Guidepoint MCP server icon

Guidepoint

by Guidepoint

HIPAA CompliantSOC2 ReadyISO 27001 Ready
Finance5 tools

Search 100,000+ Guidepoint expert interview transcripts from an AI agent, and register for or cancel expert events. Anthropic lists one read tool; Guidepoint documents five, including two writes. OAuth via Auth0, identity-only scopes.

Verified connector

Listed by Anthropic as a partner connector in its Connectors Directory.

Connection checked by Agentman on .

Anthropic states this reflects the level of review a connector received, not a security audit.

Connect Guidepoint via MCP

https://clapi.guidepoint.io/mcp-server/v1/mcp

Works in any MCP-compatible client. In Agentman Studio it is one click — no config file to edit.

Guidepoint Tools & Capabilities (5)

Tool names from Anthropic's directory listing. This server requires sign-in, so we could not read tool descriptions or parameter schemas.

Limits

  • Anthropic's directory under-lists this server by four tools, including both writes. It names only search_library and records permissions as "Read only". Guidepoint documents five tools, two of which it annotates readOnlyHint: false. Verify the surface in your client's Tool permissions panel, not in a catalogue.
  • No application scopes exist. The resource descriptor advertises openid, profile, email and offline_access — identity claims only. No boundary falls between searching a transcript and cancelling a registration. A grant that permits the first permits the second.
  • register_event is not idempotent, and no idempotency key is documented. A call that times out has an unknown outcome. Check get_user_registrations rather than retrying blind.
  • The confirm gate cannot detect a human. The server refuses to write until a second call arrives with confirmed: true, which is a genuine wire-level control. It cannot verify that a person approved. Auto-approving either write tool converts a two-step safeguard into two automatic steps.
  • The calendar invite cannot be recalled. Registration dispatches an asynchronous .ics email via Guidepoint's CRM to your registered address. Cancelling the registration is documented; cancelling the email is not.
  • Cancellation is irreversible from the connector, per Guidepoint's own schema, and can also fail with CANCELLATION_WINDOW_EXPIRED — so a late cancellation may not be possible at all.
  • We could not verify the tool list over the wire. The endpoint returned 401 to an anonymous request. The five tools, their schemas and their annotations come from Guidepoint's published OpenAPI specification, which is first-party but is documentation rather than a live handshake against your tenant.
  • The MCP documentation says nothing about compliance, MNPI, data retention or model training, and Guidepoint publishes no MCP-specific client terms — unlike Third Bridge, which does. Your obligations live in your Insights subscription contract, which is not public.
  • Rate limits are unpublished. Guidepoint states only that "default rate limits are applied to ensure fair usage" and that these "can be configured based on customer requirements and contract". No numbers, no headers and no 429 behaviour are documented.
  • Access tokens last 10 minutes. Guidepoint documents a 600-second access token with a long-lived refresh token, and recommends refreshing with 1–2 minutes remaining for long-running sessions.
  • The documentation URL looks dead to any text fetcher. clapi-developer.guidepoint.io/mcp/docs returns HTTP 404 with an 863-byte JavaScript shell; llms.txt, llms-full.txt, the .md suffix and sitemap.xml all return the same byte-identical body. The real content is client-rendered from JSON the app fetches. A four-route probe reports this server as undocumented; it is in fact one of the better-documented connectors in this catalogue.
  • The descriptor's signing-key pointer is broken. The RFC 9728 document advertises a verification.jwks_uri at .well-known/mcp-signing-keys.json on the same host, which returned HTTP 404. A client attempting to verify server signatures against it would fail.

Frequently asked questions

Five, not the one Anthropic's directory lists. Guidepoint publishes a full tools/list example inside the OpenAPI spec behind its developer portal, naming search_library, search_events, get_user_registrations, register_event and cancel_registration. The directory names only search_library and labels the connector Read only, so four tools including both writes are missing from it.

It can register you for an existing scheduled event, but it cannot commission a new one-to-one consultation. register_event enrols the authenticated user in an event already in Guidepoint's catalogue. There is no tool that requests a custom expert call, so the connector cannot originate a new paid engagement with an expert.

Not through this tool. Guidepoint's schema states register_event is for free upcoming events only and returns the CU_GATED error code for paid ones, so a consultation-unit charge stops the call rather than incurring it. Every event object also carries a cu_cost field, letting an agent read the price before acting.

Yes. A successful register_event returns a side_effects array declaring a calendar_invite_email dispatched by Guidepoint's back-office CRM to the caller's registered email address, delivered asynchronously. It reaches only your own registered address, not the expert, but it is a real outbound message the tool call triggers.

Only identity claims. The server's RFC 9728 descriptor advertises openid, profile, email and offline_access, and none of those names an application object or verb. So the consent screen offers no way to grant transcript search without also granting event registration and cancellation.

Guidepoint's controls are designed to prevent it. Its compliance FAQ states advisors must affirm before every project that they will not provide any Confidential or Material Non-Public Information, and its platform blocks projects until compliance screens complete. Those are pre-call controls on the consultation, not a filter applied to MCP search results.

It can cancel an event registration, which Guidepoint annotates as destructive. The cancel_registration schema states cancellation is irreversible from this tool and that re-registering requires a separate register_event call. Nothing else in the surface removes data — no tool deletes a transcript, a report or an account.

A contract, an account and organization enablement. Guidepoint's documentation lists an active contract including an Insights subscription, a Guidepoint360 user account, OAuth credentials it issues, and organization-level enablement for MCP access. Guidepoint directs prospective users to contact their Guidepoint representative to add MCP to an existing subscription.

Use in Agentman

Connect once and your agents call these tools on their own — on a schedule, in a workflow, with nobody at the keyboard.

Open in Agentman Studio

Server Info

Category
Finance
Developer
Guidepoint
Tools
5
Domain
clapi.guidepoint.io

Using Claude Desktop or another MCP client? Setup docs — the connection URL above works anywhere.