Authentication

Connect with an API token or authorize your workspace URL through OAuth.

API token

In Console → MCP, create a token and copy the command for your client. The token is shown once and can be revoked at any time.

Claude

claude mcp add --transport http cubeshell \
  https://api.cubeshell.com/mcp/c/cn_your_connection_id \
  --header "Authorization: Bearer csh_mcp_your_token"

Connection URL

Add the workspace URL without a token. Your client opens a browser so you can sign in and approve the connection once.

Claude

claude mcp add --transport http cubeshell https://api.cubeshell.com/mcp/c/cn_your_connection_id

One workspace per connection

Add each workspace separately. The URL selects the workspace; tools never accept a workspace ID as input.

Check the connection

Ask your agent: How many Cubeshell credits do I have?

Security

A connection URL is a non-secret workspace locator. Never put an API token in a URL. Cubeshell stores only its digest, checks access on every request, and blocks it after token revocation, membership removal, or a connection pause.

Introduction

Email Verification