Connect
Authentication
Two ways in: a restricted API key, or OAuth. The same key works on MCP and REST. Keys are created once and shown in full only then.
API key
Send Authorization: Bearer sk_scope_…. Create a key in Settings → API keys. Do not put a key in git, logs, URLs, or a shared chat.
OAuth
Claude and ChatGPT connector flows use https://scope.online/oauth.
Growth-only
A tier_locked error means the account is not on Growth. Relay upgrade_url and stop.
Scopes
A new key defaults to every grantable scope and every business. Narrow later without rotating the secret. A selected-business key cannot add new sites.
| Scope | Allows | Note |
|---|---|---|
read | Visibility, citations, competitors, and recommendations. | Always granted |
scan:run | Run scans and test prompts that draw on the check pool. | The only scope that spends |
prompts:write | Start or stop monitoring prompts. | Changes committed burn |
business:create | Add new sites to this account. | Requires an all-businesses key |
business:write | Generate drafts and mark recommendations done. | Never publishes to a site |
Next: connect a client.