Public API

Connect an AI assistant (MCP)

Create an API key with only the scopes the assistant needs, then give the client the address https://api.mosaqo.app/v1/mcp with that key as a bearer token. The assistant can do exactly what the key allows and nothing else, and you can disconnect it at any time under Bulk & API.

Reviewed August 20, 2026

Steps

1. Open Bulk & API → API keys and create a key. Grant read-only scopes first; you can issue a second key with write scopes once you trust what the assistant does.
2. Copy the endpoint from the AI assistants (MCP) panel on the same screen.
3. In the assistant, add a server with that address and send the key as an Authorization: Bearer header. Most clients take a JSON block with url and headers.
4. Some connectors ask you to sign in to Mosaqo instead of pasting a key. That flow shows you who is asking, which workspace it would reach and what it could do, before anything is granted — only an owner or an admin can approve it.
5. Ask the assistant what it can do. It will list the tools your key allows, which is the quickest confirmation that the connection is scoped the way you meant.

How to check it worked

Ask for something only this workspace would know — how many codes you have, or how a survey is doing. An answer with your real names and numbers means the connection works; a refusal naming a scope means the key is narrower than the question.

What usually goes wrong

• Granting write scopes on the first key. Start read-only and widen it when you know what the assistant does with it.
• Expecting it to read what people wrote in a survey. Those answers are never returned to a key or an assistant — the scores and counts are, the sentences stay in the inbox.
• Expecting it to delete a code. It cannot: destroying the redirect behind a printed code is irreversible, so an assistant is offered archiving instead, which reverses.
• Forgetting a connection. An assistant connected through sign-in keeps access until it is disconnected under Bulk & API, exactly like a key kept until it is revoked.