API authentication

For an AI assistant, start with MCP setup. The user completes OAuth sign-in and approves permissions in the browser. Keep connection credentials in the client’s supported secure storage.

For a direct API integration, create an API key using the Console’s API key controls and select only the scope your application needs. Send it as a bearer token in the HTTP Authorization header. Store it on a trusted server or in your application’s secret storage, never in browser code or an agent prompt.

Use the current API origin and contract for your deployment. A client-version header describes the calling client; it is not an access token and does not grant permission. Follow the published client contract before making direct requests.

For a Python application, follow SDK setup. The SDK supplies the client contract headers and handles the supported request format. For terminal work, sign in with the CLI. Review permissions and troubleshooting when access is refused.