> ## Documentation Index
> Fetch the complete documentation index at: https://connect.trypost.it/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> API keys for REST. OAuth for agents. The two are not interchangeable.

Connect has two doors. They are not the same credential.

|       | REST API                                                                 | MCP (agents)                     |
| ----- | ------------------------------------------------------------------------ | -------------------------------- |
| Where | `https://connect.trypost.it/api`                                         | `https://connect.trypost.it/mcp` |
| How   | Bearer API key                                                           | OAuth (`mcp:use`)                |
| Who   | Your server, CI, the [playground](https://connect.trypost.it/playground) | Cursor, Claude, ChatGPT, …       |

There is no `api.connect.trypost.it`. A key on `/mcp` returns **403**. An OAuth token is not a substitute for a key on `/api`.

## API keys

Create them under [API keys](https://connect.trypost.it/api-keys). The plain token is shown **once**. Connect stores a hash — if you lose it, create another.

<Warning>
  Keep the key on a server. Do not ship it in a browser app or a public repo.
</Warning>

Keys belong to your Connect account. Every call acts on that account. One customer, one account — no workspaces.

How to send the header, create keys from the API, and what errors look like: [API overview](/docs/api-reference/introduction).

## Agents

Add `https://connect.trypost.it/mcp`, click Connect, and sign in at [connect.trypost.it](https://connect.trypost.it). Revoke assistants under [Settings → MCP](https://connect.trypost.it/settings/account/mcp).

Client-by-client setup: [MCP](/docs/guides/mcp).