CONNECTOR DOCUMENTATION

A narrow proposal-import connection.

The Sales Desk connector uses MCP Streamable HTTP and OAuth 2.0 Authorization Code with PKCE. It can save proposal text to the connected customer’s private inbox and retrieve the review link for that imported draft. It cannot charge, start production, generate finished media, publish, or read another customer’s data.

Connection details

MCP endpoint: https://salesdesk.video/api/mcp
Protected-resource metadata: /.well-known/oauth-protected-resource
Authorization-server metadata: /.well-known/oauth-authorization-server
Dynamic client registration: https://salesdesk.video/oauth/register
OAuth scope: proposals:import
OpenAPI reference: /openapi.yaml

Supported tools

`submit_proposal`

Stores synthetic or customer-approved proposal text under the connected Sales Desk account. A UUID request identifier makes identical retries idempotent. The result contains a private draft identifier and review URL with awaiting_customer_review status.

`get_proposal_draft`

Returns the review URL for one proposal imported into the same connected account. A different account receives no draft data.

Authorization behavior

Compatible public OAuth clients register one or more exact HTTPS callback URLs. Sales Desk does not issue a client secret. Authorization requires PKCE S256, an exact registered redirect URI, the Sales Desk MCP resource, and the single proposal-import scope. The consent screen names the registered assistant and describes the limited permission. Access tokens expire after one hour; refresh tokens rotate and expire after 30 days. Customers can revoke a connection from the private connection-management page.

Reviewer test

Register a public client with the reviewer callback and no client secret.
Connect a dedicated test Sales Desk account and approve only proposals:import.
Call tools/list and confirm only the two documented tools are returned.
Import a synthetic proposal using a fresh UUID. Repeat it unchanged and confirm no duplicate; change the text with the same UUID and confirm a conflict.
Retrieve the returned draft from the same account, then attempt retrieval from a second test account and confirm it is not found.
Revoke the connection and confirm subsequent calls fail. Verify that no step creates a charge, starts production, sends a message, or publishes content.

Data and support

See the privacy notice and security overview for identity, storage, retention, and deletion details. For technical or review support, email keith@bapl.ai. Never send passwords, full card numbers, or connection tokens by email.