Connect AI clients to your workspace

Zanfia exposes a hosted Model Context Protocol server. Add it to any MCP-capable AI client — Claude Code, Claude Desktop, Cursor, VS Code, Codex — and the assistant gets typed tools to read and act on your workspace: list products, write course lessons, create offers, post in your community, pull sales stats.

Connect my Zanfia workspace as an MCP server. Zanfia = platform for
selling digital products (courses, communities, pages).

Before configuring, ask me, one at a time, and wait for answers:

1. Which client? (options: "claude-code", "cursor", "vscode",
   "claude-desktop", "codex")
2. My Zanfia API key? (I create it at Dashboard → Integrations →
   API, MCP and CLI;
   read-only scopes for analysis, write scopes only if the assistant
   should create content)

Server: type "http" (Streamable HTTP), URL https://app.zanfia.com/mcp,
header "Authorization: Bearer <API_KEY>".

claude-code → run:
  claude mcp add zanfia --transport http https://app.zanfia.com/mcp \
    --header "Authorization: Bearer <API_KEY>"
codex → add to ~/.codex/config.toml (and export ZANFIA_API_KEY):
  [mcp_servers.zanfia]
  url = "https://app.zanfia.com/mcp"
  bearer_token_env_var = "ZANFIA_API_KEY"
other clients → add to the MCP config JSON:
  { "mcpServers": { "zanfia": { "type": "http",
    "url": "https://app.zanfia.com/mcp",
    "headers": { "Authorization": "Bearer <API_KEY>" } } } }

Verify by calling the list-products tool. Tools follow the key's scopes:
*:read for reads, *:write for writes; insufficient-scope = the key lacks
that permission. Tool list: https://zanfia.com/help/developer-mcp/connect.md
For anything the tools don't cover, the full REST API spec is at
https://zanfia.com/openapi/workspace-api.json (docs: https://zanfia.com/llms.txt).

Authentication

The server authenticates with the same bearer tokens as the API: create a scoped API key and send it as an Authorization: Bearer header. Tool access follows the key's scopes — read tools need the matching *:read scope, write tools *:write.

Add it to your client

Claude Code:

claude mcp add zanfia --transport http https://app.zanfia.com/mcp \
  --header "Authorization: Bearer YOUR_API_KEY"

Cursor / VS Code / Claude Desktop (JSON MCP config):

{
  "mcpServers": {
    "zanfia": {
      "type": "http",
      "url": "https://app.zanfia.com/mcp",
      "headers": {
        "Authorization": "Bearer YOUR_API_KEY"
      }
    }
  }
}

Codex (OpenAI Codex CLI) — add to ~/.codex/config.toml (or a project-scoped .codex/config.toml), with the API key exported as an environment variable:

[mcp_servers.zanfia]
url = "https://app.zanfia.com/mcp"
bearer_token_env_var = "ZANFIA_API_KEY"

export ZANFIA_API_KEY="YOUR_API_KEY"

You can also manage the entry from the terminal with the codex mcp subcommand (codex mcp list, codex mcp add, …) instead of editing the TOML by hand.

Available tools

The server (zanfia, version 0.25.0) exposes the full Workspace API surface as 343 tools, grouped below by area. Read tools require the matching *:read scope, write tools *:write. Pages, funnels-adjacent site settings and the storefront sit under the pages scope; communities, community events, members/roles/moderation and support tickets under communities; social media under social; everything else — products, offers, courses, media, clients, orders, campaigns, emails, stats, discounts, team and the rest — under products. A key without a scope simply does not see that scope's tools in tools/list.

Destructive or irreversible tools say so in their descriptions and ask the assistant to confirm with you first — deletes, access revocation, bulk client actions, anything that sends real email (campaigns, client broadcasts, checkout-recovery emails, team invitations, system-email tests), and site-wide changes such as update-site-slug or update-site-domains. A well-behaved assistant will quote the exact target and wait for your go-ahead; several tools (e.g. merge-clients, send-email-campaign, bulk-revoke-filtered-access) additionally require a preview or count step before the write is accepted. File and video uploads are deliberately not MCP tools — binary payloads don't fit tool calls; use the CLI or API for uploads, then reference the media id from MCP.

Community members

The same endpoint also accepts community-member API keys (created by a member of your community in the member platform under Settings → Developer). A member key gets a separate, member-scoped tool set (server zanfia-member, 23 tools) — the MCP twin of the Community API: listing their communities and channels, reading and searching posts, comments and chat, writing posts/comments/messages as themselves (own content only), and raising and tracking their support tickets. None of the workspace tools above are available to member keys.

Member read tools: list-my-communities · list-community-channels · list-channel-posts · search-community-posts · list-post-comments · list-channel-messages · get-community-updates · get-my-notifications · list-my-support-tickets · get-support-ticket. Member write tools: create-community-post · update-community-post · delete-community-post · create-post-comment · update-post-comment · delete-post-comment · send-channel-message · edit-channel-message · delete-channel-message · mark-notifications-read · create-support-ticket · add-support-ticket-message · update-support-ticket-status.

For agents that keep an eye on a community, the get-community-updates tool (also GET /v1/communities/:communityId/updates?since=<ISO> on the Community API) returns everything new — posts, comments, and chat — across the caller's readable channels in one call: pass the returned nextSince as the next since instead of polling each channel separately. To know when someone talks to you (replies, @-mentions, reactions, DMs), member keys also get get-my-notifications and mark-notifications-read — the member's own notification inbox, shared with the platform bell.

Member requests are rate limited (per minute, per member — a 429 carries Retry-After), and content creates accept a clientRequestId UUID so retries never duplicate a post, comment, or message.

Member access is off by default: it works only in communities where the creator has enabled member API access in the community settings, and flipping the setting off immediately locks out already-issued member keys.

MCP, CLI, or raw API?

• MCP — best when a person chats with an AI client and wants it to act on the workspace directly.
• CLI — best for terminal-based agents, scripts, and CI; also the route for file and video uploads, which MCP deliberately doesn't do.
• Raw API — best for your own integrations and backends.

All three are the same underlying platform with the same permissions model, so you can mix them freely.