Account access for agents
With the user's approval, an agent can read that user's UpGrow account summary: connected accounts, growth numbers and plan status. It is read-only: no changes, no purchases, and never prices, payment or card details. The step-by-step instructions for agents are in auth.md.
| Request | Returns |
|---|---|
GET /me | The signed-in user's email, connected Instagram and TikTok accounts (connection status, followers now and when added, plan name and status). Needs Authorization: Bearer <token> with scope account:read |
POST /mcp/account | Account MCP server with the tools get_account_summary, list_connected_accounts and get_growth_stats |
There are two ways to get a token:
- OAuth 2.1 for MCP clients and apps: register at
https://www.upgrow.com/api/oauth/register, send the user tohttps://www.upgrow.com/oauth/authorize(PKCE S256 required), then exchange the code athttps://www.upgrow.com/api/oauth/token. Access tokens last one hour; refresh tokens rotate. - An API key for agents that cannot open a browser:
POST https://www.upgrow.com/api/agents/auth/registerreturns a key at once. The user then opens a claim link, signs in and approves, and the key can read their account.
A token works only at the address it was issued for (the RFC 8707 resource): the REST API or the account MCP server. A grant lasts up to 90 days, and the user can revoke it at any time under Settings, Security, Connected AI agents.
MCP clients that support OAuth only need the server address. They find the rest on the first 401 response:
claude mcp add --transport http upgrow-account https://www.upgrow.com/mcp/accountcurl -s https://www.upgrow.com/api/public/v1/me -H 'Authorization: Bearer <token>'- https://www.upgrow.com/.well-known/oauth-authorization-server: authorization server metadata (RFC 8414)
- https://www.upgrow.com/.well-known/oauth-protected-resource: protected resource metadata (RFC 9728); the account MCP server has its own at
/.well-known/oauth-protected-resource/mcp/account - https://www.upgrow.com/auth.md: agent registration, claim, errors and revocation
More for developers
- UpGrow for AI agents and developers: every interface on one page
- UpGrow MCP server: setup, tools and a test call: JSON config, Claude Code command, the six tools (list_plans, list_products, list_free_tools, search_blog, get_company_facts, get_signup_link) and a curl test call
- UpGrow A2A agent: agent card, endpoint and example: agent card, the JSON-RPC endpoint, the five kinds of questions it answers, SendMessage (A2A 1.0) and message/send (A2A 0.3), with a curl example
- UpGrow REST API: plans, shop products, free tools and blog search: the five public endpoints (plans, products, free tools, blog search, health), their parameters and curl examples
- UpGrow discovery files, agent skills and WebMCP tools: API catalog, AI catalog, MCP server card, A2A agent card, skills index, OpenAPI, llms.txt and OAuth metadata, three agent skills and the six WebMCP browser tools
- Contact UpGrow: questions these pages do not answer