Security & troubleshooting

Best practices for using the 99minutos MCP server safely, and fixes for common issues.

Security and data handling

  • OAuth only. You authorize the assistant through the 99minutos sign-in screen. Never paste API keys, client_secret values or passwords into a chat.
  • Least privilege. Connect with an account that has only the permissions the user needs. Shared accounts make actions hard to audit.
  • Human in the loop. Keep confirmation enabled for actions that create or cancel shipments, and review amounts, addresses and delivery types before approving.
  • Personal data. Your AI provider processes recipient names, phones and addresses you send to the assistant under its own terms, in addition to 99minutos. Check your company's data-handling policies and your AI plan's data-retention settings before sending customer data.
  • Company workspaces. If you connect the MCP server from a corporate ChatGPT, Claude or Gemini workspace, get approval from your IT/Security team first.
  • Revoke access at any time by removing or disconnecting the connector in your assistant's settings.
❗️

Prompt injection

If the assistant also reads emails, web pages or files, text in those sources could try to instruct it to create or cancel shipments. Always check what the assistant is about to do before approving a write action.

Troubleshooting

ProblemWhat to check
401 Unauthorized or "authentication failed"The connector must use OAuth. Disconnect and connect again to restart the 99minutos sign-in.
Sign-in window doesn't openAllow pop-ups for your AI assistant's site and try again.
Tools don't appear in the chatMake sure the connector is enabled for the conversation (tools menu). In ChatGPT, confirm Developer mode is on and start a new chat.
"Custom connectors are not available"Your plan or workspace doesn't allow custom connectors. Ask your workspace admin or upgrade your plan.
Assistant answers without calling 99minutosMention 99minutos explicitly in the request, or ask it to "use the 99minutos connector".
Shipment rejected (coverage, address, content)The same rules as the API apply. Validate coverage and the address first.
Need helpContact your 99minutos account manager or support with the tracking number and the time of the request.

Did this page help you?