{
  "_readme": [
    "Pinlyx MCP server config. The endpoint speaks streamable HTTP, so any",
    "MCP-capable client uses the same shape: url + Authorization header.",
    "Config file locations - Claude Desktop: ~/Library/Application Support/Claude/",
    "claude_desktop_config.json (macOS), %APPDATA%\\\\Claude\\\\claude_desktop_config.json",
    "(Windows). Cursor: ~/.cursor/mcp.json or .cursor/mcp.json in the project.",
    "Create the key under Settings > API Keys and give it ONLY the scopes below."
  ],
  "mcpServers": {
    "pinlyx": {
      "url": "https://api.crmsolid.com/mcp",
      "headers": {
        "Authorization": "Bearer csk_live_replace_me"
      }
    }
  },
  "_scopeRecommendations": {
    "reporting-agent": {
      "description": "Summarises the inbox and pipeline. Cannot change anything.",
      "scopes": [
        "contacts:read",
        "deals:read",
        "social:read",
        "email:read",
        "analytics:read",
        "pipelines:read",
        "tasks:read"
      ]
    },
    "outreach-agent": {
      "description": "Drafts and sends messages, updates contact state.",
      "scopes": [
        "contacts:read",
        "contacts:write",
        "social:read",
        "social:write",
        "posts:read",
        "posts:write",
        "sequences:read",
        "tasks:write"
      ]
    },
    "ops-agent": {
      "description": "Full operational access. Give this to a human-supervised assistant only, never to an unattended loop.",
      "scopes": [
        "contacts:read",
        "contacts:write",
        "deals:read",
        "deals:write",
        "tasks:read",
        "tasks:write",
        "finance:read",
        "webhooks:read",
        "webhooks:write",
        "sequences:read",
        "sequences:write"
      ]
    }
  },
  "_notes": [
    "Scopes are enforced server-side. A tool the key cannot reach is not",
    "offered to the model at all, so an over-broad key is the only real risk.",
    "Rotate the key from Settings > API Keys if a config file is ever shared."
  ]
}