The server is read-only today. Future versions will support orchestration commands (creating transactions, managing accounts).
Using ChatGPT? Install the Dakota app
Dakota Platform on the ChatGPT App Store
Hosted endpoint
HTTPS-only. You need to authenticate — pick one of the two methods below.
Authentication
The server supports two methods. Most users want OAuth (Google login) — it’s a one-click sign-in with no tokens to copy around. Use the API-key fallback only if OAuth doesn’t work for your client.Option 1 — Google OAuth (recommended)
Add the server with no extra configuration:- Claude Code
- Claude Desktop
- Other MCP clients
/mcp → pick dakota-platform → Authenticate. A browser tab opens, you sign in with Google, and you’re done. Verify with claude mcp list.Option 2 — API key (fallback)
Use this if OAuth doesn’t work in your client (some older or custom integrations), or if you need a long-lived, headless credential (e.g. for a server-side agent). 1. Create a key. Go to https://platform.dakota.xyz → API keys → create a new one. Copy it the moment it’s shown — the dashboard won’t display it again. 2. Register the server with the key as a staticAuthorization header. The apikey: prefix tells the MCP server to forward the key to the Platform API as X-API-Key:
- Claude Code
- Claude Desktop
- Other MCP clients
Smoke-test it
Ask your agent: “List the first 3 customers from Dakota.” If you see real data, you’re done. If you see “Authentication failed” or “Access denied”, double-check that you signed in with the right account (OAuth) or that the header includes theapikey: prefix (API key).
Available tools
Customers
Orchestration accounts
Transactions
Example prompts
Once connected, you can ask your AI agent things like:- “List the 10 most recent customers that completed KYB this month.”
- “Show me all failed auto transactions for customer
cust_xxxin the past 7 days.” - “What’s the total volume across all onramp accounts for
cust_xxx?” - “Get details for offramp account
acct_xxxand summarize its recent activity.”
Security notes
- All connections are HTTPS-only. The server validates
Originheaders to prevent DNS-rebinding attacks. - The server is read-only — no mutations are possible today.
- Treat API keys as credentials — revoke from the dashboard if leaked.
- Never paste session tokens, API keys, or customer PII into prompts.
Reference
- MCP protocol: modelcontextprotocol.io/docs

