RevenueCat MCP server, with a policy gate.
Give agents RevenueCat access scoped to exactly the resources they manage. Gentkey maps each tool of the official RevenueCat MCP server to a named grant — entitlements, offerings, products — instead of one all-or-nothing key.
https://app.gentkey.com/mcpclaude.ai (web & mobile) · Claude Code · Cursor · any MCP clientWhat’s free, what needs a grant.
Reads: Charts, experiments, and project config reads work with no grant — curated against RevenueCat's own tool inventory.
Writes: Writes are granted per resource, mirroring RevenueCat's own taxonomy. Webhook integrations stay behind the full write grant: creating one opens an egress channel to any URL.
Gentkey proxies the official RevenueCat MCP server (https://mcp.revenuecat.ai/mcp) — you get the vendor’s own tools, with custody, gating, and audit added in front.
| Grant | What it governs |
|---|---|
mcp-revenuecat.apps.write | Projects, apps, and project UI config |
mcp-revenuecat.products.write | Creating, archiving, and unarchiving products |
mcp-revenuecat.store_state.write | Store prices, submissions, and store-state plans |
mcp-revenuecat.entitlements.write | Creating and updating entitlements |
mcp-revenuecat.offerings.write | Offerings and packages |
mcp-revenuecat.virtual_currencies.write | Virtual currency setup and adjustments |
mcp-revenuecat.customers.write | Customer overrides |
mcp-revenuecat.write | Everything uncurated — webhook integrations (even reading configs: they can carry secrets), experiment changes, and anything RevenueCat ships next |
Connect once, use everywhere.
Sign in at gentkey.com, add RevenueCat (api key), then point each client at your endpoint. Every client completes a standard OAuth flow and lands in your Gentkey — your connections, nobody else’s.
claude.ai (web & mobile)
- Settings → Connectors
- Add custom connector
- Paste
https://app.gentkey.com/mcpand finish the OAuth prompt
Claude Code
claude mcp add --transport http \
gentkey https://app.gentkey.com/mcpCursor
// .cursor/mcp.json
{
"mcpServers": {
"gentkey": { "url": "https://app.gentkey.com/mcp" }
}
}Things agents do with RevenueCat here.
- How is trial conversion trending this month?
- What experiments are currently running and how are they doing?
- Create a new entitlement called 'pro' and attach it to the annual product.
- Which offering is the default for the iOS app?
Custody, gating, and audit — built in.
The model never sees a credential
Your RevenueCat key is encrypted at rest and injected server-side at call time. Your stored credential never enters a context window.
Writes need a grant
Anything that changes state needs a capability you granted explicitly — revoke it and the next call is denied.
A trail you can act on
Every decision is attributed to the agent that made it — allowed, denied, or denied by constraint.
Fair questions.
What kind of RevenueCat API key should I use?
A project-scoped API v2 secret key. A read-only key is enough unless you'll grant writes in Gentkey — in that case give it write access to just the resources you plan to grant, so the key's blast radius matches your grants.
What happens when an agent calls a RevenueCat write tool it hasn't been granted?
The call is denied at the gateway — nothing reaches RevenueCat — and the denial is recorded in the audit log along with the grant that would have authorized it, so you can decide deliberately instead of finding out later.
Where are my credentials stored?
Encrypted at rest (AES-256-GCM) on Gentkey's server and injected server-side at call time. No credential you store with Gentkey ever enters a model's context window or an agent's config file.
Can I use this from claude.ai's free plan?
Yes — and it's the strongest case for a gateway: free claude.ai accounts currently get a single custom connector, so pointing that one slot at Gentkey puts every connector you've linked behind it.
How do I revoke an agent's access?
Revoke the grant (the next write is denied) or revoke the agent's tokens entirely in one click. Other agents and their grants are untouched — no shared key to rotate.
Is Gentkey affiliated with RevenueCat?
No. Gentkey is an independent MCP gateway. Trademarks belong to their owners; where an official RevenueCat MCP server exists, Gentkey proxies it and adds custody, gating, and audit on top.
Often connected together.
Cut RevenueCat a smaller key.
Sign in, connect RevenueCat, and grant your first scoped capability in under a minute.