Knowledge base
Connecting Claude, Cursor or ChatGPT to your account
Give an AI tool its own scoped token so it can read and manage your hosting — with a spend cap and a sandbox mode.
MCP is the standard that lets an AI tool talk to a service directly. Connect one and you can ask your assistant about your sites in its own window, instead of describing them.
Making a connection
Settings → AI tools → New connection.
Give it a name you will recognise later — "Claude on my laptop" is a better name than "token 1", because this list is how you will decide what to revoke in six months. Pick which tool it is for; we generate a config snippet in that tool's own format, so there is nothing to hand-assemble.
Choose what it may do
What may it do? is a list of permissions, and it is the whole security model. A connection can never do more than you can — asking for a permission you do not hold is refused outright, so a connection made by a team member is bounded by that member's own access, not by yours.
Give it what the job needs. A tool you want to ask questions needs read access and nothing more.
Sandbox mode
Sandbox mode lets the tool look at everything it has permission for and quietly discards any change it tries to make. If you are trying a new tool, or letting one loose on a production account for the first time, start here. You can see exactly what it would have done without it having done it.
The spend cap
Some actions cost money — content generation, SEO lookups, domain registration. A connection can carry a cap on those, so a tool that misunderstands an instruction cannot spend more than you decided in advance. Set one. It costs nothing if it is never reached.
The token is shown once
You get the zmcp_… token a single time, with a paste-ready config snippet. We keep only a hash of it, so we cannot show it to you again and neither can anyone who compromises our database. If you lose it, revoke the connection and make another — that is a thirty-second job, and it is safer than any arrangement in which we could re-display it.
⛔ Paste it into your tool's config, not into a chat, a ticket or a screenshot. It is a password that does not expire.
Watching and revoking
The list shows each connection's token prefix, when it was created, and when it was last used — including Never used, which is usually your answer about whether a connection is still needed. Revoke takes effect immediately; the tool starts getting refused on its next call.
Review the list occasionally. A connection for a laptop you no longer have is worth thirty seconds to remove.
Still stuck?
Support is included on every plan and answers in your own language.
Contact support → All articles →