Konvoi MCP server

Requirements

Connect

claude mcp add --transport http konvoi https://konvoi.ai/api/mcp

{
  "mcpServers": {
    "konvoi": {
      "url": "https://konvoi.ai/api/mcp"
    }
  }
}

Scripts

Personal tokens: Profile → AI clients → Create personal token

curl -s https://konvoi.ai/api/mcp \
  -H "Authorization: Bearer $KONVOI_TOKEN" \
  -H "Content-Type: application/json" \
  -H "Accept: application/json, text/event-stream" \
  -d '{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "initialize",
  "params": {
    "protocolVersion": "2025-06-18",
    "capabilities": {},
    "clientInfo": {
      "name": "curl",
      "version": "1.0"
    }
  }
}'

curl -s https://konvoi.ai/api/mcp \
  -H "Authorization: Bearer $KONVOI_TOKEN" \
  -H "Content-Type: application/json" \
  -H "Accept: application/json, text/event-stream" \
  -d '{"jsonrpc":"2.0","id":2,"method":"tools/list"}'

curl -s https://konvoi.ai/api/mcp \
  -H "Authorization: Bearer $KONVOI_TOKEN" \
  -H "Content-Type: application/json" \
  -H "Accept: application/json, text/event-stream" \
  -d '{"jsonrpc":"2.0","id":3,"method":"tools/call","params":{"name":"list_workspaces","arguments":{}}}'

What it can reach

• Every workspace you can open where Dispatch and AI clients are on, with your role in that workspace.
• When you connect you can limit it to some workspaces and leave out Propose changes.
• A workspace admin can remove a connection from their workspace in Dispatch → Connect.
• Profile → AI clients lists your connections; Disconnect ends one at once.

Tools

Read tools look things up with your role. propose_* tools create a proposal and change nothing themselves.

Changes are proposals

• A propose_* tool changes nothing itself. It creates a proposal in Konvoi Dispatch and returns its link.
• Everyday proposals: approve or reject in the client when it can ask you, otherwise in Konvoi Dispatch.
• Proposals marked Admin approves: a workspace admin approves them in Konvoi Dispatch.
• An approved change runs as the person who approves it, with their role. Every call and decision is logged.
• Proposing needs the Propose changes access, chosen when you connect.

Prompts

Handle this week’s fines

Match each open fine to a driver, propose assignments, flag contest candidates.

fine-triage

Sweep fuel for anomalies

Impossible fills vs tank size, off-hours fills at the depot, duplicate charges.

fuel-anomaly

What expires in the next 30 days

Technical inspections, insurance, registrations and licenses coming due.

expiry-sweep

Weekly fleet review

Utilization, idle vehicles, telemetry highlights — one digest.

weekly-telemetry

Limits

Security

• Tokens are random strings stored only as a hash. Access tokens last 1 hour; refresh tokens rotate on every use and lapse after 30 days unused; personal tokens last 30, 90 or 365 days.
• All your connections are revoked at once when you change your password, log out everywhere or turn two-factor authentication off.
• Presenting an old refresh token again revokes that connection.
• Connections do not follow the session lock. Allowing a connection needs a fully unlocked session.
• Text from outside Konvoi, such as scanned documents and e-mails, is marked {"untrusted": true}. Clients are told to treat it as data, never as instructions.
• Data you ask about is sent to the client you use.

Troubleshooting