🤖

Connect your AI agent to JomForm (MCP)

JomForm speaks the Model Context Protocol. Connect once, then control your whole store with plain language.

Server URL — paste this exactly into your MCP client

https://mcp.jomform.com/mcp

What is a connected agent?

A connected agent is your ChatGPT/Claude AI that has authorized JomForm via OAuth 2.1 (one-click, PKCE). Once connected it can read and manage your products, prices, sales, refunds and analytics — acting as the fastest order-form API for your store.

How it works

1

Add the server

In your client's MCP server config, paste the full URL — https://mcp.jomform.com/mcp. The /mcp path is required.

2

Connect

The client fetches the server and shows a JomForm login/authorize page.

3

Authorize & grant

Log in and grant access. Your agent is now connected and can act on your store.

4

Done

No API keys, no tokens to rotate. Just start talking: "tambah produk RM25", "berapa sales hari ni?", "refund order JF-xxxx".

Per-client examples

Claude / Claude Desktop

Claude Desktop reads its MCP servers from claude_desktop_config.json. Add this entry:

{
  "mcpServers": {
    "jomform": {
      "type": "http",
      "url": "https://mcp.jomform.com/mcp"
    }
  }
}

Other MCP clients

Put the server URL into whatever the client calls an MCP server / remote MCP connection. It performs dynamic client registration via OAuth 2.1 (PKCE) automatically.

Server URL — paste this exactly into your MCP client https://mcp.jomform.com/mcp

Read-only or read & write

A connected agent gets one of two scopes. Choose it in your MCP client when you connect — the client asks JomForm for the scope it wants, and the grant it receives is enforced on every tool call.

read Read-only

The agent can look at everything — forms, products, sales, analytics — and change nothing. Every tool that creates, updates, deletes, archives, cancels or refunds is refused with a scope error.

readwrite Read & write

The agent can read and also change your store — add products, edit forms, refund a sale. This is what a client receives when it does not ask for a scope.

A read-only grant cannot upgrade itself: it is refused on the tool that creates API keys, so it can never mint a wider credential.

Example commands

Once connected, try: "add product RM25", "how many sales today?", "refund order JF-xxxx", "show my product inventory".

Troubleshooting

  • Pasting just mcp.jomform.com (no scheme/path) fails. You MUST include https:// and the /mcp path.
  • If connection fails, ensure your client allows remote MCP servers and HTTP-based OAuth. Discovery: the server advertises protected-resource metadata at /.well-known/oauth-protected-resource and authorization-server metadata at /.well-known/oauth-authorization-server. An unauthenticated call to /mcp replies 401 with a WWW-Authenticate header pointing at the protected-resource metadata.