Authentication
Authenticate with Weely MCP and developer APIs.
Authentication
Weely developer access uses OAuth 2.1. The same access token works for MCP tools and REST. Dashboard API keys for simpler script access are coming soon.
Methods
| Method | Status | Use for |
|---|---|---|
| OAuth 2.1 (MCP) | Available | Cursor, Claude, ChatGPT, and other MCP clients |
| Bearer token on REST | Available | Authorization: Bearer … on /api/v1/... |
| API keys | Coming soon | Scripts and servers without a browser sign-in |
Authorization: Bearer YOUR_ACCESS_TOKENConnect an MCP host
MCP clients discover Weely’s authorization server, open a browser for login and consent, then call tools with your access token. You do not need a static API key for this flow.
Requirements
- A Weely account
- An MCP host (Cursor, Claude Code, ChatGPT, and similar)
- MCP URL:
https://dev.weely.ai/api/v1/mcp(local:http://localhost:4005/api/v1/mcp)
What happens
- Your MCP host connects to the Weely MCP URL.
- You sign in to Weely (if needed) and approve the requested scopes.
- The host receives an access token (and refresh token when supported).
- Tools and REST calls use that Bearer token.
Cursor example
{
"mcpServers": {
"weely": {
"url": "https://dev.weely.ai/api/v1/mcp",
"auth": {
"scopes": ["mcp", "short_url:read", "short_url:write", "analytics:read"]
}
}
}
}Do not set a static Authorization header for OAuth — that skips the browser consent flow. Many hosts register themselves automatically; you usually only need the URL and scopes.
Scopes
| Scope | What it allows |
|---|---|
mcp | Use Weely MCP tools (required for MCP) |
short_url:read | List and get short links |
short_url:write | Create, update, and disable short links |
analytics:read | Per-link analytics |
Request only the scopes your integration needs.
API keys (coming soon)
Static API keys for REST (and optional non-OAuth MCP use) are not available yet. A future guide will cover creating keys in the dashboard, rotating them, and which header to send.
Until then, use MCP OAuth for agents and the same access token for REST where your scopes apply.