Gorgias
Connect Gorgias to manage support tickets, messages, customers, macros, tags, views, and satisfaction surveys.
You paste three things into PopMCP: your Gorgias domain (acme.gorgias.com), the account email that Gorgias shows as Username, and the API key it shows as Password (API Key) on Settings, Account, REST API.
- Setup time
- 3 min
- Auth
- API credentials
- API base URL
- https://YOUR-SUBDOMAIN.gorgias.com/api
- Rate limits
- API-key integrations get 40 requests per rolling 20-second window, roughly 120 per minute. Gorgias answers 429 with Retry-after and X-Gorgias-Account-Api-Call-Limit headers.
Before you begin
- A Gorgias helpdesk account. The REST API is available on all Helpdesk plans.
- The Admin role or account owner. Gorgias states that only the account owner and admins can access the API credentials and create API keys.
- The subdomain of the helpdesk you want to connect. Credentials are locked to one Gorgias account.
Get your credentials
Sign in and note your Gorgias domain
Sign in at gorgias.com/login. Whatever you type into URL of your Gorgias helpdesk is the Gorgias domain PopMCP asks for.
Log in to Gorgias
Enter the address of the helpdesk you want to open.
PopMCP accepts either acme or acme.gorgias.com.
Open Settings, then REST API
Click the Settings icon in the bottom-left corner of the helpdesk. In the menu find Account and select REST API.
REST API
Authenticate API requests with HTTP Basic auth.
- Owner
- ops@acme-supply.com
- Scope
- Everything the owning user can do
- Created
- Mar 4, 2026
Each field has its own Copy button.
Create a key if the Password field is empty
If Password (API Key) shows a Create API Key button instead of a value, click it. The key is generated immediately and appears beside the other credentials.
REST API
Authenticate API requests with HTTP Basic auth.
| Credential | State | Updated |
|---|---|---|
| Personal API tokenops@acme-supply.com | Not created | Never |
Copy the key somewhere secure as soon as it appears.
Copy the username and the key
Click Copy next to Username, then Copy next to Password (API Key).
Paste the three values into PopMCP
Enter the Gorgias domain, the Account email and the API key in PopMCP's Gorgias form, then save.
Connect in PopMCP
Open your workspace, choose Gorgias in the marketplace, and fill in the connect dialog:
| Field | What to enter |
|---|---|
| Gorgias domaintext | Your Gorgias subdomain, e.g. your-company.gorgias.com (or just your-company). This is the account the MCP is locked to. |
| Account emailtext | The email of your Gorgias account, used as the API username for Basic auth. |
| API keysecret | Gorgias → Settings → REST API. Copy the API key shown there. Stored encrypted.Encrypted with AES-256-GCM on save and never shown again. |
PopMCP verifies the credential against Gorgias immediately. On success the connection flips to Verified and its MCP tools are provisioned.
Verify it worked
PopMCP marks the Gorgias connector Connected and a first tool call such as listing tickets returns your recent tickets instead of an auth error.
Troubleshooting
401 Unauthorized
Why: The email and API key do not match, or the key was reset in Gorgias.
Fix: Re-open Settings, Account, REST API, copy Username and Password (API Key) again, and re-save the PopMCP connection.
Everything broke right after someone clicked Reset
Why: Reset mints a new key and invalidates the old one immediately.
Fix: Copy the new key from the same page and re-save it in PopMCP.
403 Forbidden on some endpoints
Why: The Gorgias user behind the key is an agent without admin permissions.
Fix: Generate the key from an account owner or admin, or raise that user's role under Settings, Users.
404 on every call
Why: Wrong subdomain. The credentials belong to a different Gorgias account.
Fix: Check the host in your browser address bar while signed in and use exactly that subdomain.
429 Too Many Requests
Why: API-key integrations are limited to 40 requests per 20-second window.
Fix: Wait for the number of seconds in the Retry-after header. PopMCP retries automatically.