curl --request POST \
--url https://mcp.lootrush.com/mcp \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"jsonrpc": "2.0",
"id": 1,
"method": "tools/call",
"params": {
"name": "getAccountBalance",
"arguments": {}
}
}
'{
"jsonrpc": "2.0",
"id": 1,
"result": {
"content": [
{
"type": "text",
"text": "{\"currency\":\"USD\",\"totalUsdValue\":\"1530.42\",\"holdingUsdValue\":\"1200.00\",\"stakedUsdValue\":\"300.42\",\"tokenizedAssetsUsdValue\":\"30.00\",\"tokenizedAssetsPnl\":\"-4.15\",\"byToken\":[{\"token\":\"USDC\",\"network\":\"polygon\",\"isStake\":false,\"amount\":\"1200.00\",\"balanceUsd\":\"1200.00\"},{\"token\":\"CUSDO\",\"network\":\"ethereum\",\"isStake\":true,\"amount\":\"300.00\",\"balanceUsd\":\"300.42\"}],\"lastFetchedAt\":\"2026-07-16T18:20:00.000Z\",\"isStale\":false}"
}
]
}
}Call an MCP tool
JSON-RPC 2.0 endpoint for the MCP server. Set method to tools/call and params.name to one of getAccountBalance, getAccountHistory, getUserCards, getUserCardTransactions, getUserCardSummary, getUserCardBalanceMovements, getUserCardBalanceAutomation, getCardRevealPublicKey, createUserCards, updateUserCard. The last two CHANGE data (they create and modify cards) and require a key carrying the mcp:write scope; without it the call succeeds at the HTTP layer and the refusal comes back as an error tool result, not a 403. Pick a tool from the request examples below. The tool’s payload comes back as a JSON-encoded string in result.content[0].text. Every call is scoped to the API key’s user — no tool takes an identity argument. Batch (array) bodies are rejected. getUserCards with includeCardSecrets reveals a card’s PAN/CVV encrypted (the server never decrypts) and needs a sessionId built from getCardRevealPublicKey.
curl --request POST \
--url https://mcp.lootrush.com/mcp \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"jsonrpc": "2.0",
"id": 1,
"method": "tools/call",
"params": {
"name": "getAccountBalance",
"arguments": {}
}
}
'{
"jsonrpc": "2.0",
"id": 1,
"result": {
"content": [
{
"type": "text",
"text": "{\"currency\":\"USD\",\"totalUsdValue\":\"1530.42\",\"holdingUsdValue\":\"1200.00\",\"stakedUsdValue\":\"300.42\",\"tokenizedAssetsUsdValue\":\"30.00\",\"tokenizedAssetsPnl\":\"-4.15\",\"byToken\":[{\"token\":\"USDC\",\"network\":\"polygon\",\"isStake\":false,\"amount\":\"1200.00\",\"balanceUsd\":\"1200.00\"},{\"token\":\"CUSDO\",\"network\":\"ethereum\",\"isStake\":true,\"amount\":\"300.00\",\"balanceUsd\":\"300.42\"}],\"lastFetchedAt\":\"2026-07-16T18:20:00.000Z\",\"isStale\":false}"
}
]
}
}Authorizations
API token issued by your LootRush account manager. Sent as Authorization: Bearer <token>.