इस पेज पर
Key points
- An agent is the MCP connection plus a prompt that tells the AI its job and its limits.
- Keep a human approval step on anything that sends a message or changes money or data.
- The agent can never do what its token scopes do not allow. Grant the smallest set that works.
At a glance
- Time: About 1 hour
- Difficulty: Advanced
- Plan required: Any paid GoHighLevel plan (Starter $97/mo and up). MCP access is included.
Before you start
- A working MCP connection to GoHighLevel (see the Claude Code or n8n tutorials first).
- A Private Integration Token scoped to only the tasks the agent will do.
- A clear, written description of the one job you want the agent to handle.
Step by step
Step 1. Pick one job and write it down
Do not build an agent that does everything. Pick one repeatable job, like "triage new inbound messages and draft a reply for me to approve." A narrow job is easier to test, safer, and more reliable.
Write the job as a few plain sentences. This becomes the core of the agent prompt: who it is, the one thing it does, and what it must never do on its own.
Step 2. Scope the token to least privilege
Create a Private Integration Token whose scopes match only that job. For a reply-drafting agent, that is conversations and contacts. Do not add payments or delete scopes it will never use.
This is the most important safety step. The agent cannot perform an action its scopes do not allow, so a tight token is a hard limit, not a suggestion. Add scopes later only when a new task needs them.
Step 3. Write the agent prompt with guardrails
Give the agent its identity, its single job, and clear rules. Spell out the human-in-the-loop rule: it drafts, you approve, it does not send on its own.
Keep it short. A long prompt makes an agent wander. The rules below are a starting point you can paste and adjust.
Agent prompt (starting point)You manage the inbox for [Business]. Your job: read new conversations and draft one reply each. Rules:, Draft replies only. Never send a message yourself., Never create, edit, or delete payments or invoices., If a contact asks about price or refunds, flag it for a human and do not answer., Always show me the draft and wait for my approval before any write.
Step 4. Add the human approval step
Decide where a person signs off. In Claude Code, the agent already asks before each write, so approval is built in. In n8n, add an approval step (for example, send the draft to Slack or email and wait for a yes) before the MCP node sends anything.
Approval should sit in front of every action that talks to a customer or touches money. Reads can run freely. Writes wait for a human until you trust the agent.
Step 5. Run it on a few real cases and expand slowly
Point the agent at a handful of real conversations. Read each draft, approve the good ones, and correct the prompt where it got the tone or facts wrong. Two or three rounds of this is normal.
Once the drafts are consistently good, you can let low-risk actions run without approval (like adding a tag), while keeping approval on sends and money. Add new jobs one at a time, each with its own scope check.
The agent can reach the full MCP tool set within its scopes: contacts, conversations, calendars, opportunities, and payments. The tool list changes over time, so check the official docs for what is current instead of assuming a fixed number.
How to test it worked
Feed the agent three real inbound messages. A good result is three drafts that match your tone, pull the right contact details, and flag anything outside the rules instead of guessing.
Try to make it break a rule. Send a message that asks about a refund and confirm the agent flags it for a human rather than answering or issuing anything. If it holds the line, your guardrails work.
Troubleshooting
- The agent tried to do something it should not. tighten the prompt rules and, more importantly, remove the scope from the token. A rule can be ignored under a confusing prompt, but a missing scope is a hard stop.
- Drafts are off-tone or wrong. shorten the prompt and add one or two real examples of a good reply. Long, vague prompts produce wandering output.
- A needed action fails. the scope is missing. Add only that scope to the token and try again. Re-test after every scope change.
- The agent acts on the wrong sub-account. set the locationId header or name the correct location in the prompt.
Start with the 30-day trial
You need a GoHighLevel account to use the MCP server. Start the 30-day free trial through our link, longer than the standard 14-day trial.