Contents:

• Overview
• What Is the BookIt MCP Server?
• Authentication Methods
• Scopes
• Capabilities
• What Is Not Included
• Prerequisites
• Getting Started
• Important Considerations
• Security & Privacy

 

Overview

The BookIt MCP Server makes BookIt's scheduling and operational data accessible through MCP-compatible AI clients (Claude, ChatGPT, and others). This guide covers what it does, how to enable it, available tools, security and privacy, and how to share feedback.

 

What Is the BookIt MCP Server?

The Model Context Protocol (MCP) is an open standard that allows AI clients and agents to discover and invoke tools from external systems. The BookIt MCP server exposes a curated set of BookIt workflows as tools that can be accessed through any MCP-compatible AI client.

In practice, a BookIt admin can open Claude, ChatGPT, or another MCP client, connect it to the BookIt MCP server, and ask questions like:

• "Show me all cancelled meetings for the Enterprise AMEA Pool last week."
• "Which reps in the Pool West - USA have not connected their calendars?"
• "How does booking for our Inbound Demo meeting type compare between this month and last?"
• "Check availability for the SDR Pool with the meeting type Outbound Demo for this Friday."
• "Invite the three new SDRs to BookIt Links and send their authorization emails."
• "Deauthorize Jordan Lee, they moved off the sales team."

They get accurate, structured answers without needing to open Salesforce, run a report, or write a query.

Reps can also use MCP to interact with BookIt from within their LLM workflow:

• "Give me my booking link for the 30-minute intro meeting."
• "What meetings do I have coming up this week?"
• "What's the conference link for my 2pm meeting tomorrow?"
• "Cancel my meeting with Jordan Lee on Friday."
• "Request a no-show credit for my meeting yesterday with Acme Corp."

 

Authentication Methods

BookIt MCP supports two ways to authenticate. Both are OAuth flows under the hood — the difference is who is signing in and how.

Method	Best for	Scope granted
Salesforce Login	Admins and reps connecting from their own LLM client	Admin or User (derived from the signed-in user's Salesforce permission set)
One-Time Code	AI agents or automated systems needing Admin access without an interactive login	Always Admin

Full setup details for each method are in Getting Started below.

 

Scopes

BookIt MCP has two scopes: Admin and User. Every authenticated session is one or the other, and the scope determines which capabilities are exposed.

• Admin — granted via Salesforce login by a user with the LeanData Custom Objects Full Access permission set, or via the One-Time Code flow. Admins get full operational access across the org.
• User — granted via Salesforce login by a user with the LeanData Dashboard Access permission set. Users get rep-level access to their own workflows: their own links, their own availability, their own meetings, and actions on their own meetings (cancel, reschedule, request credit back).

If someone attempts to sign in via Salesforce without either permission set, they cannot authenticate to the MCP server.

Authenticating via Salesforce login also requires BookIt product access. The signed-in user must be an authorized BookIt user with product access and in Active status. A user who holds a LeanData permission set but has no BookIt product access, for example an Orchestration-only user or a user in Invited or Error status, can sign in but will not be able to connect.

Connections created with a One-Time Code are not subject to the product access requirement. The code is generated by an admin and sent to an email address rather than tied to a Salesforce user, so these connections receive Admin scope.

 

Capabilities

The tables below describe each capability and what an Admin and a User can do with it. Capabilities are grouped into Read (look up information) and Write (take action on live systems). "Not available" means the capability is not exposed at that scope.

Read Capabilities

Capability	Description	Admin Scope	User Scope
Meeting log queries	Query meeting logs with flexible filters: meeting type, host, status, date range, booking method.	Query any meeting in the org	Query only meetings they host or are on
Availability preview	Check real-time availability for any user or pool by meeting type, respecting working hours, vacation schedules, and meeting type limits.	Preview availability for any user or pool	Preview their own availability only
User lookup	Retrieve user details across four groups: • Identity: user ID, name, email, phone number, profile picture URL • Schedule: timezone, working hours, vacations, pausing status • Integrations & access: video conferencing providers, authorization status, BookIt product access • Links Library: booking links owned by the user	Look up any user	Look up themselves only
Pool lookup	Retrieve count-based pool details across three groups: • Identity & description: pool ID, name, type, description • Configuration: weighting, auto-calibration setting, product access • Membership & history: member count, member details, created date, last modified info	Look up any pool	Not available
Meeting type lookup	Retrieve complete meeting type details across three groups: • Scheduling: time slot configuration, daily/weekly limits, working hours configuration • Form & flow: form fields, notifications • Presentation: branding and styling	Look up any meeting type	Look up any meeting type
Counts & calibrations	View pool member ordering and calibration history to understand round-robin fairness and why a specific rep was selected for a meeting.	View counts and calibration history for any pool	Not available
Scheduling links	Retrieve booking links by user, team, or meeting type. Supports "My Links" filtering so reps and agents can retrieve their own links on demand.	Retrieve any link in the org	Retrieve their own links only

 

Write Capabilities

Capability	Description	Admin Scope	User Scope
BookIt for Forms routing & booking	Route a prospect to an available rep and book a meeting. SMS reminders are disabled since prospect consent cannot be collected.	Route and book on any meeting type	Not available
Cancel, reschedule, request credit (no-show/unqualified/other)	Cancel or reschedule a meeting. Request a credit for a no-show, unqualified, or other reason.	Cancel, reschedule, or request credit on any meeting	Cancel, reschedule, or request credit on their own meetings
Reassign meetings	Reassign a meeting to another pool member, keeping the meeting date and time the same. Available on BookIt 8.x or later. On 7.x, reassignment requests will return a generic error.	Reassign any meeting	Not available
Credit request management	Approve or deny reps' credit requests.	Approve or deny any credit request	Not available
Invite users to BookIt	Invite one or more Salesforce users to BookIt and set which products they have access to (BookIt Handoff, BookIt Links, BookIt for Forms). Invited users receive the standard BookIt authorization email and appear on the Users page in Invited status until they authorize.	Invite any user and set their product access	Not available
Deauthorize users	Deauthorize a BookIt user. This disconnects their calendar authorization and stops them from hosting meetings through BookIt, which is the same action available on the Users page.	Deauthorize any user	Not available

 

What Is Not Included

• Full BookIt feature parity through MCP. Configuration workflows such as editing meeting types and configuring working hours are available in the LeanData UI only.
• BookIt Audit Log and LeanData Orchestration queries.
• Dashboards or reports showing how your agents are using MCP.

 

Prerequisites

To enable BookIt MCP, your organization will need:

• An active BookIt license on versions 7.x or higher
  • BookIt MCP is included for all BookIt customers at no additional cost.
  • Reassigning meetings requires version 8.x or later.
• BookIt product access for anyone connecting through Salesforce login
  • The user must be an authorized BookIt user in Active status. Users without BookIt product access cannot establish a connection through Salesforce login.
  • Connections established with a One-Time Code are not subject to this check.
• Access to an MCP-compatible LLM client (e.g., Claude, ChatGPT, or a custom agent)

 

Getting Started

Step 1 — Enable the BookIt MCP Integration

• In LeanData, navigate to Integrations > BookIt tab > BookIt MCP > click Get Started.

• In the BookIt MCP integration page, click Enable.
• Once enabled, you will see the BookIt MCP Server URL on the integration page. You will use this URL later to connect your MCP client.

Step 2 — Choose your authentication method

Pick the path that matches your use case (see Authentication Methods above for an overview).

Option A: Salesforce Login (recommended for direct user access)

This is the simplest path for admins and reps who will interact with BookIt MCP directly from their own LLM client. Scope (Admin vs. User) is derived from the signed-in user's Salesforce permission set — see Scopes above.

1. Install the LeanDataECA managed package in your Salesforce org: install link. This package is used solely to enable Salesforce login for BookIt MCP; it does not add any other functionality.
   • Select Install for Admins Only.
   • Acknowledge the non-AppExchange notice and click Install.

2. In your MCP-compatible client (e.g., Claude), add a new MCP server using the BookIt MCP Server URL copied from Step 1.

 

3. When prompted, complete the Salesforce login.

That's it — your client is now connected and tools are immediately available.

Option B: One-Time Code (for agent-level Admin access)

Use this method when connecting an AI agent or automated system that needs Admin-level access without an interactive Salesforce login. One-Time Codes always grant Admin scope.

1. Navigate to the MCP integration page. Integrations > BookIt tab > Get Started (or Update Settings).

2. Enter an email address, and request a one-time code.
3. A one-time code will be sent to that email address.

4. In your MCP-compatible client, add a new MCP server using the BookIt MCP Server URL copied from Step 1. When prompted, paste the one-time code from the email.

One-Time Code lifecycle:

• Generated by an admin from the Integrations page.
• Single-use.
• Expires 10 minutes after issuance if not used.

Step 3 — Start using tools

Once connected, available tools are automatically discoverable in your MCP client. No additional configuration is required. You can begin querying meeting logs, checking availability, and exploring other capabilities immediately.

 

Important Considerations

• Confirm results in the BookIt UI before acting on high-stakes decisions. If a result returned through MCP does not match what you see in BookIt, report it through LeanData Support.
• Write actions carry real-world impact. Routing, booking, cancel, reschedule, reassign, credit request, and user management tool calls interact with live systems. Use confirmation flows carefully and test in non-critical workflows first.
• User management changes real access. Inviting a user sends an authorization email and grants product access, and deauthorizing a user removes their calendar connection along with their ability to host meetings. Confirm the user and the products before running either action, especially when onboarding a group of reps at once.

 

Security & Privacy

We take the security of your data seriously. Here is how BookIt MCP handles your information:

• Authentication is managed via Salesforce login or One-Time Code (both are OAuth flows). No passwords or API keys are distributed.
• Credentials (tokens, API keys) are encrypted at rest using AES-256-GCM.
• Data surfaced through MCP includes scheduling data (meeting logs, user info, availability). It does not include raw OAuth tokens or other credentials. Data retention is governed by your LeanData settings.
• All tool calls are logged server-side for auditability. These logs are not surfaced in the product.
• Your AI client and model are your choice. BookIt MCP is compatible with any MCP-capable client (e.g., Claude, ChatGPT, Cursor, custom agents). Model selection, prompting, guardrails, and AI governance are controlled by your organization and your chosen client — not by LeanData.
• Token usage and LLM costs are not managed or billed by LeanData for MCP. Any token usage, rate limits, or costs associated with your chosen AI model/provider are governed by your agreement with that provider.
• No "Bring Your Own Key" to LeanData is required for MCP. If your MCP client requires an API key for an LLM provider, you will configure that key in your client environment. BookIt MCP does not accept or store LLM provider API keys.

If your organization has specific security review requirements before connecting to the MCP server, contact your CSM and we will work with your team to provide the necessary documentation.

For questions or additional assistance please contact LeanData Support.