Read explicitly selected fields from enabled Bubble Data API records with a customer administrator token. Correct live/branch API root and explicit cursor paging; the token bypasses Bubble privacy rules. No writes, workflows, arbitrary API routes or managed user login.
What you can do (2)
What you can do
Available commands: 2 (2 read, 0 write). Enable only the commands your application needs.
| Command | Effect |
|---|---|
List selected record fields — bubble.records.list |
Read |
Get selected record fields — bubble.records.get |
Read |
Connect and use
Open the integration's connection form to check the available credential source. The source has not been resolved for this documentation export. The instructions below apply when using your own provider account.
Get your provider credentials
Follow these steps for Bubble, then enter the issued values in the connection form below.
- In your Bubble editor, open Settings → API, enable the Data API and expose the required data types. Generate a named API token and copy it into API token in this connection form. Enter the exact HTTPS Data API root from the editor (ending /api/1.1, with the correct live or branch prefix); do not include /obj. Deploy settings before using live data. Select reads and save. This administrator token bypasses Bubble privacy rules. In each example, replace type/id and explicitly choose the output fields; _id is always included. Only those fields are returned to the caller, but Bubble still sends the accessible record to Tooluse.net. Cursor plus count selects another page. No workflow API, writes, token login or automatic paging.
Where to enter credentials
In the integration page, sign in, choose your workspace and open Connect. If a Credentials choice is shown, select Use my credentials. Fill the following connection fields and save. Provider credentials belong in this form, never in an MCP configuration or tool input.
| Connection field | Requirement |
|---|---|
| Bubble Data API root URL | Required |
| API token | Required |
Open API keys and create a Tooluse.net key for the enabled commands.
Set TOOLUSE_API_KEY in your client and use the shared MCP configuration.
Configure Claude Code, Codex or Cursor once
Permissions and results
If you have more than one workspace, check the selected workspace in the connection or API-key dialog before saving. Roles, enabled commands, expiry and revocation use Tooluse.net's existing permissions. Disabling a connection or revoking a key immediately prevents new calls.
Send one Claude tool_use block per request. Keep the same Idempotency-Key when retrying the same request; use a new key for a new call. The response includes the shared Tooluse.net receipt and Claude tool_result. Check both HTTP status and the returned tool result before treating a call as successful.
Your connection's daily allowance and key permissions also apply. Adding a connection does not make a provider request.
Calls return the shared execution receipt and a Claude tool_result. Provider output varies by operation; consult the provider documentation for its response fields. Unconfirmed calls should be checked before retrying.
Call from your client
Use the shared MCP configuration. Refresh your client's tool list after saving the connection or changing key permissions, then call the returned tool name with the example input below.
Configure Claude Code, Codex or Cursor once
Discover your enabled tools
List permitted tools in Claude format. Read every page using page and size (maximum 100) until all results have been received. Use the returned name, not a catalog capability identifier, in the tool_use block.
curl 'https://api.tooluse.net/v1/tools' \
-H "Authorization: Bearer $TOOLUSE_API_KEY"
Find this command in the tool list permitted by your key. Replace svc_FROM_YOUR_TOOL_LIST with its returned name. Use a new Idempotency-Key for each new call and retain it when retrying that same call.
HTTP call
curl 'https://api.tooluse.net/v1/tool-calls' \
-H "Authorization: Bearer $TOOLUSE_API_KEY" \
-H 'Content-Type: application/json' \
-H 'Idempotency-Key: replace-with-a-new-call-id' \
--data '{
"type": "tool_use",
"id": "toolu_example",
"name": "svc_FROM_YOUR_TOOL_LIST",
"input": {
"path": {
"type": "rentalunit"
},
"query": {
"cursor": 0,
"limit": 20
},
"fields": [
"Unit name"
]
}
}'
Send one Claude tool_use block per request. Keep the same Idempotency-Key when retrying the same request; use a new key for a new call. The response includes the shared Tooluse.net receipt and Claude tool_result. Check both HTTP status and the returned tool result before treating a call as successful.
Commands
List selected record fields — bubble.records.list
Read one explicit cursor/limit page from an enabled Bubble data type and return only _id plus the output fields you select. The administrator token bypasses Bubble privacy rules; select only data intended for this client. No workflow calls, writes or automatic paging.
This is a read operation. Provider rate limits and data access rules still apply.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.type |
string | Required | Exact exposed Bubble data type API name. | pattern: "^[a-z][a-z0-9_-]{0,99}$" |
query |
object | Required | additionalProperties: false |
|
query.cursor |
integer | Required | Zero-based record offset; next page is returned cursor plus count. | minimum: 0; maximum: 9007199254740991 |
query.limit |
integer | Required | Maximum records for this explicit page. | minimum: 1; maximum: 100 |
fields |
array | Required | Local response projection, not a provider query or a privacy boundary. _id is always included. Use field names returned by your Bubble API. | minItems: 1; maxItems: 20; uniqueItems: true |
fields[] |
string | Optional | Exact field name to include in output, e.g. Unit name. | minLength: 1; maxLength: 100 |
Full JSON Schema
Example input
{
"path": {
"type": "rentalunit"
},
"query": {
"cursor": 0,
"limit": 20
},
"fields": [
"Unit name"
]
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Get selected record fields — bubble.records.get
Read one known record, returning _id and only explicitly selected output fields. Uses a customer administrator API token, with no privacy-rule enforcement by Bubble. Does not modify data or invoke workflows.
This is a read operation. Provider rate limits and data access rules still apply.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.type |
string | Required | Exact exposed Bubble data type API name. | pattern: "^[a-z][a-z0-9_-]{0,99}$" |
path.id |
string | Required | Full unique record ID copied from Bubble. | pattern: "^[A-Za-z0-9_-]{1,200}$" |
fields |
array | Required | Local response projection, not a provider query or a privacy boundary. _id is always included. Use field names returned by your Bubble API. | minItems: 1; maxItems: 20; uniqueItems: true |
fields[] |
string | Optional | Exact field name to include in output, e.g. Unit name. | minLength: 1; maxLength: 100 |
Full JSON Schema
Example input
{
"path": {
"type": "rentalunit",
"id": "1671702337369x488321592367327900"
},
"fields": [
"Unit name"
]
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Errors
Check the key's expiry, revocation, workspace and allowed operations.
Reuse the same idempotency key only for the same request.
The connection or provider limit has been reached. Check the receipt before retrying.
Test the connection
Open the integration's commands below to inspect parameters and examples. Start with a read command for an account or resource you can access. Refresh your client's tool list, use the returned tool name, and check the execution result and usage. Provider charges and permissions still apply. Never test a write against production data without reviewing it.