MCP

Both the Personal and Commercial editions can expose what the current user can do on the website through MCP, for clients that support remote HTTP MCP.

The API key is the identity. A key can only access data owned by that user. An administrator's key can also manage the system.

Endpoint and authentication

https://your-domain.com/mcp

The transport is Streamable HTTP. The API key is on User Center → Profile. Regenerating it invalidates the previous key immediately.

Send this header:

Authorization: Bearer YOUR_API_KEY

Enter the address above in the client and include this header. A missing or unknown key returns 401. A disabled account returns 403. Both responses come from the application.

Account details include the password and security answers, and the client can read them. Keep the key inside your own client, and do not paste it into a public chat or screenshot.

What you can do

Both editions can handle everyday account and share-page work, for example:

• List, add, update, and delete your own accounts, and run a check again
• Read an account's security-info history, and clear recorded backup emails
• Create and manage share pages, and reset a share password or expiry time
• Check your own task queue and login history, and maintain the share-page domain allowlist

The Commercial edition can also organize accounts by tag, edit share templates, check balance and redeem top-up codes, rent accounts, and create redemption codes. The Personal edition does not include these.

An administrator's key can also manage users, all accounts, share pages, the proxy pool, and system settings.