MCP Server Documentation

Connect Your AI Agent to Signal

Yes, Signal has a built-in MCP server. Any AI agent that supports the Model Context Protocol — including Claude, ChatGPT, Hermes, and OpenClaw — can securely read your captured connections, filter and search them, list your cards, and export your data. Access is read-only, scoped strictly to your account, and instantly revocable from Settings at any time.

MCP Endpoint

Add this URL when configuring Signal as an MCP server in any compatible AI application:

MCP Endpoint https://gotsignal.app/mcp

The endpoint speaks JSON-RPC 2.0 over HTTP POST (Streamable HTTP transport, protocol version 2025-03-26). Every request must include a valid Authorization: Bearer <token> header.

How to Connect

Option A Claude & ChatGPT — OAuth
  1. Open Claude or ChatGPT settings and go to Integrations
  2. Choose Add MCP server and paste:
    https://gotsignal.app/mcp
  3. The AI redirects you to Signal's authorization page
  4. Click Allow — one-click, read-only access granted
Option B Hermes, OpenClaw & custom — PAT
  1. In Signal, go to SettingsConnected Agents & API Keys
  2. Click Generate new token and copy it (shown once)
  3. In your agent, set the header:
    Authorization: Bearer sgn_…
  4. POST JSON-RPC 2.0 payloads to https://gotsignal.app/mcp

Available Tools

Signal exposes four tools. Selfie photos are excluded from all list and export responses by default; pass include_selfie: true to opt in.

Tool What it does
list_connections Returns paginated connections for your account. Filter by since (ISO date), card_id, or search text. Control page size with limit and advance pages with cursor. Each connection includes cardName and cardSlug for context.
get_connection Returns a single connection by its id. Includes the same card enrichment fields. Selfie stripped by default.
list_cards Returns all cards on your account — name, slug, title, company, public URL, connection count, and layout. No base64 images included.
export_connections Bulk export in json or csv format, up to 10,000 rows in a single call. Useful for piping all leads into a CRM or spreadsheet via AI.

Example JSON-RPC call

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "list_connections",
    "arguments": {
      "search": "OpenAI",
      "limit": 20,
      "include_selfie": false
    }
  }
}

Security

Read-only Agent tokens cannot create, edit, or delete cards, connections, or account settings. Write endpoints return 401 for all agent tokens.
Account-scoped Each token only accesses the account it was created for. Cross-account access is impossible by design.
PKCE-protected OAuth OAuth 2.1 uses PKCE (S256) to prevent authorization code interception — no client secret required for public clients.
Instant revocation Revoking a token from Settings takes effect immediately. The next request returns 401 — no propagation delay.

Manage & Revoke Access

Go to Signal Settings and scroll to Connected Agents & API Keys. You'll see two lists:

Click the trash icon next to any entry to revoke it immediately. The token becomes invalid on the next request.

Frequently Asked Questions

Does Signal have an MCP server?

Yes. Signal includes a built-in MCP server at https://gotsignal.app/mcp. It supports the Model Context Protocol (2025-03-26) and lets AI agents such as Claude, ChatGPT, Hermes, and OpenClaw read your captured connections securely.

How do I connect Claude or ChatGPT to Signal?

Open Claude or ChatGPT settings, go to Integrations, and add a new MCP server. Enter https://gotsignal.app/mcp as the endpoint. The AI will redirect you to Signal's authorization page where you approve read-only access with one click.

How do I connect Hermes, OpenClaw, or another custom agent?

Generate a Personal Access Token in Signal Settings under Connected Agents & API Keys. Set the Authorization: Bearer <token> header when sending JSON-RPC 2.0 requests to POST https://gotsignal.app/mcp.

Is the Signal MCP server secure?

Yes. All agent tokens are read-only and scoped to your own account data only. OAuth uses PKCE (Proof Key for Code Exchange) to prevent authorization code interception. You can revoke any token instantly from Settings at any time.

What data can the AI agent access through Signal's MCP server?

The agent can read your connections (name, email, phone, company, message, event tag, and the card they connected through) and your card details (name, slug, title, company). Profile photos and selfie images are excluded from all responses by default.

Can I export connections to my CRM with AI?

Yes. The export_connections tool returns all your connections as JSON or CSV in a single call, up to 10,000 rows. You can ask the AI to format, filter, or import the data into any CRM.

How do I revoke an AI agent's access to Signal?

Go to Signal Settings and open the Connected Agents & API Keys section. Personal Access Tokens appear under API Keys and OAuth connections appear under Connected AI Assistants. Click the trash icon next to any entry to revoke it immediately.