MarqIQ
Browse all help topics
How to9 min read

Let your AI assistant read this workspace

Last updated 23 October 2026Only a workspace admin can create or revoke an access token, and the AI assistants tab is drawn only for admins. Creating a token and reading the analyses work on every plan; one of them, the executive read, needs Pro or above. Connect at least one CRM or marketing tool and let it sync first, or there is nothing to read.

An assistant that supports the Model Context Protocol can ask MarqIQ the same questions your screens answer, and get the same figures back. You create an access token, paste it into the assistant, and ask in words. It reads; it can put a change in front of your team for review only if you switch that on, and it can never approve or apply one.

Before you start

Permissions required

You need the Workspace Admin role. A token lets an assistant read the whole workspace, so creating one is an admin's decision. There is no separate switch to allow assistants: until a token exists, no assistant can read anything, and revoking the last one closes it again.

Note

Connect a tool and let it sync before you start. Every analysis answers for one connected tool, and an assistant asked about a workspace with nothing synced is told so rather than given a zero.

Take care

A token is shown once. MarqIQ keeps only a fingerprint of it, so nobody, including us, can show it to you again. Lose it and you revoke it and make another.

Create an access token

  1. Open Account & Team in the sidebar.

  2. Choose AI assistants.

  3. Type a name into Name.

    Name it for the assistant and the person, so a list of them is readable a year later. The placeholder is "Claude on my laptop". Sixty characters at most.

  4. Choose a period under Stops working after.

    • 30 days — for a one-off piece of work.
    • 90 days (recommended) — the default.
    • One year.
    • No expiry — it keeps working until somebody revokes it. The screen warns you to choose this only for something you will remember to switch off.
  5. Tick Also let it propose changes only if you want it to.

    Leave it off for an assistant that should answer questions. What it allows is set out further down this page.

  6. Click Create token.

  7. Copy the token from the yellow panel straight away.

    It begins with `mq_`. The panel says it will not be shown again, because it will not.

  8. Click I have copied it to dismiss the panel.

Note

A workspace can hold 25 working tokens at once, and a new one is refused by name until you revoke one you no longer use. Ten can be created in any hour.

Connect your assistant

Any assistant that speaks the Model Context Protocol over HTTP can connect, and it needs two things: the server address and the token.

  1. Copy the server address from the Connect your assistant panel.

    It is your own MarqIQ address followed by `/api/mcp`. Copy it from the screen rather than typing it, so it matches the address you actually sign in at.

  2. Choose your assistant from the tabs under Step by step, for the assistant you use.

    There are tabs for Claude Code, Claude Desktop, Cursor and VS Code (Copilot), each carrying the exact line or block of configuration that client expects.

  3. Copy the configuration with the Copy button on the code block.

  4. Replace YOUR_TOKEN in it with the token you copied.

  5. Follow the numbered steps under the code block for that client.

    They say where the file goes and how to check the connection came up.

  6. Ask it something.

    "What should I fix first in HubSpot?" or "Run the weekly review". It says which period its numbers cover, and it says so when MarqIQ does not have enough data to judge. When the audit behind an answer is not ready, the assistant is told what you would be told — “MarqIQ is still working out the data audit for HubSpot; this answer needs it”, with how far it has got — and can ask again later.

Whatever the client calls the field, the token travels as a header named `Authorization` whose value is the word `Bearer`, a space, and the token. In an assistant's settings that is usually a field called "API key", "bearer token" or "custom header" under add a remote MCP server or add a connector. A token is never read from a web address, because addresses end up in logs and histories.

Take care

ChatGPT cannot connect today. Its connectors sign in with OAuth and cannot send a token in a header, and MarqIQ does not offer OAuth sign-in yet. The tab says so rather than giving you a set-up that fails. Nothing you create here will need redoing when it arrives.

Note

Claude Desktop's own Connectors screen also signs in with OAuth. The guide for it uses a small open-source bridge instead, which needs Node.js installed on that machine.

What it can read

Each of these answers for one connected tool, and the workspace is never an argument — it comes from the token, so no wording of a request reaches another customer's data.

What it readsWhere it applies
List connected toolsAlways. The assistant calls this first, because the rest need a tool id from it.
Overview of every analysis, and what to do firstAny analysed tool. The first call for a tool can take up to a minute.
Executive read — a headline, a graded scorecard and where to investAny analysed tool, on Pro and above.
Data audit — counts, completeness, duplicates, deals won, lost and openAny analysed tool.
Lead scoring — whether each score picks out the people who buyAny analysed tool.
Funnel — movement between lifecycle stages and where people are lostAny analysed tool.
Form fills — what is real, what is duplicated, what is junk and whyThe forms MarqIQ captured on your website.
Email performanceTools that report results for each email they send.
Automation healthHubSpot and Marketo.
Forecast accuracyHubSpot and Salesforce.
Audience health — who cannot be emailed, and who has gone quietAny analysed tool.
Source and channel truthAny analysed tool.
Field discipline — whether each field is used for what it is forHubSpot, Marketo, Salesforce, Pipedrive, Zoho and Dynamics 365.
One field's profile — type, fill rate, trend, most common values, the role MarqIQ reads it as playingAny analysed tool.
Where a proposed change standsAny change set in this workspace, by its id.

It can also run four saved questions without you phrasing them: a weekly marketing operations review, a quarter review pack, what is broken right now, and whether sales is being sent good leads. And it can attach the overview of any connected tool as a document, without calling anything.

What it can propose, and what it can never do

With Also let it propose changes ticked, an assistant can put a change set in front of your team. That is the whole of the permission.

  • It proposes. A person reviews the before-and-after list in MarqIQ and approves it, and a workspace admin applies it. This server carries no action that approves, applies or undoes anything.
  • Two changes are catalogued: filling first-touch fields from what MarqIQ recorded when the person first arrived, and filling them from the person's most recent touch. Both only fill fields that are empty. Neither replaces a value.
  • It works for HubSpot and Marketo. Any other tool is refused by name.
  • The tool must already have first-touch fields mapped under Tool Operations › Field Mapping, or there is nowhere to write a first touch and the proposal is refused.
  • One proposal per operation at a time. A second is refused while the first is waiting, so the same records are never proposed twice.
  • The change set records the assistant that proposed it, the token's name and whose token it was.

A token without that permission is told so plainly: "This access token may read but not propose changes." Nothing else about it changes.

Check what a token has done, and revoke it

Every token in the workspace is listed under Tokens in this workspace, whoever made it.

What the row showsWhat it tells you
Working, Expires soon, Expired or RevokedExpires soon means within fourteen days.
Starts with mq_…Enough to tell two tokens apart, far too little to guess the rest.
Made by, and on what dateThe person, or "Someone no longer in this workspace" if they have left.
Last used, or never usedStamped at most once a minute, so a busy assistant is not a write per request.
Expires on, or no expiryThe date it stops working by itself.
  1. Find the token in the list.

  2. Click Revoke on its row.

  3. Confirm the dialog.

    It reads "Any assistant using it stops working at once. This cannot be undone." Revocation takes effect on the next request; there is no cache to wait out.

Tip

Keep tokens out of files you share or commit. A token in a repository is a token somebody else has. If one leaks, revoke it here and create another — that is the whole remedy.

When the assistant and a screen quote different figures

Both read the same analyses, so a difference is almost always the question rather than the answer. Check these three before you doubt either.

  • The period. A screen you have filtered to last quarter and an assistant asked without a period are measuring different things. The assistant states the period it used in its reply.
  • The connected tool. A workspace with two tools has two of every analysis, and an assistant asked in general picks one.
  • When each was worked out. A screen left open shows what it read when it loaded. Reload it before comparing.

Where they still disagree, the screen is the one to raise a case about, and the assistant's reply is useful evidence: it names the tool, the period and the record count it rested on.

If it did not work

"A valid MarqIQ access token is required."

Why: The token is unknown, revoked or expired. All three answer the same way on purpose, so nothing about a token can be learned by presenting one.

Fix: Open Account & Team then AI assistants and read the token's state in the list. If it says Expired or Revoked, create a new one and paste it into your assistant.

The assistant connects and finds no tools to read

Why: Only tools MarqIQ can analyse are offered, and only once they are connected and have synced.

Fix: Open Integrations, connect a CRM or marketing tool, and run a sync. Ask the assistant to list connected tools again afterwards.

The executive read is refused and the rest works

Why: The executive read needs the attribution and journey reports, which are a Pro feature. Every other analysis is open on your plan.

Fix: The refusal names your plan and the one it needs. Move to Pro or above, or ask for the overview instead, which covers the same ground in a sentence each.

A token created a moment ago is refused

Why: The person who created it no longer belongs to the workspace it was made for, or the workspace has been suspended. Both refuse the token however new it is.

Fix: Create a token under an account that is still in the workspace. For a suspension, raise a case from Support — a token cannot outlive one.

"Too many requests. Try again in N seconds."

Why: A token may make 120 requests a minute. An assistant looping over every field will reach that.

Fix: Wait the number of seconds in the message. Ask for one analysis at a time rather than everything at once — the overview is one call and covers all of them.

The proposal is refused although the token may propose

Why: Either the tool is not HubSpot or Marketo, or it has no first-touch fields mapped, or the workspace already holds 20 open change sets, or it has made 20 proposals in the last minute. The two limits are the workspace’s, shared with people proposing on the Tool Operations screen.

Fix: Read the refusal, which names which of the four it is. Map the fields under Tool Operations › Field Mapping, approve or reject some of the waiting change sets, or wait a minute.

The AI assistants tab is not in the settings tabs

Why: It is drawn for workspace admins only, as is the Team tab beside it.

Fix: Ask a workspace admin to create the token and give it to you. The token carries their identity, so name it after the assistant and the person who will use it.

Next steps

Related articles

Was this article helpful?