Authentication and access

OAuth sign-inCopy Anchor Link

Airframe uses OAuth 2.1, following the MCP authorization specification:

1. Your client connects to https://mcp.airframe.ai/mcp and receives a 401 that points to Airframe's authorization server at auth.airframe.ai.
2. The client registers itself (dynamic client registration) and opens Airframe's sign-in page.
3. You sign in with your Airframe account and approve access.
4. The client receives a token for the Airframe MCP server only, and sends it with each request.

Sign in with the email you use on airframe.ai. If you've never signed in on the website, do that once first; that first sign-in sets up your account and team.

What your assistant can accessCopy Anchor Link

Your assistant acts as you, through Airframe's seven read-only tools. It can read the catalog, the practitioner network, and the market reports your team is entitled to. It can't change anything in Airframe, and usage counts toward your team's quotas.

Airframe only receives what your assistant sends in a tool call. It never sees your conversation history, memory, or files.

Revoke accessCopy Anchor Link

• In your client: disconnect or remove the Airframe connector. In Claude, open Customize → Connectors → Airframe → Disconnect. In Claude Code, run claude mcp logout airframe.
• For your organization: Claude Team and Enterprise Owners can remove the connector in Organization settings → Connectors.

API keysCopy Anchor Link

For headless agents, scripts, and CI where a browser sign-in isn't possible, you can authenticate with a personal API key instead. Create one in Airframe under Context → AI clients and send it in the X-API-Key header:

{
  "mcpServers": {
    "airframe": {
      "type": "http",
      "url": "https://mcp.airframe.ai/mcp",
      "headers": { "X-API-Key": "YOUR_API_KEY" }
    }
  }
}

Treat API keys like passwords: keep them out of source control and shared files. Market report tools require OAuth sign-in and aren't available with an API key.

Corporate networksCopy Anchor Link

If your network restricts outbound traffic, allow mcp.airframe.ai and auth.airframe.ai over HTTPS.