Option 1: OAuth (recommended for MCP)
MCP clients like Claude Code and Cursor support OAuth 2.1 natively. Just set the MCP server URL — the client handles the rest via a browser login popup.- Discover the OAuth server via
/.well-known/oauth-authorization-server - Open a browser window for you to sign in to Parse
- Exchange the authorization code for an access token (PKCE)
- Automatically refresh tokens when they expire
Option 2: API Key
For REST API calls, scripts, or MCP clients without OAuth support, use an API key in theX-API-Key header:
Getting your API key
Dashboard:- Log in to parse.bot
- Go to Settings > API Key
- Click Generate API Key
- Copy the key immediately — it’s only shown once
MCP with API key
If your MCP client doesn’t support OAuth, pass the key in headers:Only one API key is allowed per account. To rotate your key, delete the existing one and generate a new one.
Key limits
- One key per account — delete and regenerate to rotate
- Key is shown once — store it securely when first generated
- API key endpoints (
GET/POST/DELETE /account/api-key) require JWT authentication, not API key auth