Endpoint: POST /api/mcp. Org keys are hashed in the database. The public sandbox key is •••••••• (Austin and Oakland, dry-run writes). Copy it from the MCP docs. GET /api/mcp/demo-key returns that credential to API clients. This page does not print it.
confirm: true or return needs_confirmation.live_sends_enabled.Idempotency-Key header.POST /api/oauth/token with client id unitclock_demo and the sandbox secret from the MCP docs. The secret is not shown here.Keys are stored as a hash. The plaintext is shown once. Revoked keys fail closed.
uc_live_mjkfUrQOVa · Agent key · org•••••••• · Public sandbox · demokey_demo · Demo agent · orgcurl -s "$ORIGIN/api/mcp" \
-H "Authorization: Bearer ••••••••" \
-H 'Content-Type: application/json' \
-H 'Accept: application/json, text/event-stream' \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'Replace the masked bearer with the sandbox key from the MCP docs.