AI agents (MCP)
Growth and Premium. Hosted MCP so Cursor, Claude, ChatGPT, and other agents can manage short links, webhooks, exports, and documents.
- Protocol:
2026-07-28 - Endpoint:
https://mcp.litonl.com(Streamable HTTP) - Auth: OAuth 2 — OAuth. Cursor Marketplace uses Connect (public client
lit_mcp_cursor, sign in at litonl.com). Dashboard Bearer mint remains for Claude/scripts. - Icon:
https://litonl.com/mcp-icon.png
Free and Core get an upgrade error. Tools act on the Growth+ workspace bound to the token.
Install
Cursor: marketplace / Connect JSON with CLIENT_ID=lit_mcp_cursor (no
Bearer). Claude / scripts: URL + Authorization: Bearer … from
Developers → Generate access token, or client credentials.
Tools
Same scopes as REST. Missing scope → insufficient_scope.
Links
create_link, list_links, get_link, update_link, deactivate_link, delete_link, import_csv
deactivate_link turns a short URL off (reversible). delete_link permanently removes the link and click history.
Redirect rules (RediRL)
list_redirect_rules, create_redirect_rule, update_redirect_rule, delete_redirect_rule
Webhooks
list_webhooks, create_webhook, update_webhook, delete_webhook
Exports
list_link_exports, create_link_export, get_link_export, delete_link_export, list_click_exports, create_click_export, get_click_export, delete_click_export
Documents
list_documents, get_document, get_documents_quota, create_document, update_document, delete_document, restore_document, upload_document_version, get_document_analytics, update_document_share
Library folders
list_library_folders, create_library_folder, update_library_folder, delete_library_folder
Data rooms
list_data_rooms, create_data_room, get_data_room, update_data_room, delete_data_room, create_data_room_folder, add_data_room_item
Example prompt
Shorten this launch URL, slug launch, never expire, utm_campaign spring_sale. For US/CA visitors, send them to the NA landing via redirect_rules / redirl, or assign redirect_rule_set_id from the Rules library.
Safety
Agents must not log client secrets or access tokens. Rotate the confidential OAuth client if leaked; for Connect, revoke tokens or rotate as needed.