MCP server

Devolens hosts a remote MCP (Model Context Protocol) server at:

https://mcp.devolens.com/mcp

Connecting it to an MCP client such as Claude, ChatGPT, or Codex lets an AI agent work with your Devolens account directly: query the usage analytics behind the KPI dashboards, investigate floating capacity, find upcoming license expirations, look up and manage license keys, and manage customers. The agent can only use the permissions you grant. The skills and llms.txt files described in AI-assisted integration help an agent write your integration code. The MCP server is different: it lets an agent act on your live account.

Available tools

Tool group	Examples	What it allows
Usage analytics	`ai_getDailyAggregates`, `ai_getKeyUsageSummaries`, `ai_getLicenseActivityBuckets`	Read the aggregated license activity and usage data that powers the KPI dashboards.
Floating capacity overview	`ai_getFloatingCapacity`	Find products and periods with excess or unused floating capacity. Defaults to excess capacity over the last 7 UTC calendar days.
Floating capacity licenses	`ai_getFloatingCapacityLicenses`	Identify the licenses behind a capacity finding in a specific 30-minute UTC interval.
Floating capacity history	`ai_getFloatingCapacityHistory`	Inspect one license’s recorded floating usage and historical limits. Defaults to the last 30 UTC calendar days.
Upcoming expirations	`ai_getExpiringLicenses`	List upcoming license expirations, optionally filtered by product or customer. Defaults to the next 7 days and excludes blocked licenses.
Products and templates	`product_list`, `licenseTemplate_list`	List products and license templates.
License keys	`key_get`, `key_list`, `key_create`, `key_extend`, `key_block`	Read license keys and, if permitted, create, extend, block, or otherwise manage them.
Customers	`customer_list`, `customer_licenses`, `customer_add`	Read customers and their licenses and, if permitted, add, edit, or remove customers.

Each tool maps to a Web API endpoint and requires the corresponding access token permission. A connection that was only granted analytics permissions cannot create or block keys. The floating-capacity and expiration report tools are read-only. They require Usage Analytics permission and a subscription with analytics access. To include customer names, company names, and email addresses in the license lists, also grant Get Customers permission. To investigate floating capacity, ask the agent to start with the overview, identify the licenses behind a finding, and then inspect a license’s history. Use CapacityMode=below to look for unused capacity instead of the default exceeded mode. Daily overview rows describe the worst 30-minute interval. The reports use recorded data that updates asynchronously, so missing data does not mean zero usage and the results do not capture every instantaneous peak.

Enable MCP access

MCP access is disabled by default and is currently available for company accounts only.

Open Security settings and enable MCP access.
Connected clients appear under Connected Apps, where you can review the permissions granted to each connection and revoke it at any time.

Connect a client

claude mcp add --transport http devolens https://mcp.devolens.com/mcp

Run /mcp inside Claude Code to start the authorization flow.

Go to Settings → Connectors → Add custom connector and enter https://mcp.devolens.com/mcp as the URL.

Custom MCP connectors require a paid ChatGPT plan and developer mode, which you can enable under Settings → Apps & Connectors → Advanced settings.

Go to Settings → Apps & Connectors → Create.
Name the connector (for example Devolens) and enter https://mcp.devolens.com/mcp as the MCP server URL.
Select OAuth as the authentication method and complete the Devolens authorization flow.
In a new chat, enable the connector from the tools menu to make it available to the model.

Depending on your plan and ChatGPT version, token-based authentication may also be available when creating the connector. In that case, you can provide a Devolens access token instead of completing the OAuth flow, as described in the next section.

Add the server to ~/.codex/config.toml (shared by the Codex CLI and IDE extension):

[mcp_servers.devolens]
url = "https://mcp.devolens.com/mcp"

Then authenticate with:

codex mcp login devolens

To use an access token instead of OAuth, add the token header to the server entry:

[mcp_servers.devolens]
url = "https://mcp.devolens.com/mcp"
http_headers = { token = "<your access token>" }

Add the server to .vscode/mcp.json in your workspace, or to your user-level MCP configuration:

{
  "servers": {
    "devolens": {
      "type": "http",
      "url": "https://mcp.devolens.com/mcp"
    }
  }
}

VS Code starts the authorization flow when the server first connects. To use an access token instead, add a headers object with a token entry.

Add the server to your client’s MCP configuration, for example:

{
  "mcpServers": {
    "devolens": {
      "url": "https://mcp.devolens.com/mcp"
    }
  }
}

When the client connects for the first time, your browser opens a Devolens authorization page. Sign in and choose the exact permissions the client should have. These are the same permissions used by access tokens, and presets are available for common setups such as read-only access, usage analytics, license operations, and customer management. Completing the flow creates an access token named “Devolens MCP OAuth” scoped to exactly the permissions you selected. Revoking the connection under Connected Apps removes the client’s access.

Authenticate with an access token

Instead of the browser-based authorization flow, you can authenticate by sending an existing access token in the token header. This is useful for headless environments, CI pipelines, and automations, or when you want to reuse a token whose permissions you have already narrowed down.

{
  "mcpServers": {
    "devolens": {
      "url": "https://mcp.devolens.com/mcp",
      "headers": {
        "token": "<your access token>"
      }
    }
  }
}

In Claude Code:

claude mcp add --transport http devolens https://mcp.devolens.com/mcp --header "token: <your access token>"

You can create and manage access tokens here. We recommend creating a dedicated token for each MCP client with only the permissions it needs.

Security recommendations

Grant the minimum permissions for the task. For usage analytics and license reports, grant Usage Analytics permission; add Get Customers permission if you need customer details in reports. Key and customer write permissions are only needed if the agent should change your account.
Data returned by the tools is processed by the AI model you use, so only grant read access to data you are comfortable sharing with your AI provider.
Review which data each permission exposes. Usage Analytics permission allows access to aggregated usage data and license reports, which can include license keys and customer IDs. Customer names, company names, and email addresses in these reports additionally require Get Customers permission. Other key and customer permissions can expose further details, such as notes and machine codes.
When you authenticate with an access token, you can additionally use feature lock for data masking to hide individual fields, such as notes, from license key responses.
Review Connected Apps periodically and revoke connections you no longer use.
Every tool call is executed as a regular Web API request, so MCP activity is recorded in the Web API log and can be audited like any other API usage.

Example prompts

Goal	Prompt
Review activity	`Show daily license activations for product <product id> over the last 30 days.`
Find heavy usage	`Which license keys had the most activity last week?`
Check floating capacity	`Which products exceeded their floating-license limits in the last 7 days? Show the licenses behind the largest excess.`
Find unused seats	`Find unused floating capacity for product <product id> over the last 7 days and identify the licenses behind it.`
Investigate capacity history	`Show the floating-capacity history and configured limits for license <license key> in product <product id> over the last 30 days.`
Review upcoming expirations	`List licenses expiring in the next month for product <product id>, excluding blocked licenses. Include customer details if my permissions allow it.`
Customer lookup	`Find the customer <name> and list their licenses.`
Issue a trial	`Create a 30-day trial key for product <product id>.`
Support and debugging	`The customer <name> reports that their license fails to activate. Look up their license and recent activity and explain the likely cause.`
Find anomalies	`Which products have unusual activation patterns?`
Business related	`Which customers may be under-licensed?` `Show me customers that might be at risk of churning due to inactivity.` `Which trial users show the strongest conversion signals?` `Are there signs that customers are sharing licenses internally?` `Which customers appear ready for usage-based pricing?`

Get Started

Licensing models

Examples

Payments

Features

Security

Available tools

Enable MCP access

Connect a client

Authenticate with an access token

Security recommendations

Example prompts

​Available tools

​Enable MCP access

​Connect a client

​Authenticate with an access token

​Security recommendations

​Example prompts

Available tools

Enable MCP access

Connect a client

Authenticate with an access token

Security recommendations

Example prompts