain-text request a fundraiser might type. Each run shows the full pipeline: tool called → internal service → sample response → formatted answer. (Answers Brandon's points 2–6.)
The read-only tools registered in apps/mcp, the internal service each calls, the data scope and PII handling. The MCP is a standalone service that reads FRU internal data — it does not call the public API.
| Tool | What it does (from source) | Internal service (apps/mcp) | Scope & PII |
|---|
All tools are read-only and scoped to the caller's companyId, inheriting the user's dashboard permissions. Write tools (create/update campaigns, designations, copy generation) are out of scope for v1. Per spec, sensitive/PII handling (masking, no-PII mode) and payment-data exclusion are target requirements for the platform version.