sign_up, get_api_key
For agents whose MCP client can't sign in: the user approves an API key from a link, and the agent receives it.
https://api.finic.ai/mcp/keys is for clients that can't sign in with OAuth, such as headless scripts. The key passes through the agent, so prefer /mcp whenever the client supports sign-in.
- The agent calls
sign_upand shows the user the link (it works for 24 hours). - The user creates an account or signs in, and approves an API key: 30 days by default, or 1 hour, 1 day, 7 days, 90 days, 1 year or never.
- When the user says they're done, the agent calls
get_api_keyand receives the key, once. It stores it securely, such as inFINIC_API_KEY, and sends it as theAuthorizationheader or theapi_keyargument (the argument wins if both are sent).
The key is listed under API keys as "Agent: " and the agent's name; revoke it there anytime. Every other tool works on /mcp/keys too, with the optional api_key argument.
sign_up
| Input | Description |
|---|---|
agent_name | Optional. Shown to the user on the page, such as "Claude Code" |
company, use_case | Optional. The user's company, and what they want Finic for |
Returns signup_url (for the user), setup_code (for the agent only; never show it), expires_at and next_steps.
get_api_key
Takes setup_code. Call it after the user says they've approved, not repeatedly: repeated calls are slowed down.
status | Meaning |
|---|---|
pending | Not approved yet |
ready | With api_key (returned only this once), key_expires_at, organization and credit_usd |
already_taken | The key was already returned. If it's lost, create one in the Finic Portal |
declined | The user declined |
expired | The link is over 24 hours old, or the approved key wasn't taken within 24 hours. Call sign_up again |
invalid | Not a setup code from sign_up |