Skip to main content
StoreRocket runs a remote Model Context Protocol server. An AI assistant connected to it can put your store locator on a website, add and update locations, and read your locator’s analytics, using the same API token and permissions as the REST API.

Create a token

Open API Tokens and create a token for your assistant. Tick what it may do: The token reaches the projects your user account belongs to, on a plan that includes the REST API. Revoke it from the same page at any time.

Connect your client

Any MCP client that can send an Authorization header to a Streamable HTTP server can connect the same way. Keep the token out of shared repositories: in Cursor, use a user-level ~/.cursor/mcp.json.

Sign in instead of a token

Clients that support MCP sign-in (OAuth 2.1), such as Claude, ChatGPT and Claude Code, need only the server URL. Add https://storerocket.io/mcp without a header; the client opens a StoreRocket page where you log in (or sign up) and press Allow. Allowing lets the assistant see, add and update your locations, read your analytics and get your install code, never your billing, plan, password or team.
Claude Code
Then run /mcp in Claude Code and choose Authenticate. To disconnect an assistant, open API Tokens: Connected assistants lists each one with Disconnect. Resetting your password disconnects every assistant.

Tools

Start with list-projects: every other tool takes a project_id from it (a 10-character id such as Xn0pj9v86V). Location tools take a location_id from list-locations. Every tool declares its title, an output schema, and whether it reads, writes or deletes (read-only, destructive, idempotent and open-world hints). Location tools call the REST API: the same validation, geocoding and error messages. Analytics tools return the same numbers as Analytics in the dashboard. Dates are YYYY-MM-DD in UTC, up to 366 days per request, 30 days by default. Analytics count what visitors did on the locator, not sales or store visits.

Prompts

Limits and errors

  • Requests share your REST API rate limit. Analytics tools also allow 30 requests a minute per person.
  • A refused call returns an MCP tool error with the reason, such as a missing permission, a plan without API access, or a project id that is not in your account. Another account’s projects and locations are never returned.
  • create-locations and update-locations save each item on its own. When none could be saved, the error still lists every item and its reason.
  • create-locations without coordinates looks each address up while the request waits. For hundreds of rows, use an import or Google Sheets sync in the dashboard.