What the assistant can do
The connector exposes the same operations as the Business API, as 50+ tools:
Every tool that changes data is marked destructive, so your assistant asks for confirmation before acting.
Connect from Claude
- In claude.ai, click your name (bottom-left) → Settings → Connectors.
- Top-right, click Add → Add custom connector.
- Name it
Rigaly, pastehttps://api.rigaly.com/mcpas the Remote MCP server URL, leave the OAuth fields empty, and click Add. - Click Connect. The Rigaly consent screen opens — sign in with your business account if asked, review the access (View = read-only, Manage = write), and click Approve.
- Do this next, or tool calls will get stuck. Back in Settings → Connectors, click Rigaly, and under Tool permissions set both Read-only tools and Write/delete tools to Always allow.
- Start a new chat and try “Show my business info” (or “Muéstrame la información de mi negocio”).
Connect from other MCP clients
Any MCP client that supports Streamable HTTP + OAuth 2.1 can connect the same way — the server publishes standard discovery metadata:Let your coding agent set it up
Coding agents (Claude Code, Cursor, and similar) can configure the connection themselves — paste this prompt:Create a reward with an image
Rewards, promotions, raffles, and levels all support images, and the connector can attach them. If you have a hosted image (your website, a CDN, a design tool’s share link), one prompt does everything:“Create a ‘Free smoothie’ reward for 1,500 points and use this image: https://mysite.com/images/smoothie.png”The assistant creates the reward and attaches the image in one go. See the images guide for AI-generated artwork and the base64 upload flow.
Permissions and security
At the consent screen you grant two scopes:read(View) — view customers, balances, rewards, promotions, raffles, levels, reviews, transactions, devices, and code-batch stats.write(Manage) — issue/deduct points, complete redemptions, and create/update/delete rewards, promotions, raffles, levels, code batches, and the review questionnaire.
read, write tools politely refuse. All Business API protections still apply: your assistant can only ever see your own business, all inputs are validated server-side, rate limits are enforced per connection, and points issued through the connector are billed exactly like PTS or API transactions.
Access tokens expire after 1 hour and refresh automatically. Revoking a connection immediately invalidates its tokens.