customerthermometer-mcp

customerthermometer-mcp

MCP server for Customer Thermometer — an email-based CSAT/NPS surveyplatform. Exposes its full public REST API (survey reporting + sending) asMCP tools.

MSPbots Connector gives your AI clients one MCP URL to reach your entire MSP stack (RMM, PSA, documentation, security, finance), and gives you control over who can call which tool and a record of everything that was called.

Hosted service: connect.mspbots.ai · Free to use.

Why Connector

Quick start

1. Sign up at connect.mspbots.ai.
2. Connect your vendors. Pick from 150+ connectors and authorize each one on the vendor's own page, or bring your own API keys. No extra vendor accounts needed.
3. Set access. Create roles and decide which tools each role may call. Nothing is allowed until you allow it.
4. Add your MCP URL to your AI client. Copy the URL from your Connector dashboard into Claude, ChatGPT, Cursor, VS Code, Gemini, Codex, or any MCP-capable client.
5. Ask your AI to do real work, and watch every call appear in the audit log.

Features

Unified gateway

• One MCP URL for all your AI clients
• 150+ connectors across the MSP stack
• Custom MCP servers supported, free
• Authorization happens on each vendor's own page; the AI never sees passwords or tokens
• Bring your own credentials: use the vendor API keys you already have
• Multiple accounts per app; connect once, reuse across AI clients
• Tool search: finds the right action for the task
• One sign-in; vendor credentials are injected behind the scenes and OAuth tokens refresh automatically

Visibility

• Audit log for every tool call (who, which vendor, when)
• Usage dashboard: call volume, top vendors, error rate, per-user activity
• Export audit logs to CSV, or stream to Loki, Graylog, or LogScale (SIEM)
• Optional recording of tool arguments and result summaries (off by default, enabled per organization)

Control

• Per-role, per-tool allowlist, deny by default
• owner / admin / member roles
• SCIM provisioning with Entra ID, Okta, JumpCloud, and Google Workspace

Security

• Credentials encrypted one record at a time (AES-256-GCM, per-record key)
• AI clients authenticate with OAuth 2.1 + PKCE
• Vendor responses are scanned for prompt-injection patterns and returned as structured data. This is one layer of defense, not a guarantee against every attack.
• Static egress IP for customer firewall and API allowlisting

Pricing

Free.

Links: connect.mspbots.ai · mspbots.ai

Overview

• Stateless HTTP service. No credentials are ever persisted — each requestsupplies its own credentials via headers, used only for the lifetime ofthat single request.
• Supports concurrent requests; per-request credential isolation is done viaPython contextvars, not a global/shared client instance.
• Entry points: POST /mcp (MCP protocol) and GET /health (health check).
• Default port: 8080 (configurable via MCP_HTTP_PORT).

Scope

15 tools — the vendor's entire public API (single api.php endpoint,dispatched via a getMethod query parameter): 10 read methods(get_thermometers, get_recipient_lists, get_send_quota,get_happiness_value, get_nps_value, get_temp_rating_value,get_response_rate_value, get_num_responses_value, get_blast_results,get_comments) and 5 write methods (send_email, log_response,add_recipient_to_list, delete_response, unsubscribe_recipient).MSPbots itself only calls 5 of the 10 read methods (BlastResults, Comments,ResponseRateValue, NumResponsesValue, NPSValue) — this MCP covers the fullAPI since the vendor's entire public surface is small enough to implementcompletely.

Authentication

Customer Thermometer authenticates with a static API key, sent as theapiKey query-string parameter on every call (the vendor's "super API key"style — no Authorization: Bearer header, which the vendor docs reserve forscoped "sub-API keys"). MSPbots' own integration also stores the API host(api_url) as a per-tenant field, so this server treats it as per-requesttoo rather than a fixed default.

HEADER Authorization Parameters

Missing either header returns 401:

{
  "error": "Missing credentials",
  "message": "This server requires the X-CustomerThermometer-Api-Key and X-CustomerThermometer-Api-Url headers",
  "required_headers": ["X-CustomerThermometer-Api-Key", "X-CustomerThermometer-Api-Url"],
  "optional_headers": []
}

Environment Variables

(No *_BASE_URL env var — the API host is per-tenant and always suppliedvia the X-CustomerThermometer-Api-Url header, never a fixed default.)

MCP Endpoint

• POST /mcp — MCP protocol (streamable HTTP transport)
• GET /health — health check, returns exactly {"status": "ok"} (a purelocal liveness probe — it never calls out to the Customer Thermometer API,so it cannot reflect upstream availability; run a real tools/call toverify the MCP path itself)

Tool List

15 tools (10 read-only, 5 write). Every tool result is a JSON-serializedstring per the SOP: the vendor's own payload — an XML document, or a plaininteger/string — is JSON-encoded as-is (so, for example, an XML report comesback as a quoted JSON string containing that XML) rather than re-parsed intoa different shape. Errors use the SOP's fixed envelope{"error": {"code", "message", "retryable"}} instead of ad-hoc strings.

All 7 tools that accept limit (get_happiness_value, get_nps_value,get_temp_rating_value, get_response_rate_value,get_num_responses_value, get_blast_results, get_comments) clamp it to200 server-side. The vendor does not document a hard maximum of itsown — a vendor support-doc example shows &limit=100000 being accepted — sothis 200 cap is this server's own SOP-mandated ceiling (protecting theagent's context budget), not a vendor-imposed limit.

Test Example

# Health check
curl -s http://localhost:8080/health

# Call a tool via the MCP protocol (streamable HTTP) — requires an
# initialize handshake first per the MCP spec; abbreviated example below
# shows the tool-call request body only:
curl -s -X POST http://localhost:8080/mcp \
  -H "X-CustomerThermometer-Api-Key: <your-api-key>" \
  -H "X-CustomerThermometer-Api-Url: app.customerthermometer.com/api.php" \
  -H "Content-Type: application/json" \
  -H "Accept: application/json, text/event-stream" \
  -H "mcp-session-id: <session-id-from-initialize>" \
  -d '{
    "jsonrpc": "2.0",
    "id": 1,
    "method": "tools/call",
    "params": {
      "name": "customerthermometer_get_send_quota",
      "arguments": {}
    }
  }'

Live-verified (2026-07-29): customerthermometer_get_send_quota andcustomerthermometer_get_nps_value were both called end-to-end throughthis running server with a real API key and returned real account data(a credit count and an NPS score respectively).

API Reference

• Full public documentation: https://www.customerthermometer.com/integration/api-documentation/

Known Gaps

• getResponseRateValue/getNumResponsesValue method-name ambiguity inthe vendor's own docs: each method's parameter table names thegetMethod value without the Value suffix (getResponseRate,getNumResponses), but every worked example on the same page uses the...Value suffixed name — and MSPbots' own configured endpoint names("ResponseRateValue", "NumResponsesValue") match the suffixed form. Thisserver uses the suffixed names (getResponseRateValue,getNumResponsesValue), consistent with the examples and MSPbots' usage.
• POST body encoding is not specified in the vendor docs forlogResponse, addRecipientToList, and unsubscribeRecipient — theyonly list field names/types, not a content-type. This server sends themas application/x-www-form-urlencoded (the traditional convention for aPHP-based endpoint like this); if the vendor actually expects JSON, thesethree tools would need client.post to switch from data= to json=.
• Only the 5 tools matching MSPbots' own usage plus get_send_quota werelive-verified with real data; the remaining tools are structurallycorrect (schema validated, MCP-protocol tools/list confirmed) but notindividually smoke-tested — several (send_email, log_response, etc.)are write operations that would create/modify real survey data, so theyweren't exercised against the live test account.
• No vendor-documented hard cap exists for limit (see the Tool Listsection above) — the 200-record ceiling enforced by this server is ourown SOP-driven safeguard, not something the vendor requires.