Any REST API · Claude

Connect Any REST API to Claude. For your whole team.

Your shop system, helpdesk, ERP module or vendor API has no MCP server. Building one takes an engineer days and leaves one token in a config file that everyone copies. Loopthink generates the MCP server from the API's OpenAPI spec or documentation, holds the one read-only key, gives every Claude user in your team their own login, and applies your roles per endpoint.

Free for 2 servers, no card · Paid plans from €39 · EU-hosted

The problem

Any REST API in a chat client, today.

Today an internal or vendor REST API reaches a chat client only if somebody writes an MCP server for it. That server runs with one token, usually the one an engineer had at hand, and every person who copies the config gets that token's rights, write endpoints included. Nothing records who asked what, and the personal fields in every response go straight to the model.

Who may do what

One matrix for Any REST API. Roles across, tools down.

ToolOperationsSupportManagement
List & filter records Operations may use List & filter recordsSupport may use List & filter recordsManagement may use List & filter records
Get one record Operations may use Get one recordSupport may use Get one recordManagement may not use Get one record
Reports & aggregates Operations may use Reports & aggregatesSupport may not use Reports & aggregatesManagement may use Reports & aggregates
Related records Operations may use Related recordsSupport may use Related recordsManagement may not use Related records
Write actions off by defaultOperations may not use Write actionsSupport may not use Write actionsManagement may not use Write actions

Masked for every role: names, emails and phone numbers in responses, addresses, free-text fields you mark as personal.

You set this once. Every Claude user in your team gets exactly this.

What you get

Four checks between Claude and Any REST API.

  1. 01

    Identify

    OIDC/SSO against your own IdP, including Microsoft Entra. The call runs as the person who made it, never as a shared service account.

  2. 02

    Authorize

    Per-role, per-tool, read or write. Anything not explicitly granted never shows up in the tool list in the first place.

  3. 03

    Mask

    Field-level masking and pseudonymization applied on your side, before the result travels. The model never sees the raw field. Composio, AnythingMCP and both provider tunnels have no field-level masking at all.

  4. 04

    Log

    Who asked, which tool, which records, which fields were masked. One audit trail across every AI client, exportable for review.

Use cases

What people actually ask Claude about Any REST API.

  • Operations

    “Which orders in the shop system are still unshipped after three days?”

  • Support

    “Show me the last five tickets from customer 4711 in the helpdesk.”

  • Management

    “How many new contracts did the CRM record this month, by region?”

Each question runs as the person who asked it, with that person's role. A Support colleague asking the Operations question gets the tools their own role allows, not an error, not more.

Compare

Four ways to put Any REST API into Claude.

Native Any REST API connectorBuild it yourselfEnterprise gateways1Loopthink
Per-user identityOne personal login, all its rightsOnly if you build itYesYes, every call runs as the person who asked
Tool-level rolesNoYour codeYesYes, write off by default
Field maskingNoYour codeNot documentedYes, before the model sees the data
Published priceIncluded in your Any REST API planYour engineers' timeContact salesFree, paid from €39
EU companyDepends on the vendorWhatever you areMostly USYes, Germany

Native Any REST API connector: There is none. The nearest thing is an MCP server your engineers write and maintain, with one token in a config file.

1 MintMCP, MCP Manager, Pomerium

Coming from one of them? Composio alternative · MintMCP alternative · MCP Manager alternative · AnythingMCP alternative

FAQ

Before you connect.

Does every team member need their own Any REST API account?
No. Loopthink holds one key or token for Any REST API. Your people sign in to Loopthink with their own identity, and every call to Any REST API is logged under their name. Seats in Any REST API stay where they are today.
Who has to add the connector in Claude?
One person with the right to add connectors in your Claude workspace, once. After that every team member enables it for themselves. Nobody pastes a key, nobody edits a config file.
Where does the Any REST API key live?
In Loopthink, encrypted, in the EU. It never reaches Claude and never reaches the people using the connector. Rotate it in Any REST API whenever you like and paste the new one once.
Can somebody write to Any REST API from the chat?
Not unless you switch it on. Write actions are a separate row in the permission matrix and are off for every role by default. If a role needs one write tool, you grant that one tool to that one role.
What does the model see?
The result of the tool call, after masking. Fields you mark as personal, such as emails, names or card details, are masked before the answer travels to Claude. The model gets the numbers, not the people.
Is there an audit trail?
Yes. Who asked, which tool, which parameters, which fields were masked, when. One log across every client your team uses, exportable for review.
What does it cost?
Free for one person and two MCP servers, forever, no card. Starter is €39 per month and adds roles, an identity of their own for every colleague, field masking and a 30-day audit. Team is €99 and adds your own APIs and SQL databases, your own domain and your own identity provider. Prices are on the pricing page, no call needed.
We already run our own MCP server for Any REST API. Does it still work?
Yes. Point it at Loopthink and it inherits the same login, roles, masking and audit. Nothing on the server has to change.

Any REST API in Claude, with rules.

One key in Loopthink, one login per person, one matrix that decides who may do what.

Free for 2 servers, no card · Paid plans from €39 · EU-hosted