Skip to main content

Authentication

All API requests require an API key sent in the Authorization header.

Getting an API key

  1. Log in to app.journeybee.io
  2. Go to Settings > API Keys
  3. Click Create API Key
  4. Choose permissions:
    • Read — access to GET endpoints
    • Write — access to POST, PATCH, and DELETE endpoints
  5. Copy the key immediately — it won’t be shown again

Using your API key

Include the key in the Authorization header using either format:

Using your API key with the MCP server

The same API key authenticates the MCP server. Point any MCP-capable client (including open-source models, headless runtimes, and CI) at your region’s /mcp endpoint with Authorization: Bearer YOUR_API_KEY — for example https://mcp.journeybee.io/mcp. See Connect with an API key for client config. This requires the API & MCP module (api_mcp) on your company.

Permissions

A key with only Read permission will receive a 403 Forbidden response on write operations.

Rate limits

Requests are rate-limited to 500 requests per minute per API key. Exceeding this returns a 429 Too Many Requests response with a Retry-After header.

Error responses

Missing or invalid API key:
Insufficient permissions: