Read SafetyChain food safety records, CAPAs, forms, suppliers, items, locations and equipment. For food and beverage manufacturers that run their food safety and quality programs in SafetyChain. Hosted by usefulapi — connect from Claude, ChatGPT, Cursor, or any MCP client.
Team and Enterprise: an Owner adds the connector for the organization first.
Run this command, then run /mcp in Claude Code to log in:
Add to Cursor or add this to ~/.cursor/mcp.json:
{
"mcpServers": {
"safetychain": {
"url": "https://safetychain.usefulapi.io/mcp"
}
}
}Add to VS Code or add this to .vscode/mcp.json:
{
"servers": {
"safetychain": {
"type": "http",
"url": "https://safetychain.usefulapi.io/mcp"
}
}
}No Add custom MCP server option? It depends on your account or workspace settings: see OpenAI's guide.
Run these commands. The second one opens the login page:
Other MCP clients (Windsurf, Cline, Zed and more): add the URL as a remote MCP server (Streamable HTTP). The client then opens the login page in your browser. Do not add an Authorization header: see Before you connect.
The AI searches the records submitted in a date range for non-compliant ones, filtered by form, location or resource, and reads the field values of a record with each field's compliance result.
safetychain_search_records safetychain_get_record_fields
The AI searches corrective and preventive actions by status, location or severity, and for one CAPA shows its details, due dates and tasks with their assignees.
safetychain_search_capas safetychain_get_capa safetychain_get_capa_tasks
The AI finds the records that carry an identifier such as a lot number and reads their field values: value, unit, target, minimum, maximum and compliance.
safetychain_search_records safetychain_get_record_fields
The AI summarizes the records of a date range: the first and last date, and how many forms, locations, resources and users are involved.
safetychain_get_record_summary
The AI lists the suppliers, items and forms of the tenant by name, with ids and enabled flags, and opens one for its details.
safetychain_list_suppliers safetychain_list_items safetychain_list_forms safetychain_get_supplier
The AI reads a CAPA's history, its comments and events, and the records linked to it, to explain how the action developed.
safetychain_get_capa_history safetychain_get_capa_activity safetychain_get_capa_linked_records
The login page asks for your Tenant, Integration user's username, Integration user's password and Environment.
Create a dedicated user for this connection in SafetyChain: System Management → Roles (a role with the Access to Integration API Scope permission), then add a user with that role and tick Disable Password Expiration Policy. The tenant is the part before .safetychain.com in your address (acme.safetychain.com → acme). That permission lets the user read all records and resources, so every record the integration user can see is visible to your AI assistant. The password is used only to sign in to the SafetyChain API on your behalf (SafetyChain issues 5-minute access tokens) and is never shown to anyone. If you change the password you must reconnect, and SafetyChain locks an account after 10 failed sign-ins.
Add only the URL. Do not add an Authorization header or an API key to the client config. The server signs you in with OAuth: the login page asks for your Tenant, Integration user's username, Integration user's password and Environment. If the config has such a header, remove it: some clients then send that header instead of the login token, and every call fails with 401.
Turn on the SafetyChain connector, then ask in plain words. The AI picks the tools.
| Tool | Type | What it does |
|---|---|---|
safetychain_list_customers | read | List customers List customers of the SafetyChain tenant, with ids, names, enabled flags and created/modified dates. Filter by name. The API does not page: all matches come back (cut at limit). GET /clientapis/resourcemanagement/v1.0/customers. |
safetychain_get_customer | read | Get customer Get one customer by id (an id from safetychain_list_customers). GET /clientapis/resourcemanagement/v1.0/customer/{id}. |
safetychain_list_locations | read | List locations List locations (plants, sites, areas) of the SafetyChain tenant, with ids, names, enabled flags and created/modified dates. Filter by name. The API does not page: all matches come back (cut at limit). GET /clientapis/resourcemanagement/v1.0/locations. |
safetychain_get_location | read | Get location Get one location by id (an id from safetychain_list_locations). GET /clientapis/resourcemanagement/v1.0/location/{id}. |
safetychain_list_suppliers | read | List suppliers List suppliers of the SafetyChain tenant, with ids, names, enabled flags and created/modified dates. Filter by name. The API does not page: all matches come back (cut at limit). GET /clientapis/resourcemanagement/v1.0/suppliers. |
safetychain_get_supplier | read | Get supplier Get one supplier by id (an id from safetychain_list_suppliers). GET /clientapis/resourcemanagement/v1.0/supplier/{id}. |
safetychain_list_items | read | List items List items (products, ingredients, materials) of the SafetyChain tenant, with ids, names, enabled flags and created/modified dates. Filter by name. The API does not page: all matches come back (cut at limit). GET /clientapis/resourcemanagement/v1.0/items. |
safetychain_get_item | read | Get item Get one item by id (an id from safetychain_list_items). GET /clientapis/resourcemanagement/v1.0/item/{id}. |
safetychain_list_equipment | read | List equipment List equipment of the SafetyChain tenant, with ids, names, enabled flags and created/modified dates. Filter by name. The API does not page: all matches come back (cut at limit). GET /clientapis/resourcemanagement/v1.0/equipment. |
safetychain_get_equipment | read | Get equipment Get one equipment by id (an id from safetychain_list_equipment). GET /clientapis/resourcemanagement/v1.0/equipment/{id}. |
safetychain_list_resources | read | List resources List resources of every type (customers, equipment, items, suppliers, lists) of the SafetyChain tenant, with ids, names, enabled flags and created/modified dates. Filter by name. The API does not page: all matches come back (cut at limit). GET /clientapis/resourcemanagement/v1.0/resources. |
safetychain_get_resource | read | Get resource Get one resource by id (an id from safetychain_list_resources). GET /clientapis/resourcemanagement/v1.0/resource/{id}. |
safetychain_list_forms | read | List forms List forms (the checklists and data-entry forms operators fill in) of the SafetyChain tenant, with ids, names, enabled flags and created/modified dates. Filter by name. The API does not page: all matches come back (cut at limit). GET /clientapis/resourcemanagement/v1.0/forms. |
safetychain_get_form | read | Get form Get one form by id (an id from safetychain_list_forms). GET /clientapis/resourcemanagement/v1.0/form/{id}. |
safetychain_list_categories | read | List categories List categories used to group resources of the SafetyChain tenant, with ids, names, enabled flags and created/modified dates. Filter by name. The API does not page: all matches come back (cut at limit). GET /clientapis/resourcemanagement/v1.0/categories. |
safetychain_get_category | read | Get category Get one category by id (an id from safetychain_list_categories). GET /clientapis/resourcemanagement/v1.0/category/{id}. |
safetychain_search_capas | read | Search CAPAs Search corrective and preventive actions (CAPA, SCAR, CCAR). Filters combine with AND. Returns id, name, severity, owner workgroup, status, event and due dates, task counts, location and template type, 50 per page. Use the Id (a GUID) with safetychain_get_capa and the other CAPA tools. POST /clientapis/capamanagement/v1.0/capas (a read: it only searches). |
safetychain_get_capa | read | Get CAPA Get one CAPA's details: status, severity, event and due dates, summary, creator, resource, source, category, owner workgroup, template and steps. The id is the GUID `Id` from safetychain_search_capas. GET /clientapis/capamanagement/v1.0/capa/{id}. |
safetychain_get_capa_tasks | read | Get CAPA tasks List a CAPA's tasks (step, form, location, resource, workgroup, assignee, due date, status). The id is the GUID `Id` from safetychain_search_capas. GET /clientapis/capamanagement/v1.0/capa/{id}/tasks. |
safetychain_get_capa_attachments | read | Get CAPA attachments List a CAPA's attachments (name, extension, link, creator, date). The id is the GUID `Id` from safetychain_search_capas. GET /clientapis/capamanagement/v1.0/capa/{id}/attachments. |
safetychain_get_capa_history | read | Get CAPA history List a CAPA's history entries. The id is the GUID `Id` from safetychain_search_capas. GET /clientapis/capamanagement/v1.0/capa/{id}/history. |
safetychain_get_capa_linked_records | read | Get CAPA linked records List a CAPA's linked records. The id is the GUID `Id` from safetychain_search_capas. GET /clientapis/capamanagement/v1.0/capa/{id}/linkedrecords. |
safetychain_get_capa_linked_capas | read | Get CAPA linked capas List a CAPA's linked CAPAs. The id is the GUID `Id` from safetychain_search_capas. GET /clientapis/capamanagement/v1.0/capa/{id}/linkedcapas. |
safetychain_get_capa_activity | read | Get CAPA activity List a CAPA's activity (comments and events). The id is the GUID `Id` from safetychain_search_capas. GET /clientapis/capamanagement/v1.0/capa/{id}/activity. |
safetychain_get_record | read | Get record Get one submitted record in full by its record id (the GUID `recordId` from safetychain_search_records): form, who submitted it and when, location, resource, field values, verifications. GET /clientapis/recordmanagement/v1.0/record/{recordId}. |
safetychain_record_exists | read | Check a record exists Check whether a record exists for a record id (GUID). GET /clientapis/recordmanagement/v1.0/record/{recordId}/Exists. |
safetychain_search_records | read | Search records Search submitted records (the headers: record number, compliance, submitted date, location, form and version, resource, who submitted, signed, verifications, ids). Filter by date range, form, location, resource, identifier and compliance. Always narrow by a date range or a name: the tenant can hold millions of records. Pages are not snapshotted: for a stable multi-page read use a closed date range (start and end in the past). Use safetychain_get_record_fields for the field values. POST /clientapis/v2.0/getRecords (a read: it only searches). |
safetychain_get_record_fields | read | Get record field values Get the field-level values of records (one entry per record with its fields: name, short name, type, value, unit, compliance, min, max, target, comments, section). Same filters as safetychain_search_records; narrow strongly (a record number or one form and a short date range), each record carries many fields. POST /clientapis/v2.0/getRecordsWithFields (a read). |
safetychain_get_record_summary | read | Summarize records Fast summary of the records matching the filters: first and last date, and how many forms, resources, locations and users are involved. Use it to size a request before safetychain_search_records. POST /clientapis/v2.0/getRecordSummary (a read). |
safetychain_usage_status | Usage status (free-tier meter) Report the caller's current usage: the plan, calls used this month, the limit of the plan (the free monthly cap or the Pro fair use limit), remaining, and whether the limit is reached. Read-only; does not count against the meter. | |
safetychain_request_feature | Request a missing feature Tell usefulapi that the user needs something the SafetyChain tools cannot do yet (a missing tool, field or filter). Call it only when the user asks for something none of the tools can do, and tell the user that you send the request. Do not call it for errors or for normal requests. Do not include personal data, credentials or customer records. Stored with the product name and the client type (for example Claude or Cursor), without the user's account. At most 5 requests per day. Does not count against the meter. | |
safetychain_upgrade | Upgrade to Pro (unlimited*) Get Pro: unlimited tool calls (fair use limit: 10,000 a month) on SafetyChain (the free tier caps monthly usage). Plans: "monthly" — $9/month; "yearly" — $90/year (2 months free). Cancel any time: Pro then runs to the end of the paid period, so it also suits a one-time job. *A fair use limit applies. For heavy use (near Pro's limit): "plus" or "plus_yearly" — Pro+, $39/month or $390/year, unlimited tool calls (fair use limit: 100,000 a month); an existing Pro subscription changes to Pro+ in place (needs confirm: true; the price difference for the rest of the period is charged at once). Otherwise returns a short link to open in your browser (it opens Stripe Checkout); after payment the account upgrades automatically. Does not count against the meter. | |
safetychain_cancel_subscription | Cancel the Pro subscription Cancel the caller's SafetyChain Pro subscription at the end of the paid period (no refund for the current period; Pro continues until then, then the free tier applies). Requires confirm: true. Run safetychain_upgrade later to undo the cancel before the period ends. Does not count against the meter. |
| Plan | Price | Limit |
|---|---|---|
| Free | $0 | 50 tool calls / month |
| Proper account | $9/mo · $90/yr | Unlimited* |
*Pro fair use limit: 10,000 tool calls a month on this server. For more, write to [email protected].
Pro covers this SafetyChain server only. Subscribe with safetychain_upgrade (it returns a Stripe Checkout link). Cancel any time with safetychain_cancel_subscription: Pro continues to the end of the paid period, with no refund for the current period, and running safetychain_upgrade before then undoes the cancel. Or write to [email protected].
Find non-compliant records. Review open CAPAs and their tasks. Trace what operators entered for a lot. Size a period's record activity. Look up suppliers, items and forms. Follow a CAPA's history and linked records. See what you can do for the details.
No. usefulapi is an independent service. It is not affiliated with or endorsed by SafetyChain. The server calls the SafetyChain API with your own SafetyChain access, so it sees only the data that your account can see.
Yes. In Claude, add this server's URL as a custom connector. In ChatGPT, add it as a custom MCP server in Plugins. Then log in once. Cursor, VS Code, Claude Code and Codex work too. See the setup steps.
The login page asks for your Tenant, Integration user's username, Integration user's password and Environment. See Before you connect for where to find them.
No. Add only the URL. Do not add an Authorization header or an API key to the client config. The server signs you in with OAuth: the login page asks for your Tenant, Integration user's username, Integration user's password and Environment. If the config has such a header, remove it: some clients then send that header instead of the login token, and every call fails with 401.
The login stores them encrypted in the authorization grant of your connection. The server uses them to call the SafetyChain API for you and to derive a private account id for usage metering. usefulapi does not show them on any page or in any reply. To stop all access, remove the connector and change or delete these credentials in SafetyChain.
All 29 SafetyChain tools are marked read-only.
The Free plan gives 50 tool calls / month. Pro costs $9/mo or $90/yr, with unlimited tool calls (fair use limit: 10,000 tool calls a month), for this SafetyChain server only. Cancel any time: Pro then runs to the end of the paid period. Run safetychain_usage_status to see how many calls you used.
Ask the AI to run safetychain_upgrade: it returns a Stripe Checkout link. To cancel, run safetychain_cancel_subscription. Pro continues to the end of the paid period.
Tell the AI what you wanted to do. It can send the request with safetychain_request_feature. We store the text with the server name, the type of AI client and the tool you tried, not with your account, and read every request when we plan new tools. You can send up to 5 requests per day.
Any client that supports remote MCP servers (Streamable HTTP) with OAuth login: Claude (web and desktop), Claude Code, ChatGPT, Codex, Cursor, VS Code, Windsurf and others.
This is a Model Context Protocol endpoint — meant to be connected from an AI client, not opened in a browser. An invalid_token response at the URL is the auth gate working as designed; clients authenticate automatically.