Authentication

Creator Eagle API keys

API keys are the recommended credential for headless agents, Codex, CI, cron jobs, and cloud workspaces. Send the key as a bearer token:

Authorization: Bearer ce_your_api_key_here

Create the key under Settings → API keys and grant it the mcp:use scope. Each key belongs to the Creator Eagle workspace where it was created, and tool activity is attributed to that workspace.

Creator Eagle displays the plaintext key once and stores only a SHA-256 digest. Keep it in a secret manager, give separate clients separately named keys, and revoke credentials that are no longer used.

Revocation can take up to five minutes to reach an already-running Worker because successful verification is cached briefly.

WorkOS AuthKit OAuth

WorkOS AuthKit OAuth is intended for interactive desktop clients that can open a browser. It uses Creator Eagle's existing invite-only identity environment, so access is governed by the same WorkOS configuration as the app.

Access model

An API key needs mcp:use to connect. A valid key currently grants the complete MCP tool surface for its workspace, including creator sourcing, contact discovery, and export operations. Treat it as a privileged automation credential and grant it only to trusted agents.