Connect Claude, Cursor, VS Code, ChatGPT, or any MCP client so an assistant can work in your Lockii account directly. It can search bookings, update customers and inventory, take payments, and read reports, within the permissions of the account you connect.
Configure in the app: Settings → Integrations → User MCP
https://dash.lockii.app/api/mcp/user
One endpoint serves every client. There are two ways to authenticate, and both expose the same tools. Pick based on who is connecting.
Best when you are connecting an AI client to your own account. The client opens a browser, you sign in, and you approve access. No key to copy.
OAuth is discovered from the server URL. Clients that need the discovery document can use:
https://dash.lockii.app/api/mcp/user/.well-known/oauth-protected-resourceSee Login with Lockii for the full OAuth guide.
claude mcp add --transport http lockii https://dash.lockii.app/api/mcp/user in your terminal, then restart Claude Code.Settings → MCP → Add custom MCP and set the URL to https://dash.lockii.app/api/mcp/user. Reload Cursor, then approve the browser prompt..vscode/mcp.json, then reload.{
"servers": {
"lockii": {
"type": "http",
"url": "https://dash.lockii.app/api/mcp/user"
}
}
}Settings → Connectors → Add custom connector, paste the server URL, and authorize.Settings → Connectors, turn on developer mode, then create a connector with the server URL.The client opens a Lockii sign-in screen. Sign in, approve access, and the tools show up in the assistant.
Requests run as the signed-in user. They only see that user's company, role, and location permissions.
Best for a script or any client that cannot complete the browser sign-in.
Settings → Integrations → API. Copy it when it is shown.https://dash.lockii.app/api/mcp/user and send the key as the x-api-key header.{
"mcpServers": {
"lockii": {
"url": "https://dash.lockii.app/api/mcp/user",
"headers": {
"x-api-key": "<your-api-key>"
}
}
}
}You can also pass ?api_key=<your-api-key> on the server URL. To rotate a key, create a new one, update the client, then revoke the old key.
Tools follow the same actions as the account. A connection only sees the tools that user's permissions allow.
| Area | Example tools |
|---|---|
| Bookings and payments | search_bookings, get_booking, manual_pickup_booking, manual_return_booking, refund_payment, send_payment_link |
| Customers | search_customers, get_customer, create_customer, block_customer, generate_verification_link |
| Products and inventory | search_products, get_product, list_stock, create_stock, list_categories |
| Locations and pricing | list_locations, list_pricing_templates, calculate_price |
| Coupons | list_coupons, create_coupon, archive_coupon |
| Locks and trackers | list_locks, search_locks, list_trackers, get_tracker |
| Inbox and reports | read_inbox, query_reports |
Once connected, ask in plain language:
Disconnect the client in the AI app, or revoke the API key in Settings → Integrations → API. A revoked key stops working immediately.