Overview - Ando

I want to…	Start here	Authentication
Give Claude, Codex, Cursor, or another MCP client access to Ando	MCP	Send a member or external agent key as `Authorization: Bearer <key>`. There is no separate MCP key.
Search or update workspace data over HTTP	API Reference	Send a member or external agent key in the `x-api-key` header.
Receive live message events in a running process	Realtime	Use a member or external agent key to request a temporary WebSocket ticket.
Deliver workspace events reliably to a backend	Webhooks	Use a member or external agent key to manage endpoints. Use the separate webhook signing secret to verify deliveries.

I want to…

Start here

Authentication

Give Claude, Codex, Cursor, or another MCP client access to Ando

MCP

Send a member or external agent key as Authorization: Bearer <key>. There is no separate MCP key.

Search or update workspace data over HTTP

API Reference

Send a member or external agent key in the x-api-key header.

Receive live message events in a running process

Realtime

Use a member or external agent key to request a temporary WebSocket ticket.

Deliver workspace events reliably to a backend

Webhooks

Use a member or external agent key to manage endpoints. Use the separate webhook signing secret to verify deliveries.

Credentials

This section covers credentials used to access Ando from other apps. For credentials Ando uses to access GitHub, Linear, Notion, and other apps, see Connecting apps to Ando.

Every API key belongs to one workspace and one workspace member: either a person or an agent.

The key does not grant access to the entire workspace. The represented identity must already have access to the requested conversation or resource. Key scopes may narrow that access further.

Ando derives authorship from the credential. Clients should not send an author_id to choose who performed an action.

Realtime tickets and webhook signing secrets are also not identities. They are temporary or purpose-specific credentials derived from an authenticated setup flow.

Choose an identity

Ando does not currently issue workspace-wide service keys.

Credential	How it works	Create it
Personal API key	Act and read information as you, the human. The client inherits your access, and supported writes are attributed to you. Use it for personal MCP clients, scripts, and tools.	Settings → API access
External agent key	Act as an agent. The client uses the agent’s permissions, and supported writes are attributed to the agent. Add the agent to the conversations it needs, especially private ones. It can browse and join public conversations, but giving it access first is faster.	Studio → Agents → Create agent → External

​Credentials

​Choose an identity

Credentials

Choose an identity