Aden
Product

API keys, OAuth & MCP access

Developer access layer — API keys for external SDK integrations, OAuth 2.0 for MCP clients, and per-team MCP tool connections backed by `team_app_integrations`.

What it is

Aden exposes a developer access layer with three entry points:

  1. API keys — long-lived tokens scoped to a team. Use them to read or write tracks, albums, and team data from your own scripts, white-label apps, or backend services.

  2. OAuth 2.0 / MCP — authorize an AI tool (such as Claude Desktop or any MCP-compatible client) to access your Aden account on your behalf. You control how long the authorization lasts.

  3. MCP integrations — connect third-party services (e.g. Google Drive, Spotify) to your team's AI composer so it can use their tools directly during a chat session.

Using it

Create an API key

  1. Open your team and go to API in the sidebar.
  2. Click New API key, give it a name (e.g. "Website integration"), and pick the scopes you need:
    • read:tracks / write:tracks
    • read:albums / write:albums
    • read:teams
  3. Copy the key — it is shown once. Store it securely (a secret manager, not source code).
  4. Pass the key as a Bearer token in the Authorization header of every request.

Revoke a key

On the same API page, click Revoke next to any key. The key is deactivated immediately. A record is kept for audit purposes.

Report a leaked key

If you find an Aden key in the wild (a public GitHub repo, a Slack message), submit it to the public revocation endpoint — no account needed. The key's team is notified by email with a one-click restore link valid for 24 hours in case the report was a false alarm.

Authorize an MCP client (OAuth)

When an AI assistant asks to connect to Aden:

  1. You are redirected to the Aden OAuth consent screen at /oauth/authorize.
  2. Review the client's name and requested permissions.
  3. Choose how long the authorization should last: 1 day, 30 days, 1 year, or indefinitely.
  4. Click Allow. The client receives an access token and can now query Aden on your behalf within the granted scopes.

To revoke OAuth access, rotate or remove the associated token from your account settings.

Manage MCP tool integrations for a team

  1. Open your team's Integrations page.
  2. Connect a third-party service (OAuth flow managed per provider).
  3. In the integrations settings, open Tools for any connected service to see the live tool catalog and enable or disable individual tools.
  4. Disabled tools are never surfaced to the AI composer, even if the service offers them.
Was this helpful?

On this page