Zoho CRM

This connector wraps the Zoho CRM API v8 (www.zohoapis.com/crm/v8). You authorize it once, in AnythingMCP; access tokens are then renewed automatically.

Setup:

1. Go to https://api-console.zoho.com → Add Client → Server-based Applications. Set the homepage URL to your AnythingMCP URL and the authorized redirect URI to https://cloud.anythingmcp.com/api/mcp-oauth/callback on AnythingMCP Cloud, or <your AnythingMCP server URL>/api/mcp-oauth/callback when you host AnythingMCP yourself.
2. Enter the client's Client ID as ZOHO_CLIENT_ID and its Client Secret as ZOHO_CLIENT_SECRET, leave ZOHO_REFRESH_TOKEN empty, and install.
3. Open the connector and click Authorize with Provider. Sign in with a Zoho CRM user, accept, and you land back on the connector page with the tools ready.
4. Data centre matters: Zoho hosts data in regional clusters: .com (US, default), .eu (EU), .in (India), .com.au (AU), .jp (Japan). If your org is on a non-US DC, change baseUrl, and the authorization URL and token URL in the connector's OAuth settings, to that domain (e.g. https://accounts.zoho.eu/oauth/v2/auth) before you authorize. Wrong DC returns INVALID_TOKEN.

Scopes: ZohoCRM.modules.ALL,ZohoCRM.settings.READ,ZohoCRM.users.READ (comma-separated, as Zoho expects). The authorization URL carries access_type=offline&prompt=consent, so Zoho returns a refresh token every time you authorize.

Already have a refresh token? You can paste it into ZOHO_REFRESH_TOKEN instead of step 3. With a Self Client, generate a grant token with the scopes above and exchange it: curl -X POST 'https://accounts.zoho.com/oauth/v2/token?grant_type=authorization_code&client_id=CLIENT_ID&client_secret=CLIENT_SECRET&code=GRANT_TOKEN' The client id and secret must then be the Self Client's.

Authentication: the engine handles the OAuth2 refresh flow — every call exchanges the refresh token for a short-lived (1h) access token and sends it as Authorization: Zoho-oauthtoken ACCESS_TOKEN. Zoho uses Zoho-oauthtoken instead of Bearer — non-standard but documented.

Module API: every record type (Leads/Contacts/Accounts/Deals/Tasks/...) lives at /crm/v8/{module}. Custom modules use their API name (Cf__Custom_Module1). List of module API names is exposed via the modules metadata endpoint.

Bulk writes: insert/update endpoints expect {data: [{...}, {...}], trigger: ['approval','workflow','blueprint']} shape — wrap a single record in an array.

Pagination: page + per_page (max 200). Response has info: {more_records: bool, page: N, per_page: N}.

Rate limits: 50 req/min per OAuth client + daily credits (5k on free, 25k on Standard, 250k on Enterprise). 429 → exponential backoff.

Out of scope here: bulk import (CSV upload + polling), territory rules CRUD, workflow execution, Sandbox switching.