Approve an MCP connection

POST

https://api.liftx.io

integrations

mcp

approve

Approve an MCP OAuth grant with exact fresh account proof

curl --request POST \
  --url https://api.liftx.io/integrations/mcp/approve \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "operation_id": "66666666-6666-4666-8666-666666666666",
  "request": {
    "authorization": {
      "client_id": "lx_mcp_client_WyJodHRwOi8vMTI3LjAuMC4xOjU0MzIxL2NhbGxiYWNrIl0",
      "redirect_uri": "http://127.0.0.1:54321/callback",
      "response_type": "code",
      "resource": "https://mcp.liftx.io/mcp",
      "code_challenge": "E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM",
      "code_challenge_method": "S256",
      "state": "SYNTHETIC_CLIENT_STATE",
      "scope": "read"
    },
    "exchange_link_ids": [
      17
    ],
    "instrument_ids": [
      "COPY_EXACT_CATALOG_ID"
    ],
    "scopes": [
      "read"
    ],
    "expires_at": 1893542400,
    "trading_consent": false
  }
}
'

import requests

url = "https://api.liftx.io/integrations/mcp/approve"

payload = {
    "operation_id": "66666666-6666-4666-8666-666666666666",
    "request": {
        "authorization": {
            "client_id": "lx_mcp_client_WyJodHRwOi8vMTI3LjAuMC4xOjU0MzIxL2NhbGxiYWNrIl0",
            "redirect_uri": "http://127.0.0.1:54321/callback",
            "response_type": "code",
            "resource": "https://mcp.liftx.io/mcp",
            "code_challenge": "E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM",
            "code_challenge_method": "S256",
            "state": "SYNTHETIC_CLIENT_STATE",
            "scope": "read"
        },
        "exchange_link_ids": [17],
        "instrument_ids": ["COPY_EXACT_CATALOG_ID"],
        "scopes": ["read"],
        "expires_at": 1893542400,
        "trading_consent": False
    }
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    operation_id: '66666666-6666-4666-8666-666666666666',
    request: {
      authorization: {
        client_id: 'lx_mcp_client_WyJodHRwOi8vMTI3LjAuMC4xOjU0MzIxL2NhbGxiYWNrIl0',
        redirect_uri: 'http://127.0.0.1:54321/callback',
        response_type: 'code',
        resource: 'https://mcp.liftx.io/mcp',
        code_challenge: 'E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM',
        code_challenge_method: 'S256',
        state: 'SYNTHETIC_CLIENT_STATE',
        scope: 'read'
      },
      exchange_link_ids: [17],
      instrument_ids: ['COPY_EXACT_CATALOG_ID'],
      scopes: ['read'],
      expires_at: 1893542400,
      trading_consent: false
    }
  })
};

fetch('https://api.liftx.io/integrations/mcp/approve', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

{
  "credential": {
    "id": "77777777-7777-4777-8777-777777777777",
    "integration_id": "88888888-8888-4888-8888-888888888888",
    "name": "Local MCP client",
    "kind": "mcp",
    "prefix": "lx_mcp_77777777",
    "scopes": [
      "read"
    ],
    "exchange_link_ids": [
      17
    ],
    "instrument_ids": [
      "COPY_EXACT_CATALOG_ID"
    ],
    "created_at": 1893456000,
    "expires_at": 1893542400,
    "revoked_at": null
  },
  "redirect_url": "http://127.0.0.1:54321/callback?code=ONE_TIME_AUTHORIZATION_CODE_PLACEHOLDER&state=SYNTHETIC_CLIENT_STATE&iss=https%3A%2F%2Fmcp.liftx.io"
}

{
  "success": false,
  "error": {
    "code": "<string>",
    "message": "<string>"
  }
}

{
  "error": "temporarily_unavailable",
  "error_description": "<string>",
  "iss": "https://mcp.liftx.io"
}

{
  "success": false,
  "error": {
    "code": "<string>",
    "message": "<string>"
  }
}

MCP is implemented locally and is not production active. These synthetic examples do not announce availability or submit requests.

Authorization

Authenticated Liftx Settings session. API keys, TradingView capabilities and MCP access tokens cannot authenticate this application route. Use Settings → Integrations; the public API hostname does not provide session access.

Behavior

First start fresh authentication with purpose:"mcp" and the same complete MCPConsentRequest, then verify the offered password/Apple proof and MFA when required. Submit the unchanged request with that operation UUID before the five-minute approval expires. The grant requires current Pro/trial entitlement, one to 32 owned active links, a subset of requested scopes and an expiry within 30 days. Any selected position/template write scope requires trading_consent:true. Omitted instrument_ids permits all instruments on the selected links; otherwise exact canonical IDs are required.

JSON body example

This is a synthetic local-client shape. The actual client owns registration, callback, state and PKCE challenge. Do not manually construct consent from a chat or substitute a different client request. Fixed timestamps are illustrative.

{
  "operation_id": "66666666-6666-4666-8666-666666666666",
  "request": {
    "authorization": {
      "client_id": "lx_mcp_client_WyJodHRwOi8vMTI3LjAuMC4xOjU0MzIxL2NhbGxiYWNrIl0",
      "redirect_uri": "http://127.0.0.1:54321/callback",
      "response_type": "code",
      "resource": "https://mcp.liftx.io/mcp",
      "code_challenge": "E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM",
      "code_challenge_method": "S256",
      "state": "SYNTHETIC_CLIENT_STATE",
      "scope": "read"
    },
    "exchange_link_ids": [
      17
    ],
    "instrument_ids": [
      "COPY_EXACT_CATALOG_ID"
    ],
    "scopes": [
      "read"
    ],
    "expires_at": 1893542400,
    "trading_consent": false
  }
}

Response and errors

Success is 201 with credential metadata of kind mcp and a sensitive redirect_url containing the one-time code, original state and issuer. The code lasts two minutes; the OAuth client exchanges it with its retained verifier. No access token, refresh token or ordinary API key is returned here. Never log or paste the callback URL into chat. An identical committed retry is 409 OAUTH_APPROVAL_CONSUMED; it cannot recover the code. After an ambiguous response inspect connection metadata and deliberately restart OAuth rather than replaying approval. The operation shares the 12-requests/minute/IP issuance limiter. MCP activation is required. When disabled, 503 uses {error:"temporarily_unavailable",error_description,iss}; other validation/admission failures retain the documented integration error envelope. Check status and content type. Unknown/duplicate JSON fields and compressed bodies are rejected; request size is limited to 256 KiB. See Settings contract and MCP authorization.

Authorizations

Authorization

string

header

required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Body

application/json

operation_id

string<uuid>

required

Required nonzero UUID of the approved mcp-purpose request for this same account session.

request

object

required

Show child attributes

Response

New MCP credential metadata and sensitive one-time callback URL

credential

object

required

Show child attributes

redirect_url

string<uri>

required

Exact registered callback with one-time code, original state and iss=https://mcp.liftx.io. The code expires after two minutes and is exchanged by the OAuth client with PKCE. Sensitive: never log, paste into chat or repeat after an ambiguous response.

Approve an MCP OAuth grant with exact fresh account proof

curl --request POST \
  --url https://api.liftx.io/integrations/mcp/approve \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "operation_id": "66666666-6666-4666-8666-666666666666",
  "request": {
    "authorization": {
      "client_id": "lx_mcp_client_WyJodHRwOi8vMTI3LjAuMC4xOjU0MzIxL2NhbGxiYWNrIl0",
      "redirect_uri": "http://127.0.0.1:54321/callback",
      "response_type": "code",
      "resource": "https://mcp.liftx.io/mcp",
      "code_challenge": "E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM",
      "code_challenge_method": "S256",
      "state": "SYNTHETIC_CLIENT_STATE",
      "scope": "read"
    },
    "exchange_link_ids": [
      17
    ],
    "instrument_ids": [
      "COPY_EXACT_CATALOG_ID"
    ],
    "scopes": [
      "read"
    ],
    "expires_at": 1893542400,
    "trading_consent": false
  }
}
'

import requests

url = "https://api.liftx.io/integrations/mcp/approve"

payload = {
    "operation_id": "66666666-6666-4666-8666-666666666666",
    "request": {
        "authorization": {
            "client_id": "lx_mcp_client_WyJodHRwOi8vMTI3LjAuMC4xOjU0MzIxL2NhbGxiYWNrIl0",
            "redirect_uri": "http://127.0.0.1:54321/callback",
            "response_type": "code",
            "resource": "https://mcp.liftx.io/mcp",
            "code_challenge": "E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM",
            "code_challenge_method": "S256",
            "state": "SYNTHETIC_CLIENT_STATE",
            "scope": "read"
        },
        "exchange_link_ids": [17],
        "instrument_ids": ["COPY_EXACT_CATALOG_ID"],
        "scopes": ["read"],
        "expires_at": 1893542400,
        "trading_consent": False
    }
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    operation_id: '66666666-6666-4666-8666-666666666666',
    request: {
      authorization: {
        client_id: 'lx_mcp_client_WyJodHRwOi8vMTI3LjAuMC4xOjU0MzIxL2NhbGxiYWNrIl0',
        redirect_uri: 'http://127.0.0.1:54321/callback',
        response_type: 'code',
        resource: 'https://mcp.liftx.io/mcp',
        code_challenge: 'E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM',
        code_challenge_method: 'S256',
        state: 'SYNTHETIC_CLIENT_STATE',
        scope: 'read'
      },
      exchange_link_ids: [17],
      instrument_ids: ['COPY_EXACT_CATALOG_ID'],
      scopes: ['read'],
      expires_at: 1893542400,
      trading_consent: false
    }
  })
};

fetch('https://api.liftx.io/integrations/mcp/approve', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

{
  "credential": {
    "id": "77777777-7777-4777-8777-777777777777",
    "integration_id": "88888888-8888-4888-8888-888888888888",
    "name": "Local MCP client",
    "kind": "mcp",
    "prefix": "lx_mcp_77777777",
    "scopes": [
      "read"
    ],
    "exchange_link_ids": [
      17
    ],
    "instrument_ids": [
      "COPY_EXACT_CATALOG_ID"
    ],
    "created_at": 1893456000,
    "expires_at": 1893542400,
    "revoked_at": null
  },
  "redirect_url": "http://127.0.0.1:54321/callback?code=ONE_TIME_AUTHORIZATION_CODE_PLACEHOLDER&state=SYNTHETIC_CLIENT_STATE&iss=https%3A%2F%2Fmcp.liftx.io"
}

{
  "success": false,
  "error": {
    "code": "<string>",
    "message": "<string>"
  }
}

{
  "error": "temporarily_unavailable",
  "error_description": "<string>",
  "iss": "https://mcp.liftx.io"
}

{
  "success": false,
  "error": {
    "code": "<string>",
    "message": "<string>"
  }
}

Discovery and account data

Positions and history

Templates

Commands and streams

TradingView webhook

Session-only Settings

Approve an MCP connection

Authorization

Behavior

JSON body example

Response and errors

Authorizations

Body

Response

​Authorization

​Behavior

​JSON body example

​Response and errors

Authorizations

Body

Response

Authorization

Behavior

JSON body example

Response and errors