AI MCP support

Zapnoty in 30 seconds —
let AI set it up

Claude, Cursor and ChatGPT connect to Zapnoty via an MCP server. AI reads the docs, picks permissions, creates templates and a webhook — you just confirm the prepared project in the cabinet.

30 seconds

What happens

  1. 1

    You ask AI

    «Set up Zapnoty for order notifications via Telegram». AI knows what to do — MCP server already taught it all the tools.

  2. 2

    AI prepares the config

    Asks for your email, designs permissions (orders/news), writes message templates, configures the webhook.

  3. 3

    Creates a virtual_pending project

    Single POST /v1/virtual-projects call — AI gets a temp key zn_virt_… valid for 24h. Until you accept, the project is inactive and can't send anything.

  4. 4

    You get the link

    AI tells you: «Open app.zapnoty.com with the email you gave, click Accept». No other instructions.

  5. 5

    One click

    Log in via magic link, see the project with an «AI prepared» badge, click Accept — get a permanent zn_live_… key. The AI's temp key is invalidated.

MCP

Connect MCP once — forever

Model Context Protocol is the standard way for AI agents to access external tools. Add Zapnoty MCP once — then any AI chat knows about the service.

Claude Desktop

claude mcp add zapnoty https://mcp.zapnoty.com/mcp

Cursor / Continue / Goose

{
  "mcpServers": {
    "zapnoty": { "url": "https://mcp.zapnoty.com/mcp" }
  }
}

Tools available to AI

zapnoty_create_virtual_projectzapnoty_check_statuszapnoty_create_templatezapnoty_create_permissionzapnoty_create_tagzapnoty_set_webhookzapnoty_list_setup

Security

What protects you from AI

Before Accept — nothing works

A pending project physically can't send a message, OTP or webhook. Middleware blocks runtime at the HTTP layer.

Key control stays with you

On Accept, the AI's key is instantly invalidated and your permanent key is generated. AI has no access unless you choose to give it the new key.

Email spam protection

Only one pending project per email at a time. DB UNIQUE index — no one can flood your inbox with dozens of pending projects from different AIs.

24-hour TTL

If you don't visit the cabinet, a cleanup worker deletes the project automatically. AI agents see «expired» status and let you know.

Creation rate limit

5 virtual projects/hour and 30/day per IP. No mass-creation as a DoS vector.

SSRF URL filter

Webhook URL and auth callback URL are checked against private IPs, AWS metadata, link-local — standard defense blocks AI from sneaking an internal address in.

Ready to try?

Install the MCP server in Claude / Cursor / ChatGPT and ask it to set up Zapnoty.