Personal API keys
Mint and revoke personal API keys for scripts and CLI tools that act on your behalf.
A personal API key is a long-lived credential that lets a script, CLI, or any other programmatic client act in Monad as you. Use a key when an OAuth-style consent flow isn't practical — for example, a Python script that runs on a schedule.
When to use a key vs. OAuth
- Connecting Claude desktop, Claude iOS, ChatGPT, or another named app? Use OAuth — those apps know how to walk you through it. See Use Monad with Claude and Use Monad with ChatGPT.
- Writing your own script or CLI? Mint an API key.
Mint a key
- Open Settings → Personal → API keys & apps.
- Tap New API key. Pick a name that describes what the key is for — "daily-report.py" is better than "key1".
- The plaintext key is shown once. Copy it now — Monad never shows it again. If you lose it, revoke and mint a new one.
Use the key
Pass the key in the Authorization header on requests to the MCP
endpoint:
POST https://<your-workspace>.onmonad.ai/mcp
Authorization: Bearer <your-key>
Content-Type: application/json
Keys minted from Settings carry the mcp scope only — they unlock
the MCP catalogue and nothing else. They are not a general-purpose
REST credential. For other integrations (custom dashboards,
internal tooling, etc.), generate a scoped key via the dedicated
admin tools instead.
Revoke a key
Settings → Personal → API keys & apps lists all your active keys with the first dozen characters of each (so you can identify which one is which). Tap Revoke next to any row. The next request that uses the key will fail immediately.
Mint a fresh key whenever you suspect one might have leaked — it's free and takes ten seconds.