Provider REST API

Data

Connect Claude to Airtable

Read a base's schema, then query, create, update, and delete its records. Toolspoke puts 9 of its actions behind one MCP endpoint that Claude, Cursor, and Codex all speak.

Connection
Provider REST API
Authentication
Personal access token
Actions exposed
9
Cost per call (typical)
1 credit
Adapter
Maintained by Toolspoke

Connected in three steps

  1. 1

    Install Airtable

    Open the marketplace in your workspace, add Airtable to the project your agents work in, and it appears on the gateway immediately.

  2. 2

    Connect the credential

    Authenticate with personal access token. Where to get one, and what it has to be able to reach, is the next section.

  3. 3

    Point your agent at the gateway

    Give your client one address, https://toolspoke.com/mcp. Claude Code takes it as a command, Claude and Claude Desktop add it as a custom connector, and Cursor, Codex and VS Code each read it from a config file of their own.

.mcp.json
{
  "mcpServers": {
    "toolspoke": {
      "type": "http",
      "url": "https://toolspoke.com/mcp"
    }
  }
}

One block covers every tool you have installed. Airtable shows up in the client as soon as your policy allows it, and so does everything else you install later.

Where the address goes, per client

Claude Code

Run it in your project, then /mcp to sign in

claude mcp add --transport http toolspoke https://toolspoke.com/mcp
Claude and Claude Desktop

Settings, then Connectors, then Add custom connector

https://toolspoke.com/mcp
Cursor

~/.cursor/mcp.json, or .cursor/mcp.json for one project

{ "mcpServers": { "toolspoke": { "url": "https://toolspoke.com/mcp" } } }
Codex

~/.codex/config.toml

[mcp_servers.toolspoke]
url = "https://toolspoke.com/mcp"
VS Code

.vscode/mcp.json, or the MCP: Add Server command

{ "servers": { "toolspoke": { "type": "http", "url": "https://toolspoke.com/mcp" } } }

What Airtable asks for

Personal access token. You provide it once, when you install the connector. Toolspoke encrypts it at rest and decrypts it only for the length of a single call, and the gateway attaches it to the outbound request itself, so it is never part of the arguments an agent sends.

Personal access tokenRequired
Airtable → Builder hub → Personal access tokens. Grant schema.bases:read and data.records:read, plus data.records:write only if this install should be able to change records, and add every base it may reach.
pat…

What Claude can do in Airtable

9 actions, each one declared and named by the connector rather than discovered at runtime. A workspace policy grants a person all of them, a hand-picked selection, everything on the read side, everything on the write side, or none.

Reads
5Reads
Writes
3Writes
Destructive
1Destructive

Reads

5

Fetches data and changes nothing.

  • list_bases

    List the bases the token can reach, each with its base id, name and permission level. Call this first: every other operation needs a base id, and a base id is not something an agent can guess from a base's name.

  • get_base_schema

    Describe every table in one base: table ids and names, each field's id, name and type (including select options and linked-record targets), and the views defined on the table. Call this after list_bases and before any record operation - it supplies the table name or id, the exact field names a filterByFormula or a write has to use, and the view names list_records accepts. Guessing a field name instead returns an empty page rather than an error.

  • list_records

    Return records from one table, optionally narrowed by a view and sorted. This is the browse operation: use it when you want a page of a table as a person would see it. Use search_records instead when you have a formula that selects the rows you want. Call get_base_schema first so `view`, `fields` and `sort_field` name things that exist. Paginate by passing the `offset` from the previous response.

  • search_records

    Return the records of one table that match an Airtable formula. Prefer this over list_records whenever you know the condition - {Status} = 'Active', AND({Owner} = '[email protected]', {Due} < TODAY()), SEARCH('acme', LOWER({Company})). Field names go in curly braces and must match get_base_schema exactly: a formula naming a field that does not exist returns an empty page, not an error, so check the schema before concluding there are no matches.

  • get_record

    Fetch one record by its record id, with every field it has a value for. Airtable omits empty fields entirely, so a field missing from the response is empty rather than absent from the table - get_base_schema is what tells you which fields exist. Record ids come from list_records or search_records.

Writes

3

Creates or updates something on the other side.

  • create_records

    Create up to 10 records in one table. Each entry is an object of field name to value, matching the types get_base_schema reports - a linked-record field takes an array of record ids, a multiple-select takes an array of option names. Set typecast to let Airtable coerce loose values (a date string, a new select option) instead of rejecting them. Returns the created records with their new record ids.

  • update_records

    Update up to 10 existing records by record id, changing only the fields you name and leaving the rest as they are. Each entry is {"id": "recXXXX", "fields": {…}}. Use this rather than delete-then-create: it preserves the record id, its created time and every field you did not mention. Call get_record first if you need to know what a field currently holds.

  • upsert_records

    Update records that match on one or more key fields, and create the ones that do not exist yet. Supply records without ids plus merge_on naming the fields Airtable should match against - an external id, an email address. The response separates createdRecords from updatedRecords so you can tell what happened. Prefer update_records when you already hold record ids; this exists for syncing from a source that only knows its own keys.

Destructive

1

Deletes or permanently alters something. Worth granting on purpose.

  • delete_records

    Permanently delete up to 10 records by record id. Airtable's API has no undo for this and the records do not go to a trash. Confirm the ids with get_record or search_records first, and prefer update_records to set a status field when the intent is to archive rather than erase.

What it will not do

Enforced by the gateway rather than left to convention, which is why each of these can be stated flatly.

It cannot call anything else
The 9 actions above are the whole of it. A call to any other name is refused before it reaches Airtable rather than forwarded on, and connecting your account does not add to the list: it is fixed by the connector, not discovered at run time.
It reaches no further than your credential
Toolspoke holds no access to Airtable of its own. Every call carries the credential you stored and nothing besides, so whatever that credential cannot reach, this connector cannot reach either.
It never hears from Airtable
Nothing is pushed to it. There is no webhook, no subscription and no polling, so this connector cannot notice by itself that something changed in Airtable. An agent has to ask.
It does not smooth over provider limits
Toolspoke does not retry, queue or back off around Airtable's own rate limits. A call that Airtable refuses comes back to the agent as a failed call.

Before you connect it

What can Claude do in Airtable?

9 named actions: 5 that only read, 3 that write and 1 that delete or permanently alter something. They include list_bases, get_base_schema and list_records. Nothing outside that list is reachable: the connector declares each operation by name rather than proxying whatever an agent asks for.

What credentials does the Airtable connector need?

Personal access token. The connector asks for personal access token. Values are encrypted at rest and attached to the outbound request by the gateway, so they are never part of the arguments an agent sends and never reach the audit log.

Does the Airtable connector work with Cursor and Codex, or only Claude?

Any client that speaks MCP, and every one of them gets the same 9 actions. There is a single address, https://toolspoke.com/mcp. Claude Code adds it with claude mcp add --transport http, Claude and Claude Desktop take it as a custom connector in settings, Cursor reads it from .cursor/mcp.json, Codex from ~/.codex/config.toml, and VS Code from .vscode/mcp.json. Each of them signs in to the gateway itself, so there is no key to paste.

What does the Airtable connector not do?

The 9 actions above are the whole of it. A call to any other name is refused before it reaches Airtable rather than forwarded on, and connecting your account does not add to the list: it is fixed by the connector, not discovered at run time. Toolspoke holds no access to Airtable of its own. Every call carries the credential you stored and nothing besides, so whatever that credential cannot reach, this connector cannot reach either. Nothing is pushed to it. There is no webhook, no subscription and no polling, so this connector cannot notice by itself that something changed in Airtable. An agent has to ask. Toolspoke does not retry, queue or back off around Airtable's own rate limits. A call that Airtable refuses comes back to the agent as a failed call.

Can I limit which actions an agent can call?

Yes, in two places. The project switches Airtable's actions on and off one at a time, for everyone in the project at once, and the screen groups them by read, write and destructive so turning off everything that deletes is one click. An individual agent key can then be narrowed further, to particular toolkits in a project and to particular actions in a toolkit. Whatever it was granted, a key never reaches a project its owner cannot.

What gets recorded when an agent calls Airtable?

Every attempt, with the agent that made it and the person that agent belongs to, the full request payload, the response payload, the status, the duration, and the credits spent. Values whose key names a secret are masked out before the record is shown to anyone. An operation the connector marks as not retained never has its response body written at all, so the gateway keeps no second copy of what was read.