Merchant MCP is currently in beta. It’s available on the Classic plan and
above and must be enabled for your program — contact
support@loyaltylion.com to have it turned
on.
What it can do
The MCP server exposes a small set of read-only tools:| Capability | What the assistant can do |
|---|---|
| Describe program setup | Read your program’s configuration — name, live status, sites, locales, points-expiry policy, earning rules, rewards, tiers, and referral incentive. |
| Analytics metrics | Pull time series for a single analytics metric — membership, points, orders, revenue, rewards, and customer lifetime value — over a date range, bucketed by day, week, or month, optionally filtered by site, rule, or reward. |
| Fetch customers | Look up loyalty customers by email, ID (merchant_id), or created/updated time range, with their points balances, enrollment state, tier, and tags. |
| Fetch orders | List orders by time range, order number, ID (merchant_id), or customer, with each order’s amounts, statuses, timestamps, points earned, and rewards used. |
Endpoint
The MCP server is a streamable-HTTP endpoint served from the same host as the LoyaltyLion API:Bearer token
in the Authorization header. Site token & secret authentication is not
accepted.
Set up the MCP server
1. Create an API key
Sign in to your LoyaltyLion account, go toManage > API keys, click
Create API key, and follow the steps. The token is shown only once after
creation — store it somewhere secure.
For more detail on API keys, see
Authentication › API keys.
2. Choose scopes
The MCP server only ever reads data, and the tools available to a key depend on the scopes you grant it. Grant the read scopes that match the data you want the assistant to access:| Capability | Scope required |
|---|---|
| Describe program setup | None — any valid key works |
| Analytics metrics | None — any valid key works |
| Fetch customers | read_customers |
| Fetch orders | read_orders |
read_customers and read_orders.
For the full list of scopes, see the
API key scopes
reference.
3. Connect your client
Add the server to your MCP client’s configuration. Most clients accept an HTTP server entry with anAuthorization header. For example: