MCP server overview
Simple Hello ships an MCP server that lets AI assistants (Claude Code, Claude Desktop, Cursor, anything that speaks MCP) create and update flows in your portal. The point is to see the plan on the canvas before any code is written, give feedback on it, and only then let the assistant implement.
When connected, the assistant is told to ask:
Want me to visualize this in Simple Hello first?
before planning anything non-trivial. Say yes, and it calls create_flow,
returns a clickable portal URL, and waits for you to approve or request
changes.
Why use it
- Review before code. Catch missing branches, wrong assumptions, or scope creep on the diagram instead of in a 30-file diff.
- Shared artefact. Teammates with access to the project can open the same flow and comment on individual nodes — see async comments.
- Iterate cheaply. Ask the assistant to revise the flow; it updates the existing graph in place rather than starting over.
What it can do
| Tool | What it does |
|---|---|
list_projects | List projects this token is allowed to access. |
list_flows | List flows (optionally filtered by project_id). |
create_flow | Create a new flow with auto-laid-out nodes and edges. Returns { id, url }. |
get_flow | Read a flow's full graph (for follow-up edits). |
update_flow_graph | Replace a flow's graph — keeps positions of unchanged nodes. |
Nodes follow the standard four-type model: start, step, decision,
end. See node types for the rules.
How auth works
The MCP server doesn't talk to PocketBase directly. It calls the portal
at /api/mcp/* with an X-SimpleHello-Token header. The portal then:
- Looks the token up by sha256 hash.
- Rejects if it's revoked or expired.
- Intersects the token's allowlist with your actual project memberships — a token can never escalate beyond what its owner can already see in the UI.
- Gates writes on the same
owner / admin / developer / viewerrole you'd use in the UI. - Updates
last_used_atso you can see at a glance which tokens are active.
Revoke any token from Settings → MCP tokens at any time. No restart
needed — the next call fails with Token has been revoked.
Next: Set up the MCP server.