🔐 Security & account

Connect your AI agent to iEscrow: Claude, ChatGPT, Claude Code and any MCP host

iEscrow has an MCP server. Connect it from your assistant, authorize it with your account, and the agent can quote, open and follow trades for you. Anything that moves money still needs your approval, by link and 2FA code. You can disconnect it at any time.

The agent prepares; you commit. That is the whole design. Your assistant can find the best offer, open the trade and tell you the exact amount to pay, but locking crypto or confirming that a payment arrived creates an approval that only you can complete, with your email code and your 2FA code.

Before you connect

  • A verified email.
  • Approved identity verification (KYC).
  • Two-factor authentication (2FA) enabled.

The connection screen checks the three before issuing any permission. In which countries an agent can execute trades (and not only quote) depends on where iEscrow is enabled for agents; the agent can ask with its first call.

How to connect

  1. 1Claude (claude.ai, desktop or mobile): Settings → Connectors → *Add custom connector*. Name iEscrow, URL https://api.iescrow.io/mcp. Claude opens the iEscrow consent screen; you choose the permissions and approve.
  2. 2Claude Code: claude mcp add --transport http iescrow https://api.iescrow.io/mcp, then /mcp to log in.
  3. 3ChatGPT: Settings → Connectors → *Create* (developer mode). Name iEscrow, MCP server URL https://api.iescrow.io/mcp, authentication *OAuth*.
  4. 4Any other MCP host: point it to the same URL with the Streamable HTTP transport. The server publishes its own authorization metadata; nothing else is needed.

What the agent can and cannot do

  • Can: check whether your account is ready, get executable offers with the all-in price, open a trade, read its state and the exact amount to pay, wait for a change, prepare a marketplace ad, list and close your ads.
  • Needs your approval: locking crypto from your balance, confirming that a payment arrived, publishing an ad. The agent receives a link; you open it, see exactly what is about to happen, and approve with 2FA.
  • Never: withdraw funds, add or change payment accounts, upload a payment receipt (only you can, through a dedicated link), or send crypto to an external wallet.

Permissions and disconnecting

On the consent screen you choose what the agent may read and do. Every connection appears in your profile under Connected apps, with its permissions and when it was last used, and you can revoke it there at any time: the agent loses access immediately. There is also a limit on how many calls, trades and approval requests a connection can make per hour.

The full documentation of the server, with every tool and its parameters, is public at github.com/iEscrow/mcp-docs. For the questions people ask before connecting an agent, see Can an AI agent spend my money without asking me?
Was this article helpful?

Related articles

How your funds are held
Each trade's crypto is held by a smart contract, and withdrawals are protected with 2FA.
Enabling two-factor verification (2FA)
With Google Authenticator you add a mandatory security layer required to withdraw funds.
Changing your email, password, or deactivating your account
Basic account management: access details, resetting 2FA, and deactivation.
Official iEscrow channels
The only iEscrow accounts on social networks. Any other account using our name is fake.
Still have questions?
The support team is here to help.
Contact support