MCP Server

EchoZero exposes an MCP server so Claude, ChatGPT, Cursor, and other assistants can call tools, read resources, and use prompts on behalf of authenticated users.

https://mcp.echozero.app/mcp is a JSON-RPC POST endpoint, not a web page. Opening it in a browser (GET) returns an error. Configure your MCP client to send POST requests instead.

Endpoints

Surface	URL	Method
MCP (Streamable HTTP)	`https://mcp.echozero.app/mcp`	`POST`
MCP SSE stream	`https://mcp.echozero.app/mcp/sse`	`GET` (after `initialize`)
End session	`https://mcp.echozero.app/mcp`	`DELETE`
Directory metadata	`https://mcp.echozero.app/public/index.json`	`GET`

Authentication

Send credentials on every MCP request, including the first initialize:

x-api-key: <developer_api_key>, or
Authorization: Bearer <access_token> (API key or OAuth token)

REST HMAC headers (x-signature, x-timestamp) are required for API-key auth. See API keys + HMAC. JWT/OAuth session tokens are exempt.

Session lifecycle

Initialize

POST /mcp with method: "initialize". Save the mcp-session-id response header.

Send initialized notification

POST /mcp with method: "notifications/initialized" and the session header.

Call tools / list resources

Include mcp-session-id: <session> on all subsequent requests.

Optional SSE stream

GET /mcp/sse with Accept: text/event-stream and the session header for server-push events.

End session

DELETE /mcp with the session header when done.

Sessions are bound to the credential used at initialize. Using a different API key or OAuth token with the same mcp-session-id returns 403 (JSON-RPC -32002).

Response headers may also include X-Mcp-Instance-Id for load-balancer sticky routing in multi-instance deployments.

Example `initialize` request

curl -sS https://mcp.echozero.app/mcp \
  -H "x-api-key: $EZ_API_KEY" \
  -H "Content-Type: application/json" \
  -H "Accept: application/json, text/event-stream" \
  -d '{
    "jsonrpc": "2.0",
    "id": 1,
    "method": "initialize",
    "params": {
      "protocolVersion": "2025-03-26",
      "capabilities": {},
      "clientInfo": { "name": "my-client", "version": "1.0.0" }
    }
  }'

Save mcp-session-id from the response headers.

Example `tools/list`

curl -sS https://mcp.echozero.app/mcp \
  -H "x-api-key: $EZ_API_KEY" \
  -H "Content-Type: application/json" \
  -H "Accept: application/json, text/event-stream" \
  -H "mcp-session-id: $MCP_SESSION_ID" \
  -d '{
    "jsonrpc": "2.0",
    "id": 2,
    "method": "tools/list"
  }'

Tools, resources, and scopes

Available MCP tools, resources, and prompts are scope-gated by the API key or OAuth token. Common scopes:

Scope	Capability
`read:agents` / `write:agents`	Agent management tools
`read:wallet` / `write:wallet`	Wallet and balance tools
`read:strategies` / `write:strategies`	Strategy configuration
`read:trades`	Trade and signal history
`read:tokens`	Token metadata
`write:ai`	AI chat tools

Tools forward to the same REST endpoints documented in the API Reference. Errors use JSON-RPC format - see Error codes. See the full Tools Reference and Resources for the out-of-band catalog (no runtime tools/list required).

OAuth for assistant directories

For ChatGPT, Claude, Gemini, and other directory submissions:

Setting	Value
MCP URL	`https://mcp.echozero.app/mcp`
Authorize URL	`https://mcp.echozero.app/oauth/authorize`
Token URL	`https://mcp.echozero.app/oauth/token`
Scopes	From `/public/directory/{platform}/` manifests

Fetch connector metadata:

https://mcp.echozero.app/public/index.json

See the OAuth guide for the full PKCE flow.

Assistant setup (coming soon)

Coming soon: npx skills add EchoZeroApp/skills and ez login are not yet public. Use API keys or OAuth today.

# When available:
npx skills add EchoZeroApp/skills
ez login

Get Started

Concepts

Guides

Recipes

SDK

Legal & support

Endpoints

Authentication

Session lifecycle

Example `initialize` request

Example `tools/list`

Tools, resources, and scopes

OAuth for assistant directories

Assistant setup (coming soon)

​Endpoints

​Authentication

​Session lifecycle

​Example initialize request

​Example tools/list

​Tools, resources, and scopes

​OAuth for assistant directories

​Assistant setup (coming soon)

Endpoints

Authentication

Session lifecycle

Example `initialize` request

Example `tools/list`

Tools, resources, and scopes

OAuth for assistant directories

Assistant setup (coming soon)