curl --request POST \
  --url https://mcp.lootrush.com/mcp \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "getAccountBalance",
    "arguments": {}
  }
}
'

{
  "jsonrpc": "2.0",
  "id": 1,
  "result": {
    "content": [
      {
        "type": "text",
        "text": "{\"currency\":\"USD\",\"totalUsdValue\":\"1530.42\",\"holdingUsdValue\":\"1200.00\",\"stakedUsdValue\":\"300.42\",\"tokenizedAssetsUsdValue\":\"30.00\",\"tokenizedAssetsPnl\":\"-4.15\",\"byToken\":[{\"token\":\"USDC\",\"network\":\"polygon\",\"isStake\":false,\"amount\":\"1200.00\",\"balanceUsd\":\"1200.00\"},{\"token\":\"CUSDO\",\"network\":\"ethereum\",\"isStake\":true,\"amount\":\"300.00\",\"balanceUsd\":\"300.42\"}],\"lastFetchedAt\":\"2026-07-16T18:20:00.000Z\",\"isStale\":false}"
      }
    ]
  }
}

MCP

Call an MCP tool

JSON-RPC 2.0 endpoint for the MCP server. Set method to tools/call and params.name to one of getAccountBalance, getAccountHistory, getUserCards, getUserCardTransactions, getUserCardSummary, getUserCardBalanceMovements, getUserCardBalanceAutomation, getCardRevealPublicKey, createUserCards, updateUserCard. The last two CHANGE data (they create and modify cards) and require a key carrying the mcp:write scope; without it the call succeeds at the HTTP layer and the refusal comes back as an error tool result, not a 403. Pick a tool from the request examples below. The tool’s payload comes back as a JSON-encoded string in result.content[0].text. Every call is scoped to the API key’s user — no tool takes an identity argument. Batch (array) bodies are rejected. getUserCards with includeCardSecrets reveals a card’s PAN/CVV encrypted (the server never decrypts) and needs a sessionId built from getCardRevealPublicKey.

POST

mcp

curl --request POST \
  --url https://mcp.lootrush.com/mcp \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "getAccountBalance",
    "arguments": {}
  }
}
'

{
  "jsonrpc": "2.0",
  "id": 1,
  "result": {
    "content": [
      {
        "type": "text",
        "text": "{\"currency\":\"USD\",\"totalUsdValue\":\"1530.42\",\"holdingUsdValue\":\"1200.00\",\"stakedUsdValue\":\"300.42\",\"tokenizedAssetsUsdValue\":\"30.00\",\"tokenizedAssetsPnl\":\"-4.15\",\"byToken\":[{\"token\":\"USDC\",\"network\":\"polygon\",\"isStake\":false,\"amount\":\"1200.00\",\"balanceUsd\":\"1200.00\"},{\"token\":\"CUSDO\",\"network\":\"ethereum\",\"isStake\":true,\"amount\":\"300.00\",\"balanceUsd\":\"300.42\"}],\"lastFetchedAt\":\"2026-07-16T18:20:00.000Z\",\"isStale\":false}"
      }
    ]
  }
}

Authorizations

Authorization

string

header

required

API token issued by your LootRush account manager. Sent as Authorization: Bearer <token>.

Body

application/json

jsonrpc

enum<string>

required

Available options:

2.0

method

enum<string>

required

Available options:

tools/call

params

object

required

Show child attributes

integer

Example:

1

Response

JSON-RPC result. The tool payload is a JSON-encoded string in result.content[0].text (decoded and shown below for getAccountBalance).

jsonrpc

enum<string>

Available options:

2.0

integer

result

object

Show child attributes

History

MCP

Withdrawals

Connect

Call an MCP tool

Authorizations

Body

Response