Preview MCP authorization

POST

https://api.liftx.io

integrations

mcp

preview

Preview and normalize an MCP authorization request

curl --request POST \
  --url https://api.liftx.io/integrations/mcp/preview \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "authorization": {
    "client_id": "lx_mcp_client_WyJodHRwOi8vMTI3LjAuMC4xOjU0MzIxL2NhbGxiYWNrIl0",
    "redirect_uri": "http://127.0.0.1:54321/callback",
    "response_type": "code",
    "resource": "https://mcp.liftx.io/mcp",
    "code_challenge": "E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM",
    "code_challenge_method": "S256",
    "state": "SYNTHETIC_CLIENT_STATE",
    "scope": "read"
  }
}
'

import requests

url = "https://api.liftx.io/integrations/mcp/preview"

payload = { "authorization": {
        "client_id": "lx_mcp_client_WyJodHRwOi8vMTI3LjAuMC4xOjU0MzIxL2NhbGxiYWNrIl0",
        "redirect_uri": "http://127.0.0.1:54321/callback",
        "response_type": "code",
        "resource": "https://mcp.liftx.io/mcp",
        "code_challenge": "E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM",
        "code_challenge_method": "S256",
        "state": "SYNTHETIC_CLIENT_STATE",
        "scope": "read"
    } }
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    authorization: {
      client_id: 'lx_mcp_client_WyJodHRwOi8vMTI3LjAuMC4xOjU0MzIxL2NhbGxiYWNrIl0',
      redirect_uri: 'http://127.0.0.1:54321/callback',
      response_type: 'code',
      resource: 'https://mcp.liftx.io/mcp',
      code_challenge: 'E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM',
      code_challenge_method: 'S256',
      state: 'SYNTHETIC_CLIENT_STATE',
      scope: 'read'
    }
  })
};

fetch('https://api.liftx.io/integrations/mcp/preview', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

{
  "client_name": "Local MCP client",
  "authorization": {
    "client_id": "lx_mcp_client_WyJodHRwOi8vMTI3LjAuMC4xOjU0MzIxL2NhbGxiYWNrIl0",
    "redirect_uri": "http://127.0.0.1:54321/callback",
    "response_type": "code",
    "resource": "https://mcp.liftx.io/mcp",
    "code_challenge": "E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM",
    "code_challenge_method": "S256",
    "state": "SYNTHETIC_CLIENT_STATE",
    "scope": "read"
  },
  "allowed_scopes": [
    "read"
  ],
  "resource": "https://mcp.liftx.io/mcp"
}

{
  "error": "temporarily_unavailable",
  "error_description": "<string>",
  "iss": "https://mcp.liftx.io"
}

{
  "success": false,
  "error": {
    "code": "<string>",
    "message": "<string>"
  }
}

MCP is implemented locally and is not production active. These synthetic examples do not announce availability or submit requests.

Authorization

Authenticated Liftx Settings session. API keys, TradingView capabilities and MCP access tokens cannot authenticate this application route. Use Settings → Integrations; the public API hostname does not provide session access.

Behavior

The response contains client_name, normalized authorization, allowed_scopes and the exact resource. Preview validates the callback/client pairing, resource, state and PKCE challenge. It does not create a credential, issue a code or consume fresh approval. Client labels come from callback policy; a local callback does not attest a provider identity.

JSON body example

This is a synthetic local-client shape. The actual client owns registration, callback, state and PKCE challenge. Do not manually construct consent from a chat or substitute a different client request. Fixed timestamps are illustrative.

{
  "authorization": {
    "client_id": "lx_mcp_client_WyJodHRwOi8vMTI3LjAuMC4xOjU0MzIxL2NhbGxiYWNrIl0",
    "redirect_uri": "http://127.0.0.1:54321/callback",
    "response_type": "code",
    "resource": "https://mcp.liftx.io/mcp",
    "code_challenge": "E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM",
    "code_challenge_method": "S256",
    "state": "SYNTHETIC_CLIENT_STATE",
    "scope": "read"
  }
}

Response and errors

Success is 200 with normalized metadata. An omitted/empty authorization scope defaults to read; duplicate or unknown scope names are rejected. The allowed scopes are the OAuth client’s request, not permissions already granted to it. Preview is outside the issuance limiter and retains bounded request/concurrency admission. MCP activation is required. When disabled, 503 uses {error:"temporarily_unavailable",error_description,iss}; other validation/admission failures retain the documented integration error envelope. Check status and content type. Unknown/duplicate JSON fields and compressed bodies are rejected; request size is limited to 256 KiB. See Settings contract and MCP authorization.

Authorizations

Authorization

string

header

required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Body

application/json

authorization

object

required

Show child attributes

Response

Normalized metadata; no authorization grant is created

client_name

enum<string>

required

Available options:

Claude,

ChatGPT,

Local MCP client

authorization

object

required

Show child attributes

allowed_scopes

enum<string>[]

required

Required array length: 1 - 5 elements

Available options:

read,

positions:open,

positions:modify,

positions:terminate,

templates:write

resource

string

required

Allowed value: "https://mcp.liftx.io/mcp"

Preview and normalize an MCP authorization request

curl --request POST \
  --url https://api.liftx.io/integrations/mcp/preview \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "authorization": {
    "client_id": "lx_mcp_client_WyJodHRwOi8vMTI3LjAuMC4xOjU0MzIxL2NhbGxiYWNrIl0",
    "redirect_uri": "http://127.0.0.1:54321/callback",
    "response_type": "code",
    "resource": "https://mcp.liftx.io/mcp",
    "code_challenge": "E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM",
    "code_challenge_method": "S256",
    "state": "SYNTHETIC_CLIENT_STATE",
    "scope": "read"
  }
}
'

import requests

url = "https://api.liftx.io/integrations/mcp/preview"

payload = { "authorization": {
        "client_id": "lx_mcp_client_WyJodHRwOi8vMTI3LjAuMC4xOjU0MzIxL2NhbGxiYWNrIl0",
        "redirect_uri": "http://127.0.0.1:54321/callback",
        "response_type": "code",
        "resource": "https://mcp.liftx.io/mcp",
        "code_challenge": "E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM",
        "code_challenge_method": "S256",
        "state": "SYNTHETIC_CLIENT_STATE",
        "scope": "read"
    } }
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    authorization: {
      client_id: 'lx_mcp_client_WyJodHRwOi8vMTI3LjAuMC4xOjU0MzIxL2NhbGxiYWNrIl0',
      redirect_uri: 'http://127.0.0.1:54321/callback',
      response_type: 'code',
      resource: 'https://mcp.liftx.io/mcp',
      code_challenge: 'E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM',
      code_challenge_method: 'S256',
      state: 'SYNTHETIC_CLIENT_STATE',
      scope: 'read'
    }
  })
};

fetch('https://api.liftx.io/integrations/mcp/preview', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

{
  "client_name": "Local MCP client",
  "authorization": {
    "client_id": "lx_mcp_client_WyJodHRwOi8vMTI3LjAuMC4xOjU0MzIxL2NhbGxiYWNrIl0",
    "redirect_uri": "http://127.0.0.1:54321/callback",
    "response_type": "code",
    "resource": "https://mcp.liftx.io/mcp",
    "code_challenge": "E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM",
    "code_challenge_method": "S256",
    "state": "SYNTHETIC_CLIENT_STATE",
    "scope": "read"
  },
  "allowed_scopes": [
    "read"
  ],
  "resource": "https://mcp.liftx.io/mcp"
}

{
  "error": "temporarily_unavailable",
  "error_description": "<string>",
  "iss": "https://mcp.liftx.io"
}

{
  "success": false,
  "error": {
    "code": "<string>",
    "message": "<string>"
  }
}

Discovery and account data

Positions and history

Templates

Commands and streams

TradingView webhook

Session-only Settings

Preview MCP authorization

Authorization

Behavior

JSON body example

Response and errors

Authorizations

Body

Response

​Authorization

​Behavior

​JSON body example

​Response and errors

Authorizations

Body

Response

Authorization

Behavior

JSON body example

Response and errors