Use SmallForce in ChatGPT, Claude, and Codex

SmallForce exposes a remote Model Context Protocol (MCP) service. A connection is bound to one organization selected during SmallForce OAuth. The client never chooses an organization by sending an ID with a tool call.

Connect safely

1. Add the official SmallForce connector or MCP server in the AI client.
2. Sign in to SmallForce and select one organization.
3. Review the requested permission groups. Reads, account connections, writes, publishing, advertising launch, and employee actions are separate scopes.
4. Begin with company status or another read-only request.

SmallForce rechecks the bearer token, current organization membership, role, plan, Company OS readiness, and required scope on delegated calls. An internal service credential cannot select a user or organization by itself.

Rich views and ordinary tool results

Compatible hosts can render SmallForce React views for company status, files, employee conversations, email, calls, connected apps, social publishing, websites, and advertising. The same tools also return concise text and typed structured data, so the workflows remain usable when a host does not render a view. A host’s surrounding chat composer is part of that host, not the SmallForce view.

Connected apps

Search for an operation, inspect its current schema and classification, then select an exact connected account. Ask before starting another provider connection. Authorization beginning is not proof that a provider connection finished.

Read operations use the query tool. External writes require the write scope, an exact account, explicit confirmation of the displayed action and arguments, and an idempotency key. Financial transactions are unavailable through the public generic connected-app tool.

Employee planning and confirmed actions

An MCP employee chat can research, inspect, plan, and draft. Mutation-capable OS tools are blocked for ordinary chat turns. When the plan needs a change, the assistant creates a durable action proposal bound to the same organization, user, OAuth client, employee, and source chat session.

The proposal displays its exact instruction, risk, digest, and 15-minute expiry. Nothing executes until the user separately confirms the unchanged proposal. A confirmed proposal admits one bounded employee turn; changed, expired, cross-client, or already-decided proposals fail closed.

Revoke access

Remove SmallForce from the AI client’s connector settings or revoke the client in SmallForce. Disconnect an individual provider account when you want to remove only that integration. See SmallForce support for connection troubleshooting and deletion requests.