What it connects
Plane — projects, work items, cycles, modules, intake, labels, pages, work item types/properties.
Outline — search, read, create, and update documents and collections.
Mattermost — list channels, search messages, manage channel membership.
Twenty CRM — companies, people, opportunities; invite workspace members.
Authentik — user lifecycle, groups, passwords, and status checks.
Infrastructure — Docker/host health and read-only upgrade check/plan/log.
Tool tiers
Read tools (*_read_*) — list and search data; no mutations.
Admin tools (*_admin_*) — single-target creates, updates, invites, and access changes.
Destructive deletes and upgrade apply are not exposed — those stay manual on the VPS.
Every admin action is audit-logged with actor, target, and outcome.
97 tools total — listed by service below.
Plane tools (52)
Read (26): plane_read_list_projects, plane_read_list_issues, plane_read_get_issue, plane_read_list_overdue, plane_read_list_members, plane_read_list_project_access, plane_read_list_labels, plane_read_get_project, plane_read_list_states, plane_read_list_project_members, plane_read_search_issues, plane_read_list_issue_comments, plane_read_list_issue_activities, plane_read_list_cycles, plane_read_get_cycle, plane_read_list_cycle_issues, plane_read_list_work_item_types, plane_read_list_work_item_properties, plane_read_get_work_item_property_value, plane_read_list_modules, plane_read_get_module, plane_read_list_module_issues, plane_read_list_intake_issues, plane_read_get_intake_issue, plane_read_list_pages, plane_read_get_page
Admin (26): plane_admin_invite_workspace, plane_admin_remove_project_member, plane_admin_create_project, plane_admin_update_project, plane_admin_create_issue, plane_admin_update_issue, plane_admin_create_module, plane_admin_add_issue_to_module, plane_admin_update_module, plane_admin_create_page, plane_admin_update_page, plane_admin_delete_page, plane_admin_add_project_member, plane_admin_create_label, plane_admin_update_label, plane_admin_add_issue_label, plane_admin_create_issue_comment, plane_admin_create_cycle, plane_admin_update_cycle, plane_admin_add_issue_to_cycle, plane_admin_remove_issue_from_cycle, plane_admin_create_work_item_type, plane_admin_create_work_item_property, plane_admin_set_work_item_property_value, plane_admin_create_intake_issue, plane_admin_update_intake_issue
Pages note: page tools use public v1 API when available; on Community v1.3.1 they auto-fallback to Plane session API (no browser) via PLANE_SESSION_EMAIL / PLANE_SESSION_PASSWORD.
Outline tools (11)
Read (5): outline_read_search_documents, outline_read_get_document, outline_read_list_recent_documents, outline_read_list_collections, outline_read_list_users
Admin (6): outline_admin_create_document, outline_admin_update_document, outline_admin_move_document, outline_admin_archive_document, outline_admin_create_collection, outline_admin_invite_user
Mattermost tools (5)
Read (3): mattermost_read_list_channels, mattermost_read_list_channel_members, mattermost_read_search_messages
Admin (2): mattermost_admin_add_channel_member, mattermost_admin_remove_channel_member
Twenty CRM tools (12)
Read (4): twenty_read_list_contacts, twenty_read_list_companies, twenty_read_search_records, twenty_read_get_record
Admin (8): twenty_admin_invite_member, twenty_admin_deactivate_member, twenty_admin_create_company, twenty_admin_update_company, twenty_admin_create_person, twenty_admin_update_person, twenty_admin_create_opportunity, twenty_admin_update_opportunity
Authentik tools (10)
Read (3): authentik_read_list_users, authentik_read_list_groups, authentik_read_get_user_status
Admin (7): authentik_admin_create_user, authentik_admin_set_password, authentik_admin_disable_user, authentik_admin_enable_user, authentik_admin_add_user_to_group, authentik_admin_remove_user_from_group, authentik_admin_trigger_password_reset
Infrastructure tools (7)
Host & Docker (4): infra_read_docker_ps, infra_read_docker_stats, infra_read_host_resources, infra_read_container_logs
Upgrades — read-only (3): infra_read_upgrade_check (current vs latest for all five Layer 1 tools), infra_read_upgrade_plan (preview plan for one tool: plane, outline, mattermost, twenty, authentik), infra_read_upgrade_log (upgrade history).
No upgrade apply via MCP. Agents can check and plan only. A human runs ./upgrade-manager apply <tool> --confirm on the VPS. See the Upgrades guide .
Setup (Claude / Cursor)
Connector URL: https://mcp.ryrahcrew.cloud
OAuth via Authentik — Client ID ryrah-crew-mcp, public client (PKCE), no client secret .
Cursor mcp.json scopes: openid, profile, email, offline_access (refresh tokens).
Cursor redirect URIs are pre-registered: cursor://anysphere.cursor-mcp/oauth/callback, https://www.cursor.com/agents/mcp/oauth/callback, http://localhost:8787/callback.
Access tokens last 8 hours ; refresh tokens 90 days — reduces mid-session needsAuth.
Sign in with your Authentik account when the connector prompts for authorization.
If auth breaks after changes: disconnect MCP in Cursor Customize, restart Cursor, reconnect once.
Health check: GET /health returns {"status":"ok"}.
Ryrah · Internal use only