MCP
How Claude Code and Cursor reach one workspace.
Endpoint
Each space exposes POST /api/mcp/:spaceId. The protocol is streamable HTTP JSON-RPC: initialize, tools/list, and tools/call. The tools are ask_agent, search_files, read_memory, write_memory, generate_voiceover, and request_call. request_call places nothing until confirm is yes. GET returns 405.
Keys
A member mints a key on the workspace page. The secret is shown once and stored as a SHA-256 hash. Send it as Authorization: Bearer. A key for one space does not open another. ask_agent spends one credit and uses the mock reply when no model key is set.