Use Fiveboxes from your AI assistant

Five boxes. Five minutes a day — now from inside the tools you already use.

The short version

Fiveboxes speaks MCP (Model Context Protocol). The easiest way in is Claude Desktop's built-in connector — it signs you in with OAuth, no token to paste. For Claude Code, ChatGPT, Gemini, or curl, create a personal access token in Settings and paste it in. Then ask your assistant to add cards, list today's review, or check which box a deck is in.

Claude Desktop (Connectors) — sign in, no token

Claude Desktop's built-in connector uses OAuth, so there's nothing to paste. In Claude Desktop, open Settings → Connectors → Add custom connector, and enter:

https://fiveboxes.app/mcp

Click Save. Your browser opens Fiveboxes; sign in and approve. Claude Desktop connects automatically and stays signed in. You can revoke the connection anytime in Settings → API Tokens. (Using Claude Desktop? Skip the token steps below.)

Other assistants — personal access token

For Claude Code, ChatGPT, Gemini, or curl, connect with a personal access token (PAT).

1. Create a token

Sign in, open Settings → API Tokens, and create a token. Copy the fb_… secret — you only see it once.

2. Connect your assistant

Your MCP endpoint is:

https://fiveboxes.app/mcp

Claude Code (and manual Claude Desktop config)

Add a remote HTTP server to your config (claude_desktop_config.json or the Code MCP settings), using the URL and your Bearer token:

{
  "mcpServers": {
    "fiveboxes": {
      "type": "http",
      "url": "https://fiveboxes.app/mcp",
      "headers": { "Authorization": "Bearer fb_YOUR_TOKEN" }
    }
  }
}

ChatGPT (Custom Connector)

In ChatGPT settings, add a custom connector / remote MCP server with the URL above. When prompted for authentication, choose Bearer token and paste your fb_… secret.

Gemini

Add a remote MCP tool / extension with the endpoint URL above and an Authorization header set to: Bearer fb_YOUR_TOKEN

What your assistant can do

Security

OAuth connections (like Claude Desktop) and personal access tokens both appear in Settings → API Tokens, where you can revoke either instantly. OAuth access tokens last about a year and refresh automatically; personal access tokens never expire. Tokens are stored hashed — we can't show a PAT again after creation. Treat any token like a password: anyone who has it can read and change your study content.