Authentication

Every request (except GET /api/v1/tools) needs:

Authorization: Bearer clr_YOUR_API_KEY

X-API-Key: clr_... is also accepted.

Method	For	How to get it
API key (clr_…)	your code, agents, Claude Code, Cursor	Dashboard → API & connectors → Create key
OAuth token (clo_…)	Claude, ChatGPT and other MCP client connectors	automatically, when the user signs in and clicks "Allow"

• Keys are shown once and stored only as a SHA-256 hash.
• A revoked key stops working immediately.
• After 30 failed attempts in 10 minutes from the same address, requests are temporarily blocked.