Set your help desk up
by describing it

Starter and up. If you are on the free plan and want it, ask us — it is a per-organization setting and we would rather switch it on for a business that needs it than have you conclude HelpStack cannot do this.

Only if you grant it. A new token is created with the setup permissions ticked and the inbox ones blank, so the default connection sees your knowledge base, FAQs and agent tools and nothing a customer wrote. Reading a thread, drafting a reply and sending one are three separate permissions on the Growth plan, and sending is never implied by drafting, because a sent message cannot be recalled. We said at launch that we would never go near the inbox, and changed our mind; what we kept is that the choice is yours, per token.

51 tools. It can add a website chat channel, crawl a website, write and edit knowledge base articles, group them and point a channel at a group, add and edit FAQ chips, read and change a website chat channel's widget appearance, turn a channel's AI replies on or off and set the language it works in, build your tag taxonomy, set the rules that route a new conversation to an agent, rename your business, and create, edit or delete the agent tools that let the AI call your API. Grant the inbox permissions and it can also list conversations, read one in full, leave a draft for someone to approve, or reply. Reading is open to any team member; changing anything needs an owner or admin. What it cannot do is also deliberate: no creating tokens, no adding or re-roling team members, and nothing to do with billing.

Yes. It is a standard MCP endpoint over HTTP, so any client that speaks MCP can connect with a URL and a header. Claude Code and Claude Desktop are just the ones we use ourselves.

Revoke it in Settings, and it stops working on the next call. Tokens are shown once and stored only as a hash, so nobody — including us — can retrieve one after the fact. A token also stops working the moment its owner leaves the organization or is demoted.

For some things, yes. Connecting a Shopify store or a mailbox is an OAuth flow that needs a browser, and a draft an assistant leaves is approved from the inbox, where the person who pressed send is recorded against it. MCP is for the configuration work, which is the part that is tedious.