Authentication and access

Each AI app connects with a personal link you make in Settings › AI apps. The link carries a token that stands in for you: whoever has it can read what the connection is allowed to read. There is no separate password and no sign-in screen in ChatGPT or Claude.

The token

Looks like	mv_mcp_ followed by 43 random characters
Shown	Once, when you make the connection. 360marketview keeps only a scrambled form (a hash) and cannot show it again.
Expires	Never. It works until you disconnect it.
Lost it?	Disconnect that connection and make a new one.
Connections	Up to 10 at a time, each with its own token and name.

Treat the link like a password

Don’t paste it into a shared chat, a document or a screenshot. A link with the token in it also shows up in the logs of the servers it passes through. Where your app lets you send the token as a header instead — Claude and Claude Code do — that keeps it out of the address.

Two ways to send it

	Address	Used by
In the link	https://app.360marketview.com/api/v1/mcp/<token>	ChatGPT, Claude (no sign-in)
As a header	https://app.360marketview.com/api/v1/mcp with Authorization: Bearer <token>	Claude Code, Claude (request headers)

Both reach the same server and the same account.

Access levels

Chosen when you make the connection, shown beside it in Connected apps, and fixed: to change it, make a new connection and disconnect the old one.

Read only — the default. The app sees the 26 read tools: your portfolios and what is in them, any US stock or ETF, and the market. It is never told the manage tools exist, so it cannot be talked into calling one.

Read and manage — the same, plus 8 tools that change your watchlists, notes and alerts:

• create a watchlist, and add or remove its stocks;
• write a note on a stock’s chart, with a reminder in the app or on Telegram;
• create, pause, resume and delete alerts.

Neither level can ever trade, record a trade, move cash, change your account or settings, or manage connections. Every tool and the level it needs: Tools.

Your account’s own limits apply

A connection signs in as you, so it can do only what your account can. Before your account opens, or after your trial or plan has ended, every call is refused with a message saying why — see Limits and errors.

See and end connections

Settings › AI apps › Connected apps lists each connection with its name, access level, when it was made and when it was last used (updated at most every five minutes). Disconnect asks once, then stops it immediately: the next call with that token is refused. Removing the connector inside ChatGPT or Claude does not end the token on its own.

What 360marketview records

• Each request: when, which account, and the result — never the token itself.
• Each change a manage tool makes: which connection, which tool, what it changed. The things it made carry the connection’s name in the app (“Added by ChatGPT”), with an Undo. See Changes and safety.