Manual / Integrations / Claude / MCP

MCP — Connect Claude to vestl

vestl exposes a Claude connector so you can ask Claude — in Claude Desktop, Claude Code, or as a Custom Connector on claude.ai — to read and operate on your vestl data using natural language. “What’s our current inventory of Neutral Grain Spirit?” “Draft a formula for the new orange bitters.” “Schedule manufacturing order 0142 for next Tuesday.”

The connector uses the same login you use for the web app, sees the same data, and obeys the same role-based permissions. There is no separate vestl AI account, and Claude cannot do anything you could not do yourself in vestl.

Status: v1, read-only. The first release lets Claude read companies, products, product lines, work centers, and reference details. Actions that change records — drafts, publishing, scheduling, inventory posting — are landing in later releases. This page will be updated as each batch ships.

What MCP gives you

Ask questions in your data’s language. Instead of clicking through the products page, filtering, and exporting, ask: “List all active raw materials sourced from Cascade.” Claude reads the matching product records and answers.
Cross-reference without the tab dance. “Which product lines does Maybel’s own?” — Claude checks the client, walks to its product lines, and reports.
Use vestl as context for other work. Drafting an email to a vendor about a delayed shipment? Claude can read the relevant purchase order and vendor contact in the same conversation it’s writing the email.

What MCP does not do: replace the operator UI for routine work, run unattended, or grant the AI permissions you don’t have. Every tool call runs as you, with your role, against your organization’s data.

How auth works

Claude connector requests carry your vestl access token. The connector uses the same permission checks as the web app:

You sign in at app.vestl.ai.
You generate (or copy) a bearer token from your Account → Connectors page.
You paste the token into your MCP client (Claude Desktop config, Custom Connector form, etc.).
Each Claude action carries that token. vestl resolves it back to your user record, role, and organization, then applies the same permissions you have in the web app.

If you lose your laptop, sign out from Account → Sessions — that revokes the bearer token along with the web session.

Roles still apply

A read-only user cannot use Claude to make changes. Claude sees the permission denial and stops. You do not need to think about which tools your role allows; vestl enforces it.

Connect Claude Desktop

Claude Desktop reads MCP server config from a JSON file. On macOS that’s ~/Library/Application Support/Claude/claude_desktop_config.json. Open the file (or create it) and add a vestl entry under mcpServers:

{
  "mcpServers": {
    "vestl": {
      "url": "https://api.vestl.ai/mcp",
      "headers": {
        "Authorization": "Bearer <your-vestl-token>"
      }
    }
  }
}

Replace <your-vestl-token> with the token from Account → Connectors. Save the file and quit/relaunch Claude Desktop. You should see vestl appear in the tools menu within a few seconds.

Staging vs production. Use https://api.staging.vestl.ai/mcp while we soak v1 in staging. We’ll announce in-app when production opens up.

Connect Claude Code

Claude Code (the CLI) reads MCP servers from a project- or user-level config. The simplest path is to add vestl as a user-level server so it’s available in every project:

claude mcp add vestl --url https://api.vestl.ai/mcp \
  --header "Authorization: Bearer <your-vestl-token>"

After running that command, claude mcp list should show vestl and claude itself will start auto-discovering vestl tools in subsequent sessions.

Connect via Custom Connector (claude.ai)

If you primarily use Claude in the browser at claude.ai, vestl can be added as a Custom Connector under Settings → Connectors → Add custom connector:

Connector name: vestl
URL: https://api.vestl.ai/mcp
Authentication: Bearer token, paste the token from Account → Connectors.

Save, then enable the connector in any new conversation that needs it. Note: the claude.ai Custom Connector UI does not currently support OAuth flows for vestl, only static bearer tokens. We’ll move to OAuth as a v2 enhancement once the static-token soak is clean.

What you can ask v1 to do

The v1 connector is read-only. Claude can read:

Area	What Claude can read
Companies	Clients, vendors, internal companies, contacts, addresses, and product lines
Products	Finished goods and raw materials
Product Lines	Active product lines with their parent client
Tanks & Lines	Tanks, vessels, and packaging lines

Claude also reads enough context to answer in the right voice:

who you are, your role, and your organization
the vestl vocabulary glossary, so Claude uses the words your team uses

Things you cannot do in v1: create or edit drafts, publish formulas, fork BOMs, schedule manufacturing orders, post inventory adjustments, send purchase orders, run MRP. Those tools are landing in subsequent releases.

Example prompts to try

Once vestl is connected, here are prompts that exercise v1:

“List all active clients and how many product lines each one has.”
“What raw materials do we source from Cascade? Include their SKUs.”
“Show me every finished good belonging to Maybel’s Spirits Co.”
“Which work centers are tanks and which are bottling lines?”
“What’s my role in vestl?”
“Explain how versioning works for a Formula.”

For tasks not covered by v1’s read surface, Claude will say so honestly: “I can read this data, but the tool to publish a formula isn’t available yet — please publish it from the Formulas page in the web app.”

What’s coming next

Drafts — creating draft formulas and draft manufacturing orders with light confirmation.
State transitions — publishing formulas, forking formulas, scheduling manufacturing orders, and posting inventory adjustments with explicit confirmation.
Planning & MRP — reading planning dashboards, MRP previews, and schedule readiness.
Batches & genealogy — reading batch detail and lot genealogy.

We will update this page when each batch ships, and announce in the changelog inside the web app.

Security & data handling

Your token = your access. Treat the bearer token like a password. Don’t paste it into screenshares, public Slack, or git.
Multi-tenant. Every tool call is scoped to your organization; there is no path to read another org’s data.
Compliance still flows through the web app. TTB filings, audit log writes, and other compliance-sensitive changes are excluded from the v1 connector. They need the audit trail and signature flow the web app provides.
Rate limits. The connector is rate-limited (600 calls per 15-minute window per token). Normal interactive use is well below that ceiling.

If something feels wrong — a tool that returns data you shouldn’t see, a mutation that bypassed a role check — stop and email security@vestl.ai with the conversation transcript.