Do I have to install anything to connect an AI assistant to Coil?

No. Coil serves MCP, the open standard AI assistants use to connect to other software, from your firm's own address at /mcp. Assistants that sign in, such as Claude, ChatGPT, Grok and GrokBot, need only that address. Agents that take a key, such as Muse, Claude Code, Cursor, Gemini CLI, Hermes Agent and OpenClaw, need the address and a token you create in Coil.

Will the AI see my clients' names?

Not unless you choose that. Every connection starts with client details withheld: names, matter names, time narratives, note bodies and document names are replaced before anything leaves Coil, so the assistant sees Client #4 and [redacted]. Amounts, dates and statuses still come through. Sending everything is a separate choice you make per connection, and it is a confidentiality decision under Rule 1.6, so make it only for a model you have checked.

Can an AI assistant move client money or delete records in Coil?

No. Trust accounting, payments, user accounts, firm settings and deleting records are not reachable through the API or MCP at all, however a connection is configured. An assistant can read what you allow, and log time, add notes and tasks or draft invoices if you tick those.

How do I disconnect an assistant?

Signed-in assistants are listed under Settings, Connected apps, with a Disconnect button. Tokens are listed under Settings, API tokens, where you can revoke one. Either takes effect on the next request.

Built in. Nothing to install.

Connect your AI assistant to Coil.

Coil has its own MCP server, the open standard AI assistants use to connect to other software. Point Claude, ChatGPT, Grok, GrokBot, Muse, Claude Code, Gemini CLI, Cursor, Hermes Agent or OpenClaw at your firm's address, sign in, and choose what it may do.

Your addresshttps://yourfirm.coil.legal/mcp

Use your own firm's address in place of yourfirm.

01 Before you connect

One decision matters more than the rest.

Every connection starts with client details withheld. Coil replaces client and contact names, matter names, time narratives, note bodies and document names before anything leaves the server, so the assistant sees Client #4 and [redacted] and is told those are placeholders. Amounts, dates and statuses still come through, so "what did I bill last week" and "what is due on M-1001" still work.

Sending everything is a separate choice for each connection. It is a confidentiality decision under Rule 1.6, so make it only for a model running on your own hardware or a provider you have checked keeps nothing.

You choose what it can do

One checkbox per area, read and change separately. A connection can never do more than the person who approved it.

Some things are out of reach

Trust accounting, payments, user accounts, firm settings and deleting records are not in the API at all, for any connection.

Everything is on the record

Each change an assistant makes is in the audit log under the person it acts for. Signing in still asks for your two-step code.

02 Assistants that sign in

Claude, ChatGPT, Grok and GrokBot: paste the address, sign in, approve.

These connect the way you would connect them to any other app. Coil shows a page listing what the assistant is asking for, with client details withheld already ticked.

claude.ai and Claude Desktop

Claude

Open Settings, then Connectors, and choose Add custom connector.
Paste your Coil address followed by /mcp, for example https://yourfirm.coil.legal/mcp.
Choose Connect. Coil asks you to sign in, then shows what Claude may do. Approve it.

chatgpt.com

ChatGPT

In Settings, open Apps & Connectors, then Advanced settings, and turn on Developer mode. OpenAI calls this a beta, and which plans have it varies.
Create a connector, paste https://yourfirm.coil.legal/mcp and choose OAuth. ChatGPT does not take pasted keys, so sign-in is the only way in.
Sign in to Coil and approve the access you want.

grok.com

Grok

Go to grok.com/connectors, choose New Connector, then Custom.
Enter https://yourfirm.coil.legal/mcp.
When Grok asks you to sign in, sign in to Coil and approve. If it asks for a key instead, use a token from Settings, API tokens.

Grok Bot, xAI's cloud agent

GrokBot

In Grok Bot, open Settings, then Plugins, and add a custom connector. You can also ask the bot in chat to add an MCP server.
Give it https://yourfirm.coil.legal/mcp. GrokBot runs in the cloud, so it needs your public Coil address, never a local one.
Sign in to Coil when asked, or give it a token from Settings, API tokens, and approve.

03 Agents that take a key

Muse, Claude Code, Gemini CLI, Cursor, Hermes Agent and OpenClaw.

Create a token in Coil under Settings, API tokens: give it a name you will recognize, tick what it may do, and leave client details withheld unless you have decided otherwise. Coil shows the token once. Put it where coil_... appears below. A token is a password, so keep it out of shared files and chat.

Claude Code

In a terminal

claude mcp add --transport http coil https://yourfirm.coil.legal/mcp \
  --header "Authorization: Bearer coil_..."

Gemini CLI

~/.gemini/settings.json

{
  "mcpServers": {
    "coil": {
      "httpUrl": "https://yourfirm.coil.legal/mcp",
      "headers": { "Authorization": "Bearer coil_..." }
    }
  }
}

Cursor

~/.cursor/mcp.json

{
  "mcpServers": {
    "coil": {
      "url": "https://yourfirm.coil.legal/mcp",
      "headers": { "Authorization": "Bearer coil_..." }
    }
  }
}

Hermes Agent

~/.hermes/config.yaml

mcp_servers:
  coil:
    url: https://yourfirm.coil.legal/mcp
    headers:
      Authorization: "Bearer coil_..."

OpenClaw

In a terminal, then sign in instead of pasting a token

openclaw mcp add coil --url https://yourfirm.coil.legal/mcp --transport streamable-http
openclaw mcp login coil

Muse

In a Muse chat. Muse builds the connection on its own computer

Connect to my Coil practice management over MCP
(streamable HTTP) at https://yourfirm.coil.legal/mcp.
Ask me for the API token through your secure
credentials prompt, not in this chat.

Anything else

Any MCP client that speaks Streamable HTTP, or plain HTTPS

MCP:   https://yourfirm.coil.legal/mcp
REST:  https://yourfirm.coil.legal/api/v1
Header: Authorization: Bearer coil_...

04 If something is off

Common questions.

Do I have to install anything to connect an AI assistant to Coil?: No. Coil serves MCP, the open standard AI assistants use to connect to other software, from your firm's own address at /mcp. Assistants that sign in, such as Claude, ChatGPT, Grok and GrokBot, need only that address. Agents that take a key, such as Muse, Claude Code, Cursor, Gemini CLI, Hermes Agent and OpenClaw, need the address and a token you create in Coil.
Will the AI see my clients' names?: Not unless you choose that. Every connection starts with client details withheld: names, matter names, time narratives, note bodies and document names are replaced before anything leaves Coil, so the assistant sees Client #4 and [redacted]. Amounts, dates and statuses still come through. Sending everything is a separate choice you make per connection, and it is a confidentiality decision under Rule 1.6, so make it only for a model you have checked.
Can an AI assistant move client money or delete records in Coil?: No. Trust accounting, payments, user accounts, firm settings and deleting records are not reachable through the API or MCP at all, however a connection is configured. An assistant can read what you allow, and log time, add notes and tasks or draft invoices if you tick those.
How do I disconnect an assistant?: Signed-in assistants are listed under Settings, Connected apps, with a Disconnect button. Tokens are listed under Settings, API tokens, where you can revoke one. Either takes effect on the next request.
A tool I expected is missing.: The connection was not given that area. Tick it in Coil (Settings, API tokens, or reconnect a signed-in assistant) and restart the assistant so it reloads the list.
The assistant says "Client #4" instead of a name.: That is client details being withheld, working as intended.

Assistant menus change often. These steps follow each vendor's own documentation as of October 2026. If one no longer matches, the address and the sign-in are what matter, and [email protected] will help.