Connect with an API key

Use an API key when an app or server can't sign in through a browser: a script, a server-side agent, or an app that only takes a header. Everywhere else, signing in is simpler and safer.

Connect

Give the app the server address and your key as a bearer header:

https://data.upscrape.com/mcp

Authorization: Bearer UPSCRAPE_API_KEY

In an app that reads an MCP config file, that usually looks like this:

{  "mcpServers": {    "upscrape": {      "url": "https://data.upscrape.com/mcp",      "headers": {"Authorization": "Bearer YOUR_API_KEY"}    }  }}

Each app writes this slightly differently; its setup guide has the exact form.

Keep the key safe

• Put the key in the app's secret or environment setting, never in the server address.

• Make a key just for this app, so you can revoke it without touching anything else.

• Give it only what the app needs. A key can be limited to some platforms, to reading only, and to an expiry date; see Authentication.

• Never paste a key into a chat with an agent or a support request.

What the key needs

A key's platform limits apply to everything it does, including reading results.