Authentication

ECN has two authenticated surfaces, each with its own credential type.

Surface	Credential	Header
REST API	DRF auth token (`Token …`)	`Authorization: Token <token>`
MCP server	MCP API key (`ecn_mcp_…`)	`Authorization: Bearer ecn_mcp_<key>`

REST API tokens

Authenticate as a user and receive a token:

curl -X POST https://www.earthcare.network/api/v1/auth/login/ \
  -H "Content-Type: application/json" \
  -d '{"email": "you@example.com", "password": "••••••••"}'
# → { "token": "9a8b7c…" }

Send the token on every request:

curl https://www.earthcare.network/api/v1/auth/me/ \
  -H "Authorization: Token 9a8b7c…"

A token is scoped to your user. Workspace data is additionally scoped to the Organization you are a member of. Some endpoints (e.g. /credits/wallet/, /mcp/keys/) take an explicit organization_id — find yours in the organizations array returned by GET /auth/me/:

curl https://www.earthcare.network/api/v1/auth/me/ \
  -H "Authorization: Token 9a8b7c…"
# → { "organizations": [ { "id": "c623…", "role": "owner", ... } ] }

MCP API keys

Chat clients (claude.ai, Claude Desktop, ChatGPT, Grok) and Claude Code sign in to the MCP server with OAuth — no key needed; see Connect Claude, ChatGPT and Grok. Clients that cannot sign in (Cursor, scripts) use an API key prefixed ecn_mcp_. A key belongs to the member who created it, acts as them, and reaches every enterprise they belong to; it is shown only once at creation.

From the portal

Settings → Developers → Create key (open it). Copy the secret immediately.

Or via the API

curl -X POST https://www.earthcare.network/api/v1/mcp/keys/ \
  -H "Authorization: Token <your_ecn_token>" \
  -H "Content-Type: application/json" \
  -d '{"organization_id": "<org_uuid>", "name": "claude-code"}'

The MCP server (https://www.earthcare.network/mcp) accepts the key as Authorization: Bearer ecn_mcp_…, X-MCP-API-Key, or X-Api-Key. Revoke a key in Settings → Developers, or with DELETE /api/v1/mcp/keys/<key_id>/?organization_id=<org_uuid> (the organization_id is required).

An ecn_mcp_… key acts as you. Keep it out of version control and shared configs; prefer OAuth wherever the client supports it.

Get started

Concepts

Recipes

Self-host & develop

REST API tokens

MCP API keys

​REST API tokens

​MCP API keys

REST API tokens

MCP API keys