Authentication
All API requests require an API key sent in theAuthorization header.
Getting an API key
- Log in to app.journeybee.io
- Go to Settings > API Keys
- Click Create API Key
- Choose permissions:
- Read — access to GET endpoints
- Write — access to POST, PATCH, and DELETE endpoints
- Copy the key immediately — it won’t be shown again
Using your API key
Include the key in theAuthorization header using either format:
Using your API key with the MCP server
The same API key authenticates the MCP server. Point any MCP-capable client (including open-source models, headless runtimes, and CI) at your region’s/mcp endpoint with Authorization: Bearer YOUR_API_KEY — for
example https://mcp.journeybee.io/mcp. See
Connect with an API key
for client config. This requires the API & MCP module (api_mcp) on your
company.
Permissions
A key with only Read permission will receive a
403 Forbidden response on write operations.
Rate limits
Requests are rate-limited to 500 requests per minute per API key. Exceeding this returns a429 Too Many Requests response with a Retry-After header.