Colombia Move MCP: Connect ChatGPT to Your Account

Colombia Move now has a remote MCP so that ChatGPT and other agents can work on your own account. The connection tab is designed for an agent: endpoint, permissions, limits, and the contact page.

If you live in Colombia or are moving here, this cuts down on the back-and-forth between tabs. You ask for a listing, a reply in a thread, or an event date, and the agent does it with your permission. It does not open someone else's account.

What just opened

The server lives at https://colombiamove.com/mcp. It uses Streamable HTTP, the transport that ChatGPT and modern MCP clients already know how to use. Public documentation is at /ai/mcp and the llms.txt file is at /ai/mcp/llms.txt.

Without a token, the connector only answers two things: how to connect and a public search. With a token, it acts on your account: posts, messages, offers, events, and community questions. No admin panel and no data from other users.

What an agent can do with your account

At launch, these are the authenticated actions: view your account, list and edit your posts, create or delete your own, mark one as resolved, read your threads, reply, send an offer, create an event, and publish a community question.

A housing or item listing is saved and requires photos on the site before appearing in search. A service request can be activated without a photo. Offers reuse the same rules as the web inbox: suspicious payment texts, mass contact, and quotes on closed requests are blocked.

How to connect ChatGPT or another agent

Go to colombiamove.com/ai/mcp. That's where the endpoint, transport, and permissions are. If you are already logged in, /ai/mcp/connect issues a personal token. Copy it just once; Colombia Move will not show it again.

Clients that speak OAuth can register an app at /api/mcp/oauth/register and use PKCE S256. That issuer is /api/mcp. The web Google login remains unchanged: its metadata is still in the usual well-known routes.

An agent must start with get_setup_info. That tool states whether there is a session, which tools apply, and where to write if there is a block. If the client ignores that page, it can still read llms.txt and the server card at /.well-known/mcp/server-card.json.

What this MCP will never do

It does not answer questions about another account. Asking for another person's inbox, post, or event returns an external account error. Several such attempts in a short time may terminate MCP access.

There are also no admin tools. The /admin/mcp panel stays behind Cloudflare Access and the operator session. A user token cannot issue bans, cannot read tokens belonging to others, and cannot bypass the content filter.

If something goes wrong

If we block the MCP for abuse, you will receive an email explaining why. To appeal, use the contact form with the MCP access subject. That is also the place for bugs, ideas, and reports if an agent behaved badly with your account.

You can revoke a token from the same connection page. If you think it leaked, revoke it and issue another. The hash is saved; the full value is not.

Frequently asked questions

What is the Colombia Move MCP?

It is a remote server that speaks the MCP protocol. ChatGPT or another agent connects to your account and executes specific actions. It is not a site chatbot; it is a connector with tools limited to your own items.

Do I need to pay to connect ChatGPT?

There is no separate MCP plan. You use your same Colombia Move account. The ChatGPT or other agent client may require its own subscription. You issue the token yourself from /ai/mcp/connect once you are logged in.

Can an agent read someone else's inbox?

No. list_messages and read_conversation only cover threads where you are a participant. Requesting another account's thread returns forbidden_other_account. The same applies to posts and external profile data.

What happens if someone abuses the token?

There are rate limits per tool and an overall cap. Unsafe text is blocked. Repeated attempts to view another account can close the MCP and send an email explaining why. Revoke the token at /ai/mcp/connect if you suspect it was leaked.

How do I appeal a block or request a change?

Write via contact with the mcp_access subject. Include your account email and what went wrong. We will review the case and reply through the same channel. Do not use the MCP to discuss other people's accounts.

Where do I report a connector bug?

The same contact form works for errors, missing permissions, and clients that fail to finish OAuth. If possible, include the tool name and approximate time. That allows us to cross-reference the audit event without opening your content.