Skip to content
NewToolJet MCP · OPEN SOURCE · MIT LICENSED

Build internal tools with Claude Code or Codex. Keep editing visually.

Build an app in your coding agent and keep editing visually. On Self-hosted, build workflow drafts the same way, then review and validate before you choose to run.

Get the plugin Start free
App builds use your coding agent subscription, not ToolJet AI credits.
ToolJet MCP session building an incident dashboard app

Bring the coding agent your team already uses

CodexClaude CodeCursorGitHub CopilotAny MCP client

One protocol. Native apps and workflow drafts.

More than code generation

ToolJet MCP gives coding agents structured access to app interfaces, data, logic and permissions, plus workflow graphs on Self-hosted deployments. Discover configured capabilities, plan graph changes, apply the draft and validate what persisted. App generation works on Cloud and Self-hosted; Workflows are Self-hosted only.
get_datasource_query_schema

Reads before it writes

Pulls real datasource and query contracts before writing a single query - no guessed configuration keys.

create_app · create_workflow

Builds apps and workflow drafts

Build native, visually editable apps. On Self-hosted, save workflow drafts with Start, JavaScript, query, Loop, condition, Agent and response nodes.

create_tables

Models ToolJet DB tables

Creates and evolves tables, seeds rows against the real sequence, and generates a matching Form from the schema.

add_events

Wires real behavior

Click handlers, success/failure flows, and query bindings - attached the same way the visual builder attaches them.

lint_app_spec · lint_workflow_spec

Plans, applies, then checks

Plan app changes and workflow graphs with one-use apply tokens, then validate the saved result. Workflow authoring never runs or publishes the draft.

manage_app_permissions

Administers, not just builds

Invites users and manages page and query permissions within the connected user's access. Destructive deletion tools require explicit confirmation.

From prompt to production

Stay in your agent.
Keep ToolJet in control.

01

Connect

Generate a personal access token in ToolJet, then add the MCP server to your coding agent.

02

Prompt

Describe an app, or a Self-hosted workflow. The agent discovers configured data sources and checks their supported operations before authoring.

03

Review

Review the native app in the visual editor, or inspect the saved workflow draft and its validation results before choosing to run it.

04

Verify + ship

Validate the saved changes, then choose whether to run the workflow. Authoring saves a draft without executing, publishing or configuring triggers.

Native by default

The agent builds what your team can maintain.

MCP writes native app configurations and Self-hosted workflow drafts. Keep refining apps visually. For a workflow, try: “Use the existing inventory query, filter low-stock rows in JavaScript and return the result. Save and validate the draft without running it.”
  • Real ToolJet components - not screenshots or generated markup
  • Managed queries and datasource bindings, never hardcoded credentials
  • Visual edits and agent edits share one version history
  • Custom code only when the app actually needs it
  • App authoring uses your AI client's subscription, not ToolJet AI credits
support-operationsDraft v4
SupportIncident overview
Open147−12% today
Response time18mWithin target
Edited from Codex via MCP Open in visual editor
Governance is part of the protocolExplore enterprise security

Give agents useful access. Keep the boundaries.

The agent gets the tools it needs, without becoming a back door around your policies. The MCP server talks only to your ToolJet instance - but your AI client's model provider still sees the prompts and data it reads.
SOC 2ISO 27001GDPRSelf-host

User-scoped access

A personal access token scopes the session to one workspace and the token owner's permissions.

User-linked audit events

MCP changes that generate supported platform audit events are associated with the token owner. Audit-log availability depends on your plan.

Credentials stay in ToolJet

Agents query configured data sources through ToolJet without receiving their stored connection credentials.

Human-controlled release

Review app changes through your normal promotion process. Workflow authoring saves drafts; execution requires a separate, explicitly authorized run.

Explore enterprise security