Skip to main content

Authentication Method

Canal 3 uses Bearer token authentication. Pass your Alana API key as the Bearer token when configuring your MCP client.

Required Scopes

Create an API key with mcp:read scope to access all read-only tools. Add feed:write if your agent needs to trigger feed generation.

Workspace Context

All MCP tool calls are scoped to the workspace associated with your API key. You cannot query products from a different workspace with the same key. To work with multiple workspaces, create one API key per workspace.

Creating API Keys

  1. Open your workspace in Alana
  2. Go to Settings → API Keys
  3. Click New API Key
  4. Enable mcp:read scope (and feed:write if needed)
  5. Copy the key — it is shown only once

Scope Matrix

Token Security

  • Never embed API keys directly in client-side code
  • Rotate keys regularly from Settings → API Keys
  • Use the minimum required scope for each integration
  • Revoke compromised keys immediately from the dashboard
Last modified on March 18, 2026