Agents & MCP

API keys for headless & CI access

For headless environments and CI where a browser can't open for OAuth, mint a manual bearer API key in Settings and pass it as an Authorization header to the Actuant MCP server.

Last updated 2026-07-18

The standard MCP flow uses OAuth in your browser. When that's not possible — CI jobs, servers, containers — use a manual API key instead.

Minting a key

  1. 1

    Open Settings → Agents & MCP

    In your Actuant dashboard.

  2. 2

    Create a key

    Name it (e.g. "CI"), then copy the act_… secret. It's shown once — store it in your secret manager.

  3. 3

    Send it as a bearer header

    Pass Authorization: Bearer act_… on requests to the MCP endpoint. No credential returns 401.

Managing keys

Every key is listed in Settings with its name and last-used time. Revoke any key instantly — it stops working immediately. OAuth-connected agents are listed and disconnectable in the same place.

Treat act_ keys like passwords

Keys are hashed at rest and never shown again after creation. Rotate them like any other secret, and use a distinct key per environment so you can revoke one without breaking the others.