Before you start
- Have an active Visito administrator account for the business you want to connect.
- Use Codex with remote MCP support, ChatGPT with custom MCP access, or Claude with access to custom connectors. A managed Claude workspace may require its owner to add the connector first.
- For a messaging test, use a contact and channel you are authorized to message. Reading conversations does not require sending permission.
1. Add Visito
- Codex
- ChatGPT
- Claude
Ask Codex to help
Paste this into Codex:Add it manually
In the desktop app, open Settings → MCP servers → Add server. Name itvisito, choose Streamable HTTP, and paste the server URL above. Save, select Restart when offered, then Authenticate. Complete Visito’s browser consent. These are the controls documented by OpenAI; labels can vary by app version.Alternatively, with the Codex CLI installed, run:2. Sign in and choose your business
The connection opens Visito’s normal sign-in page. Use your registered administrator account, including Google sign-in if that is how you normally access Visito. After login, you return to Connect Visito.
Visito's regular sign-in page. Spanish interface shown; the fields are the same in English.
3. Select permissions
Every domain starts with No access. Choose only what your assistant needs:
Read-only domains offer only No access and Read. Read all, Read & write all, and Clear all apply to the permissions available in the current request. Limited request means the assistant requested only part of a domain; expand Permission details to see exactly what is available.

A narrow test selection: read channels and templates, with custom conversation permissions. Account details are excluded from the capture.
Keep the other domains at No access. Choose Connect when the account, business, and actions are correct. Codex, ChatGPT, and Claude may separately ask you to approve tool calls; their approval does not add permissions to the Visito connection.
4. Run a quick read test
First check the connection:nextCursor and check hasMore. A first page is not the entire result set, and new activity can affect a live list.
5. Send one test reply
Use your own test contact. Replace both placeholders below with a verified name and full international phone number; do not run the prompt with placeholders still present.6. Manage or disconnect the connection
- Open the intended business in the Visito dashboard.
- Open Developers → API keys & apps. In Spanish: Desarrolladores → Claves API y apps.
- Set the access-type filter to Connected applications / Aplicaciones conectadas.
- Open View permissions / Ver permisos on your connection to inspect its domains, creator, and activity.
- To revoke access, choose Disconnect application / Desconectar aplicación and confirm the intended connection.

The permission drawer includes the disconnect action. This example shows a broader existing grant, not the recommended test permissions.
Troubleshooting
For developers, see the API documentation. Visito enforces business isolation and the connection’s granted scopes on each operation.
Actions and execution inspection
Use Actions MCP names to manage HTTP, Sheets and collection definitions.get_action_execution accepts includeInspection: true with explicit action_executions:read and action_inspection:read grants; select Execution details during consent. Saved responses may contain customer data. includeParameters and its permission remain separate. Inspection does not execute actions. Direct tests remain HTTP-only, with per-request confirmation for writes; use Playground for Sheets/collection flows. Deprecated Tools remain available with no final retirement date. See the Actions guide and migration.
AI conversation summaries
When available,list_conversations and get_conversation return the same optional aiSummary as GET /m2m/v1/conversations and GET /m2m/v1/conversations/{conversationId}. It describes the main topics and current state in one short paragraph, in the customer’s language. Summaries cover conversations independently of CRM or lead qualification.
generatedAt is when the summary was produced. throughMessageAt is the latest external message included. isStale is true while newer activity or incomplete history awaits processing. The field is omitted until a summary is available. Summaries refresh asynchronously after a short quiet period; an active conversation may temporarily have an older summary.
Read summaries first for topic review and initial context. Retrieve messages when a summary is missing, stale, or you need supporting detail. A summary does not replace authoritative needsReply, booking, payment, or delivery fields.
Read message attachments
The assistant can open a conversation’s customer-facing history withlist_conversation_messages. Ask it to review text, reply relationships, reactions, contacts, locations and interactive selections, as well as the available attachment metadata. Conversation lists and AI summaries are useful starting points; an absent/stale summary still requires messages for current detail.
For an image, document, audio or video attachment, use get_conversation_attachment with the conversationId, stored messageId and media[].attachmentIndex from history. This uses your existing conversation-read permission. It returns metadata, processing state and existing audio/video context by default. pending, failed, timed_out and unavailable are not empty messages or successful processing.
Only request includeContent: true when the actual image or file is needed. Images are returned as native MCP content; other supported files are embedded resources. Whether your assistant can display/read that content depends on its MCP host. The built-in Visito Agent stages authorized images and files in its private, network-disabled analysis workspace. It opens images with the native workspace image viewer before describing them.
file/sticker message types remain readable; they do not become newly supported outbound-send formats. Refresh your connection’s cached tools when the new reader is deployed. See the message/attachment API contract for statuses and examples.
Image inspection also limits dimensions to 4,096 pixels per side and 16 megapixels. Animated GIF/WebP and malformed/oversized image headers return unsupported; they are not silently interpreted as a complete animation. The metadata read remains available.
Availability and compatibility
This October 13, 2026 source update is additive and has been tested locally through authenticated API/MCP transports and with synthetic images/files in the managed Agent runtime. It does not itself deploy or enable the feature in production. Deploy the compatible API/MCP reader first, then the Agent runtime, and refresh cached tool definitions. Existing optional media outcomes/video context are read without a migration or historical repair. AI summary generation is separately controlled by its global worker switch; missing summaries remain valid responses. The read remains under existingconversations:read authority. Processing or inspection failure does not authorize sending a message, replaying ingestion, retrying a business write, or changing a customer record. External MCP hosts must support native image/file results to interpret the actual bytes. The managed Assets/Knowledge library is a separate surface.
Explain a saved AI answer
Ask the agent to inspect why a particular conversation answer was produced. It can useget_conversation_answer_trace for saved planner calls, RAG source receipts and response inputs/outputs. External connections need Conversation debugging → Read (conversations:debug:read) separately from normal conversation access; existing grants are unchanged. The built-in Visito Agent inherits active admin business access. Metadata is default; content is bounded and sanitized on explicit request. Missing/expired/partial/oversized/truncated evidence must be disclosed. Reads never replay tools or send messages. The additive reader is locally implemented; production availability requires its compatible release. See the contract and limits.
Read longer handoff histories
list_conversation_handoffs returns up to thirty total handoff/review cases per page. Follow nextCursor until hasMore=false. Each case has only its latest five events; use list_conversation_handoff_events with the case’s eventsNextCursor to continue older events (default fifty/max one hundred). Preserve cursor limits and disclose missing/oversized payloads. Current ownership comes from conversation metadata. Both tools use existing conversations:read; neither resolves a case nor sends a notification. This source update is locally verified; release requires indexes and refreshed MCP schemas. Contract.
Choose the conversation evidence tool
MCP descriptions explain when to use a tool, where its IDs come from, and which tool provides the next piece of evidence. The October 13 source update adds this routing guidance to conversation tools and carries API parameter descriptions into MCP inputs. It requires API deployment and refreshed tool discovery; descriptions do not grant permissions.
Message, handoff and action reads remain separate evidence sources. There is no universal public link from every action to an exact answer; do not infer one from timestamps alone.
Knowledge and guest AI configuration through MCP
The local October 13, 2026 continuation adds existing knowledge and guest-AI configuration tools. Deploy the compatible services and refresh tool definitions before using them. Select Knowledge read/write and the separately consented AI personality read/write permissions; existing grants do not gain access automatically. Saved answer debugging still has its own permission.
Guest personalization affects customer replies/Playground; CRM follow-up drafts use personalization through their own resolver. It does not configure Support Copilot or the separate managed Business Agent. The dashboard compiledSystemPrompt is a preview; runtimePersonalization shows stored inputs and legacy verbose. Core rules, tools, knowledge, channel/property/conversation state and server fallback can also affect a reply.
For “Why did my AI answer this?”, begin with the saved message and get_conversation_answer_trace, then compare current knowledge/settings only as current diagnosis. Current text, activation, generation or timestamps cannot prove answer-time configuration. Disclose missing/expired/truncated capture and absent source/settings version linkage; do not replay tools, call providers, enable capture, send a message or change settings merely to explain a saved answer.
Read the Knowledge API and AI settings contract for limits, permissions and mutation semantics. After a 409 version conflict, reload and reconcile. After an ambiguous ingestion/crawl/deletion outcome, discover state before retrying. Ingestion can save inactive knowledge because of quota; accepted/queued does not mean ready or relevant.
Channel connection links
To add a Meta channel, ask the connected agent to read connection options and create a temporary channel connection link. Open it yourself, sign in as an administrator of the intended business, and complete provider consent/resource selection. Instagram, Messenger and WhatsApp have different browser steps. Ask the agent to check the saved attempt and resulting channel readiness before declaring success. Links expire in 15 minutes and require the separately granted connection permission. Webchat requires snippet installation; TikTok remains a gated native setup. See channel tools and recovery. This addition requires the compatible release; links are disabled until enabled by the installation.Ask about how Visito works
Withknowledge:read permission, the assistant can use search_visito_docs to
find published product/API guides in English or Spanish, then read_visito_doc
to read a matching page. Ask, for example: “How do handoff required fields work?
Explain using the Visito documentation and include source links.”
These tools retrieve documentation as needed; they do not load a fixed manual or
read your business’s Knowledge Base. Documentation explains product behavior;
separate authorized business reads establish your actual settings. Results
include source links and disclose truncation. Newly published changes become
available after documentation indexing and a cache of up to 60 seconds. These
reference reads have no additional Lana action charge; ordinary turn and business
action charges still apply.
The two read tools require compatible platform and Lana releases. The separate
public documentation MCP is https://docs.visitoai.com/mcp; Visito exposes only
search and reading, without documentation feedback or arbitrary commands.
Find chats by availability or booking actions
For an action-based export, ask the agent to uselist_conversations with actionId/actionStatus before reading messages. This selects recent chats by projected history. For actions executed during a specific period, use business-wide list_action_executions with explicit dates and omit conversationId; paginate and deduplicate matches before reading their contact metadata. Checkout completion is not confirmed payment/booking, and missing history limits coverage. Examples and selection semantics. The new conversation filters require API release and refreshed tools.
Manage tickets
Explicitly grant Tickets access and any required escalation creation/management permissions. Follow discover → inspect evidence → select a human → start → add notes → resolve → read back. Customer replies use separate sending tools.Business overview
Useget_business_overview to orient the agent before business-context work. It
summarizes the connected business, saved channels and integration/action
capabilities, knowledge and assets, guest AI/handoff configuration, sales CRM,
products/services, the last 30 days of activity, and current attention counts.
No additional OAuth permission is required. Each section uses its existing read
permission; unauthorized, unavailable and incomplete data are explicit and never
represented as zero. The connected business comes from authentication, not tool
arguments. Full prompts, customer messages and credentials are excluded.
Results carry timestamps and a cache expiry (60 seconds). Pass refresh: true
after relevant configuration changes. Saved readiness does not establish live
provider health or permission to execute; follow the returned inspection tools
and existing action approvals. This helper adds no Lana action credit. The
underlying authenticated API is GET /business/overview?refresh=true.
Manage Commerce work
Uselist_tickets(includeCommerce=true, source=commerce), inspect get_ticket, select a human owner, Start work and add notes. With explicitly granted sales read and the dedicated write scope, call update_commerce_sale_fulfillment or reconcile_commerce_sale using a fresh sourceVersion and Idempotency-Key, then read back. Reconciliation is recorded evidence, not provider confirmation. Generic Resolve/Cancel cannot bypass Commerce completion. Refunds, payouts and booking retries remain human actions.
