Colombia Move MCP: connect ChatGPT to your account

Colombia Move now has a remote MCP so that ChatGPT and other agents can work on your own account. The connection card is designed for one agent: endpoint, permissions, limits, and the contact page.

If you live in Colombia or are moving, this cuts down on the back-and-forth between tabs. You request a list, an answer in a thread, or an event date, and the agent does it with your permission. It does not open another person's account.

What has just been opened

The server lives at https://colombiamove.com/mcp. It is Streamable HTTP, the transport that ChatGPT and modern MCP clients already know how to use. Public documentation is at /ai/mcp and the llms.txt file is at /ai/mcp/llms.txt.

Without a token, the connector only responds to two things: how to connect and a public search. With a token, it acts on your account: posts, messages, offers, events, and community questions. No admin panel and no other user's data.

What an agent can do with your account

Upon launch, these are the authenticated actions: view your account, list and edit your posts, create or delete your own, mark one as resolved, read your threads, reply, send an offer, create an event, and post a question in the community.

A housing or item post is saved and asks for photos on the site before appearing in searches. A service request can be activated without a photo. Offers reuse the same web inbox rules: suspicious payment texts, mass contact, and quotes on closed requests are blocked.

How to connect ChatGPT or another agent

Go to colombiamove.com/ai/mcp. There you will find the endpoint, transport, and permissions. If you are already logged in, /ai/mcp/connect issues a personal token. Copy it only once; Colombia Move will not show it again.

Clients that speak OAuth can register an app at /api/mcp/oauth/register and use PKCE S256. That issuer is /api/mcp. The web's Google login does not change: its metadata remains in the usual well-known routes.

An agent must start with get_setup_info. That tool states if there is a session, what tools apply, and where to write if there is a block. If the client ignores that page, it can still read llms.txt and the server card at /.well-known/mcp/server-card.json.

What this MCP will never do

It does not answer questions about another account. Requesting someone else's inbox, post, or event returns an account mismatch error. Several such attempts in a short time can close MCP access.

There are also no admin tools. The /admin/mcp panel remains behind Cloudflare Access and the operator session. A user token cannot ban, cannot read other tokens, and cannot bypass the content filter.

If something goes wrong

If we block the MCP due to abuse, an email arrives with the reason. To appeal, use the contact form with the subject MCP access. Faults, ideas, and cases where an agent behaved badly with your account also fit there.

You can revoke a token from the same connection page. If you think it was leaked, revoke it and issue another. The hash is saved; the full value is not.

Frequently Asked Questions

What is the Colombia Move MCP?

It is a remote server that speaks the MCP protocol. ChatGPT or another agent connects to your account and executes concrete actions. It is not a site chatbot; it is a connector with tools limited to your own data.

Do I need to pay to connect ChatGPT?

There is no separate MCP plan. You use the same Colombia Move account. The ChatGPT or other agent client may request its own subscription. You issue the token yourself from /ai/mcp/connect once you are logged in.

Can an agent read someone else's inbox?

No. list_messages and read_conversation only cover threads where you are a participant. Requesting another account's thread returns forbidden_other_account. The same applies to other posts and profile data.

What happens if someone abuses the token?

There are quotas per tool and a global cap. Unsafe text is blocked. Repeated attempts to look at another account can close the MCP and send an email with the reason. Revoke the token at /ai/mcp/connect if you think it was leaked.

How do I appeal a block or request a change?

Write via contact with subject mcp_access. Include the account email and what went wrong. We look at the case and reply via that same channel. Do not use the MCP to talk about other accounts.

Where do I report a connector error?

The same contact form serves for errors, missing permissions, and clients that do not finish the OAuth. If you can, include the name of the tool and the approximate time. That lets us cross-reference the audit event without opening your content.