Connect your AI agents (MCP)

Syncro exposes an MCP server to connect AI assistants (Claude, ChatGPT, Codex, Cursor, opencode, Mistral…) to your projects. The assistant acts with your permissions: it only sees projects you belong to and respects your role.

MCP is the standard that lets an assistant read and edit data from an app. You decide what you connect and you can revoke it anytime from your profile.

Endpoint

All assistants point to the same endpoint:

https://syncrowork.app/api/mcp

Connect a remote assistant (OAuth)

Claude, ChatGPT, Codex or Cursor connect over OAuth 2.1: you paste the endpoint URL and they open a Syncro authorization screen.

1. Add a connector/MCP server with the URL above.
2. A tab opens asking you to sign in (if you weren't) and authorize access.
3. Review the requested permissions (Read or Read and write) and click Authorize.
4. Done: the assistant can now read and edit your data.

The first time you'll see the consent screen with the name of the app connecting and the permissions it asks for. You can cancel without authorizing anything.

Connect a local assistant (stdio + token)

Assistants that run on your machine (for example Claude Desktop or opencode in local mode) use a personal token instead of OAuth:

1. Go to Profile → Agent access.
2. Under Access tokens, give it a name, pick permissions (Read / Write), optionally restrict it to one project and set an expiry.
3. Click Create token and copy the value (it won't be shown again).

Then point the assistant at Syncro with that token. Generic example:

{
  "mcpServers": {
    "syncro": {
      "url": "https://syncrowork.app/api/mcp",
      "headers": { "Authorization": "Bearer syncro_pat_YOUR_TOKEN" }
    }
  }
}

In each assistant

How each client connects, and where its official docs live:

Permissions and scope

• A token can be restricted to one project; then the assistant only sees that project.
• Columns and boards can only be created or renamed if you're owner or admin.
• An agent can never delete a project, remove members or change roles.

What now?

Once the assistant is connected, these two guides help you get the most out of it:

• What you can ask your agent: summaries, searches and project status.
• What your agent can do in Syncro: create, move and comment on tasks, labels and Markdown.

Troubleshooting

• It won't connect: check the URL matches the endpoint exactly and that you signed in before authorizing.
• You revealed a token and lost it: tokens are shown only once. Revoke it and create a new one.
• An assistant stopped responding: check in Profile → Agent access that the app or token is still active.

Revoke access

In Profile → Agent access:

• Connected applications: click Revoke to cut an assistant's OAuth access.
• Access tokens: click Revoke to invalidate a local token.

Revocation is immediate: the assistant can no longer read or write.

---

Tip: Start with Read only to test; enable Write once you trust the flow. Check Agent access now and then and revoke what you don't use.