# Connect a service (API key)

> Use an API key bearer token for headless automation on the same MCP endpoint.

Product: Clad MCP
Source: https://docs.useclad.ai/mcp/connect-service

---

For headless automation, the MCP endpoint accepts the same API keys as the
GraphQL API. Create a key in **Settings → API**, choose its scopes, and send it
as a bearer token:

```
Authorization: Bearer clad_mk_...
```

The key's scopes decide which tools the credential sees (see
[Scopes & the tool list](#scopes--the-tool-list)). Use least-privilege keys:
a read-only key for reporting agents, a write key only where the automation needs
to make changes.

Keep API keys backend-only — never ship them in browser, mobile, or agent config
that a customer could read. For anything a person drives interactively, prefer
[OAuth](#connect-an-agent-oauth).