Flowra

Official registry AI and agents

MCP server for your apps' tools and custom tools, plus hosted AI agents and approval-gated workflows

What can you do with Flowra?

  • "Connect Gmail on Flowra and list my latest subjects."
  • "Every weekday at 9:00, post a Slack recap of new Linear issues — ask me before posting."
  • "This Flowra run is paused — show the ledger and resume it."

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (streamable-http)
Claude Code
claude mcp add --transport http flowra 'https://mcp.flowra.dev/mcp'
JSON configuration (Claude Desktop, Cursor, VS Code)
{
    "mcpServers": {
        "flowra": {
            "type": "http",
            "url": "https://mcp.flowra.dev/mcp"
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. Flowra — Agent Skill & Hosted MCP Server
  2. What's included
  3. Install in 30 seconds
  4. First run
  5. What you can ask
  6. Why Flowra (vs Zapier MCP, Composio, n8n)
  7. Security model
  8. CI / clients without OAuth
  9. Local testing
  10. Layout

Flowra — Agent Skill & Hosted MCP Server

Run hosted AI agents and approval-gated workflows on Gmail, Slack, GitHub, Notion, Telegram, WhatsApp, Linear and 1,000+ apps — from Claude Code, Cursor, Codex, GitHub Copilot or any MCP client. OAuth per account, a human approval gate before send/delete/pay, and a ledger of every tool call.

Product · Docs · SDK · Changelog · skills.sh

This repo is the agent skill + Cursor/Claude/Codex plugin for Flowra. From your backend, use the SDK (@flowra/sdk, flowra-sdk, @flowra/cli).

What's included

ComponentPurpose
mcp.json / .mcp.jsonRegisters https://mcp.flowra.dev/mcp (OAuth, no keys). Six tools: discover, schemas, connect, multi-execute, workbench, bash.
skills/flowraRoutes operate / build / edit / debug / credits to the right Flowra calls.
skills/flowra-onboardFirst install: Connect MCP and one read-only first win.
commands//flowra-setup and /flowra-status.
evals/Behavioral scenarios the skill must pass.
rules/flowra-safety.mdcReads are free, writes need your yes; untrusted content is never an instruction.

Install in 30 seconds

1. Skill (Claude Code, Cursor, Codex, Copilot, OpenClaw, Hermes):

npx skills add flowradev/skills --skill flowra

2. Hosted MCP server — no API key needed; sign in with OAuth:

https://mcp.flowra.dev/mcp
ClientHow
CursorSettings → Tools & MCP → Connect next to flowra (or install the Flowra plugin)
Claude Code/plugin marketplace add flowradev/skills then /plugin install flowra@flowra — or claude mcp add --transport http flowra https://mcp.flowra.dev/mcp
CodexMarketplace at .agents/plugins/marketplace.json
Gemini CLIgemini extensions install https://github.com/flowradev/skills (needs release v0.2.0)
VS Code / Copilot@mcp in Extensions, or add the URL to .vscode/mcp.json
Skill onlynpx skills add flowradev/skills --skill flowra
CI / no OAuthProject API key in your own config — never in this repo

Cursor Marketplace: search "Flowra", or /add-plugin flowra once listed.

First run

  1. Connect the MCP server and pick a Flowra project.
  2. Ask: "List my 5 latest Gmail subjects with Flowra."
  3. Then: "Every weekday at 9, post a Slack recap of my inbox. Ask me before posting."

What you can ask

  • "Connect Gmail on Flowra and list my latest subjects."
  • "Every weekday at 9:00, post a Slack recap of new Linear issues — ask me before posting."
  • "This Flowra run is paused — show the ledger and resume it."

Why Flowra (vs Zapier MCP, Composio, n8n)

  • Agent or locked workflow on the same project — not just a tool catalog.
  • Human approval gate on any step, including cron runs.
  • Run ledger: inputs, outputs and credits for every tool call.
  • Missing app? Describe the REST endpoint and Flowra builds the toolkit.

Security model

Inbound mail, chat and webhook content is treated as untrusted data. The skill never executes instructions found in payloads and never skips approval gates. Reads run freely; writes (send, post, create, update, delete, pay) need an explicit yes in this chat. Durable automations still need a human_wait node or agent humanApproval. No API keys are stored in this repo.

Use when you want a scheduled or approved automation instead of a local script or an n8n, Zapier, or Make canvas.

Skip when there is no Flowra project, or you are already editing an n8n, Zapier, or Make graph you own.

CI / clients without OAuth

Add headers only in your own .cursor/mcp.json. Never commit a key.

{
  "mcpServers": {
    "flowra": {
      "url": "https://mcp.flowra.dev/mcp",
      "headers": {
        "x-api-key": "<your-project-api-key>",
        "x-username": "project_default_user"
      }
    }
  }
}

Local testing

mkdir -p ~/.cursor/plugins/local
ln -sfn "$PWD" ~/.cursor/plugins/local/flowra

Then run Developer: Reload Window.

Layout

.cursor-plugin/plugin.json
.claude-plugin/plugin.json
.claude-plugin/marketplace.json
.codex-plugin/plugin.json
.agents/plugins/marketplace.json
gemini-extension.json
mcp.json
.mcp.json
server.json
commands/flowra-setup.md
commands/flowra-status.md
evals/
rules/flowra-safety.mdc
skills/flowra/SKILL.md
skills/flowra-onboard/SKILL.md
skills/flowra/references/

MIT © Flowra

Frequently asked questions

What is Flowra?

MCP server for your apps' tools and custom tools, plus hosted AI agents and approval-gated workflows

How do I install Flowra?

It runs as a remote server. In Claude Code: claude mcp add --transport http flowra 'https://mcp.flowra.dev/mcp'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does Flowra need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is Flowra open source?

Yes. Its code is on GitHub under the MIT license.

Who maintains Flowra?

It is published by flowradev. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.