c.l.cladDocs

Connect a service (API key)

View as Markdown

Use an API key bearer token for headless automation on the same MCP endpoint.

For headless automation, the MCP endpoint accepts the same API keys as the GraphQL API. Create a key in Settings → API, choose its scopes, and send it as a bearer token:

Authorization: Bearer clad_mk_...

The key's scopes decide which tools the credential sees (see Scopes & the tool list). Use least-privilege keys: a read-only key for reporting agents, a write key only where the automation needs to make changes.

Keep API keys backend-only — never ship them in browser, mobile, or agent config that a customer could read. For anything a person drives interactively, prefer OAuth.