API Reference

MCP HTTP & tokens

Hosted MCP endpoint and store-scoped token management.

Tool catalog

Per-tool status for Operator and Store Builder lives on the MCP tools page. /docs/mcp

POST/api/mcp

Streamable HTTP MCP server (also supports GET/DELETE per transport).

Auth: MCP Bearer or OAuth

Claude.ai can paste https://sellioai.com/api/mcp and sign in with OAuth (no bearer). Cursor/Claude Desktop use Bearer store tokens. Scopes: catalog:read, catalog:write, orders:read, orders:write, crm:read, analytics:read, inbox:read, storefront:read, storefront:write.

Example request

{
  "mcpServers": {
    "sellio": {
      "url": "https://sellioai.com/api/mcp",
      "headers": { "Authorization": "Bearer slio_live_…" }
    }
  }
}
GET/api/mcp/tokens

List active MCP tokens for a store (admin/owner).

Auth: Bearer (user session)

Query

FieldTypeDescription
store_idrequiredstringStore UUID.
POST/api/mcp/tokens

Mint a store MCP token. Secret is shown once.

Auth: Bearer (user session)

Body

FieldTypeDescription
store_idrequiredstringStore UUID.
namerequiredstringToken label.
scopesrequiredstring[]Subset of MCP scopes.
DELETE/api/mcp/tokens/{id}

Revoke a token (sets revoked_at; row kept for audit).

Auth: Bearer (user session)

POST/api/oauth/token

OAuth token endpoint (authorization_code or refresh_token).

Auth: OAuth 2.1

Content-Type must be application/x-www-form-urlencoded.

NextMCP tools