Skip to content
Status

Intercom

Connect a US- or EU-hosted Intercom workspace through Intercom's hosted MCP server using a manually registered OAuth app.

You need an Intercom workspace hosted in the US or EU. You also need access to the Intercom Developer Hub and permission to create and configure an OAuth app for that workspace. Intercom does not name a required plan or administrator role.

Sign in to the intended workspace. The app setup starts in the Intercom Developer Hub.

Identify the workspace region

  1. Open the intended Intercom workspace.
  2. Inspect its hostname in the browser address bar.
  3. Record the matching remote URL:
    • For app.intercom.com, record https://mcp.intercom.com/mcp.
    • For app.eu.intercom.com, record https://mcp.eu.intercom.com/mcp.
  4. If the hostname is app.au.intercom.com, stop. Intercom does not support its MCP server for Australian-hosted workspaces.

If Intercom cannot find the workspace:

  1. Return to Intercom’s sign-in page.
  2. Under Your account region, select the region matching the workspace URL: United States, Europe, or Australia.
  3. Sign in again.

Create the OAuth app

  1. Open the Intercom Developer Hub. This opens Your Apps.
  2. Select New App.
  3. In the modal, enter an organization-approved app name.
  4. Select the workspace this connection will access.
  5. Select Create app.

Intercom creates the app, installs it in the selected workspace, and opens its configuration.

Configure OAuth

  1. In the created app, open Authentication.

  2. Select Use OAuth. This reveals Redirect URLs and Permissions.

  3. Under Redirect URLs, select Add redirect URL.

  4. Enter this value:

    https://ai.speakeasy.com/mcp/remote_login_callback

  5. Under Permissions, select:

    • Read and list users and companies
    • Read conversations
    • Read one admin
    • Read and List articles

  6. If the organization requires article creation or updates through the MCP server, select Read and Write Articles instead of Read and List articles.

  7. Complete the page’s save or confirmation control.

Copy the client credentials

  1. Open the app’s Basic Information page.
  2. Copy the Client ID into a password manager.
  3. Copy the Client secret into the password manager.

Add the server in Speakeasy

  1. In the Speakeasy AI Control Plane sidebar, under MCP Gateway, select MCP.
  2. Click Add new to open Add MCP server.
  3. Choose Hosted remotely.
  4. On New remote MCP server, paste the remote URL from Identify the workspace region into MCP server URL.
  5. Leave User session issuer at its default.
  6. Click Verify connectivity.
  7. Under Identity, select User Identity. The page preselects No Identity for this server, so change it.
  8. If Guardrails appears, leave it off.
  9. Click Save.

Speakeasy keeps the new server Disabled and says to finish setup in Settings > Identity. This is expected for Intercom; the next section finishes it.

Connect your credentials

Intercom’s server does not publish metadata the provider picker can use, so create the Intercom provider and its client first. Use the values for the region you recorded in Identify the workspace region.

  1. Open the server’s Settings and find the Identity section.

  2. Select User Identity.

  3. Open Choose an identity provider and click Create a custom identity provider. This opens Remote Identity Providers.

  4. Click New Remote Identity Provider.

  5. In Issuer URL, enter https://mcp.intercom.com for a US workspace or https://mcp.eu.intercom.com for an EU workspace.

  6. Under Endpoints, in Authorization Endpoint, enter the value for your region.

    US workspace:

    https://app.intercom.com/oauth

    EU workspace:

    https://app.eu.intercom.com/oauth

    Do not click Discover: it fills in Intercom’s MCP /authorize and /token endpoints, which do not work with the app you created.

  7. In Token Endpoint, enter this value for either region:

    https://api.intercom.io/auth/eagle/token

  8. Keep the derived Slug and click Create.

  9. On the new provider, click Add Client.

  10. Set Client Type to Manual.

  11. Paste the Client ID from Copy the client credentials into Client ID.

  12. Paste the Client secret from Copy the client credentials into Client Secret (optional). Intercom requires the secret.

  13. Leave Scope (override) empty. The permissions you selected in Configure OAuth apply.

  14. Confirm that the displayed Redirect URI matches the callback you registered in Configure OAuth, then click Create.

  15. Return to the server’s Settings > Identity and select User Identity.

  16. In Choose an identity provider, select the Intercom provider you created.

  17. Choose Existing client and pick the new client under Client.

  18. Click Save. If Speakeasy asks you to confirm, click Save changes.

  19. Open Settings > Danger Zone > Server Availability.

  20. Turn on Enable MCP server so the switch shows Enabled.

When a person first uses the server, Intercom’s browser authorization prompt appears. Complete it with an account in the intended workspace.

This guide covers setup only. For anything beyond it — billing, tool behavior, limits — see Intercom’s MCP documentation.