How-to

Issuing an MCP key

Issuing an MCP key ​

Issuing an MCP key lets an external agent work in one project as you. MCP here means Model Context Protocol.

Prerequisites ​

  • You are an accepted member of the team.
  • The team has a project. An empty team cannot receive a key.
  • A READONLY member can tick only the READ column. That member cannot grant writes.
  • The key is never wider than you. If you are removed from the team, blocked, or given a narrower role, the key narrows with you.

One key is bound to one person, one team, and one project. A second project needs a second key. The client does not send a team header: the team and the project are stored on the key.

Secret

The secret is shown once. The database stores only its hash. A lost secret cannot be restored: issue a new key and revoke the old one.

Steps ​

  1. Sign in to the app.
  2. Open your profile from the account menu.
  3. Open the MCP keys tab.
  4. Under Create key, select a Team.
  5. Select a Project. The project list stays closed until a team is selected.
  6. In the permissions table, tick the checkboxes for the entity-and-action pairs the agent needs. Select all ticks one column, not the whole table.
  7. Press Create key.
  8. Copy the secret with Copy. The secret starts with cqa_mcp_ and then 32 hexadecimal characters.

The key appears in Your keys with status ACTIVE. The Hint column shows the prefix and the last four characters of the body, not the whole secret. Permissions lists the pairs you ticked.

An empty set of checkboxes creates a key that cannot call anything. The client still shows the full call list. The refusal arrives when the agent calls.

A cell in the table is a catalog pair. Not every pair has a registered call. Delete, mass update, test accounts, team membership, and utils have no call, even if you tick the cell. The registered list is MCP calls.

A team administrator changes the custom property catalog. A checkbox on the key does not widen that.

Result ​

The agent can connect with this secret only to the project you chose. Next: Connecting an agent.

Version 1.0.0 · Last updated 2026-09-30

Did this page help?