@nativ-il/mcp

An MCP server exposing the Nativ API as Model Context Protocol tools for AI agents.

Add to a Claude MCP config

Add this block to .mcp.json or claude_desktop_config.json:

{
  "mcpServers": {
    "nativ": {
      "command": "npx",
      "args": ["-y", "@nativ-il/mcp"],
      "env": {
        "NATIV_API_KEY": "isk_...",
        "NATIV_BASE_URL": "https://api-production-b915.up.railway.app"
      }
    }
  }
}

NATIV_API_KEY is required. NATIV_BASE_URL is optional — it defaults to the production URL shown above.

Tools

The server registers 7 tools by default:

| Tool | Description | |------|-------------| | list_integrations | List the Nativ integrations available to act on (id, name, category, status). | | get_integration | Get one integration's details: description, the tools it exposes and what each does, and the credential fields needed to connect. | | list_connected_accounts | List the connected accounts (end-users) you can act on behalf of. | | list_connections | List connections (a connected account linked to an integration). Optionally filter by connectedAccountId. | | run_tool | Run a tool on a connected account. Provide either connectionId, or connectedAccountId + integrationId. Returns the interaction; if it is awaiting_mfa, follow the instructions to submit a 2FA code. | | get_interaction | Get the current status and output/error of an interaction by id. | | submit_mfa | Submit a 2FA code for an interaction that is awaiting_mfa. Returns the updated interaction. |

2FA flow

Some tools require a second factor. When run_tool returns a result with awaiting_mfa status, the response instructs the agent to ask its human for the code. The agent then calls submit_mfa with the interactionId and the code the human provided. After submission, call get_interaction to retrieve the final result. No raw credentials pass through the agent at any point in this flow.

Security: no credentials through the agent

Humans connect accounts via the CLI (nativ connect) or dashboard before the agent ever runs. The agent only acts on already-connected accounts; it never handles raw credentials.

The connect_account tool is excluded by default. It is only registered when NATIV_MCP_ALLOW_CONNECT=1 is set in the server environment.

Warning: enabling NATIV_MCP_ALLOW_CONNECT=1 routes raw credentials through the agent. Only enable it for trusted local use. v1 ships without it.

License

MIT