Without a browser

Signing in and approving needs a browser to redirect through, so it does not suit a command-line tool, a script or an unattended job. For those, send a Nuvelics API key with each request instead. This is not a fallback: it is the right credential for a caller that cannot complete an interactive sign-in.

Get a keyCopy Anchor Link

An owner or admin creates a service key under API keys in organization settings; members and viewers do not see that tab. A service key acts for the organization rather than as a person, and it is capped to the permissions it was created with, not to the permissions of whoever uses it. The steps are in API keys. A key is shown once, when you create it.

Send itCopy Anchor Link

Attach the key as an x-api-key header on requests to the server URL from Connect a client. In a client that reads an mcpServers configuration, the entry looks like this, with your own key in place of the placeholder:

{
  "mcpServers": {
    "nuvelics": {
      "url": "https://api.nuvelics.com/api/tenant/mcp",
      "headers": {
        "x-api-key": "<your API key>"
      }
    }
  }
}

The organization's MCP switch still applies: with it off, a key is refused like any other credential. See MCP.

Tools a key cannot useCopy Anchor Link

Some tools record who acted: the person who created an output, who filed an article, who asked for a draft, who kept or discarded one. Others read something that belongs to one person, or serve only the tools that record. A service key acts as the organization, not as a user, so it is not a person to record or to read for, and these tools refuse a static key:

• Outputs: add_story_output, regenerate_story_output, request_story_output_claim_check, accept_story_output_draft, discard_story_output_draft.
• Filing and pushing: push_article_to_cms, push_story_to_nrcs, list_nrcs_push_targets.
• Story elements: dismiss_story_element, restore_story_element.
• Pitch building: preview_pitch, get_pitch_request.

An unattended agent can still read, and still see exactly what would be filed with preview_article_for_cms; it cannot file it. Pitches a person began as drafts can be changed only by the person who created them, so a service key cannot approve, dismiss or submit someone else's draft either.

To use any of these tools, connect an assistant interactively as described in Connect a client.

Other ways to sign in without a browser on handCopy Anchor Link

The nuvelics command-line tool signs in with a code you enter at a URL in any browser, including one on another device, and works for any role. See Sign in to the command line.

An MCP client with no credential at all does not need a key either: the browser sign-in is how it gets one.