Masttro developer platform

Integrate with Masttro

Masttro provides read-only data access through a REST API and a Model Context Protocol (MCP) server, supporting each organization’s reporting, analytics and integration requirements.

Two ways to integrate

One platform, two interfaces

Both are read-only and governed by Masttro authentication, authorization and entitlements. The REST API is the broader programmatic interface. The MCP server exposes a selected set of approved tools.

REST API

Masttro API

JSON over HTTPS for data warehouses, reporting tools, CRMs and custom applications.

  • 15 read-only endpoints across your entire wealth picture
  • Short-lived bearer tokens from your API key and secret
  • Examples in cURL, C#, Python and JavaScript
Explore the API
Model Context Protocol

MCP server

Masttro MCP is a standards-based interoperability interface that allows authorized clients to make selected Masttro capabilities available to compatible external MCP applications, such as Claude, Claude Code or ChatGPT. Masttro applies its authentication, authorization and entitlement controls to each request. Data subsequently processed within the external application is governed by that third-party environment and is outside the Masttro security perimeter.

  • Selected read-only Masttro tools exposed through an approved MCP tool registry
  • Masttro permissions and entitlements enforced at the point of request
  • Masttro-side API/MCP activity recorded against the applicable integration identity
  • External processing after data delivery remains subject to the client’s controls and the third-party provider’s security, privacy and retention terms
Masttro Intelligence and MCP Masttro Intelligence is Masttro’s governed, model-agnostic AI environment for clients that want AI-driven capabilities while maintaining Masttro permissions, orchestration, auditability, confidentiality and security controls within the Masttro environment. MCP serves a different purpose: controlled interoperability with external systems selected and governed by the client.

Third-party application names are used for compatibility only and do not imply a native integration, endorsement or commercial partnership. See Third-party applications.

Single sign-on Identity administrators: register Masttro in Microsoft Entra ID, Okta or another OpenID Connect provider so your users sign in to the web application and the MCP server with SSO. See Single sign-on setup.
Quickstart

First call in two requests

Exchange your API key and secret for a bearer token, then call any endpoint. Tokens last 60 minutes.

Ready to build?