systematics-mcp

Claude Code MCP server for the Systematics platform by Dovito Business Solutions. Connects Claude Code to your Systematics account for managing businesses, projects, tasks, proposals, conversations, and more through natural language.

Quick Start

1. Install and Register

npm install -g systematics-mcp
claude mcp add systematics --scope user -- systematics-mcp

Use --scope user for global access across all projects, or --scope project for a single project.

2. Authenticate

Restart Claude Code, then use /mcp to verify Systematics shows as "Connected." The first time you use a Systematics tool, run the authenticate tool to sign in via your browser. Your token is saved locally at ~/.systematics/token and reused automatically for 90 days.

That's it. No API keys, no repo access, no manual config files.

How It Works

• The MCP server starts silently -- no browser popup on launch
• Authentication only triggers when you actually use a Systematics tool
• You sign in with your normal Systematics account (Google or email)
• Claude Code gets the same permissions as your account
• Clients see only their business data
• Staff see what their role allows
• Admins get full access

Available Tools

| Category | Tools | |----------|-------| | Businesses | list, get, create, update | | Projects | list, get, create, update | | Tasks | list, list by project, create, update, delete | | Catalog | list, create, update | | Users | list (with filters) | | Proposals | list, create | | Conversations | list, read messages, create, send message | | Deliverables | list, create, update | | Pipeline | list applications |

Token Management

• View and revoke tokens at Settings > API Tokens in the web app
• Tokens expire after 90 days
• Maximum 10 tokens per user
• To re-authenticate, delete ~/.systematics/token and restart Claude Code

Environment Variables (Optional)

| Variable | Default | Description | |----------|---------|-------------| | SYSTEMATICS_TOKEN | - | Skip browser auth by providing a token directly | | DOVITO_APP_URL | https://app.dovito.com | Custom app URL (for self-hosted instances) |

Development

The MCP server lives in mcp-server/ inside the app.dovito.com repository.

cd mcp-server
npm install
npm run dev    # Run locally with tsx
npm run build  # Compile TypeScript

CI/CD

Publishing to npm is automated via GitHub Actions. To release a new version:

1. Make changes in mcp-server/
2. Bump the version in mcp-server/package.json
3. Push to main
4. GitHub Actions builds and publishes to npm automatically

If you push without bumping the version, the workflow skips the publish step.

Security

• Tokens are hashed (HMAC-SHA256) before storage in the database
• Token file is stored with 0o600 permissions in a 0o700 directory
• Auth callback uses POST (token never appears in URLs or browser history)
• All API calls go through the same validation and rate limiting as the web UI
• SSRF prevention: DOVITO_APP_URL is validated against an allowlist before any network call