MCP server authentication for an internal agent

Question

We are building an internal agent against the MCP server. Does it use the same API key as the REST API, or a separate credential?

Demo Team · Accepted Answer

Same API key as the REST API, scoped exactly the same way, an internal agent authenticates against the MCP server with no separate credential to manage.

Ravi Patel · Answer

Good to know, wired our internal agent up with the same key we use for REST calls.

Demo Team · Answer

Worth mentioning the key scopes apply the same way over MCP too, a read only key cannot make writes through either surface.

Laura Simmons · Answer

Good to know, wired ours up the same way without issue.

Mei Lin · Answer

Appreciate the clarification on scopes carrying over, that was not obvious from the docs.

Demo Team · Answer

If anyone hits a scope mismatch between REST and MCP, that would be a bug, please flag it.

Sai Krishna · Answer

Testing this demo forum as public member

MCP server authentication for an internal agent

Solution

7 replies