tokolaku-mcp

# Tokolaku MCP Server

Remote [MCP](https://modelcontextprotocol.io) (Model Context Protocol) server for [Tokolaku](https://tokolaku.id) — a WhatsApp business platform for Indonesian SMBs built on the **official WhatsApp Business API** (Meta Cloud API, zero message markup).

Connect Claude, ChatGPT, or any MCP client to your Tokolaku account and let your AI agent send WhatsApp messages, browse conversations, look up products & orders, and manage webhooks.

```
Endpoint : https://api.tokolaku.id/mcp
Transport: Streamable HTTP (stateless)
```

## Quick start

### claude.ai / ChatGPT & other OAuth-capable clients

Just add the URL — no keys needed:

1. Add a custom connector / MCP server with URL `https://api.tokolaku.id/mcp`
2. Sign in with your Tokolaku account and approve access
3. Done — 6 read-only tools are available (channels, inbox, products, orders)

### Claude Code / Claude Desktop / SDKs (API key)

Use a **secret API key** from your [Tokolaku developer dashboard](https://tokolaku.id/developers):

```json
{
  "mcpServers": {
    "tokolaku": {
      "type": "http",
      "url": "https://api.tokolaku.id/mcp",
      "headers": { "x-api-key": "tk_live_sk_xxx" }
    }
  }
}
```

## Tools

With an API key (scope-gated — `tools/list` follows your key's scopes):

| Tool | Description |
|---|---|
| `send_message` | Send a session text message via the official channel |
| `generate_bot_reply` | Generate an AI reply using the tenant's bot engine |
| `list_channels` | List connected official channels |
| `list_conversations` / `get_conversation` | Browse the inbox |
| `list_products` | Browse the product catalog |
| `list_orders` / `get_order` | Browse orders (incl. payment status) |
| `get_subscription` | Plan & quota info |
| `list_webhooks` / `create_webhook` / `test_webhook` | Manage inbound-event webhooks |

Via OAuth (read-only bundle): `list_channels`, `list_conversations`, `get_conversation`, `list_products`, `list_orders`, `get_order`.

## Auth

- **OAuth 2.1** (PKCE, dynamic client registration, RFC 8414/9728 discovery) — for interactive clients; tokens are per-user and read-only.
- **API key** (`x-api-key` or `Authorization: Bearer`) — secret keys only; write tools respect billing/quota exactly like the REST API.

## Links

- Docs & API reference: https://tokolaku.id/api-docs
- Developer overview: https://tokolaku.id/developers
- WhatsApp Business API plan (Rp99k/mo, no message markup): https://tokolaku.id/whatsapp-api
- SDKs: [npm `tokolaku-sdk`](https://www.npmjs.com/package/tokolaku-sdk) · [PyPI `tokolaku`](https://pypi.org/project/tokolaku/) · [Packagist `tokolaku/sdk`](https://packagist.org/packages/tokolaku/sdk)

---

*This repository hosts the public metadata (`server.json`) and documentation for the hosted server; the server itself is a managed service operated by Tokolaku.*