Keep credentials in headers, not prompts.

Every request to the hosted MCP endpoint requires a valid HumanDesign.ai API key. The Free plan includes the four core MCP tools and 100 calls each month.

Bearer authentication

Authorization: Bearer $HDAI_API_KEY

X-Api-Key authentication

X-Api-Key: $HDAI_API_KEY

Key safety

• Store keys in an environment variable or your client's protected secret store.
• Never commit a key to source control or paste it into a public prompt.
• Use a server-side proxy when a browser application cannot keep secrets.
• Manage keys, billing, and usage at my.humandesign.ai.

Authentication errors