Connect Claude to your own Stafferin account and ask for what you need in plain English — who’s on tonight, where the gaps are, a new night guard at Maple on Friday, Priya moved to the Tuesday shift, the week published. No exports, no API keys, no new app to learn.
First, what this is
Stafferin publishes a secure endpoint that Claude can connect to. When you ask a question, Claude calls that endpoint, Stafferin answers from your live data, and Claude writes the answer back to you in the chat. Your roster stays in Stafferin. Your Stafferin login is what authorises the connection, and you can cut it off at any time.
Stafferin never calls Anthropic and there is no per-question bill from us. You are simply using Claude, with your company’s data available to it.
The connection is tied to your personal Stafferin account. An administrator gets the whole organisation; a guard gets their own shifts and their own reports. Claude cannot widen that.
Out of the box Claude can read your schedule, attendance, leave, incidents and reports. Creating and changing shifts is a separate switch your administrator turns on deliberately.
Payroll, billing, employee records, HR files and incident reports are read-only, always — there is no switch that makes them otherwise.
Step 0
Setup
Four steps, once. After this it stays connected.
Go to app.stafferin.com and sign in. If your account covers more than one company, use the organisation switcher to land on the one you want to demonstrate. Leave this tab open.
Open Settings → Connectors in Claude and choose Add custom connector. Give it a name — Stafferin — and paste this URL:

https://api.stafferin.com/mcp. Anything else — app. instead of
api., or dropping the /v1 — returns “not found”, which looks
exactly like the connector being broken. There is nothing else to fill in: no client ID, no secret,
no API key.Claude sends you to Stafferin to sign in. You will then see an approval screen that names the company you are connecting — “Claude is asking to read data from”, your organisation’s name, and its organisation number. Check that name is the right one, then press Allow access.

Back in a Claude chat, ask for something small and verifiable:

You should get your real site list. If Claude says it has no such tool, see Troubleshooting — it is almost always a stale connection, and reconnecting fixes it.
Optional · administrators
Reading works the moment you connect. Creating shifts, assigning people, approving swaps and publishing are held behind a second switch, so that what an AI may see and what an AI may change stay two separate decisions.
In Stafferin, open Feature Settings and enable Scheduling changes via the AI connector
(mcp.scheduling.write). It is off by default for every company.
Feature changes take up to 60 seconds to take effect. After that, disconnect and reconnect the Stafferin connector in Claude — Claude captures the list of things it can do at the moment it connects, so a session started before you flipped the switch will keep insisting it cannot create shifts.
Even with the switch on, only admins and managers with schedule rights can make changes — exactly the people who can already edit the board by hand. Everyone else keeps read access and is politely refused if they ask for a change.
A guided run
A short conversation that shows the whole loop: look at the week, find the hole, fill it, put somebody on it, publish. Type these one at a time and read what comes back — each answer feeds the next.


This is worth showing, because it is what really happens:
Under the hood, briefly
You never type an ID. Claude looks things up in order, and each lookup narrows the next — which is also why it can tell you exactly what it is about to do before it does it.
Two consequences worth knowing:
The cookbook
You do not need any of these word for word — ask however you normally would. They are here to show the ground the connector covers. Read works as soon as you connect; Changes needs the scheduling switch; Admin is limited to administrators.
Say it the way you would say it to a person. Claude fills in the site, the position and the pattern.
These answer only for administrators, and they can never be changed through Claude — no switch turns that on.
Trust
These are not settings and they are not advisory. They are enforced by Stafferin on every single request, whatever Claude was asked to do.
| Rule | What it means in practice |
|---|---|
| Nothing is published as a side effect | Every shift and assignment Claude creates is written unpublished and silent. There is no “publish” option on assigning or creating — a half-finished plan cannot reach anybody’s phone. See exactly what does contact your staff. |
| Nothing reaches into the past | Claude cannot create, move, cancel or delete anything dated before today, measured in your organisation’s timezone rather than the server’s. |
| A booked shift is never deleted | Ask to remove a shift somebody is assigned to and Claude refuses, saying how many people are on it. Cancel the assignment first — deliberately two steps. |
| Overnight shifts move as one | Both halves of a night shift are handled together, so you can never end up with an orphaned stub still counting as unfilled demand. |
| There is a ceiling on any one request | A single request can touch at most 40 rows, and there is a daily limit on total changes. A misunderstood sentence cannot rewrite a month. |
| Every attempt is recorded | Applied, refused or failed — each one writes an audit record naming the person, the action, what was targeted, and the before and after. A change that could not be attributed to a named person does not happen at all. |
| Changes are per person, never per company key | An organisation-level API key may read, but may never write, because a key names a company rather than a human — and an unattributable change is not an acceptable one. |
| Only scheduling is ever writable | Payroll, billing, invoices, employee records, HR files and incident reports are read-only through this connector with no exception and no setting. |
| One switch stops everything | Stafferin operates a platform-wide kill switch for AI-driven changes, independent of your own setting — usable in seconds, with no deployment. |
If you work across companies
Some people hold accounts in several companies. If that is you:
If something looks wrong
| What you see | What it is |
|---|---|
| “I don’t have a tool that does that” — for something you know exists | A stale connection. Claude captured the list of available actions when it connected. Disconnect and reconnect the Stafferin connector. This is by far the most common cause, especially right after a Stafferin update or after enabling scheduling changes. |
| Claude reports the connector is not found | The URL. It must be https://api.stafferin.com/api/mcp/v1. app. instead
of api., or a missing /v1, both give a 404 that reads like a broken tool. |
| The approval screen shows a blank page or asks you to sign in | No Stafferin session in that browser. Open app.stafferin.com, sign in, and start the connection again from Claude. |
| The approval screen names the wrong company | Press Cancel. Switch organisation inside Stafferin, then reconnect. Never approve a screen naming a company you did not intend. |
| Answers are correct-looking but empty | Usually the right answer about the wrong company — check which organisation you connected as. Ask Claude “which organisation are you answering for?” and compare it to the name on the approval screen. |
| It worked yesterday and everything fails today | Reconnect. A Stafferin deployment can require a one-time re-approval; reconnecting takes a few seconds and restores it. |
| Claude refuses a change you are sure you’re allowed to make | Check three things in order: the scheduling switch is on for your organisation, you hold admin or manager schedule rights, and the date is not in the past. |
| A note appears at the end of an answer saying the connector has been updated | That is Stafferin reporting its own status, not an instruction. The answer above it is unaffected. Reconnect when convenient to pick up the newer capabilities. |
Staying in control
Anyone can disconnect Stafferin at any moment from Claude’s own connector settings. Access ends immediately.
An administrator can list who in the organisation has connected Claude, and revoke any one of them. Because a grant belongs to a person, revoking also tells you whether it affected their access at other companies rather than hiding that.
Access is re-checked against live employment on every request. Deactivate someone in Stafferin and their connector stops answering — no separate step to remember.
Turning off the scheduling switch stops all AI-driven changes for your organisation at once, while leaving read access intact.
/mcp-connections); a screen for it in the product is on the way. Ask your Stafferin contact if
you need it before then.