> ## Documentation Index
> Fetch the complete documentation index at: https://apidocs.finrock.io/llms.txt
> Use this file to discover all available pages before exploring further.

# MCP Scopes

> Which Finrock API endpoints AI connectors such as Claude can call after Finrock sign-in, and the MCP scope each one needs.

AI connectors, such as the [Claude connector](https://apidocs.finrock.io/guides/ai/connect-claude.md), connect through Finrock sign-in instead of an API key and signed JWT. The access you approve on the sign-in screen gives the connector MCP scopes, which decide which endpoints it can call. Each endpoint page shows the MCP scope it needs.

This page applies only to AI connectors. Requests signed with your API key and private key aren't limited by scopes.

## Scopes

| Scope | Access level on the approval screen | What it allows |
| - | - | - |
| `dac.read` | Read | View balances, wallets, addresses, transactions, invoices, fees and settings. |
| `dac.write` | Read and create | Create wallets, deposit addresses and invoices. Moves no funds. |
| `dac.funds` | Not offered | Send, sweep or stake funds, and change wallet, address or security settings. |

> [!NOTE]
>
> `dac.funds` can't be granted yet, so AI connectors can't move funds or change security settings. If it's offered in future, withdrawals will still need their usual approvals, set in the dashboard or by your [spending rules](https://apidocs.finrock.io/api-reference/spending-rules/list-spending-rules.md).

## How access is decided

* A `GET` endpoint that isn't listed below needs `dac.read`.
* Any other method (`POST`, `PATCH`, `DELETE`) that isn't listed below is refused for AI connectors. New write endpoints stay closed to connectors until they're added to this list.
* Some endpoints are blocked for AI connectors and are refused whatever scopes the connector has.

All paths below are under `https://api.finrock.io/dac/v1/`.

## Read: `dac.read`

| Endpoint | What it does |
| - | - |
| `GET assets` | Supported assets |
| `GET wallets` | [List wallets](https://apidocs.finrock.io/api-reference/wallets/list-wallets.md) |
| `GET addresses` | [List addresses](https://apidocs.finrock.io/api-reference/wallets/list-addresses.md) |
| `GET transactions` | [Transaction history](https://apidocs.finrock.io/api-reference/transactions/list-transactions.md) |
| `GET network-fee-rates` | [Network fee rates](https://apidocs.finrock.io/api-reference/gas/network-fee-rates.md) |
| `GET estimate-fee`, `POST estimate-fee` | [Fee estimate](https://apidocs.finrock.io/api-reference/transactions/estimate-fee.md) |
| `GET gas-tanks`, `GET gas-tank-bal` | [Gas tanks](https://apidocs.finrock.io/api-reference/gas/list-gas-tanks.md) and [gas tank balance](https://apidocs.finrock.io/api-reference/gas/gas-tank-balance.md) |
| `GET exchange-accounts`, `GET exchange-balance` | [Exchange accounts](https://apidocs.finrock.io/api-reference/exchanges/list-exchange-accounts.md) and [balances](https://apidocs.finrock.io/api-reference/exchanges/exchange-balance.md) |
| `GET prepaid-fee` | [Prepaid fee balance](https://apidocs.finrock.io/api-reference/utilities/prepaid-fee.md) |
| `GET tron/stake-txns` | [TRON staking history](https://apidocs.finrock.io/api-reference/utilities/tron-stake-txns.md) |
| `GET aml` | [AML settings](https://apidocs.finrock.io/api-reference/aml/aml-status.md) |
| `GET frozen-addresses` | [Frozen addresses](https://apidocs.finrock.io/api-reference/aml/frozen-addresses.md) |
| `GET invoice` | [Invoices](https://apidocs.finrock.io/api-reference/invoicing/list-invoices.md). AI connectors must pass `id` or `memo`. |
| `GET webhook` | [Get the webhook URL](https://apidocs.finrock.io/api-reference/webhooks/get-webhook.md). Also allowed with `dac.write`. |

Other `GET` endpoints, such as [Validate Address](https://apidocs.finrock.io/api-reference/wallets/validate-address.md) and [List Spending Rules](https://apidocs.finrock.io/api-reference/spending-rules/list-spending-rules.md), also need `dac.read`.

## Write: `dac.write`

Creates things but moves no funds.

| Endpoint | What it does |
| - | - |
| `POST wallet` | [Create a wallet](https://apidocs.finrock.io/api-reference/wallets/create-wallet.md) |
| `POST generate-address`, `POST try-generate-address` | [Create a deposit address](https://apidocs.finrock.io/api-reference/wallets/create-address.md) |
| `POST remove-addr-label` | Remove an address label |
| `POST invoice` | [Create an invoice](https://apidocs.finrock.io/api-reference/invoicing/create-invoice.md) |
| `POST webhook`, `DELETE webhook` | [Add](https://apidocs.finrock.io/api-reference/webhooks/add-webhook.md) or [delete](https://apidocs.finrock.io/api-reference/webhooks/delete-webhook.md) the webhook URL |
| `POST spending-rule`, `DELETE spending-rule` | [Create](https://apidocs.finrock.io/api-reference/spending-rules/create-spending-rule.md) or [delete](https://apidocs.finrock.io/api-reference/spending-rules/delete-spending-rule.md) a spending rule. The change only takes effect once the owner, or at least 2 admins, approve it. |

## Funds: `dac.funds` (not available yet)

| Endpoint | Why it needs this scope |
| - | - |
| `POST transaction` | [Withdrawals and transfers](https://apidocs.finrock.io/api-reference/transactions/create-transaction.md) |
| `POST bump-fee` | [Spends a higher fee](https://apidocs.finrock.io/api-reference/transactions/bump-fee.md) |
| `POST invoke-sweep` | [Moves funds and spends gas](https://apidocs.finrock.io/api-reference/wallets/manual-sweep.md) |
| `POST tron/stake`, `POST tron/unstake`, `POST tron/release-unstaked` | [Moves or locks TRX](https://apidocs.finrock.io/api-reference/utilities/tron-stake.md) |
| `PATCH wallet` | [Sets forwarding and freezes wallets](https://apidocs.finrock.io/api-reference/wallets/edit-wallet.md) |
| `PATCH address` | [Changes omnibus, auto-refill and AML settings](https://apidocs.finrock.io/api-reference/wallets/edit-address.md) |
| `POST aml` | [Changes AML settings](https://apidocs.finrock.io/api-reference/aml/manage-aml.md) |
| `POST unfreeze-address` | [Security setting](https://apidocs.finrock.io/api-reference/aml/unfreeze-address.md) |


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.