The Shilo MCP server is read-only. It does not create, update, or delete data in Shilo or your CRM.
Quickstart
1. Generate a Shilo API key
The MCP server uses the same API keys as the Shilo REST API. An owner or admin can create one in Settings → API Keys → Generate API Key. Keep Read-only Key turned on, give the key a descriptive name such asMCP - Claude or MCP - Cursor, and copy it immediately. Shilo will not display the secret again.
See Authentication for full key-management and security guidance.
2. Add Shilo to your MCP client
Use the following connection details:
Your client must support remote Streamable HTTP servers and custom request headers. Many MCP clients accept configuration similar to this:
3. Confirm the connection
Save the configuration, restart or reconnect your MCP client if required, and ask it to list the available Shilo tools. You can separately verify that the hosted server is available:OK. This health check confirms availability only; it does not validate your API key.
Available tools
All tools are read-only and return structured data that an MCP client can reason over or pass to another workflow.Identifiers and pagination
Context tools use the external IDs from your connected CRM. Usesearch_contacts or search_users first when you do not already know an ID. get_call_context uses the Shilo call ID returned by list_calls.
Search and list tools return 25 records by default and accept a maximum limit of 100. When pagination.has_more is true, pass pagination.next_cursor into the next request. Appointment prep and contact context tools return up to three recent calls by default and accept a maximum of five.
Optional data may not exist for every record. Context tools return a warnings array when a requested signal, analysis, transcript, or related object cannot be included.
Example prompts
Once connected, try prompts like:- “Find Jamie Client, then prepare me for my next appointment with them using recent calls and Shilo Signals.”
- “Show me the context for the most recent call, including the analysis and transcript.”
- “Find the user with the email alex@example.com and summarize their current performance metrics.”
- “List the most recent appointments and identify which contacts need follow-up.”
- “Find a contact by phone number and summarize what happened in their recent conversations.”
Security
Treat your Shilo API key like a password.- Use a dedicated read-only key for each MCP client or integration.
- Never commit a key to source control or paste it into a public prompt.
- Prefer environment variables or a secrets manager when your client supports them.
- Revoke unused or exposed keys from Settings → API Keys.
- Remember that each key is scoped to its associated Shilo integration.
Troubleshooting
The client returns 401 Unauthorized
The key is missing, invalid, mistyped, or revoked. Confirm that the configured header is either x-api-key or Authorization: Bearer and that it contains the complete key.
The client cannot connect or discover tools
Confirm that the URL is exactlyhttps://mcp.shilo.ai and that the client supports Streamable HTTP plus custom headers. Save the configuration and restart the client if it does not automatically reconnect.
A contact, user, or call is not found
Check that you are using the expected identifier and that the API key belongs to the Shilo integration that contains the record. Search for the contact or user first when you are unsure of the external ID.Optional context is missing
Signals, analyses, transcripts, and metrics are not available for every record. Review the tool’swarnings array for the specific reason.