Skip to main content

REST API Overview

Haptic’s REST API is used internally by the Haptic website. These endpoints are not publicly accessible and require the shared secret header.

Authentication

All REST endpoints require:
X-Internal-Secret: <shared-secret>
These endpoints are only called from the Haptic website’s Next.js API routes.

Base URL

https://mcp.haptic.sh

Endpoints

Account Management

  • POST /create-link-token - Create Plaid Link token
  • POST /exchange-public-token - Exchange public token for access token
  • POST /remove-account - Remove individual account
  • POST /remove-institution - Remove entire institution

Admin

  • GET /admin/accounts - List all Plaid accounts (admin only)
  • GET /admin/stats - System-wide statistics (admin only)
These endpoints are for internal use only. End users should use the Haptic dashboard at haptic.sh/dashboard.