Official vendor MCP servers
More business platforms now publish their own MCP server. This page records what we found for the platforms in our [connector directory](/connectors/): what the vendor ships, how it authenticates, and whether OrgRelay can put it behind its own permissions and approvals.
Each entry was checked against the vendor's documentation in November 2026. The linked connector page explains how each vendor server compares with OrgRelay's connector.
How OrgRelay connects a vendor server
A third-party MCP connection in OrgRelay:
- speaks Streamable HTTP to a URL, as described on MCP transport;
- authenticates as the company with a bearer token or OAuth 2.1 client credentials, as described on authentication;
- treats a tool as read only if the vendor marks it
readOnlyHint: true, and sends everything else through approval.
That gives three kinds of fit:
| Fit | Meaning |
|---|---|
| Direct | Remote HTTP server with a token or client credentials. Add it as a third-party connection |
| Not directly (stdio) | Local stdio server. OrgRelay cannot connect it; it suits a developer's own AI client |
| Per-user only | Remote server that requires each person to sign in interactively. Suits individuals in their own client, not a shared company connection |
The list
| Platform | Vendor server | Transport and auth | Fit for OrgRelay |
|---|---|---|---|
| Shopify | Dev MCP server (@shopify/dev-mcp), part of the AI Toolkit. Documentation and schema help for developers, not store data |
Local, no auth | Developer aid; use the connector for store data |
| WooCommerce | MCP integration via the WordPress Abilities API and the MCP Adapter plugin, marked developer preview | Remote, WordPress application password | Direct, with a dedicated low-privilege user |
| Amazon SP-API | sp-api-dev-mcp and a Data Kiosk server in amzn/selling-partner-api-samples, labelled educational examples |
Local | Not directly (stdio); educational examples |
| Stripe | Remote server at mcp.stripe.com with stripe_api_read and stripe_api_write |
OAuth or agent-tagged restricted key | Direct with an agent key. Stripe's own human confirmation applies to some actions |
| Google Search Console | No official server for Search Console | — | Third-party servers only |
| Salesforce | Hosted MCP Servers under api.salesforce.com/platform/mcp/v1/, from read-only to full CRUD |
External Client App with the mcp_api scope |
Depends on the OAuth flow you configure |
| Odoo | No first-party server in Odoo's developer docs. Third-party modules on the Odoo Apps store | Varies by module | Direct if the module offers HTTP and a key |
| QuickBooks Online | Open-source server from Intuit on GitHub, 29 entity types and 11 reports | Local stdio, app credentials and refresh token | Not directly (stdio) |
| Xero | Open-source local server, plus a hosted remote server at api.xero.com/mcp/v1 |
Local stdio; remote uses OAuth 2.0 with PKCE | Not directly: local is stdio, remote is per-user |
| HubSpot | Remote server at mcp.hubspot.com, generally available |
OAuth with PKCE per user | Per-user only |
| Kingdee (金蝶云星空) | No first-party server in Kingdee's open platform docs. Community packages such as kingdee-k3cloud-mcp wrap the WebAPI |
Varies; some offer streamable HTTP | Direct if HTTP with a token; review write modes first |
| LingXing (领星) | No first-party server in LingXing's open platform docs | — | A partner-built HTTP server, or a custom connector |
| Zendesk | No general-purpose server in Zendesk's developer docs. Community servers exist | Varies | Direct if HTTP with a token |
Reading the list
Two patterns stand out. First, the remote servers that vendors host are mostly built for one person signing in from their own AI client. That is the right design for a vendor, and it is also why a company that wants shared credentials, role-based access and approvals usually keeps a gateway such as OrgRelay in front. The trade-offs are discussed on enterprise MCP patterns.
Second, several vendors publish local stdio servers for developers. They are useful in Claude Code or Cursor while building, and are not something OrgRelay can connect as a shared company connection.
When to add a vendor server anyway
- The vendor's server covers objects OrgRelay's connector does not, such as Salesforce custom objects or QuickBooks bills.
- A team already relies on the vendor's tool descriptions and wants the same behaviour.
- You want the vendor's own safety features, such as Stripe's human confirmation, on top of OrgRelay's approvals.
When you do, OrgRelay renames the tools to domain.action, treats unannotated tools as writes and logs every call, as described on third-party MCP. The approval design is explained on human-in-the-loop.
For owners
Whether staff should use vendor servers directly, or only through the company's OrgRelay, is a policy decision more than a technical one. The business view is on orgrelay.com/security.
Common questions
Why can't every vendor server connect directly? Stdio servers and per-user OAuth servers cannot act as a shared company connection.
Vendor server or OrgRelay connector? The connector when it covers what staff ask; the vendor server for wider coverage.
Is this list complete? No. It covers the platforms with detailed pages here, checked in November 2026.
Related
- Connector spec for building your own server that OrgRelay treats as a first-class connector.
- OpenAPI import when a platform has an API but no usable MCP server.
- MCP overview for the opposite direction: staff using OrgRelay from their AI client.
Related pages
- Quickstart: run a template and pass the self-test in 15 minutes.
- Security requirements: tenant isolation, logs and error hygiene.
- Self-test tool: the self-test tool and what each check means.
- Code templates: download the developer kit and four templates.
- Standard tools: recommended tool names for 14 business domains.