MCP server: WhoLayer

Give an AI agent the same identity and contact data as the API, with a spend cap it can't exceed.

Server URL

https://mcp.wholayer.com/mcp

Streamable HTTP transport. Authenticate with an API key from Settings, API keys, sent as Authorization: Bearer wl_live_.... Use a wl_test_... key to try every tool with sandbox data that never spends credits.

Connect your client

Claude Code

claude mcp add --transport http wholayer https://mcp.wholayer.com/mcp \
  --header "Authorization: Bearer wl_live_..."

Claude Desktop

Add it to claude_desktop_config.json:

{
  "mcpServers": {
    "wholayer": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://mcp.wholayer.com/mcp",
               "--header", "Authorization: Bearer wl_live_..."]
    }
  }
}

Cursor

Add to ~/.cursor/mcp.json:

{
  "mcpServers": {
    "wholayer": {
      "url": "https://mcp.wholayer.com/mcp",
      "headers": { "Authorization": "Bearer wl_live_..." }
    }
  }
}

Tools

Tool	What it does	Credits
`enrich_person`	Find emails, mobile, and profile for a person	1 per email, 5 per mobile
`search_people`	Find people by title, seniority, company size, industry, location	1 per 25 results
`verify_emails`	Check deliverability for a list of addresses	0.1 per address
`lookup_phone`	Find a mobile with a carrier check	5
`get_company`	Company profile from a domain	0.2
`list_visitors`	People and companies identified on your sites	Free
`get_balance`	Credits remaining and spend cap	Free

Every tool returns credits_used and credits_remaining, so the agent can see what it's spending. Inputs and outputs match the REST API.

Spend caps for agents

Agents loop. Set limits before you hand one a key:

Per-key daily cap: create a key for each agent under Settings, API keys and give it a maximum credits per day. When it's reached, tools return credits_exhausted.
Per-call ceiling: a single tool call can't spend more than 250 credits unless you pass a higher max_credits argument (up to 10,000).
Read-only keys: allow only list_visitors, get_company, and get_balance for agents that should never reveal contact details.
Idempotency: repeated identical calls within 30 days return the cached result for free.

Contacting people is your responsibility. If your agent emails, calls, or texts the people it finds, follow the Acceptable Use Policy, including CAN-SPAM and TCPA consent rules for calls and texts to mobile numbers.

Example prompt

Find heads of RevOps at US software companies with 50-500 employees
who visited our pricing page this week. Get their work emails,
skip anyone graded below B, and add them to the "Pricing visitors" list in HubSpot.