API & MCP

Run your Pluff from any AI

Connect Claude, ChatGPT, Claude Code, Cursor, Codex, VS Code, Gemini CLI, Windsurf or Lovable to your Pluff. Your AI can build and edit products, run your link in bio, set up challenges and courses, look after your groups and draft your emails — with your OK, and never with your money.

Server URL

https://pluff.social/api/mcp

Connect your AI

Pick your app. Most sign in to Pluff in your browser — no token. Apps that can also use a personal token read it from PLUFF_TOKEN: make one in Settings → Connected AI apps and put export PLUFF_TOKEN="…" in your shell profile first.

Claude Code

Sign in or token
  1. 1Run the command below in your terminal.
  2. 2In Claude Code, type /mcp, pick pluff and sign in to Pluff in your browser — then choose what Claude Code may do.
  3. 3Check it with /mcp — pluff should say connected.
Add Pluff
claude mcp add --transport http --scope user pluff https://pluff.social/api/mcp
Or with a personal token
claude mcp add --transport http --scope user pluff https://pluff.social/api/mcp \
  --header "Authorization: Bearer $PLUFF_TOKEN"

Then just ask

  • “Look at my Pluff and tell me the three changes most likely to get me more sales.”
  • “Write a 5-day challenge from my notes, price it at $29 and show me before you put it on my page.”
  • “Who's behind in my challenge? Draft a short nudge I can send them.”
  • “Restyle my link in bio to feel calm and premium, then show me the draft before publishing.”
  • “Give my new challenge a keyword and write me the caption line.”
  • “Draft this week's email to people who haven't bought yet.”
  • “Which applications are waiting? Summarize them and tell me who looks like a fit.”

102 tools, four permissions

Each connection gets only the permissions you tick when you connect it. See and Make changes are on by default; your people and Pluff Assistant credits are off until you switch them on.

See your workspace · on by default

Your products, page, settings and sales numbers — no buyer details.

  • get_creator_brief
  • get_page
  • get_analytics
  • get_billing
  • read_product
  • get_program
  • program_history
  • get_guide
  • list_versions
  • list_discount_codes

See and contact your people · off by default

Buyers', members' and applicants' names and emails, orders, messages and bookings — and reply to them.

  • list_audience
  • list_orders
  • list_signups
  • list_applications
  • decide_applications
  • resend_application_email
  • get_roster
  • member_action
  • get_community_members
  • community_member_action

Make changes · on by default

Edit your page, products, challenges, courses, groups and email drafts. It can't move money or send email blasts.

  • update_profile
  • set_photo
  • restyle_page
  • update_page
  • add_link
  • add_section
  • add_pick
  • add_code
  • switch_on_page
  • move_on_page

Build with Pluff Assistant · off by default

Start AI builds and edits that use your Pluff Assistant credits, and hand them files to build from.

  • build_product
  • edit_product
  • get_build
  • answer_build_questions
  • attach_build_file
  • get_build_upload_link

The rules

Your AI works through the same rules as Pluff's own buttons. You're responsible for what your connected apps do, under Pluff's Terms and Privacy Policy: no spam, no scraping other creators, nothing you couldn't do by hand.

What stays with you

Whatever app is connected, only you can:

  • Connect a bank or change payout details
  • Choose a plan, buy credits or change the card
  • Refund an order or cancel someone's membership
  • Send an email campaign or email every member at once
  • Import contacts or re-subscribe someone
  • Bring members over from another platform or send move invites
  • Change your handle or account email
  • Connect integrations (Zapier, Kit, Mailchimp…)
  • Delete a product or the account, or export your data
  • Upload a file to sell

It asks first

Anything that reaches people or can't be undone comes back as a preview first — publishing your page, a price change on a live product, approvals, messages, removing a member, deleting a post. Your AI shows you and only goes ahead when you say so. Good apps also ask you before every change.

Limits

Up to 120 requests a minute per account. Each connection, per day:

  • 50 emails to people (approvals, moved calls, test emails)
  • 60 direct messages
  • 20 group posts and replies
  • 10 Pluff Assistant builds and edits
  • 30 photos and pages fetched from a link
  • 20 files handed to Pluff Assistant to build from

Your data

Buyer and member details are only shared with connections you gave “See and contact your people”, and that AI company handles them under its own terms, at your direction. Words written by buyers and members are marked as data, so they can't give your AI orders. Pluff stores only a fingerprint of each token.

Revoke any time

Settings → Connected AI apps lists every connection, its permissions, when it was last used and what it did. Revoke stops it within a minute. Tokens can expire by themselves, and every connection ends when you reset your password, change your account email or delete your account.

Credits

When your own AI writes a challenge, course or guide (create_program, create_guide), Pluff uses no credits. Asking Pluff Assistant to build or edit (build_product, edit_product) uses your credits like it does in Pluff — and never tops up your card on its own from a connected app.

For developers

The MCP server is Pluff's API: any HTTP client can call it with a token. Start with tools/list — every tool has a JSON Schema, a title and read-only / destructive hints.

Endpoint
https://pluff.social/api/mcp
Transport
Streamable HTTP · POST one JSON-RPC 2.0 message, JSON back · no sessions
Protocol versions
2025-11-25, 2025-06-18, 2025-03-26
Auth
OAuth 2.1 + PKCE (S256): client ID metadata documents (token auth none or private_key_jwt RS256/ES256) or dynamic client registration — or Authorization: Bearer <personal token>
Discovery
/.well-known/oauth-protected-resource · /.well-known/oauth-authorization-server
Scopes
read · people · write · build
Resources
pluff://guide/how-pluff-works · pluff://schema/program · pluff://schema/guide · pluff://options/{templates,designs,palettes}
Confirmations
Tools that need an OK take confirm: true; without it they return a preview and change nothing
Untrusted text
Buyer/member words come back in a separate <untrusted_data> block

Questions

What is the Pluff MCP connector?

A secure way for an AI app you already use to work in your Pluff workspace. MCP (Model Context Protocol) is the open standard Claude, ChatGPT, Cursor and Codex use to connect to tools; Pluff's lives at https://pluff.social/api/mcp.

Which AI apps work with Pluff?

Claude (claude.ai and the desktop app), ChatGPT (custom MCP servers, where your plan allows them), Claude Code, Cursor, Codex, VS Code and Gemini CLI — and any app that connects to MCP servers over HTTP with sign-in (OAuth) or a bearer token.

Does it use my Pluff Assistant credits?

Only when your AI asks Pluff Assistant to build or edit a product, and only if you gave it that permission. When your own AI writes a challenge, course or guide itself, Pluff uses no credits.

Can it spend my money or email my whole list?

No. Bank details, plans, credits, refunds and sending email campaigns are only possible by you, in Pluff. Your AI can draft an email; you press Send.

Can it see my buyers and members?

Only if you switch on “See and contact your people” for that connection. What it reads then goes to that AI company under its own terms, at your direction.

How do I disconnect an app?

Settings → Connected AI apps → Revoke. It stops working within a minute. Personal tokens can also expire by themselves after 30 days, 90 days or a year.

Your AI, your Pluff.

Make a free account, then connect the AI you already use.