MCP Server Documentation
Grab the exact value ChatGPT or Claude needs without scrolling through the full guide.
Hi Energy AI MCP Server
The Hi Energy AI MCP server exposes the same authenticated affiliate data already available in your API through a focused directory built for MCP clients. Start with universal_search for an ambiguous entity, recommend_report for a reporting goal, and named search or record tools for focused work. Use api_get and api_write only when the curated tools do not cover the allowed API operation.
Why use the MCP server?
Built for AI agents
MCP gives AI clients a standard way to initialize sessions, discover capabilities, and call tools without custom glue code for every endpoint.
Same permissions as your API
Your MCP requests authenticate with an OAuth bearer token or API key and inherit the same Pundit-scoped access rules as the underlying REST API controllers.
Curated tools plus full API reach
Use named tools for common workflows, then fall back to api_get (reads) and api_write (writes) when you need broader access to the existing /api and /api/v1 surface.
Resource discovery included
Clients can read the role-filtered tool catalog, OpenAPI schema, GraphQL schema, report-selection guide, and API documentation index directly from MCP resources.
Claude Cowork setup
Use your personal API key with the plain /mcp URL. Open the integration JSON to copy the managed_mcp_server configuration and its per-tool policy.
- Open Claude Cowork MCP settings and add a remote HTTP server.
- Copy the managed server configuration from the integration JSON.
- HiEnergy admins receive an allow-all policy; non-admins automatically allow reads and ask before writes.
Common MCP workflows
Search advertisers
Use search_advertisers to find advertisers by name, vertical, network, country, or domain without leaving the MCP session.
Choose reports safely
Use recommend_report first when the user asks for a report in natural language. It returns ranked report candidates plus the exact MCP tool call to make next.
Match by domain
Use search_advertisers_by_domain or search_domains when your agent starts from a website URL or exact domain.
Add contacts
Use add_contact when you know the advertiser id, or add_contact_for_advertiser when you only know the advertiser name. Both follow the same admin-only rules as the REST API.
recommend_report, use list_reports for report ids, and use get_report for the selected report. For advertiser discovery, use search_advertisers for broad lookup, search_advertisers_by_domain for website-driven discovery, and search_domains for exact normalized domain matching.
Advertiser search endpoints through MCP
The MCP server already publishes the core advertiser search surface as named tools. Start with broad discovery, switch to domain-driven search when you have a URL, and use the generic bridge only when you need raw REST access. For the full REST reference, see the Advertisers API documentation.
search_advertisers
Best for broad advertiser discovery.
GET /api/v1/advertisers
Supports filters like q, name, domain, network, country, vertical, limit, and page. Explicit cursor remains available for advertiser compatibility mode.
search_advertisers_by_domain
Best when your agent starts from a brand website.
GET /api/v1/advertisers/search_by_domain
Accepts a domain and maps it through the advertiser domain lookup endpoint without needing a raw REST call.
search_domains
Best for exact normalized domain matching.
GET /api/v1/domains/search
Useful when you want the specialized domain search endpoint directly. By default it returns offset-style meta pagination; explicit advertiser cursors are still supported when provided.
JSON-RPC examples
{
"jsonrpc": "2.0",
"id": 11,
"method": "tools/call",
"params": {
"name": "search_advertisers",
"arguments": {
"name": "running shoes",
"network": "impact",
"country": "US",
"limit": 5
}
}
}
{
"jsonrpc": "2.0",
"id": 12,
"method": "tools/call",
"params": {
"name": "search_advertisers_by_domain",
"arguments": {
"domain": "nike.com"
}
}
}
{
"jsonrpc": "2.0",
"id": 13,
"method": "tools/call",
"params": {
"name": "search_domains",
"arguments": {
"domain": "nike.com",
"limit": 5
}
}
}
GraphQL through MCP
Use graphql_query for a read-only response that needs several related resources in one request,
or a custom deals / clicks / transactions selection set.
It calls POST /api/v1/graphql with the same API key or OAuth identity as the rest of MCP, so
GraphQL applies the same Pundit-scoped visibility rules.
Prefer named tools (search_deals, get_deal, search_transactions,
get_transaction, get_clicks) for a single standard list or detail call.
When to use it
Use GraphQL to tailor a read across advertisers, deals, transactions, clicks, terms, publishers, networks, tags, and account activity summaries. Prefer a named MCP tool for one standard workflow, and use graphql_query when it avoids several dependent tool calls. Resources without a named tool (such as terms) are reached through graphql_query.
Before querying
Read graphql://project-rocket/schema for the current SDL, then send a GraphQL document as query, optional values as variables, and operationName only for multi-operation documents. Full field reference: GraphQL API docs.
Deals (visible by default; hidden opt-in)
{
"name": "graphql_query",
"arguments": {
"query": "query($advertiserId: ID) { deals(advertiserId: $advertiserId, perPage: 10, includeTotal: true) { nodes { id name exclusive featured effectiveAt advertiser { id name } } pageInfo { totalCount hasNextPage } } }",
"variables": { "advertiserId": "123" }
}
}
Clicks (≤90-day window)
{
"name": "graphql_query",
"arguments": {
"query": "query($from: IsoDate!, $to: IsoDate!, $advertiserId: ID) { clicks(startDate: $from, endDate: $to, advertiserId: $advertiserId, perPage: 50) { nodes { id clickDate clickCount advertiserName networkName } pageInfo { hasNextPage } } }",
"variables": { "from": "2026-05-19", "to": "2026-05-26", "advertiserId": "123" }
}
}
Transactions (bounded query)
{
"name": "graphql_query",
"arguments": {
"query": "query($from: IsoDate!, $to: IsoDate!) { transactions(startDate: $from, endDate: $to, status: [APPROVED, PAID], perPage: 25) { nodes { id status saleAmount commissionAmount advertiser { id name } } pageInfo { hasNextPage } } }",
"variables": { "from": "2026-04-01", "to": "2026-04-30" }
}
}
Terms (commission terms)
{
"name": "graphql_query",
"arguments": {
"query": "query($advertiserId: ID) { terms(advertiserId: $advertiserId, perPage: 10, includeTotal: true) { nodes { id cid name summary advertiser { id name } } pageInfo { totalCount hasNextPage } } }",
"variables": { "advertiserId": "123" }
}
}
GraphQL is read-only. Use named mutation tools or api_write for permitted writes; do not attempt GraphQL mutations.
Paginated fields return at most 200 nodes and include pageInfo; deep pages beyond the 10,000-result window are rejected.
Use includeTotal: true only when a total is required.
deals excludes hidden deals by default (pass includeHidden: true to include authorized hidden deals);
clicks requires startDate/endDate within 90 days;
transactions requires advertiserId, publisherId, networkId, or both date bounds;
terms returns commission terms scoped by TermPolicy (paid-account access), with optional advertiserId, campaignId, and free-text query filters.
Fastest way to add this MCP server to ChatGPT
The MCP server supports two authentication methods for ChatGPT: OAuth (bearer token via Auth0) and API key (embedded in the URL or sent as a header). Choose whichever fits your setup.
text/html;profile=mcp-app widget resource plus app-aware tool metadata, so ChatGPT can render tool results in an app card instead of only showing raw JSON.
Paste the plain /mcp URL and choose OAuth authentication.
Best when using an Auth0 bearer token. Auth0 handles login and token issuance.
Use the plain /mcp URL with an X-Api-Key header.
Best when you want to keep the secret out of the URL and use a local/dev workflow.
Use the plain /mcp URL and pass an Auth0 bearer token in authorization_token.
Best when you are configuring Anthropic's remote MCP connector instead of a local client.
OAuth setup (bearer token via Auth0)
https://app.hienergy.ai/mcp
- Open ChatGPT Developer Mode and create a new app from a remote MCP server.
- Paste the plain
/mcpURL shown above. - Choose OAuth authentication. Auth0 must have OIDC Dynamic Application Registration enabled so ChatGPT can create its OAuth client.
- Save the app, refresh tools, and test prompts against your MCP server.
- ChatGPT will use the shared app widget automatically for supported tool results.
ChatGPT-ready MCP server URL (API key in URL)
https://app.hienergy.ai/mcp?api_key=YOUR_API_KEY
Sign in to generate a ready-to-paste URL with your own API key embedded.
- Open ChatGPT Developer Mode and create a new app from a remote MCP server.
- Paste the ChatGPT-ready MCP server URL shown above.
- Choose No Authentication because the URL already contains your
api_key. - Save the app, refresh tools, and test prompts against your MCP server.
- ChatGPT will use the shared app widget automatically for supported tool results.
Treat this URL like a secret. It contains your API key directly. If you paste it somewhere unsafe, rotate your API key.
Responses API tool block
{
"type": "mcp",
"server_label": "hienergy",
"server_url": "https://app.hienergy.ai/mcp?api_key=YOUR_API_KEY",
"require_approval": "never"
}
Claude Code setup
Use the plain /mcp URL with an X-Api-Key header. This avoids putting secrets in the URL.
- Open Claude Code MCP settings.
- Add a remote HTTP MCP server.
- Paste the config below exactly as shown.
{
"transport": "http",
"url": "https://app.hienergy.ai/mcp",
"headers": {
"X-Api-Key": "YOUR_API_KEY"
}
}
Claude API MCP connector
Use OAuth bearer auth for Anthropic's remote MCP connector, since it accepts an authorization_token for authenticated servers.
- Choose a URL-backed MCP server in Claude.
- Paste the config below.
- Replace
YOUR_AUTH0_ACCESS_TOKENwith a real Auth0 bearer token.
{
"type": "url",
"url": "https://app.hienergy.ai/mcp",
"name": "hienergy",
"authorization_token": "YOUR_AUTH0_ACCESS_TOKEN"
}
POST /mcp for MCP JSON-RPC requests. If you open GET /mcp in a browser or use it in a quick connectivity check, the server now returns a small authenticated setup payload instead of a blank error page.
Claude Cowork approvals
Cowork uses the same remote HTTP MCP endpoint as Claude Code. Copy the
managed_mcp_server object from your authenticated integration JSON rather than
hand-writing a policy. HiEnergy admins receive an allow-all policy for the full MCP catalog;
non-admin users automatically allow read-only tools and are prompted before writes or external actions.
Permissions and safe client setup
Use your own identity
MCP applies the same Pundit policies as the API to the authenticated user. Use your personal API key or OAuth login; publisher MCP service accounts are intentionally limited to publisher-scoped workflows.
HiEnergy administrators
Admins see account-management and API bridge tools in tools/list. Cowork integration JSON includes an allow-all policy; use it only in a trusted internal workspace and change individual tools to ask or blocked when needed.
Non-admin users
The directory only exposes the tools available to the caller. Cowork automatically allows read-only tools and requests approval for writes or external actions; authorization is still enforced by the API on every call.
Keep secrets out of URLs
Prefer OAuth or an X-Api-Key header. An API-key URL is a compatibility option for ChatGPT imports and must be treated as a secret; rotate the key immediately if it is exposed.
How to connect
Send JSON-RPC requests to https://app.hienergy.ai/mcp. Authenticate with an OAuth bearer token (via Auth0) or your X-Api-Key header. The MCP server returns tools, resources, and structured results that wrap the same underlying API responses.
https://app.hienergy.ai/mcp with an OAuth bearer token (via Auth0) or your existing
X-Api-Key header to connect MCP-compatible clients to Project Rocket.
A GET to the same path (no JSON body) returns reachability metadata, all
resource_uris for resources/read, and
quick_start lines—handy for dashboards and agent bootstraps. Call
tools/list after initialize when you need the tool count (avoids loading the full catalog on a simple health check).
What the MCP server supports
Standard MCP lifecycle
Supports initialize, tools/list, tools/call, resources/list, and resources/read.
Curated tools + generic API bridge
Use named tools like recommend_report, list_reports, get_report, get_top_advertisers_by_sales_report, get_deals_summary_report, get_status_counts_report, get_status_cards_counts_report, get_network_global_last_sync_ats_report, search_advertisers, search_advertisers_by_domain, search_domains, and get_advertiser, or fall back to the generic api_get (reads) and api_write (writes) tools to reach the full existing JSON API surface. The legacy api_request tool still works as an alias.
Resource discovery
Clients can read the OpenAPI schema at openapi://project-rocket/schema, the curated catalog at tools://project-rocket/catalog, the report-selection guide at reports://project-rocket/selection-guide, and the shared ChatGPT app widget at ui://project-rocket/tool-result.html.
ChatGPT app-ready metadata
Every MCP tool includes ChatGPT app descriptor metadata, a shared output template, and app-card status text so ChatGPT can render tool results as a usable app experience instead of raw JSON alone.
Tool response contract
Successful tools/call responses with JSON-shaped payloads include a top-level
branding object inside structuredContent (or under _meta when
the tool body is not an object) with product name, theme color, and stable /branding/*
logo URLs for widgets and UIs. New fields may be added over time. Clients that use strict
schemas, allowlists, or snapshot tests should treat structuredContent and
_meta as forward compatible: allow unknown keys or strip them
before validation so additive metadata does not break parsing. The
initialize response’s instructions string repeats this expectation for LLM clients.
Quick start
1. Initialize the MCP session
curl -X POST https://app.hienergy.ai/mcp \
-H "Content-Type: application/json" \
-H "Accept: application/json" \
-H "X-Api-Key: YOUR_KEY" \
-H "MCP-Protocol-Version: 2025-11-25" \
-d '{
"jsonrpc": "2.0",
"id": 1,
"method": "initialize",
"params": {
"protocolVersion": "2025-11-25",
"capabilities": {},
"clientInfo": { "name": "My MCP Client", "version": "1.0.0" }
}
}'
2. List available tools
curl -X POST https://app.hienergy.ai/mcp \
-H "Content-Type: application/json" \
-H "Accept: application/json" \
-H "X-Api-Key: YOUR_KEY" \
-H "MCP-Protocol-Version: 2025-11-25" \
-d '{
"jsonrpc": "2.0",
"id": 2,
"method": "tools/list"
}'
3. Search advertisers with a named tool
curl -X POST https://app.hienergy.ai/mcp \
-H "Content-Type: application/json" \
-H "Accept: application/json" \
-H "X-Api-Key: YOUR_KEY" \
-H "MCP-Protocol-Version: 2025-11-25" \
-d '{
"jsonrpc": "2.0",
"id": 3,
"method": "tools/call",
"params": {
"name": "search_advertisers",
"arguments": {
"name": "nike",
"vertical": "fashion",
"limit": 5
}
}
}'
4. Look up advertisers by domain
curl -X POST https://app.hienergy.ai/mcp \
-H "Content-Type: application/json" \
-H "Accept: application/json" \
-H "X-Api-Key: YOUR_KEY" \
-H "MCP-Protocol-Version: 2025-11-25" \
-d '{
"jsonrpc": "2.0",
"id": 4,
"method": "tools/call",
"params": {
"name": "search_advertisers_by_domain",
"arguments": { "domain": "nike.com" }
}
}'
5. Ask MCP which report to use
curl -X POST https://app.hienergy.ai/mcp \
-H "Content-Type: application/json" \
-H "Accept: application/json" \
-H "X-Api-Key: YOUR_KEY" \
-H "MCP-Protocol-Version: 2025-11-25" \
-d '{
"jsonrpc": "2.0",
"id": 5,
"method": "tools/call",
"params": {
"name": "recommend_report",
"arguments": {
"goal": "Which advertisers gained the most commission in the last 90 days?",
"period": "last_90_days"
}
}
}'
6. Inspect the full report catalog if needed
curl -X POST https://app.hienergy.ai/mcp \
-H "Content-Type: application/json" \
-H "Accept: application/json" \
-H "X-Api-Key: YOUR_KEY" \
-H "MCP-Protocol-Version: 2025-11-25" \
-d '{
"jsonrpc": "2.0",
"id": 6,
"method": "tools/call",
"params": {
"name": "list_reports",
"arguments": {}
}
}'
7. Fetch the matching report
curl -X POST https://app.hienergy.ai/mcp \
-H "Content-Type: application/json" \
-H "Accept: application/json" \
-H "X-Api-Key: YOUR_KEY" \
-H "MCP-Protocol-Version: 2025-11-25" \
-d '{
"jsonrpc": "2.0",
"id": 7,
"method": "tools/call",
"params": {
"name": "get_top_gaining_advertisers_report",
"arguments": {
"period": "last_90_days",
"limit": 25
}
}
}'
8. Use the generic API bridge
curl -X POST https://app.hienergy.ai/mcp \
-H "Content-Type: application/json" \
-H "Accept: application/json" \
-H "X-Api-Key: YOUR_KEY" \
-H "MCP-Protocol-Version: 2025-11-25" \
-d '{
"jsonrpc": "2.0",
"id": 8,
"method": "tools/call",
"params": {
"name": "api_get",
"arguments": {
"path": "/api/v1/domains/search",
"query": { "domain": "nike.com", "limit": 5 }
}
}
}'
JSON-RPC errors on POST /mcp
MCP responses use JSON-RPC 2.0. Protocol and request-shape problems return an error object (HTTP 400) instead of the REST error envelope used by /api/v1.
-32700— Parse error (body is not valid JSON).-32600— Invalid request (for example missingjsonrpc: "2.0"or a non-object payload).-32601— Method not found (unsupported JSON-RPC method name).-32602— Invalid params (missing tool name, missing resourceuri, unknown resource URI, and similar).pingreturns HTTP200withresult: {}.- Many tool failures are returned as HTTP
200withresult.isError: trueand details instructuredContent(same pattern as other MCP servers). - If the client sends an unsupported
protocolVersionininitialize, the server negotiates the newest supported version (currently2025-11-25).
Discovery resources
resources/listreturns the available MCP resources.- Call
recommend_reportfirst when the user asks for a report in natural language. - Call
list_reportswhen you need the full catalog or raw materialized-view ids. resources/readwithopenapi://project-rocket/schemareturns the OpenAPI schema.resources/readwithtools://project-rocket/catalogreturns the curated REST tool catalog.resources/readwithreports://project-rocket/selection-guidereturns the report-selection workflow and major report hints.resources/readwithui://project-rocket/tool-result.htmlreturns the shared ChatGPT app widget used by the MCP tool descriptors.
MCP Quick Reference
These examples mirror the most common MCP requests for discovery and execution. Sign in to enable live testing with your API key.
| Action | Method | Endpoint | Description |
|---|---|---|---|
| MCP reachability (GET) | GET |
/mcp |
Authenticated bootstrap JSON: protocol version, integration URL, and OAuth hints (not a JSON-RPC call). |
| Get integration JSON | GET |
/mcp/integration |
Fetch machine-readable ChatGPT and Responses API setup details. |
| Initialize session | POST |
/mcp |
Send a JSON-RPC initialize payload to start the MCP session. |
| Ping | POST |
/mcp |
JSON-RPC ping returns an empty result object. |
| List resources | POST |
/mcp |
JSON-RPC resources/list for OpenAPI, tools catalog, reports guide, docs, and widget URIs. |
| List tools | POST |
/mcp |
Discover curated tools plus the generic api_get and api_write bridges. |
| Universal search | POST |
/mcp |
Call tools/call with universal_search (GET /api/v1/search) for omnibox results across scoped types. |
| List reports | POST |
/mcp |
Call tools/call with list_reports to discover major report aliases and selection guidance. |
| Fetch a report | POST |
/mcp |
Call tools/call with get_report or a named major report tool. |
| Search advertisers | POST |
/mcp |
Call tools/call with search_advertisers for broad advertiser discovery. |
| Search advertiser domains | POST |
/mcp |
Call tools/call with search_advertisers_by_domain or search_domains when you have a website URL or exact domain. |
| Search deals | POST |
/mcp |
Call tools/call with search_deals for free-text offer and coupon discovery. |
| Search transactions | POST |
/mcp |
Call tools/call with search_transactions for scoped transaction search. |
| Search users | POST |
/mcp |
Call tools/call with search_users to look up users by name, email, or account scope. |
| Advertiser contacts | POST |
/mcp |
Call tools/call with get_advertiser_contacts to list the same contacts shown on an advertiser page. |
| Add contact | POST |
/mcp |
Call tools/call with add_contact to create advertiser contacts with a contact object. |
| Refer user | POST |
/mcp |
Call tools/call with refer_user to create a referred user through the shorter alias. |
| Read OpenAPI resource | POST |
/mcp |
Use resources/read with openapi://project-rocket/schema. |
Try it in the browser
When signed in, Test runs the full request from this page (including JSON bodies for POST /mcp).
Use Open for GETs in a new tab; for POST JSON-RPC, Open uses the same path with your api_key query param (you still need a JSON-RPC client or curl for ad-hoc edits).
GET /mcp
MCP
GET bootstrap: protocol version, integration URL, OAuth resource metadata hints, and setup copy for ChatGPT / Claude.
GET /mcp/integration.json
MCP
Machine-readable integration payload (server URL, auth methods, ChatGPT / Claude quick-start fields).
POST /mcp — initialize
JSON-RPC
Negotiate protocolVersion and receive capabilities + long-form agent instructions.
POST /mcp — ping
JSON-RPC
Keep-alive style check; result is an empty object.
POST /mcp — tools/list
JSON-RPC
Returns every curated tool schema (names, descriptions, inputSchema, ChatGPT metadata).
POST /mcp — resources/list
JSON-RPC
Lists openapi://, tools://, reports://, docs://, and ui:// resource descriptors.
POST /mcp — resources/read (OpenAPI)
JSON-RPC
Fetch the live OpenAPI schema text exposed to MCP clients.
POST /mcp — tools/call search_advertisers
JSON-RPC
Example named tool call: keyword + vertical + limit (adjust arguments to match your account).
POST /mcp — tools/call search_deals
JSON-RPC
Free-text deals search; combine with get_deal when you need one row.
POST /mcp — tools/call api_get
JSON-RPC
Read-only bridge to any allowed GET under /api and /api/v1 (path must stay on the authenticated API surface). Use api_write for POST/PATCH/PUT/DELETE. The legacy api_request tool still works as an alias.
Initialize session
Start every MCP conversation by negotiating the protocol version.
{
"jsonrpc": "2.0",
"id": 1,
"method": "initialize",
"params": {
"protocolVersion": "2025-11-25",
"clientInfo": {
"name": "example-client",
"version": "1.0.0"
}
}
}
Add contact through MCP
Use the named add_contact tool when the advertiser is already known.
{
"jsonrpc": "2.0",
"id": 2,
"method": "tools/call",
"params": {
"name": "add_contact",
"arguments": {
"contact": {
"advertiser_id": 123,
"email": "[email protected]",
"given_name": "Jane",
"family_name": "Doe",
"job_title": "VP Partnerships"
}
}
}
}
Refer a user through MCP
Use the shorter refer_user alias for referred-user creation.
{
"jsonrpc": "2.0",
"id": 3,
"method": "tools/call",
"params": {
"name": "refer_user",
"arguments": {
"user": {
"email": "[email protected]",
"given_name": "MCP",
"family_name": "Referred",
"publisher_id": 42
}
}
}
}
Search users through MCP
Use the named search_users tool to search by name, email, or account filters.
{
"jsonrpc": "2.0",
"id": 4,
"method": "tools/call",
"params": {
"name": "search_users",
"arguments": {
"q": "alice",
"per_page": 5
}
}
}
List advertiser contacts
Use get_advertiser_contacts when the user asks for contacts for a domain or advertiser phrase like aloyoga.com.
{
"jsonrpc": "2.0",
"id": 5,
"method": "tools/call",
"params": {
"name": "get_advertiser_contacts",
"arguments": {
"advertiser": "aloyoga.com"
}
}
}
/mcp with OAuth or an X-Api-Key header. Start an ambiguous report request with recommend_report, use list_reports to browse report ids, and use get_report for the selected result. Use search_advertisers for broad advertiser discovery, search_advertisers_by_domain or search_domains for website-driven lookup, get_advertiser_contacts for advertiser contacts, and api_get or api_write only when a named tool does not cover the allowed API operation.