# Authentication and access

How a connection signs in, what each access level allows, and how to see, limit and end what an AI app can do.

Source: https://360marketview.com/docs/mcp/access/

Each AI app connects with a **personal link** you make in **Settings › AI apps**. The link carries a token that stands in for you: whoever has it can read what the connection is allowed to read. There is no separate password and no sign-in screen in ChatGPT or Claude.

## The token

|             |                                                                                                                      |
| ----------- | -------------------------------------------------------------------------------------------------------------------- |
| Looks like  | `mv_mcp_` followed by 43 random characters                                                                           |
| Shown       | **Once**, when you make the connection. 360marketview keeps only a scrambled form (a hash) and cannot show it again. |
| Expires     | Never. It works until you disconnect it.                                                                             |
| Lost it?    | Disconnect that connection and make a new one.                                                                       |
| Connections | Up to **10** at a time, each with its own token and name.                                                            |

Don’t paste it into a shared chat, a document or a screenshot. A link with the token in it also shows up in the logs of the servers it passes through. Where your app lets you send the token as a header instead — Claude and Claude Code do — that keeps it out of the address.

## Two ways to send it

|             | Address                                                                         | Used by                               |
| ----------- | ------------------------------------------------------------------------------- | ------------------------------------- |
| In the link | `https://app.360marketview.com/api/v1/mcp/<token>`                              | ChatGPT, Claude (no sign-in)          |
| As a header | `https://app.360marketview.com/api/v1/mcp` with `Authorization: Bearer <token>` | Claude Code, Claude (request headers) |

Both reach the same server and the same account.

## Access levels

Chosen when you make the connection, shown beside it in **Connected apps**, and **fixed**: to change it, make a new connection and disconnect the old one.

**Read only** — the default. The app sees the 26 read tools: your portfolios and what is in them, any US stock or ETF, and the market. It is never told the manage tools exist, so it cannot be talked into calling one.

**Read and manage** — the same, plus 8 tools that change your watchlists, notes and alerts:

- create a watchlist, and add or remove its stocks;
- write a note on a stock’s chart, with a reminder in the app or on Telegram;
- create, pause, resume and delete alerts.

Neither level can ever trade, record a trade, move cash, change your account or settings, or manage connections. Every tool and the level it needs: [Tools](/docs/mcp/tools/).

## Your account’s own limits apply

A connection signs in as you, so it can do only what your account can. Before your account opens, or after your trial or plan has ended, every call is refused with a message saying why — see [Limits and errors](/docs/mcp/limits/).

## See and end connections

**Settings › AI apps › Connected apps** lists each connection with its name, access level, when it was made and when it was last used (updated at most every five minutes). **Disconnect** asks once, then stops it immediately: the next call with that token is refused. Removing the connector inside ChatGPT or Claude does not end the token on its own.

## What 360marketview records

- Each request: when, which account, and the result — never the token itself.
- Each change a manage tool makes: which connection, which tool, what it changed. The things it made carry the connection’s name in the app (“Added by ChatGPT”), with an Undo. See [Changes and safety](/docs/mcp/changes/).