Foldr MCP server
Foldr runs an MCP server. MCP (the Model Context Protocol) is the standard way for an AI assistant outside Foldr, such as Claude or ChatGPT, to use a service’s tools. Connect an assistant to Foldr and it can list your shares, search them, read files and ask Foldr about them, in a chat you are having in that assistant.
The server is at https://<your Foldr address>/mcp.
What an assistant can do
Section titled “What an assistant can do”Every call runs as the person who connected the assistant. It sees what that person sees and nothing more. Foldr’s permissions are not bypassed, wrapped or copied.
- Read. An assistant can list the shares you can open, list folders, read files, search by keyword, read the text Foldr has indexed from a file, see custom fields, see what is shared with you and what you have shared, see your bookmarks and your own recent activity. That is 15 tools. See Read tools.
- Change, only if an administrator agreed it. An administrator can let a particular app create folders and files, rename, copy and add to files (
files.write), set one custom field on one file (fields.write), and ask for something to be shared (sharing). Each is limited to the shares the administrator names, and each has a daily limit. A sharing request always waits for an approver. See Sign-in and scopes.
What an assistant cannot do
Section titled “What an assistant cannot do”- It cannot delete a file or folder, move one away, or replace what a file holds. No MCP tool does this, whatever scopes the app has.
- It cannot change an existing link, and it is never handed a usable link: a sharing request goes to an approver first.
- It cannot use a tool that asks an AI model for anything, so an assistant cannot spend your organisation’s AI allowance through Foldr.
- It cannot browse your organisation’s directory of people and groups.
- It cannot reach Foldr’s web pages or settings. The MCP server accepts only a sign-in that is tied to it, which the assistant does by naming that address as the resource, as standard MCP clients do. A token made without naming a resource is an API token: Foldr’s REST API accepts it and
/mcprefuses it. This holds for every app and cannot be switched off.
Off until an administrator turns it on
Section titled “Off until an administrator turns it on”The server is off for every site until an administrator switches on Allow connected apps and allows people to connect apps. Until then /mcp answers as if it did not exist. See Turn it on.
Where to go next
Section titled “Where to go next”- An administrator: Turn it on, then Security and limits.
- A person connecting an assistant: Connect a client.
- A list of every tool and its arguments: Tool reference.
- Something not working: Troubleshooting.
The tool reference is generated from the running product. Everything else on these pages is written by hand and describes Foldr as it is built today.