Save swipe
Save a reference ad from a link; its media is copied into storage.
Requires a key with write scope or higher.
MCP: meta_save_swipe.
bearerAuthAuthorizationBearer <token>An API key from Settings → API keys, sent as Authorization: Bearer rsk_….
Authorization has two independent axes.
The scope is ranked — a key satisfies any requirement at or below its own tier:
read— every GET.write— launch ads PAUSED, sync, pull history, edit thresholds, Values, briefs, tests, swipes and research.admin— everythingwritecan. No operation requires more thanwritetoday.
There is no approve scope. It was a rung once; it is not one now, and a key requested with it is rejected.
The approval grant (can_approve) is a separate boolean, not a rung. Changing spend on Meta — activating a launch, pausing or resuming ads, retargeting an ad set, or rebuilding a launch's live creative — needs write and the grant. Keeping them on separate axes is what makes the review gate a control rather than a convention: a key that may propose is not automatically a key that may approve its own proposal.
A key reaches the one workspace — one Meta ad account — it was minted in, and stops working when the operator who minted it leaves the workspace. The same key authenticates the MCP endpoint (/api/mcp) for a headless agent, with the same scope and grant.
Idempotency-Key?stringAny unique string up to 256 characters. A retry with the same key and body replays the first success (Idempotency-Replay: true) instead of doing the work twice; the same key with a different body is refused.
length <= 256application/json- body
url*stringuritags?array<string>items <= 20Created. The body is the tool's own result — the same payload the MCP tool returns.
application/json- response
curl -X POST 'https://winandscale.com/api/v1/swipes' \ -H 'Content-Type: application/json' \ -d '{ "url": "http://example.com"}'{}