Dotloop MCP

Read-first MCP server for Dotloop.

This initial implementation wraps dotloop==1.3.2 behind service adapters and exposes safe read tools for account, profiles, loops, loop details, folders, documents, participants, tasks, activity, and templates. State-changing tools remain deferred by the planning docs under docs/planning/dotloop-mcp-buildout/.

MCP resources

• dotloop://api-coverage-matrix: domain-level library and MCP exposure status.

• dotloop://library-method-coverage: method-level dotloop==1.3.2 coverage generated from the installed package surface.

The local docs/ tree is intentionally ignored by this repo. Runtime coverage resources and make validate are self-contained for clean checkouts without local planning docs.

Related MCP server: LimaCharlie MCP

Install

uv sync

Configure

Set a local Dotloop access token outside version control:

export DOTLOOP_ACCESS_TOKEN="..."

The legacy DOTLOOP_API_KEY variable is also accepted because the underlying dotloop package uses that name.

Use .env.example for the supported non-secret variable names. Keep real values in your shell or a local ignored .env file. The server and live readiness check load DOTLOOP_* values from .env in the current working directory when those variables are not already exported. Set DOTLOOP_ENV_FILE to point at a different local env file.

Run

uv run python -m dotloop_mcp.cli stdio
uv run python -m dotloop_mcp.cli streamable-http --host 127.0.0.1 --port 8000 --path /mcp

AI Client Battle Testing

Battle testing uses deterministic fixture data and a JSONL tool-call recorder so Claude, ChatGPT, and local harnesses can be scored against the same scenario corpus without touching live Dotloop data.

export DOTLOOP_BATTLE_FIXTURE_MODE=1
export DOTLOOP_BATTLE_RECORD_PATH="tmp/ai-battle/<run-id>/<client>/mcp_calls.jsonl"

Fixture mode is incompatible with DOTLOOP_RUN_LIVE_TESTS=1 and never builds a real Dotloop API client. Use these targets for local validation and report scoring:

make battle-smoke
make battle-test
DOTLOOP_BATTLE_CALL_LOG=tmp/ai-battle/<run-id>/<client>/mcp_calls.jsonl make battle-report

The scenario corpus lives at tests/battle/scenarios/dotloop_ai_battle_scenarios.json and covers 150 identity/navigation, loop/document, people/workflow, template, multi-turn, and negative-safety prompts. ChatGPT hosted connector checks should use the staging HTTPS MCP URL with fixture mode enabled before any live Dotloop credentials are attached.

Authenticate the MCP URL

Streamable HTTP can be protected as an MCP OAuth resource server. The server can validate tokens from an external OAuth/OIDC issuer and JWKS URL, then clients must send Authorization: Bearer <token> on every MCP HTTP request. Tokens in URL query strings are not supported.

export DOTLOOP_TRANSPORT=streamable-http
export DOTLOOP_MCP_AUTH_ENABLED=1
export DOTLOOP_MCP_AUTH_ISSUER_URL="https://auth.example.com"
export DOTLOOP_MCP_AUTH_RESOURCE_SERVER_URL="https://dotloop-mcp.example.com/mcp"
export DOTLOOP_MCP_AUTH_JWKS_URL="https://auth.example.com/.well-known/jwks.json"
export DOTLOOP_MCP_AUTH_REQUIRED_SCOPES="dotloop:read"

DOTLOOP_MCP_AUTH_RESOURCE_SERVER_URL is the public MCP endpoint URL clients authenticate for. It is also used for protected-resource metadata discovery. Set DOTLOOP_MCP_AUTH_AUDIENCE only when the issuer uses a separate JWT audience value. Stdio transport is unchanged and should continue to load local credentials from the environment.

Hosted staging can also expose built-in OAuth issuer endpoints for MCP clients that expect URL-based browser authentication. Hosted live-read deployments should enable Dotloop app OAuth so the connector flow first authorizes the MCP URL and then, when needed, redirects through Dotloop's own OAuth app flow:

export DOTLOOP_MCP_HOSTED_OAUTH_ENABLED=1
export DOTLOOP_MCP_HOSTED_OAUTH_PUBLIC_CONSENT_ENABLED=0
export DOTLOOP_APP_OAUTH_ENABLED=1
export DOTLOOP_API_CLIENT_ID="..."
export DOTLOOP_API_SECRET="..."
export DOTLOOP_APP_OAUTH_REDIRECT_URL="https://tpgstats.com/agents/dotloop/callback"
export DOTLOOP_APP_OAUTH_TOKEN_SECRET_ARN="arn:aws:secretsmanager:..."

That built-in issuer serves:

/.well-known/oauth-authorization-server
/.well-known/openid-configuration
/.well-known/jwks.json
/oauth/register
/oauth/authorize
/oauth/dotloop/callback
/oauth/token

When DOTLOOP_APP_OAUTH_ENABLED=1, /oauth/authorize checks the hosted Dotloop token store before issuing an MCP authorization code. If no valid Dotloop API token is available, it redirects to Dotloop OAuth and resumes the original MCP PKCE flow after /oauth/dotloop/callback stores refreshable token state. The caller's MCP Bearer token is never passed through to Dotloop. For the hosted Perry Group deployment, Dotloop app authorization uses the registered https://tpgstats.com/agents/dotloop/callback redirect URI, and that Django callback relays MCP-prefixed OAuth states back to https://dotloop.theperry.group/oauth/dotloop/callback.

Hosted Staging Deployment

Dotloop staging is designed to run as a Docker image with the dotloop-mcp-hosted entrypoint on ECS/Fargate behind an HTTPS load balancer, with the public MCP endpoint expected at:

https://dotloop.theperry.group/mcp

The hosted entrypoint is streamable HTTP only and requires inbound MCP URL auth:

DOTLOOP_TRANSPORT=streamable-http
DOTLOOP_HOST=0.0.0.0
DOTLOOP_PORT=8000
DOTLOOP_STREAMABLE_HTTP_PATH=/mcp
DOTLOOP_MCP_AUTH_ENABLED=1
DOTLOOP_MCP_AUTH_ISSUER_URL=https://dotloop.theperry.group
DOTLOOP_MCP_AUTH_RESOURCE_SERVER_URL=https://dotloop.theperry.group/mcp
DOTLOOP_MCP_AUTH_JWKS_URL=https://dotloop.theperry.group/.well-known/jwks.json
DOTLOOP_MCP_HOSTED_OAUTH_ENABLED=1
DOTLOOP_MCP_HOSTED_OAUTH_PUBLIC_CONSENT_ENABLED=0
DOTLOOP_APP_OAUTH_ENABLED=1
DOTLOOP_APP_OAUTH_REDIRECT_URL=https://tpgstats.com/agents/dotloop/callback
DOTLOOP_APP_OAUTH_TOKEN_SECRET_ARN=arn:aws:secretsmanager:...

Deployment assets live under deploy/ecs/. The staging GitHub Actions workflow is .github/workflows/deploy-staging.yml; it validates the repo, builds and pushes a multi-architecture ECR image, renders the ECS task definition, updates the configured ECS service, and waits for stability. DNS should point dotloop.theperry.group at the public load balancer before enabling client use.

Validate

make validate

Live checks are disabled by default and require explicit opt-in:

make live-readiness-check
make live-read-check