API keys, OAuth & MCP access
Developer access layer — API keys for external SDK integrations, OAuth 2.0 for MCP clients, and per-team MCP tool connections backed by `team_app_integrations`.
What it is
Aden exposes a developer access layer with three entry points:
-
API keys — long-lived tokens scoped to a team. Use them to read or write tracks, albums, and team data from your own scripts, white-label apps, or backend services.
-
OAuth 2.0 / MCP — authorize an AI tool (such as Claude Desktop or any MCP-compatible client) to access your Aden account on your behalf. You control how long the authorization lasts.
-
MCP integrations — connect third-party services (e.g. Google Drive, Spotify) to your team's AI composer so it can use their tools directly during a chat session.
Using it
Create an API key
- Open your team and go to API in the sidebar.
- Click New API key, give it a name (e.g. "Website integration"), and pick
the scopes you need:
read:tracks/write:tracksread:albums/write:albumsread:teams
- Copy the key — it is shown once. Store it securely (a secret manager, not source code).
- Pass the key as a
Bearertoken in theAuthorizationheader of every request.
Revoke a key
On the same API page, click Revoke next to any key. The key is deactivated immediately. A record is kept for audit purposes.
Report a leaked key
If you find an Aden key in the wild (a public GitHub repo, a Slack message), submit it to the public revocation endpoint — no account needed. The key's team is notified by email with a one-click restore link valid for 24 hours in case the report was a false alarm.
Authorize an MCP client (OAuth)
When an AI assistant asks to connect to Aden:
- You are redirected to the Aden OAuth consent screen at
/oauth/authorize. - Review the client's name and requested permissions.
- Choose how long the authorization should last: 1 day, 30 days, 1 year, or indefinitely.
- Click Allow. The client receives an access token and can now query Aden on your behalf within the granted scopes.
To revoke OAuth access, rotate or remove the associated token from your account settings.
Manage MCP tool integrations for a team
- Open your team's Integrations page.
- Connect a third-party service (OAuth flow managed per provider).
- In the integrations settings, open Tools for any connected service to see the live tool catalog and enable or disable individual tools.
- Disabled tools are never surfaced to the AI composer, even if the service offers them.
Analytics & insights
Dashboards showing website traffic, streaming performance, and chart positions for teams, tracks, albums, and playlists — augmented by Songstats data and Google Trends signals for release planning.
Artist profile — gear, skills & inspiration
Per-artist extras that enrich the team profile — a personal gear inventory, reusable skill/instruction snippets, curated inspiration sites, and interview management.