Blackbaud for AI agents

Blackbaud provides cloud software for nonprofits, schools, and healthcare organizations, used by fundraising and finance teams to manage donors, gifts, memberships, and payments. Connect it once through Arc0, and your agent, or Claude, ChatGPT and Cursor, can use it through one MCP endpoint, limited to what each user approved.

Finance and accountingOAuth 2.0MCP + RESTblackbaud.com
AUDIT LOG · BLACKBAUDPOLICY: acme-support
09:41:07 · claude · u_8f2read
blackbaud.get_gift_by_id
Get Gift By ID✓ allowed · 212ms
09:41:08 · claude · u_8f2read
blackbaud.get_membership_details
Get Membership Details✓ allowed · 164ms
09:41:09 · claude · u_8f2write
blackbaud.add_gifts_to_batch
Add Gifts To Batch✓ approved · approved by user
EVERY BLACKBAUD CALL, ON THE RECORD
01 · USE CASES

What agents do in Blackbaud.

01

Look up a gift record

Get a gift by ID to confirm the amount and donor before it's reconciled in the finance system.

02

Add gifts to a batch

Add a set of gifts to a batch so they can be reviewed together before posting to accounting.

03

Check a membership's details

Get membership details for a donor as a read-only check before renewing them, without processing any payment directly.

02 · ACTIONS

5 Blackbaud actions, graded by risk.

Every Blackbaud action is tagged read, write or destructive, so one policy covers the whole app and new actions inherit the right default.

read

3

Look things up. Allowed by default.

  • blackbaud.get_gift_by_id
    Get Gift By ID
  • blackbaud.get_membership_details
    Get Membership Details
  • blackbaud.get_payment_transaction
    Get Payment Transaction

write

2

Create and change things. Allow, or ask the user first.

  • blackbaud.add_gifts_to_batch
    Add Gifts To Batch
  • blackbaud.one_roster_o_auth2_base_api
    OneRoster OAuth2 Base API

destructive

0

Delete, cancel or archive. Ask first, or deny outright.

  • No destructive actions.
03 · HOW IT WORKS

Blackbaud in three steps.

  1. 01Your users connect BlackbaudThey sign in to Blackbaud on Arc0 Connect, under your brand, and approve the access you ask for.
  2. 02You set the rulesReads run, and writes like “add Gifts To Batch” can wait for the user to approve.
  3. 03Any agent can actYour agent calls Blackbaud through the Arc0 SDK or MCP, and so can Claude, ChatGPT and Cursor. Every call lands on the audit log.
POLICY.TS
await arc0.policies.set('blackbaud', {
  read: 'allow',
  write: 'ask',        // add_gifts_to_batch
  destructive: 'deny',  
})

# Claude Code: the same connection, one URL
$ claude mcp add --transport http arc0 \
    https://mcp.arc0.ai/u/u_8f2
04 · AUTH AND DATA

How Blackbaud connects.

Users sign in to Blackbaud on Arc0 Connect and approve the scopes you request. Build with Arc0’s Blackbaud OAuth app, or bring your own so the Blackbaud consent screen names you. Tokens refresh automatically, and you can export them whenever you want.

The same Blackbaud connection serves your agent over MCP and your own backend over REST and the proxy, so a user connects once. How Arc0 handles credentials →

AUTH
OAuth 2.0
CREDENTIALS
Per-tenant encrypted vault
MODEL SEES
Results only, never credentials
AUDIT LOG
Every call, on every plan
05 · WORKS WITH

Use Blackbaud from any agent.

Claude
ChatGPT
Cursor
Codex
VS Code
OpenAI Agents SDK
Claude Agent SDK
Vercel AI SDK
Mastra
LangGraph
07 · FAQ

Blackbaud and Arc0, answered.

Q01

Can I use Blackbaud with Claude, ChatGPT or Cursor?

Yes. Connect Blackbaud to Arc0 once, then add your Arc0 MCP URL to Claude, ChatGPT, Cursor, Claude Code or any other remote-MCP client. Each assistant only gets the Blackbaud actions you allow.

Q02

How do users connect Blackbaud?

Users sign in to Blackbaud on Arc0 Connect and approve the scopes you request. Build with Arc0’s Blackbaud OAuth app, or bring your own so the Blackbaud consent screen names you. Tokens refresh automatically, and you can export them whenever you want.

Q03

Which Blackbaud actions can my agent take?

5 in total: 3 read, 2 write and 0 destructive, such as “add Gifts To Batch”. Your policies decide which of them each agent may call.

Q04

Can I make my agent read-only in Blackbaud?

Yes. Allow read actions and deny writes in the Blackbaud policy. Your agent can still look things up, and any write it attempts is blocked and logged.

Q05

Can my own backend call Blackbaud too?

Yes. The same Blackbaud connection is available over REST and through the Arc0 proxy, so your product and your agent share one connection per user.

Get started

Plug Blackbaud into your agent.

Your users connect Blackbaud once, under your brand. Your agent gets 5 actions behind your policies, with every call on the record.

Free to build · MCP + REST · Audit log on every plan