Authentication Method
Canal 3 uses Bearer token authentication. Pass your Alana API key as the Bearer token when configuring your MCP client.Required Scopes
Create an API key with
mcp:read scope to access all read-only tools. Add feed:write if your agent needs to trigger feed generation.
Workspace Context
All MCP tool calls are scoped to the workspace associated with your API key. You cannot query products from a different workspace with the same key. To work with multiple workspaces, create one API key per workspace.Creating API Keys
- Open your workspace in Alana
- Go to Settings → API Keys
- Click New API Key
- Enable
mcp:readscope (andfeed:writeif needed) - Copy the key — it is shown only once
Scope Matrix
Token Security
- Never embed API keys directly in client-side code
- Rotate keys regularly from Settings → API Keys
- Use the minimum required scope for each integration
- Revoke compromised keys immediately from the dashboard