Agents & MCP
API keys for headless & CI access
For headless environments and CI where a browser can't open for OAuth, mint a manual bearer API key in Settings and pass it as an Authorization header to the Actuant MCP server.
Last updated 2026-07-18
The standard MCP flow uses OAuth in your browser. When that's not possible — CI jobs, servers, containers — use a manual API key instead.
Minting a key
- 1
Open Settings → Agents & MCP
In your Actuant dashboard.
- 2
Create a key
Name it (e.g. "CI"), then copy the act_… secret. It's shown once — store it in your secret manager.
- 3
Send it as a bearer header
Pass Authorization: Bearer act_… on requests to the MCP endpoint. No credential returns 401.
Managing keys
Every key is listed in Settings with its name and last-used time. Revoke any key instantly — it stops working immediately. OAuth-connected agents are listed and disconnectable in the same place.
Treat act_ keys like passwords
Keys are hashed at rest and never shown again after creation. Rotate them like any other secret, and use a distinct key per environment so you can revoke one without breaking the others.
Keep reading
Connect an agent
Step-by-step: add the Actuant MCP server to Claude Code, Cursor, VS Code, or Codex CLI, complete the OAuth sign-in, and verify all 13 tools are available.
Tools reference
The complete Actuant MCP tool list: eight free tools (scan_app, get_scan, audit_app, get_audit, list_apps, scan_history, explain_check, get_account) and five plan-gated tools for the Launch and Portfolio plans.
MCP overview
Actuant exposes its launch-readiness audit over the Model Context Protocol so agents like Claude Code, Cursor, and Codex can audit apps, read reports, and fix findings as tool calls.