Skip to content

AI and MCP

Connect Claude, Cursor or ChatGPT to your agency's data with an API key.

5 min

With an API key, your AI reads your agency's sales, creators and shoots, and can draft posts or send a reminder. You choose what it is allowed to do.

Before you start

  • The Owner or Admin role in Velora.
  • Two-factor authentication on for your account.
  • Claude Desktop, Claude Code, Cursor or another MCP client.

Create the key

  1. Open the keys page. In the console, go to Settings then Developers.
  2. Click Create a key. Give it a name that says where it is used, for example Sarah's Claude.
  3. Tick only what is needed. To ask about figures, the read rights are enough. Tick “Send notifications” only if you need it.
  4. Type your two-factor code. The key is shown once. Copy it right away and keep it in your password manager.

Connect your AI

  1. Note the MCP server address. It is shown in the console, under Connect an AI. It ends with /api/mcp.
  2. Claude Code. Run claude mcp add --transport http velora https://<domain>/api/mcp --header "Authorization: Bearer vlr_live_…" then type /mcp to check.
  3. Cursor. Add a server in ~/.cursor/mcp.json with the address in url and your key in headers, under Authorization.
  4. Claude Desktop. In Settings › Developer › Edit config, add the mcp-remote relay with the Authorization header. Restart Claude.
  5. ChatGPT. Create a custom GPT, add an Action, import the schema /api/v1/openapi.json, then choose API key of type Bearer.

What you can ask

  • “How much did each creator make this week, by platform?”
  • “List the shoots of the next 15 days.”
  • “Draft a post to congratulate the creators who beat their goal.” The post arrives as a draft, you publish it yourself.
  • “Remind Lina of her shoot tomorrow.” The AI must show you the message before sending it.

Safeguards

  • A key only sees your agency, never another one.
  • No e-mail, phone, fan name or internal note through the API.
  • 50 notifications a day at most for the whole agency, on top of your quiet hours.
  • Every send and every draft is recorded in the log, with the key used.
  • If the admin who created the key leaves the team, the key stops.

If it doesn't work

  • unauthorized error → the key is mistyped, expired or revoked. Create a new one.
  • insufficient_scope error → the key lacks that right. Create a key with it ticked.
  • rate_limited or notification_cap_reached error → wait the number of seconds given, or until tomorrow for notifications.
  • browser_not_allowed error → the call comes from a browser. The API only answers servers and apps.

Official links

Next guideSupport bot and call booking