# MCP Authentication

Understand Screpy MCP OAuth sign-in, permissions, tokens, and access revocation.

Screpy MCP uses OAuth, the browser-based sign-in method used by compatible AI clients. You do not need to create, copy, or manage an MCP token yourself.

## How Screpy MCP sign-in works

### Your AI client asks to connect

After you add `https://mcp.screpy.com`, the client discovers that Screpy requires OAuth and opens a sign-in page or shows an **Authenticate** action.

### Sign in to the right Screpy account

Use the account that owns the projects you need, or that has been invited to those projects. The connection cannot access projects outside that account's permissions.

### Review and approve access

Approve the connection in your browser. Screpy gives the AI client a dedicated MCP authorization with the `mcp:use` permission.

### Return to your AI client

The client stores and refreshes its OAuth token. It can now discover Screpy tools and use the projects available to your account.

## What the connection can access

Screpy checks your permissions whenever a tool runs. The connection can use projects you own and projects shared with you, but it cannot see other account data.

Actions still need clear intent. Screpy does not create, update, delete, or start a crawl unless you explicitly ask. High-impact actions also require confirmation.

MCP OAuth and REST API keys are different

A Screpy REST API key cannot connect an MCP client. An MCP OAuth token also cannot be used with the Screpy REST API.

## Remove an AI client's access

### Open Connected Apps in Screpy

Sign in to Screpy and open [Connected Apps](/content/docs/guides/account-settings/connected-apps/index.html).

### Find the AI client you connected

Look for the client or connector you authorized, such as ChatGPT, Claude, Codex, Cursor, VS Code, or Gemini CLI.

### Revoke the connection

Remove its access. The client cannot use Screpy again until you connect and approve it again.

## If you signed in to the wrong account

Disconnect or remove Screpy from your AI client's MCP settings, then add it again and complete OAuth with the intended Screpy account. If the client still shows old projects, restart it or start a new chat after reconnecting.