Authentication

All API and MCP requests are authenticated using workspace-scoped API keys.

Creating an API key

Navigate to Settings → Security and click Generate API key. Copy the key immediately — it is only shown once.

Using the key

curl -H "Authorization: Bearer tp_abc123..." \
  https://fxxjgontcelumpkewibz.supabase.co/functions/v1/mcp-server/mcp

Keys are prefixed with tp_. The server hashes the key (SHA-256) and looks it up in the database to derive the workspace context.