Claude Code automotive MCP

Use AutoFire dealership data in Claude Code

Connect Claude Code to a remote, read-only AutoFire toolset with an authorization header and a credential that expires automatically.

terminalStreamable HTTP
export AUTOFIRE_MCP_TOKEN="your-key-from-autofire"

claude mcp add --transport http autofire \
  https://mcp.goautofire.com/mcp \
  --header "Authorization: Bearer ${AUTOFIRE_MCP_TOKEN}"

Choose Claude Code’s configuration scope

Project connection

Use when a trusted dealership project needs a shared server definition. Keep the token in each developer’s environment, never in the project file.

User connection

Use for personal workstation access. Create a separately named key so it can be rotated without disrupting another client.

Create the Claude Code key

  1. 1
    Open MCP & API for the intended dealership.
  2. 2
    Name the key after the device and client, such as “Claude Code — sales laptop.”
  3. 3
    Choose 30 days initially and enable only the necessary scopes. Lead contact details should stay off unless the workflow requires them.
  4. 4
    Copy the key into a secret manager or environment variable, then close the one-time reveal.

Safe Claude Code prompts

“List available SUVs under $25,000 from AutoFire. Do not include VINs or customer data.”
“Summarize lead status counts using the masked lead workflow records.”
“Show the next seven days of test-drive workflow records without customer identity.”
“Read the latest dealership insight report and identify inventory follow-up questions.”

Verify the security boundary

  • The server lists only tools allowed by the key’s scopes.
  • No tool accepts dealership_id, SQL, a table name, or an arbitrary URL.
  • Lead lists omit names, email addresses, phone numbers, messages, and notes.
  • Revoking the key in AutoFire causes the next request to return 401.

Troubleshoot Claude Code

Use claude mcp list to confirm the server definition. For authorization failures, verify the shell running Claude Code inherited the environment variable, then check the key’s expiration and revocation status in AutoFire.

Connect your dealership without exposing the whole database

Start with a 30-day, read-only key and only the scopes your client needs.

Open MCP & API