01 · No robot
There is no client-credentials login
SuperOffice documents interactive OpenID flows and a refresh token after a person signs in. A service account that never signed in cannot call the API.
For industrial sales teams on SuperOffice
A SuperOffice MCP server reads sales, stakeholders, activities and the next due date from /api/v1/Sale. SuperOffice does not ship an MCP server as of 6 October 2026. Online login is OpenID Connect after a person signs in. There is no client-credentials flow. Pexon does not POST a sale.
What we build
Built on what SuperOffice documents: companies (Contact), persons, sales, projects, activities on a sale, stakeholders. Backends named below are documented resources; "confirmed in blueprint" means the vendor documentation sits behind a login and the resource is checked against your release first.
# superoffice-mcp-server: tool manifest, draft for blueprint week 1
# Every tool runs as the person asking. Nothing is written without a person confirming.
tools:
list_my_sales: # user -> sales that user may see
backend: GET /api/v1/Sale
mode: read
get_sale: # id -> amount, stage, next due date
backend: GET /api/v1/Sale/{id} and /NextDueDate
mode: read
list_activities: # sale -> activities
backend: GET /api/v1/Sale/{id}/Activities
mode: read
list_stakeholders: # sale -> people on the sale
backend: GET /api/v1/Sale/{id}/Stakeholders
mode: read
draft_activity: # sale, text, date -> an activity a person saves
backend: not posted by the agent
mode: propose
audit: every call logged with user, tool, arguments and the SuperOffice responseThe manifest is the contract. A question that needs an operation not on it gets a new line and a review, not a wider permission.
Checked 6 October 2026
| What we found | |
|---|---|
| Interfaces | SuperOffice REST API (REST/JSON, docs public) |
| Authentication | Online uses OpenID Connect. The authorization-code flow is documented, with a bearer access token. SuperOffice states there is no client-credentials flow. A refresh token exists only after a person has signed in. Basic and ticket authentication are also documented for other installation types. |
| Vendor MCP server | No vendor server. No SuperOffice MCP server is described on the REST docs read on 6 October 2026. |
| Vendor AI assistant | None found. |
| Other connectors | None found. |
SuperOffice (NO). Mid-sized B2B sales teams. The DACH overview of 14 May 2026 lists SuperOffice at more than 6,000 customers, with offices in Frankfurt, Cologne, Dortmund, Düsseldorf and Munich, and names it for industrial Mittelstand sales.
Why SuperOffice is hard for agents
01 · No robot
SuperOffice documents interactive OpenID flows and a refresh token after a person signs in. A service account that never signed in cannot call the API.
02 · Names
The REST entity Contact is the company. Person is the person. A tool that swaps them returns the wrong record and looks successful.
03 · Session
The docs say that without Authorization the API uses the current session and then requires X-XSRF-TOKEN. The agent always sends the user's bearer token and does not ride a browser session.
04 · Write
The same entity supports POST, PUT and DELETE. The signed list uses GET, including GET Sale/{id}/Activities and GET Sale/{id}/NextDueDate.
SuperOffice holds the records. An assistant without a governed way in answers from whatever someone pasted into the chat. The connector is the governed way in: named operations, the person's own permissions, every call logged.
When this is the wrong page
If the seller already lives in SuperOffice and the question is a screen they have, another server will not make the sale newer. Build it when the same question is being re-typed into a mail or a second system.
Two weeks, €4,900 fixed price. Week one agrees the tool list with your SuperOffice owners and checks every backend against your release and licence. Week two tests whether a person's own SuperOffice permissions reach through the connector. You keep the manifest and a costed build plan, whoever builds it. All prices are net and exclude VAT.
What we need from you: a named SuperOffice administrator, a test or sandbox system we may call, and one business owner who can say which questions the assistant should answer first. The first production connector is usually a use-case pilot from €15,000; it runs in your environment, and the code is yours.
No SuperOffice MCP server is described on the REST docs read on 6 October 2026. This page describes what we add around that fact: a signed tool list and a test that the asking user only sees their own records.
Not on the list we sign. The blueprint starts read-only. A draft the person saves in the CRM is the only write, and only after that is agreed.
Only where the CRM would already show both of them the same records. Calls run as the person who asked. The blueprint tests that with two users before anything is called production.
The two-week Readiness Blueprint is fixed at €4,900: the tool list, a check against your tenant, and a test that permissions survive the round trip. A production connector is usually a use-case pilot from €15,000. Prices are net, excluding VAT.
Next step
Thirty minutes with the engineer who would build the connector, with your SuperOffice administrator in the room if you like.