Connect an AI app

An AI app such as Claude Code or Cursor can ask questions of one site's Hook data for you. You give it a token. It can read, only that site, and only until the token expires.

Set it up

Open Settings and find AI access. Only the site owner and admins see it.
Give the token a name, choose how long it lasts (30, 90 or 365 days), and tick the box to confirm you understand where the data goes.
Press Create token and copy it. It is shown once. If you lose it, revoke it and create another.
In Claude Code, run the command shown under the token: claude mcp add --transport http jellyhook https://your-domain/api/mcp --header "Authorization: Bearer YOUR_TOKEN"
Other apps that accept a server address and a header work the same way. Use the address /api/mcp and the header Authorization: Bearer YOUR_TOKEN.

What the AI can do

Read how Hook works and write a query itself, then check it before running.
See your top pages.
Run a Hook query and get a number, a ranking, a time series, or a short list (up to 50 rows) of sessions, leads, visitors, pages or forms.

It cannot change anything, cannot see other sites, and cannot choose a different site. Each run uses Hook credits like a run from the screen, and a query that would cost too much is refused with a message.

What it sees about people

Personal details are hidden by default

Emails, names and phone numbers come back masked, for example h***@gmail.com and H. A.. What visitors typed into your forms is never returned. A token can be allowed to see unmasked email, name and phone, but only if you tick a second box when you create it.

The answers are sent to the AI provider of the app you connect, for example Anthropic or OpenAI. Only connect apps you are allowed to share this site's data with, and read your own privacy notice. This page is not legal advice.

Choose what a token can do

Under Advanced settings when you create a token you can limit which tools it may use and set lower limits: rows per answer, credits per run, and calls per minute and per day. A token can never go above the limits set for the whole server. Leave everything empty for the defaults.

Limits and control

Each token has a call limit per minute and per day.
Revoke a token in Settings and it stops working at once.
Tokens expire. Create a new one when it does.
If you are not sure which token an app is using, the list shows its name, the start of the token and when it was last used.

This page describes Hook (query format version 3) as reviewed on 2026-10-16.