Let your AI assistant read this workspace
An assistant that supports the Model Context Protocol can ask MarqIQ the same questions your screens answer, and get the same figures back. You create an access token, paste it into the assistant, and ask in words. It reads; it can put a change in front of your team for review only if you switch that on, and it can never approve or apply one.
Before you start
Permissions required
You need the Workspace Admin role. A token lets an assistant read the whole workspace, so creating one is an admin's decision. There is no separate switch to allow assistants: until a token exists, no assistant can read anything, and revoking the last one closes it again.
Note
Connect a tool and let it sync before you start. Every analysis answers for one connected tool, and an assistant asked about a workspace with nothing synced is told so rather than given a zero.
Take care
A token is shown once. MarqIQ keeps only a fingerprint of it, so nobody, including us, can show it to you again. Lose it and you revoke it and make another.
Create an access token
Open Account & Team in the sidebar.
Choose AI assistants.
Type a name into Name.
Name it for the assistant and the person, so a list of them is readable a year later. The placeholder is "Claude on my laptop". Sixty characters at most.
Choose a period under Stops working after.
- 30 days — for a one-off piece of work.
- 90 days (recommended) — the default.
- One year.
- No expiry — it keeps working until somebody revokes it. The screen warns you to choose this only for something you will remember to switch off.
Tick Also let it propose changes only if you want it to.
Leave it off for an assistant that should answer questions. What it allows is set out further down this page.
Click Create token.
Copy the token from the yellow panel straight away.
It begins with `mq_`. The panel says it will not be shown again, because it will not.
Click I have copied it to dismiss the panel.
Note
A workspace can hold 25 working tokens at once, and a new one is refused by name until you revoke one you no longer use. Ten can be created in any hour.
Connect your assistant
Any assistant that speaks the Model Context Protocol over HTTP can connect, and it needs two things: the server address and the token.
Copy the server address from the Connect your assistant panel.
It is your own MarqIQ address followed by `/api/mcp`. Copy it from the screen rather than typing it, so it matches the address you actually sign in at.
Choose your assistant from the tabs under Step by step, for the assistant you use.
There are tabs for Claude Code, Claude Desktop, Cursor and VS Code (Copilot), each carrying the exact line or block of configuration that client expects.
Copy the configuration with the Copy button on the code block.
Replace YOUR_TOKEN in it with the token you copied.
Follow the numbered steps under the code block for that client.
They say where the file goes and how to check the connection came up.
Ask it something.
"What should I fix first in HubSpot?" or "Run the weekly review". It says which period its numbers cover, and it says so when MarqIQ does not have enough data to judge. When the audit behind an answer is not ready, the assistant is told what you would be told — “MarqIQ is still working out the data audit for HubSpot; this answer needs it”, with how far it has got — and can ask again later.
Whatever the client calls the field, the token travels as a header named `Authorization` whose value is the word `Bearer`, a space, and the token. In an assistant's settings that is usually a field called "API key", "bearer token" or "custom header" under add a remote MCP server or add a connector. A token is never read from a web address, because addresses end up in logs and histories.
Take care
ChatGPT cannot connect today. Its connectors sign in with OAuth and cannot send a token in a header, and MarqIQ does not offer OAuth sign-in yet. The tab says so rather than giving you a set-up that fails. Nothing you create here will need redoing when it arrives.
Note
Claude Desktop's own Connectors screen also signs in with OAuth. The guide for it uses a small open-source bridge instead, which needs Node.js installed on that machine.
What it can read
Each of these answers for one connected tool, and the workspace is never an argument — it comes from the token, so no wording of a request reaches another customer's data.
| What it reads | Where it applies |
|---|---|
| List connected tools | Always. The assistant calls this first, because the rest need a tool id from it. |
| Overview of every analysis, and what to do first | Any analysed tool. The first call for a tool can take up to a minute. |
| Executive read — a headline, a graded scorecard and where to invest | Any analysed tool, on Pro and above. |
| Data audit — counts, completeness, duplicates, deals won, lost and open | Any analysed tool. |
| Lead scoring — whether each score picks out the people who buy | Any analysed tool. |
| Funnel — movement between lifecycle stages and where people are lost | Any analysed tool. |
| Form fills — what is real, what is duplicated, what is junk and why | The forms MarqIQ captured on your website. |
| Email performance | Tools that report results for each email they send. |
| Automation health | HubSpot and Marketo. |
| Forecast accuracy | HubSpot and Salesforce. |
| Audience health — who cannot be emailed, and who has gone quiet | Any analysed tool. |
| Source and channel truth | Any analysed tool. |
| Field discipline — whether each field is used for what it is for | HubSpot, Marketo, Salesforce, Pipedrive, Zoho and Dynamics 365. |
| One field's profile — type, fill rate, trend, most common values, the role MarqIQ reads it as playing | Any analysed tool. |
| Where a proposed change stands | Any change set in this workspace, by its id. |
It can also run four saved questions without you phrasing them: a weekly marketing operations review, a quarter review pack, what is broken right now, and whether sales is being sent good leads. And it can attach the overview of any connected tool as a document, without calling anything.
What it can propose, and what it can never do
With Also let it propose changes ticked, an assistant can put a change set in front of your team. That is the whole of the permission.
- It proposes. A person reviews the before-and-after list in MarqIQ and approves it, and a workspace admin applies it. This server carries no action that approves, applies or undoes anything.
- Two changes are catalogued: filling first-touch fields from what MarqIQ recorded when the person first arrived, and filling them from the person's most recent touch. Both only fill fields that are empty. Neither replaces a value.
- It works for HubSpot and Marketo. Any other tool is refused by name.
- The tool must already have first-touch fields mapped under Tool Operations › Field Mapping, or there is nowhere to write a first touch and the proposal is refused.
- One proposal per operation at a time. A second is refused while the first is waiting, so the same records are never proposed twice.
- The change set records the assistant that proposed it, the token's name and whose token it was.
A token without that permission is told so plainly: "This access token may read but not propose changes." Nothing else about it changes.
Check what a token has done, and revoke it
Every token in the workspace is listed under Tokens in this workspace, whoever made it.
| What the row shows | What it tells you |
|---|---|
| Working, Expires soon, Expired or Revoked | Expires soon means within fourteen days. |
| Starts with mq_… | Enough to tell two tokens apart, far too little to guess the rest. |
| Made by, and on what date | The person, or "Someone no longer in this workspace" if they have left. |
| Last used, or never used | Stamped at most once a minute, so a busy assistant is not a write per request. |
| Expires on, or no expiry | The date it stops working by itself. |
Find the token in the list.
Click Revoke on its row.
Confirm the dialog.
It reads "Any assistant using it stops working at once. This cannot be undone." Revocation takes effect on the next request; there is no cache to wait out.
Tip
Keep tokens out of files you share or commit. A token in a repository is a token somebody else has. If one leaks, revoke it here and create another — that is the whole remedy.
When the assistant and a screen quote different figures
Both read the same analyses, so a difference is almost always the question rather than the answer. Check these three before you doubt either.
- The period. A screen you have filtered to last quarter and an assistant asked without a period are measuring different things. The assistant states the period it used in its reply.
- The connected tool. A workspace with two tools has two of every analysis, and an assistant asked in general picks one.
- When each was worked out. A screen left open shows what it read when it loaded. Reload it before comparing.
Where they still disagree, the screen is the one to raise a case about, and the assistant's reply is useful evidence: it names the tool, the period and the record count it rested on.
If it did not work
"A valid MarqIQ access token is required."
Why: The token is unknown, revoked or expired. All three answer the same way on purpose, so nothing about a token can be learned by presenting one.
Fix: Open Account & Team then AI assistants and read the token's state in the list. If it says Expired or Revoked, create a new one and paste it into your assistant.
The assistant connects and finds no tools to read
Why: Only tools MarqIQ can analyse are offered, and only once they are connected and have synced.
Fix: Open Integrations, connect a CRM or marketing tool, and run a sync. Ask the assistant to list connected tools again afterwards.
The executive read is refused and the rest works
Why: The executive read needs the attribution and journey reports, which are a Pro feature. Every other analysis is open on your plan.
Fix: The refusal names your plan and the one it needs. Move to Pro or above, or ask for the overview instead, which covers the same ground in a sentence each.
A token created a moment ago is refused
Why: The person who created it no longer belongs to the workspace it was made for, or the workspace has been suspended. Both refuse the token however new it is.
Fix: Create a token under an account that is still in the workspace. For a suspension, raise a case from Support — a token cannot outlive one.
"Too many requests. Try again in N seconds."
Why: A token may make 120 requests a minute. An assistant looping over every field will reach that.
Fix: Wait the number of seconds in the message. Ask for one analysis at a time rather than everything at once — the overview is one call and covers all of them.
The proposal is refused although the token may propose
Why: Either the tool is not HubSpot or Marketo, or it has no first-touch fields mapped, or the workspace already holds 20 open change sets, or it has made 20 proposals in the last minute. The two limits are the workspace’s, shared with people proposing on the Tool Operations screen.
Fix: Read the refusal, which names which of the four it is. Map the fields under Tool Operations › Field Mapping, approve or reject some of the waiting change sets, or wait a minute.
The AI assistants tab is not in the settings tabs
Why: It is drawn for workspace admins only, as is the Team tab beside it.
Fix: Ask a workspace admin to create the token and give it to you. The token carries their identity, so name it after the assistant and the person who will use it.
Next steps
Related articles
Was this article helpful?