Streamable HTTP · 14 tools

Run Qualyo from the agent you already use.

Connect once, then ask Codex, Claude Code, or Google Antigravity to create forms, inspect submissions, compare analytics, update flows, or remove data. The agent receives the complete schema for every action.

Create an MCP key View HTTP API

agent conversation

Create a lead qualification form in my default workspace. Ask for name, email, company size, and budget. Qualified leads should book a call.

I’ll map the workspace, build a connected six-step flow, and create it with AI qualification enabled.

list_workspaces create_form

01
Create a key
Open Integrations, choose MCP, and copy the secret while it is visible.
02
Add the server
Use the configuration for your agent below and expose the key as an environment variable.
03
Ask naturally
Try “List my forms and show the one with the most submissions this month.”

Choose your connection

One endpoint. The setup your agent expects.

Use OAuth for hosted connectors, or add a manual bearer-key configuration for a local coding agent.

Hosted connectors

Claude, Antigravity, and compatible agents

Add the endpoint in your agent's connector settings. Qualyo handles sign-in, consent, expiry, and refresh—leave custom Client ID and secret fields blank.

https://qualyoforms.com/mcp

Manual bearer-key setup

Codex

~/.codex/config.toml

Set QUALYO_MCP_TOKEN in the environment that launches Codex. The writes policy asks before non-read-only tools.

[mcp_servers.qualyo]
url = "https://qualyoforms.com/mcp"
bearer_token_env_var = "QUALYO_MCP_TOKEN"
default_tools_approval_mode = "writes"

Claude Code

.mcp.json

Set QUALYO_MCP_TOKEN before launch. Claude Code expands the environment variable into the bearer header.

{
  "mcpServers": {
    "qualyo": {
      "type": "http",
      "url": "https://qualyoforms.com/mcp",
      "headers": {
        "Authorization": "Bearer ${QUALYO_MCP_TOKEN}"
      }
    }
  }
}

Google Antigravity

mcp_config.json

Replace <YOUR_QUALYO_MCP_TOKEN> with your manual MCP token. Save it globally or under your workspace .agents folder.

{
  "mcpServers": {
    "qualyo": {
      "serverUrl": "https://qualyoforms.com/mcp",
      "headers": {
        "Authorization": "Bearer <YOUR_QUALYO_MCP_TOKEN>"
      }
    }
  }
}

Full parity

Every Public API operation is a tool.

Tools use the same validation and ownership rules as the HTTP API. IDs are public wrk_, frm_, and sbm_ identifiers—never database IDs.

ToolMethodAPI operation

get_accountGET/api/v1/me

list_workspacesGET/api/v1/workspaces

get_workspaceGET/api/v1/workspaces/{workspace_id}

list_formsGET/api/v1/forms

create_formPOST/api/v1/forms

get_formGET/api/v1/forms/{form_id}

update_formPUT/api/v1/forms/{form_id}

delete_formDELETE/api/v1/forms/{form_id}

list_submissionsGET/api/v1/submissions

get_submissionGET/api/v1/submissions/{submission_id}

delete_submissionDELETE/api/v1/submissions/{submission_id}

get_form_analyticsGET/api/v1/forms/{form_id}/analytics

get_api_schemaGET/api/v1/openapi.json

check_service_healthGET/api/v1/health

Built for controlled agency.

Credential isolation. Manual MCP keys and connector OAuth sessions cannot authenticate to the HTTP API, and API keys cannot authenticate to MCP.

Explicit deletion. Form and submission deletion require confirm=true and are marked destructive for compatible clients.

Conflict protection. Updates require the current form revision, preventing an agent from overwriting newer changes.

Minimal audit data. Qualyo logs tool name, status, timing, and resource IDs—not prompts, tool arguments, or content.