CORE supports two authentication methods for MCP access.

​
Methods

Follows the MCP specification for standard OAuth authentication.
  • Web-based authentication flow
  • Tokens auto-refresh and can be revoked
  • Best for production environments

​
2. API Key

Direct authentication using API keys from CORE dashboard.
  • Generate from CORE Dashboard → Settings → API Keys
  • Simple setup for development and testing
  • Include in Authorization header: Bearer your-api-key-here

​
Setup

See provider-specific guides for configuration:

​
Dashboard

Monitor authentication at core.heysol.ai → Settings → MCP