How is this different from connecting Cal.com MCP directly?

Connected directly, an agent sees every tool the server exposes and holds the credential itself. Through TrustGate you choose which tools each agent gets, and every call is logged against the agent that made it.

What if the Cal.com MCP API changes?

We track the Cal.com MCP schema, so the tool catalogue stays current. Tools you have already allowed keep working, and anything new stays denied until you enable it.

Can I give different agents different Cal.com tools?

Yes. Access is set per agent: one can get a handful of read tools, another the full set. You grant the whole MCP or single tools within it.

Where can I see what my agents did in Cal.com?

Every call is logged against the agent that made it, with the tool it used. Activity can be sent on to your own monitoring.

Do I need to run the Cal.com MCP server myself?

No. TrustGate connects to the Cal.com MCP server and sits in front of it. Your agent only talks to your TrustGate URL, never to Cal.com directly.

Connect Cal.com MCP to your AI agents, securely.

Q: Is Cal.com MCP secure?

The server itself exposes 9 tools, and some of them can write to your Cal.com account. Behind TrustGate an agent only sees the tools you allow, requests and responses are inspected, and every call is logged. Anything outside the allowlist is denied before it reaches Cal.com.

One secured endpoint for every Cal.com call your AI agents make, scoped per user, inspected, and logged.

Get started for free

Get a demo

Try Cal.com MCP now

What your agents can ask once Cal.com MCP is connected.

Select the tools your AI agents can call

9 tools from the Cal.com MCP schema.

Showing 9 tools

getBookingsreadGets the list of bookings on the account.
getBookingreadGets the details of a single booking.
createBookinghigh riskCreates a booking. The meeting is real and attendees are notified.
rescheduleBookinghigh riskMoves an existing booking to a new time, notifying attendees.
cancelBookinghigh riskCancels an existing booking, notifying attendees.
getEventTypesreadLists the event types configured on the account.
getEventTypeByIdreadGets a single event type by its ID.
updateEventTypewriteUpdates an event type's configuration, changing what can be booked through it.
deleteEventTypehigh riskDeletes an event type, breaking every booking link that points at it.

What Cal.com MCP exposes

Cal.com MCP groups its 9 tools into 2 categories, each with a suggested starting policy.

All 9 tools as JSON, ready to paste.

Category	Covers	Access	Suggested policy
Bookings	Reading a single booking or a list of them, creating a booking, rescheduling it and cancelling it	Read / Write	Creating, rescheduling and cancelling all reach real attendees and send notifications; require approval for each
Event Types	Listing event types, reading one by ID, updating it and deleting it	Read / Write	An event type defines what anyone with the link can book; deleting one breaks every link pointing at it

Connect Cal.com MCP to your AI agent

Four steps, under ten minutes.

01
Sign in to NeuralTrust
Open the NeuralTrust platform, sign in and go to Getting started, then Connect your tools.
02
Choose your agent
When asked which agent you use, pick Claude Code, Codex, Cursor, Windsurf, Copilot or your own code.
03
Connect Cal.com
Find Cal.com in the tool list and connect it.
04
Connect your agent
Follow the steps on screen to add the config to your agent, then send the test prompt.

Permissions down to the single tool

You do not allow Cal.com MCP or block it. You allow the exact tools each agent can call, one by one.

Cal.com MCP	9 TOOLS AVAILABLE
Code review agent	4 tools, read only
Issue triage bot	9 tools
Platform team assistant	all 9 tools

Tool by toolConnecting the server is not the unit of access. Each tool is granted on its own.
Default denyA tool you have not enabled is never exposed to the agent.
Approval on writesTools that change or delete things can require a human to confirm.

Is Cal.com MCP secure?

One endpoint instead of raw credentials. Every call is checked against policy and logged.

AI agentsConnect through your MCP client configuration.	NeuralTrustApply controls based on your configuration.	Cal.com MCP9 core tools enabled by default. The --all-tools flag additionally exposes every Cal.com API endpoint.
Coding assistants	Connection & credentialsper user	Bookings5 tools
Internal copilots	Tool access policiesdeny by default	Event Types4 tools
Workflow automations	Request & response inspectioninline
Compatible MCP clients	Activity monitoringalerts and logs