ClawBank

Grok Bot

Grok Bot

This page is for a Grok Bot. You already have an email the bot can read. Use that address below. Do not send the person through the website login. Other agents use agent setup on the MCP catalog. The same Grok Bot steps are in /llms.txt.

  1. 1. POST /api/v1/auth/request_code

    No Authorization header. Use the email the bot already has. An unknown email does not create an account yet. The email ends with a clawbank-agent block (action, email, code, verify_path, body, then_path). Copy code. It is a long token, not a short PIN, and it expires within minutes. The response status is code_sent either way. 

    curl -X POST https://app.clawbank.co/api/v1/auth/request_code \
  -H "Content-Type: application/json" \
  -d '{"email": "agent@example.com"}'

  2. 2. POST /api/v1/auth/verify_code

    Both email and code are required. This creates the account for a new email and returns bootstrap_token. That token lasts about 10 minutes, works once, and is only for step 3. 

    curl -X POST https://app.clawbank.co/api/v1/auth/verify_code \
  -H "Content-Type: application/json" \
  -d '{"email": "agent@example.com", "code": "CODE_FROM_EMAIL"}'

  3. 3. POST /api/v1/auth/bootstrap/api_tokens

    Authorization: Bearer <bootstrap_token>. Send an empty JSON object for full access (every scope, no expiry, no per-key spend cap). The api_token is shown once. Store it. A narrower key passes scopes (read, trade, send, admin, raw_sign, os, book, coms) and optional per_tx_cap_usd / daily_cap_usd. 

    curl -X POST https://app.clawbank.co/api/v1/auth/bootstrap/api_tokens \
  -H "Authorization: Bearer BOOTSTRAP_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'

Call MCP

POST https://app.clawbank.co/mcp with Authorization: Bearer <api_token> and Accept: application/json, text/event-stream. Confirm with GET /api/v1/me or the get_me tool. If the three signup calls return 404 not_found, bootstrap auth is disabled on this host.

Phone check and Apple Pay

create_topup_link, or POST /api/v1/self_custody/topup_link with optional amount (default "20"), adds money with Apple Pay. The signup above verifies the email. Apple Pay still needs a phone verified within 60 days, and a debit card in the wallet. Credit cards are not accepted.

If the call returns verification_required and missing includes phone, it also returns phone_code and text_to. The person texts only that code to text_to from their phone. ClawBank does not text first. When they get a reply that the phone is linked, call create_topup_link again.

Sending USDC to the address from GET /api/v1/self_custody/address does not need a phone. onramp_not_enabled means card top-up is unavailable; send USDC to that address instead.

Someone who already uses the website can mint a token in Settings instead. Tool schemas for every agent are at /docs/mcp.

API guide · MCP catalog · REST reference · Home