---
title: "MCP endpoint for the account tools; requires an OAuth 2.1 bearer token from the Camden Tools authorization server"
method: POST
path: "/mcp/account"
---

# MCP endpoint for the account tools; requires an OAuth 2.1 bearer token from the Camden Tools authorization server

`POST /mcp/account`

## Request

- Base URL: `https://camdentools.com`
- URL: `https://camdentools.com/mcp/account`
- Auth: `oauth2` (a scheme the document does not define)

Same JSON-RPC surface as /mcp plus the account tools. Without a valid token the response is 401 with WWW-Authenticate: Bearer resource_metadata="https://camdentools.com/.well-known/oauth-protected-resource/mcp/account" (RFC 9728), which MCP clients use to start sign-in. Scopes: profile:read, orders:read.

## Request body

- object
  - `jsonrpc` '2.0', required
  - `id` union
    - string
    - integer
  - `method` string, required
  - `params` object

## Response `200`

JSON-RPC response

- object
  - `jsonrpc` '2.0'
  - `id` union
    - string
    - integer
  - `result` object
  - `error` object
    - `code` integer
    - `message` string

## Other responses

- `401`: Missing or invalid bearer token; WWW-Authenticate carries the resource_metadata challenge
- `404`: OAuth account access is not enabled

---

[API](https://skmtc.dev/camdentools/apis/camden-tools-agent-api.md) · [All operations](https://skmtc.dev/camdentools/apis/camden-tools-agent-api/llms.txt) · [OpenAPI document](https://skmtc.dev/camdentools/apis/camden-tools-agent-api/revisions/4daf83e5a9a2?raw)