@capitalthought/pitch-mcp-server

MCP server for Pitch — a startup directory and profile management platform for the Texas startup ecosystem. Exposes the full Pitch tool surface (companies, people, pipelines, tags, cities, reviews, saved searches, share links, custom lists, portfolios, PitchBot push + ops) for MCP-aware clients like Claude Code and Cursor. See the live tool list at pitch.vc/docs/mcp.

Renamed in v1.3.0: this package was previously published as the unscoped pitch-mcp-server (now deprecated). Update any existing config / install commands to the scoped name below.

Install

npx @capitalthought/pitch-mcp-server

The server runs over stdio. Your MCP client (Claude Code, Cursor, etc.) spawns it as a child process.

Authenticate

1. Sign in at new.pitch.vc.
2. Open /settings/api-keys → Create API key.
3. Copy the pitch_<40 hex chars> token. It is shown once — keys are stored as SHA-256 hashes and cannot be recovered.

Register with Claude Code

{
  "mcpServers": {
    "pitch": {
      "command": "npx",
      "args": ["-y", "@capitalthought/pitch-mcp-server"],
      "env": {
        "PITCH_API_KEY": "pitch_YOUR_KEY_HERE"
      }
    }
  }
}

Restart the client and run /mcp to verify the pitch server is connected.

Register with Cursor

Paste the same snippet into ~/.cursor/mcp.json under mcpServers.

What's inside

Tools are grouped into categories (Companies, People, Pipeline, Reviews, Saved Searches, PitchBot, Custom Lists, Portfolios, etc.). All writes respect the Pitch row-level-security rules — you can only edit companies you own or maintain, and you can only manage your own pipeline, follows, and bindings. The exact tool count drifts with each release; the pitch.vc/docs/mcp page derives it from manifest.ts so it never lies.

See the full per-tool reference at pitch.vc/docs/mcp.

How authentication works

Your API key is never validated locally. On startup, the server POSTs the key to https://new.pitch.vc/api/mcp/bootstrap, which validates it server-side and returns a short-lived Supabase session. All subsequent queries run through RLS as the authenticated user. No service-role key or other shared secrets are required on your machine.

License

MIT © Capital Thought