Authentication
Learn how MCP tokens work, how to manage them, and what scopes control access.
Bearer Token
Every MCP request must include a Bearer token in the Authorization header. Tokens start with mns_ followed by 32 random characters.
Authorization: Bearer mns_abc123def456ghi789...
- Tokens are scoped—each token only has access to the permissions you granted.
- Tokens can be revoked at any time from Settings → MCP Server.
- Tokens can optionally expire after 30 days, 90 days, 1 year, or never.
- If a token is compromised, revoke it immediately and generate a new one.
Token Management
Generate and manage your MCP tokens from the dashboard:
- Navigate to Settings → MCP Server in your dashboard.
- Click Generate Token and fill in a name, scopes, and expiry.
- The raw token is shown only once after generation—copy it immediately.
- You can revoke tokens at any time. Revoked tokens stop working instantly.
Scopes & Permissions
Scopes control what data your chatbot can access. Each scope grants access to specific capabilities:
| Scope | Access |
|---|---|
| read:transactions | View all transactions, summaries, and filters |
| read:wallets | View all wallet accounts and balances |
| read:budgets | View all budgets and budget status |
| read:goals | View all financial goals and progress |
| read:knowledge | Search product knowledge and financial resources |
| read:bills | View bill reminders (upcoming and recurring bills) |
| read:recurring | View recurring (scheduled) transactions |
| meta:whoami | View your own profile info and active token usage |
| notifications:receive | Receive notifications about bills, budgets, goals, and imports |
| write:transactions | Create, update, and delete transactions |
| write:budgets | Create, update, and delete budgets |
| write:goals | Create, update, and delete financial goals; deposit or withdraw goal funds |
| write:wallets | Create, update, and delete wallet accounts |
| write:bills | Create, update, and delete bill reminders |
| write:recurring | Create, update, and delete recurring transaction templates |
| ask:agent | Ask Moneysaurus questions in natural language (delegated, read-only) |