MCP server · shipped

Connect Claude, Cursor or ChatGPT to your own workspace.

Generate an API key, paste one config block, and your AI client can read your sites, research a topic, draft against real facts, run your quality gates and publish — all scoped to your org, all logged.

Get an API key

Speaks standard MCP over a bearer token · works with any MCP-capable client

claude_desktop_config.json

{
  "mcpServers": {
    "quillrun": {
      "url": "https://quillrun-api.vercel.app/mcp",
      "headers": {
        "Authorization": "Bearer qr_live_ab12…"
      }
    }
  }
}

that's the whole setup

Three steps, about two minutes

Create a key

In Guardrails → API keys. Name it after the client or machine, set a monthly call cap if you want one.

Copy it once

The full key is shown exactly once — we store a hash, never the key. Paste it into your client's config.

Ask it to work

"Find the three pages losing traffic on your site and draft refreshes." It uses your tools, your gates.

What your client can do

list_sitesEvery site in the org, with connection and pause state.

get_recommendationsRanked fixes from Search Console — scored, with the reason.

generate_contentRuns the full research → draft → gates pipeline for a topic.

get_run_statusLive stage, gate results and any error for a run in flight.

publish_draftPublishes an approved draft. Respects the approval gate.

list_schedulesEvery recurring schedule configured for the org's sites.

The same tools the Quillrun UI uses — so an agent can't do anything through MCP that you couldn't do by hand, including bypassing a gate.

And what it can't

✕Touch another org. A key is bound to one org at issue time.✕Skip a quality gate, or publish past an approval gate.✕Exceed the key's monthly call cap — calls are rejected, not billed.✕Keep working after you revoke. Revocation is immediate.✕Act unlogged. Every call lands in the audit log with its key name.

Questions

Is my content used to train anything?No. Your sites, facts and drafts stay in your org and aren't used for training.

Can I give a client their own key?Yes — one key per client machine, each with its own cap, each revocable without affecting the others.

I lost my key. Can you resend it?No — we only keep a hash. Revoke the old one and create a replacement; it takes a few seconds.

Your agent, your CMS, your rules.

Get an API key