Use API tokens

Once you've created a token, you can use it to authenticate API requests and monitor its activity.

Bearer authentication

Include your token in the Authorization header of HTTP requests:

Authorization: Bearer sk_user_your_token_here

With cURL:

curl -H "Authorization: Bearer sk_user_..." https://app.mcpmarket.com/api/v1/me

What tokens can't do

Some actions need you to be signed in to MCP Market, because they're hard to undo or because a person should take them. A token can't:

• Create or delete an organization
• Transfer ownership
• Change a member's role
• Add or invite someone as an admin (adding or inviting members still works)
• Change the organization's URL slug
• Create, list, or revoke API tokens
• Accept an invitation to join an organization
• Manage your marketplace storefront or listings
• Pull updates for a purchased marketplace skill
• Deploy or manage hosted MCP servers, including their secrets
• Add, view, or remove MCP server connections, or finish connecting one
• Remove an MCP server from the organization

Requests that try are refused with a 403 or 404 error. Make these changes from the dashboard instead.

A token only works for the organization it was created for.

Tracking token usage

The API Tokens page lists all your tokens with their name, prefix (for identification), and creation date. Each token shows when it was last used.

Revoking a token

Related