Overview
Mino uses different authentication methods depending on how you’re accessing the API:| Access Method | Auth Type | When to Use |
|---|---|---|
| REST API | API Key | Direct HTTP requests from your code |
| MCP Integration | OAuth 2.1 | AI assistants (Claude, Cursor) |
REST API Authentication
All REST API requests require an API key passed in theX-API-Key header.
Getting Your API Key
- Go to the API Keys page
- Click “Create API Key”
- Copy and store your key securely
Using Your API Key
Include theX-API-Key header in every request:
Environment Variables
Store your API key in an environment variable:.env file:
MCP Authentication
The MCP endpoint uses OAuth 2.1 for secure authentication with AI assistants.How It Works
- Add the Mino MCP server to your AI client configuration
- When you first use the tool, a browser window opens for authentication
- Log in with your Mino account
- Authorization is cached for future sessions
Configuration
- Claude Desktop
- Claude Code
Add to your Claude Desktop config:Config location:
- macOS:
~/Library/Application Support/Claude/claude_desktop_config.json - Windows:
%APPDATA%\Claude\claude_desktop_config.json
You need a Mino account with an active subscription or credits. Sign up here.
Error Responses
401 Unauthorized
Returned when the API key is missing or invalid.- Verify your API key is correct
- Check the header name is
X-API-Key - Ensure no extra whitespace around the key
403 Forbidden
Returned when authentication succeeds but you lack credits or an active subscription.Security Best Practices
Use Environment Variables
Never hardcode API keys in source code
Rotate Keys Regularly
Regenerate keys periodically and after team changes
Limit Exposure
Use separate keys for development and production
Monitor Usage
Review API usage in your dashboard for anomalies