SecureLend AI API and MCP

API

The public contract is OpenAPI 3.1 at /openapi.json. Current routes live under /v1.

Versioning

The current API version is v1, carried in the URL path. SecureLend announces removal of a route with two response headers. Deprecation carries the date the route was deprecated. Sunset carries the last day that route is served. A route stays available through the Sunset date. This is the deprecation and sunset policy for the SecureLend API.

API responses also send a Link header to this section and a RateLimit-Policy header.

MCP

• Placement: POST https://mcp.securelend.ai/mcp
• Lender underwriting: POST https://mcp.securelend.ai/v1/lender/mcp
• Server card: /.well-known/mcp/server-card.json

No tool approves a loan. Setup for Claude and ChatGPT is on the MCP page.

Auth

OAuth 2.0 authorization code with PKCE S256. Clients are pre-registered. There is no dynamic client registration. Metadata is at the protected resource and the authorization server. The scope is lender. Notes for agents: auth.md.

Trial and sandbox

A 7-day trial starts at sign-in. The sandbox is the unauthenticated lender MCP. See the sandbox.

API keys

A signed-in workspace creates its own API key in Settings. The key calls the lender MCP for that workspace only.