Standard MCP endpoint.
The endpoint.
https://bankbridge.money/api/mcp
Authorization header: Authorization: Bearer bbk_.... Grab a key from your dashboard.
Test it with curl.
curl -N https://bankbridge.money/api/mcp \
-H "Authorization: Bearer bbk_your_api_key_here" \
-H "Content-Type: application/json" \
-H "Accept: application/json, text/event-stream" \
-d '{
"jsonrpc": "2.0",
"id": 1,
"method": "tools/list"
}'You should see all 12 tool definitions in the response.
That's the API.
Speaks MCP 2025-06-18 (streamable-http). Supports initialize, tools/list, tools/call, prompts/list, prompts/get, and session re-initialization per spec. No custom extensions — your existing MCP client library will just work.
Static key (this page): a bbk_ key from your dashboard, sent as Authorization: Bearer. Simplest; one key per user/app.
OAuth 2.1: for consumer apps where each end-user should connect their own BankBridge account, we run a full OAuth provider with Dynamic Client Registration, PKCE, and token refresh. Discovery metadata at /.well-known/oauth-protected-resource and /.well-known/oauth-authorization-server.
Troubleshooting
Bearer plus a space plus the key.