Manual · 9

MCP server for AI assistants

IllusionDB is also an MCP server (Model Context Protocol): your AI assistant – Claude Code, Claude Desktop or another MCP client – queries data itself, evaluates it and maintains records. Typical: “Which projects are overdue?”, “Sum of hours per client in October” or “Set all tasks of project X to done”.

The endpoint is POST /mcp of your instance (outside /api/v1, Streamable HTTP). Under Settings → My account the MCP server card shows the address with ready-made commands; right after creating a token it is already filled in.

Setup

Claude Code (once, in the project folder; with --scope user in all projects):

claude mcp add --transport http illusiondb https://db.example.com/mcp --header "Authorization: Bearer <TOKEN>"

Claude Desktop (Settings → Developer → Edit config; needs Node.js), then restart:

{
  "mcpServers": {
    "illusiondb": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://db.example.com/mcp", "--header", "Authorization: Bearer <TOKEN>"]
    }
  }
}

Tools

  • Reading (any token): list_datasources, list_tables, get_table, query_records, get_record, list_views, distinct_values. query_records understands the same filters, sorting, grouping and summaries as GET /tables/{id}/records, e.g. the filter tree {"and":[{"col":"status","op":"eq","val":"open"}]}. Tables can be given by ID or name (tasks, main.tasks, Demo/tasks).
  • Changing (tokens without Read only): create_record, update_record, add_link, remove_link.

Permissions

  • The token acts with the rights of its account: role and table permissions apply to every tool – tables without read permission do not appear, writing needs write permission. Best create a separate account for an assistant with exactly the permissions it needs.
  • A Read only token only gets the reading tools.
  • Deliberately not via MCP: deleting records, changing columns, tables or views, SQL, imports, data sources, scripts, webhooks, users, groups, tokens and settings.
  • API tokens only; session cookies, ?token= and the MASTER_TOKEN do not count here. Requests from other browser pages (Origin) are rejected, at most 600 calls per token in 10 minutes. The MCP server also runs without the admin UI.

Privacy

Whatever the assistant queries reaches its AI provider. Records may come from users or external systems – the server tells the assistant to treat them as data, not as instructions.