Authenticate with an API key

Send an EmitKit API key to the MCP server, and keep it safe.

Send the key in one of these request headers:

Authorization: Bearer emitkit_REPLACEWITHKEY

X-API-Key: emitkit_REPLACEWITHKEY

If both headers are present, they must carry the same key; otherwise tool calls fail with an authentication error. Keys in the URL are never read.

The key decides what the agent can do: it writes events to the key’s Project and can identify and erase users in the key’s Organization. Give each agent or integration its own key, so you can rotate or revoke one without touching the others.