What is the LoanIt MCP connection?
LoanIt provides a secure Model Context Protocol (MCP) endpoint at https://api.loan-it.app/mcp. It lets a compatible AI application read the LoanIt information you explicitly authorize, so it can help you understand your loans without asking you to copy the data manually.
The initial connection is read-only. It cannot create, edit, settle, or delete loans, participants, transactions, or reminders.
Available capability
The first available tool is loanit_loans_list. It returns the loans your LoanIt account can already access, together with the participant information shown by the LoanIt app. This includes:
- Loan titles, dates, notes, currencies, status, balances, and creator information
- Participant IDs, account IDs, names, usernames, roles, and virtual-participant details
- Participant profile and contact fields that are already visible to you in the LoanIt app
The connection applies the same loan-membership rules as the mobile app. It cannot retrieve a loan unless your account is a participant in that loan.
Authorization and consent
When an AI application connects, LoanIt shows a consent screen describing the application and the permissions it requests. The loans tool is available only when you grant the existing Read loans permission (LOANS_READ).
LoanIt validates that every request:
- Uses a token issued for the LoanIt MCP endpoint
- Belongs to the OAuth application that you approved
- Has not expired
- Still has an active Connected Apps grant
- Has the required LoanIt permission
LoanIt permissions are application permissions, not standard OAuth profile scopes.
Disconnecting an application
You can disconnect an application from Settings → Connected Apps. Revocation blocks the MCP connection immediately, including access tokens that have not yet reached their expiration time. The application must complete authorization again before it can access LoanIt.
Data handling
Only connect applications you trust. A connected application receives the LoanIt data returned by the tools you authorize and may process that data under its own privacy policy. LoanIt never includes your access token or refresh token in tool results.
For more information about LoanIt data practices, see the Privacy Policy. For help, contact saudalhafith@gmail.com.