---
title: "MCP server authentication for an internal agent"
url: "https://demo.myforumcat.com/q/105/mcp-server-authentication-for-an-internal-agent"
forum: "Demo"
question_number: 105
category: "General"
tags: ["Two-Factor Auth", "Uptime"]
status: "solved"
solved: true
votes: 8
replies: 7
views: 585
asked_at: "2026-07-26T11:22:59.765Z"
updated_at: "2026-09-18T22:19:25.763Z"
---

# MCP server authentication for an internal agent

Asked by Jane Cooper on 2026-07-26 · 8 votes

We are building an internal agent against the MCP server. Does it use the same API key as the REST API, or a separate credential?

## 7 replies

### Reply 1 (marked as the solution)

meow (Owner) · 2026-07-26 · 4 votes

Same API key as the REST API, scoped exactly the same way, an internal agent authenticates against the MCP server with no separate credential to manage.

### Reply 2

Ravi Patel · 2026-07-26 · 1 vote

Good to know, wired our internal agent up with the same key we use for REST calls.

### Reply 3

Sam Rivera (Agent) · 2026-07-26 · 2 votes

Worth mentioning the key scopes apply the same way over MCP too, a read only key cannot make writes through either surface.

### Reply 4

Laura Simmons · 2026-07-26 · 1 vote

Good to know, wired ours up the same way without issue.

### Reply 5

Mei Lin · 2026-07-26 · 1 vote

Appreciate the clarification on scopes carrying over, that was not obvious from the docs.

### Reply 6

Sam Rivera (Agent) · 2026-07-26 · 1 vote · In reply to Reply 1

If anyone hits a scope mismatch between REST and MCP, that would be a bug, please flag it.

### Reply 7

Sai Krishna · 2026-07-29 · 0 votes

Testing this demo forum as public member