> ## Documentation Index
> Fetch the complete documentation index at: https://docs.vin.gs/llms.txt
> Use this file to discover all available pages before exploring further.

# Post mcp

> JSON-RPC 2.0 transport for the Vings readonly MCP server.

Supported methods:
- `initialize`
- `notifications/initialized` (returns HTTP 202 with no body)
- `tools/list`
- `tools/call`

Per-tool input and output JSON Schemas are returned by `tools/list` (`inputSchema`, `outputSchema`) and are not duplicated in this OpenAPI document.



## OpenAPI

````yaml https://external.vin.gs/api/openapi.json post /mcp
openapi: 3.1.0
info:
  title: Vings External API
  version: 0.1.0
  description: Readonly external API for authenticated Vings financial data.
servers:
  - url: https://external.vin.gs/api
    description: Production
security: []
tags:
  - name: Transactions
    description: Transaction search and recurring payments
  - name: Cashflow
    description: Cashflow summaries
  - name: Spending
    description: Spending aggregates and merchants
  - name: Budgets
    description: Budget categories and summaries
  - name: Banks
    description: Connected bank status
  - name: Portfolio
    description: Portfolio snapshots and history
  - name: Preferences
    description: User preferences
  - name: OAuth
    description: OAuth protected-resource metadata (RFC 9728)
  - name: Health
    description: Liveness and readiness
  - name: User
    description: Authenticated user
  - name: MCP
    description: Model Context Protocol JSON-RPC transport
paths:
  /mcp:
    post:
      tags:
        - MCP
      description: >-
        JSON-RPC 2.0 transport for the Vings readonly MCP server.


        Supported methods:

        - `initialize`

        - `notifications/initialized` (returns HTTP 202 with no body)

        - `tools/list`

        - `tools/call`


        Per-tool input and output JSON Schemas are returned by `tools/list`
        (`inputSchema`, `outputSchema`) and are not duplicated in this OpenAPI
        document.
      requestBody:
        required: true
        content:
          application/json:
            schema:
              anyOf:
                - $ref: '#/components/schemas/JsonRpcRequest'
                - type: array
                  items:
                    $ref: '#/components/schemas/JsonRpcRequest'
      responses:
        '200':
          description: JSON-RPC result (single object or batch array)
          content:
            application/json:
              schema:
                anyOf:
                  - $ref: '#/components/schemas/JsonRpcResponse'
                  - type: array
                    items:
                      $ref: '#/components/schemas/JsonRpcResponse'
        '202':
          description: >-
            Notification accepted (`notifications/initialized` with no JSON-RPC
            response body)
        '400':
          description: Invalid JSON-RPC request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '401':
          description: >-
            Missing or invalid bearer token (includes WWW-Authenticate for OAuth
            protected resource discovery)
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '429':
          description: Rate limit exceeded
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
        - bearerAuth: []
      externalDocs:
        description: Model Context Protocol
        url: https://modelcontextprotocol.io/specification/2025-06-18
components:
  schemas:
    JsonRpcRequest:
      type: object
      properties:
        jsonrpc:
          type: string
          enum:
            - '2.0'
        id:
          anyOf:
            - type: string
            - type: number
            - nullable: true
        method:
          type: string
          description: >-
            JSON-RPC method (initialize, notifications/initialized, tools/list,
            tools/call)
          example: tools/list
        params:
          type: object
          additionalProperties:
            nullable: true
      required:
        - jsonrpc
        - method
    JsonRpcResponse:
      type: object
      properties:
        jsonrpc:
          type: string
          enum:
            - '2.0'
        id:
          anyOf:
            - type: string
            - type: number
            - nullable: true
        result:
          nullable: true
        error:
          type: object
          properties:
            code:
              type: number
            message:
              type: string
          required:
            - code
            - message
      required:
        - jsonrpc
    ErrorResponse:
      type: object
      properties:
        error:
          type: object
          properties:
            code:
              type: string
              example: UNAUTHORIZED
            message:
              type: string
              example: Missing bearer token
            details:
              nullable: true
            requestId:
              type: string
          required:
            - code
            - message
      required:
        - error
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: >-
        Vings OAuth access token or personal access token (`vng_pat_…`). Use
        `Authorization: Bearer …`.

````