What Is MCP?

The Model Context Protocol (MCP) is an open standard that lets AI agents — like Claude, ChatGPT, and others — connect directly to your Marula Landlord OS account. Once connected, you can ask your AI agent questions about your properties, tenants, leases, and finances, and it can pull the answers from your live data.

Think of it as giving your AI agent a direct line to your property management system, instead of you having to look things up and paste them into a chat window.

What You Can Do

Once connected, you can ask your AI agent things like:

  • R “How much does Alice Smith owe on her lease?”
  • R “Show me all maintenance requests that are still open”
  • R “What’s my total rental income this year?”
  • W “Create a new tenant named Bob Jones for unit 2A at 456 Oak Street”
  • W “Send a message to the tenant in Unit 3B about the upcoming inspection”
R Read — all plans W Write — Starter plan & above

The agent translates your question into a tool call, retrieves the answer from your account, and presents it in plain language.

What It Does NOT Do

  • The AI cannot log into your portal or change your password
  • The AI cannot access other landlords’ data
  • The AI cannot make financial transactions (it can record payments that already happened, but cannot initiate ACH transfers)
  • Each API token can be revoked instantly from Settings

Getting Started

Step 1: Create an API Token

API tokens are how your AI agent authenticates with your Marula Landlord OS account.

  1. Go to Settings → API Tokens
  2. Click Create Token
  3. Give it a descriptive name (e.g., “Claude Desktop” or “ChatGPT”)
  4. Copy the token value — it is shown only once

You can create multiple tokens for different agents or devices. Each token tracks its own last-used timestamp so you can see which ones are active.

Step 2: Connect Your AI Agent

Claude Desktop

  1. Open Claude Desktop settings
  2. Navigate to the Developer section
  3. Click Edit Config to open your claude_desktop_config.json
  4. Add the Marula Landlord OS MCP server:
{
  "mcpServers": {
    "landlord-automation": {
      "url": "https://api.marulaos.com/mcp",
      "headers": {
        "Authorization": "Bearer YOUR_API_TOKEN"
      }
    }
  }
}
  1. Replace YOUR_API_TOKEN with the token you copied in Step 1
  2. Restart Claude Desktop

Claude will discover the available tools automatically and show them when relevant.

Other MCP-Compatible Agents

Any agent that supports the MCP standard (Streamable HTTP transport) can connect. Look for an “MCP Servers” or “Integrations” section in your agent’s settings and add:

  • Server URL: https://api.marulaos.com/mcp
  • Authentication: Bearer token (your API token from Step 1)

Available Tools

Once connected, your AI agent can use these tools on your behalf:

Properties & Units

ToolDescriptionAccess
list_propertiesView all your propertiesRead
get_propertyView details for one propertyRead
create_propertyAdd a new propertyWrite
update_propertyEdit property detailsWrite
delete_propertyRemove a propertyWrite

Tenants

ToolDescriptionAccess
list_tenantsView all your tenantsRead
get_tenantView details for one tenantRead
get_tenant_balanceCheck what a tenant owes or is creditedRead
get_tenant_statementGenerate a tenant’s transaction statementRead
create_tenantAdd a new tenantWrite
update_tenantEdit tenant detailsWrite

Leases

ToolDescriptionAccess
list_leasesView all leasesRead
get_leaseView details for one leaseRead
get_lease_tenantsSee which tenants are on a leaseRead
create_leaseStart a new draft leaseWrite
finalize_leaseActivate a draft leaseWrite
terminate_leaseEnd a lease earlyWrite
charge_rentPost a rent charge to a leaseWrite
add_tenant_to_leaseAdd a tenant to an existing leaseWrite
record_paymentRecord a payment receivedWrite

Financial

ToolDescriptionAccess
get_financial_summaryPortfolio-wide financial overviewRead
get_income_statementIncome vs expenses for a periodRead
get_cash_flowCash flow report for a date rangeRead
get_accounts_receivableWho owes you money and how muchRead

Maintenance

ToolDescriptionAccess
list_maintenance_requestsView all maintenance requestsRead
get_maintenance_requestView one request in detailRead
update_maintenance_requestChange status or priorityWrite
add_maintenance_commentAdd a note to a requestWrite

Messages

ToolDescriptionAccess
list_messagesView message threadsRead
send_messageWrite an in-app message to a tenant (does not email or text)Write

Calendar

ToolDescriptionAccess
list_calendar_eventsView calendar eventsRead
get_upcoming_eventsSee what’s coming upRead
create_calendar_eventAdd an event to the calendarWrite

Workflows

ToolDescriptionAccess
list_workflowsView active workflowsRead
get_workflowView one workflow in detailRead
complete_workflow_stepMark a workflow step as doneWrite
skip_workflow_stepSkip a workflow stepWrite
Read tools are available on all plans (including Free). Write tools require the Starter plan or above. Advanced tools (workflows, financial reports, automation) will be gated to Pro and above — details coming soon.

Managing API Tokens

Creating Tokens

You can create multiple API tokens for different purposes — one for Claude, one for ChatGPT, one for a script, etc. Each token has a name and a creation date so you can tell them apart.

Revoking Tokens

If a token is compromised or you no longer need it, revoke it immediately:

  1. Go to Settings → API Tokens
  2. Find the token in the list
  3. Click Revoke

The token stops working instantly. Your AI agent will not be able to reconnect until you create a new token and update its configuration.

Monitoring Usage

Each token shows a Last Used timestamp. If you see a token that hasn’t been used in a while, consider revoking it to reduce your attack surface.


Security

How Authentication Works

Every request from your AI agent includes your API token as a Bearer token in the Authorization header. The server validates the token, confirms it belongs to your account, and only then processes the request.

What Keeps Your Data Safe

  • Your data is isolated — a token can only access data for the landlord account that created it. There is no way to access another landlord’s properties, tenants, or financial records.
  • Tokens can be revoked instantly — if you suspect a token has been leaked, revoke it from Settings and the attacker loses access immediately.
  • All requests go through the edge gateway — the same authentication and security middleware that protects the web portal also protects MCP requests.
  • Write operations require Starter tier — on the Free plan, your AI agent can only read data. To create, update, or delete records, you need the Starter plan or above.

Best Practices

  • Give each AI agent or device its own token so you can revoke one without affecting others
  • Name your tokens descriptively (“Claude Desktop - Work Laptop”) so you know what each one is for
  • Revoke tokens you no longer use
  • Never share your API token in a public channel, commit it to a repository, or paste it in a support ticket

Plan Availability

FeatureFreeStarterProBusiness
MCP accessRead-onlyRead + WriteRead + WriteRead + Write
API tokensYesYesYesYes
Advanced tools (workflows, reports, automation, scheduling)——YesYes

MCP is available on all plans, including Free. On the Free plan, your AI agent can read your data (view properties, check balances, list leases, etc.). On Starter and above, it can also create and modify records (add tenants, update leases, send messages, etc.). Advanced tools for workflows, financial reporting, and automation are available on Pro and Business plans.


Examples & Prompt Guide

For ready-to-use prompts, multi-step workflows, and tips on getting the best results from your AI agent, see the MCP Examples & Prompt Guide.