@hashrights/mcp

MCP server for Hashrights — the off-the-shelf data marketplace. Connect Claude (or any MCP-capable client) and ingest collections and sold-buyer data straight from spreadsheets, Salesforce exports, or any CRM. The AI maps your messy source data; Hashrights provides safe, deterministic tools.

Setup

1. Get an API key — in the Hashrights app: Account Settings → API & AI access → Create key. The hr_live_… key is shown once; it acts as an account admin over the API, so store it like a password.

2. Connect your client

Claude Desktop (claude_desktop_config.json):

{
  "mcpServers": {
    "hashrights": {
      "command": "npx",
      "args": ["-y", "@hashrights/mcp"],
      "env": { "HASHRIGHTS_API_KEY": "hr_live_..." }
    }
  }
}

Claude Code:

claude mcp add hashrights --env HASHRIGHTS_API_KEY=hr_live_... -- npx -y @hashrights/mcp

3. Talk to it

"Here's a CSV export from Salesforce — create a collection called Q3 Enterprise Dataset and mark every closed-won account as already sold."

Running a Salesforce or Google Drive MCP server alongside works naturally — the AI reads from your source system and writes to Hashrights in the same conversation.

Tools

| Tool | What it does | | --- | --- | | get_started | The recommended ingestion workflow — read this first | | list_collections | Collections with status and ledger buyer counts | | create_collections | Batch create/update; external_id makes re-runs idempotent; optionally attach customer_domains | | publish_collection | Make a draft visible to invited partners | | resolve_companies | Batch-match names/domains against the global registry (messy URLs/emails normalized server-side) | | add_companies | Register companies the registry is missing | | mark_buyers_sold | Append buyers to a collection's ledger (blocks partner requests; cannot be undone) | | list_opportunities | Read-only: the buyer-clearance queue and history | | browse_partner_marketplace | Read-only: collections partners have shared with you |

Approvals, declines, and deal closes stay in the Hashrights app by design.

Configuration

| Env var | Required | Description | | --- | --- | --- | | HASHRIGHTS_API_KEY | yes | Account-scoped hr_live_ key | | HASHRIGHTS_SUPABASE_URL | no | API base override (defaults to production) |

Security

• Domains are normalized and hashed server-side — no salts or hashing logic ship in this package.
• Keys are revocable instantly from Account Settings.
• The API exposes the same privacy-redacted views as the app; customer lists are never exposed.