The questions people ask before they connect

Three things. Official servers usually ship a small curated tool set, while PopMCP exposes a broader catalog where the provider's API allows it. Official servers are one per vendor, so a stack of ten tools means ten separate setups, where PopMCP gives you one hosted endpoint and one place to manage access. And most official servers assume a single account, while PopMCP treats multiple accounts per provider as a normal case, which is what agencies and multi-brand teams actually run.

You can, and for one internal API it may be the right call. The cost turns up later. Every provider is a separate build, provider APIs change underneath you, and you own auth, rate limiting, token revocation and uptime for each one. PopMCP is that work already done across the catalog, starting at $39 a month.

Often, yes. It needs a documented public API, credentials you can issue for an account you own, and actions worth an agent's time. Send the provider name and a link to its API docs through the request form and you will get a straight answer either way.

MCP (Model Context Protocol) is the open standard AI clients use to call external tools. PopMCP hosts MCP servers for your business tools, so you authorize an account once and any supported AI client can use it. Where the provider's API allows it, we expose a fuller tool catalog than most official MCP servers.

PopMCP works with clients that support remote Streamable HTTP MCP servers, including Claude Desktop, Claude Web, ChatGPT custom connectors, Cursor, Codex, Antigravity, Windsurf, Continue, Zed, Cline, OpenCode, and Z.ai's ZCode.

Most official MCP servers ship a small curated set of tools. Where the provider's API allows it, PopMCP exposes a much broader catalog, so an agent can reach more of the actions and data your tool already supports.

Yes. Each connection has an Allow write actions switch, and while it is off nobody can write through that connection, the owner included. New connections start read-only. An owner or admin also sets each teammate to no access, read, or read and write per connection, on every paid plan, and the Free plan is read-only for everyone.

Yes. Every paid plan supports multiple workspaces, starting at three on Starter, with separate MCP connections and usage data for each client environment, and includes per-member workspace access control.

Yes. Every client uses the same URL, https://app.popmcp.com/mcp. Each one signs in with OAuth and gets its own grant, so you can give each client a different set of connectors.

No. Provider credentials are stored in PopMCP and encrypted at rest. The AI client signs in to PopMCP with OAuth and never receives the underlying provider secret.

Yes. Each client runs its own OAuth sign-in and holds its own grant, so connecting Claude does not connect ChatGPT, and each client reaches only the connectors you ticked for it.

No. Each client names and organizes its MCP settings differently. PopMCP keeps the server side consistent: the same hosted URL, the same access controls, and the same provider tools.

No. PopMCP hosts the remote Streamable HTTP endpoint, so compatible AI clients can connect without a local server process or a deployment you maintain.

One connection is one provider account you have authorized in PopMCP, and every connection is reachable through the same hosted MCP URL. Connecting two Shopify stores is two connections. The included allowance is pooled account-wide, so you can spread it across your workspaces however you like.

No. Tool calls are not a billable metric on any plan, so there is no quota, no overage and nothing to estimate up front. A single AI conversation can run eight to fifteen calls, so asking you to predict a monthly number was never a fair way to price this. We charge for connections and workspaces, which you can count.

Every new account gets 14 days on Studio with no credit card, one trial per email and company domain. At the end you move to the permanent free plan, which keeps your oldest workspace, its two oldest connections, and read-only tools. Nothing is deleted straight away: anything above those limits is locked for 90 days and comes straight back when you subscribe.

One workspace, two connections, one member, seven days of usage history, and read-only tools, with the curated set loaded and the rest of the catalog searchable. It runs indefinitely with no card. Write actions start on Starter.

Yes. Extra connections are $4 per month and extra workspaces are $12 per month on Starter, Studio and Scale alike. Capacity you add is available immediately and prorated for the rest of the period.

Annual plans bill 10 months up front and cover 12, so two months are free. Add-ons follow the same cadence and earn the same discount, which keeps the plan and its add-ons on one renewal date.

Yes. Upgrades apply immediately and are prorated, and you review the exact amount before it is charged. Downgrades also apply immediately, with a prorated credit. If a downgrade would put you over the new plan's limits, you choose what to keep. Anything above the limit is locked, not deleted, and kept for 90 days.

Talk to us about Enterprise if you need custom workspace or connection volumes, SSO, a signed DPA with custom terms, a procurement or security review, or a named contact with an SLA.

No. New providers join the catalog and count as a connection like any other. There is no per-integration fee and nothing is held back for a higher tier.

Fees are generally non-refundable once a billing period starts. We do review duplicate charges, renewals processed after a valid cancellation, material technical failures that made the Service unavailable, and a first purchase inside fourteen days where there has been no material use. Email billing@popmcp.com with the account email, workspace name and invoice details.

You can cancel auto-renewal in the app at any time, and paid access generally continues to the end of the period you have already paid for. Cancelling does not create a refund for unused time. When the period ends the account moves to Free. Anything above Free's limits is locked, not deleted, and kept for 90 days, so it comes back if you resubscribe.

In PopMCP, encrypted at rest with AES-256-GCM, and never passed on to the AI client. The client signs in to PopMCP with OAuth and never holds the credential. Removing a member or narrowing their connector access takes effect on the next request.

Account sign-in uses Google, or an email and password confirmed by a one-time code sent to your email, with signed session cookies. SSO is not self-serve, so raise it in an Enterprise conversation.

PopMCP is multi-tenant. Data and configuration are scoped to a tenant, and every request is checked against the signed-in user's membership, workspace and connector access before it runs.

Tool calls are not metered or billed. Unauthenticated requests to the MCP endpoint are capped per IP address, and each provider's own rate limits still apply to the calls PopMCP makes on your behalf.

Yes, on Scale and Enterprise. The account owner can enable an account-level IP allowlist of up to 50 entries covering every workspace in the account, with IPv4 and IPv6 entries including CIDR ranges. An empty or disabled allowlist allows all addresses, so the control cannot accidentally lock out every connection.

Usage events capture metadata for reliability, security investigation, and rate limiting: method, tool name, outcome, latency, byte sizes, client name, and a hashed network address rather than a raw IP. The contents of provider responses are not stored as part of that telemetry.

PopMCP publishes a Data Processing Agreement covering processing on your documented instructions under GDPR Article 28, alongside a current subprocessor list. Both are in the legal center, and Enterprise agreements can carry custom terms.

Email security@popmcp.com with enough detail to reproduce the issue. Please do not access data that is not yours, degrade the Service, or publicly disclose an issue before we have had a reasonable opportunity to address it. Data and privacy requests go to privacy@popmcp.com.