Unkey MCP by usefulapi

io.usefulapiPublished by usefulapi.ioOfficial publisherv1.39.2Updated Nov 14, 2026

Manage API keys, identities, permissions, rate-limit overrides and verification analytics.

The publisher's own server: Ably MCP by usefulapi

VerifiedStreamable HTTPWeb executableSecurity & MonitoringData & Analytics

Overview

AI-generated overview

Hosted Unkey server that lets an assistant inspect and manage API keys, identities, permissions, rate-limit overrides and verification analytics.

What you can do
  • Check API health and look up keys by id or by plaintext secret
  • Read API namespaces, list keys under an API, and list identities with their metadata
  • List workspace permissions, roles, and rate-limit overrides per namespace
  • Run read-only SQL over key-verification analytics using public table aliases
  • Create APIs, keys and identities, update key settings and credits, revoke keys, and set rate-limit overrides
  • Report usage, request features, and manage the Pro or Pro+ subscription
When to use it
Useful when you want to ask questions about your Unkey workspace in natural language, such as which keys a customer holds, how many verifications passed recently, or which rate limits are overridden. Also suits issuing, updating or revoking keys and adjusting a single customer's limits without opening the Unkey dashboard.
Requirements
Remote streamable HTTP endpoint; no local install. Connect with the URL only and sign in through OAuth with your Unkey credentials on first connect; credentials are stored per user. A free plan allows 50 tool calls per month; paid plans raise the limit.
Before you install
Write tools create, change and revoke keys, identities and rate-limit overrides, and deleting a key permanently erases it when requested; confirm before running them. A newly created key's plaintext is returned only once. The server asks for your Unkey credentials at sign-in and proxies calls to Unkey. Usage is metered, and upgrades return Stripe checkout links that spend money; cancellations give no refund for the current period.

Installation

In SourceWeft

  1. Open Unkey MCP by usefulapi in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.usefulapi%2Funkey/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "unkey-by-usefulapi": {
      "type": "http",
      "url": "https://unkey.usefulapi.io/mcp"
    }
  }
}

README

Unkey MCP by usefulapi

Manage API keys, identities, permissions, rate-limit overrides and verification analytics. Hosted, no local install.

Live endpoint: https://unkey.usefulapi.io/mcp · Homepage: https://usefulapi.io

Connect

  • Claude (claude.ai, Desktop): open Customize → Connectors, click + Add → Add custom connector, and paste https://unkey.usefulapi.io/mcp.
  • Claude Code: claude mcp add --transport http unkey https://unkey.usefulapi.io/mcp, then run /mcp to log in.
  • VS Code: Add to VS Code.
  • Cursor and other clients: add the URL as a remote MCP server:
json
{  "mcpServers": {    "unkey": {      "url": "https://unkey.usefulapi.io/mcp"    }  }}

Add only the URL. Do not add an Authorization header or an API key to the client config: the server signs you in with OAuth, and the login page asks for your Unkey credentials.

Step-by-step setup, where to find your credentials, and FAQ: https://usefulapi.io/unkey/

On first connect you'll paste your Unkey credentials. They are validated, stored per-user, and scoped to you — no keys in config files.

Tools

ToolTypeWhat it does
unkey_livenessreadCheck API health
unkey_get_keyreadGet one key by id
unkey_whoami_keyreadLook up a key by its secret
unkey_get_apireadGet one API
unkey_list_api_keysreadList the keys of an API
unkey_list_identitiesreadList identities
unkey_get_identityreadGet one identity
unkey_list_permissionsreadList permissions
unkey_list_rolesreadList roles
unkey_list_ratelimit_overridesreadList rate-limit overrides
unkey_get_ratelimit_overridereadGet one rate-limit override
unkey_query_verification_analyticsreadQuery key-verification analytics
unkey_create_apiwriteCreate an API
unkey_create_keywriteCreate an API key
unkey_update_keywriteUpdate a key
unkey_update_key_creditswriteUpdate a key's credits
unkey_delete_keywriteDelete a key
unkey_create_identitywriteCreate an identity
unkey_set_ratelimit_overridewriteSet a rate-limit override
unkey_usage_statusmetaUsage status (free-tier meter)
unkey_request_featuremetaRequest a missing feature
unkey_upgrademetaUpgrade to Pro or Pro+
unkey_cancel_subscriptionmetaCancel the Pro subscription

read tools are read-only; write tools mutate data (clients should confirm them); meta tools report usage, manage your subscription or send a feature request.

Pricing

PlanPriceLimit
Free$050 tool calls / month
Pro$9/mo or $90/yr (2 months free)10,000 tool calls / month
Pro+$39/mo or $390/yr (2 months free)100,000 tool calls / month

Each paid plan covers this server only. Ask your AI to run unkey_upgrade and choose Pro or Pro+, billed monthly or yearly (it returns a Stripe Checkout link). If you already have Pro, ask to change it to Pro+. The change requires your confirmation, keeps your billing interval and charges the price difference for the rest of the period immediately. Cancel any time with unkey_cancel_subscription: your paid plan continues to the end of the paid period, with no refund for the current period, and asking to resume the same plan with unkey_upgrade before then undoes the cancel. Or write to [email protected].

License

MIT

Source: servers/unkey/README.md at commit f22f848

Tools

19

unkey_liveness

Check API health

Check that the Unkey API is reachable and the root key works. The only GET in the v2 surface. Unkey: GET /v2/liveness.

Takes no parameters.

unkey_get_key

Get one key by id

Fetch a key's metadata by its key id — name, owner, permissions, credits, rate limits and whether it is enabled. Read-only despite being a POST. Unkey: POST /v2/keys.getKey.

ParameterskeyIdrequireddecrypt

unkey_whoami_key

Look up a key by its secret

Given a plaintext API key, return which key it is and its metadata — without spending credits or recording a verification. This is the safe way to identify a key a customer sent you. Unkey: POST /v2/keys.whoami.

Parameterskeyrequired

unkey_get_api

Get one API

Fetch an API namespace by id. Read-only despite being a POST. Unkey: POST /v2/apis.getApi.

ParametersapiIdrequired

unkey_list_api_keys

List the keys of an API

List every key issued under one API, optionally narrowed to a single customer by externalId. Read-only despite being a POST. Unkey: POST /v2/apis.listKeys.

ParametersapiIdrequiredlimitcursorexternalId

unkey_list_identities

List identities

List identities — the end users or organisations your keys belong to. Read-only despite being a POST. Unkey: POST /v2/identities.listIdentities.

Parameterslimitcursorsearch

unkey_get_identity

Get one identity

Fetch a single identity with its metadata and shared rate limits. Read-only despite being a POST. Unkey: POST /v2/identities.getIdentity.

Parametersidentityrequired

unkey_list_permissions

List permissions

List the permissions defined in the workspace. Read-only despite being a POST. Unkey: POST /v2/permissions.listPermissions.

Parameterslimitcursorsearch

unkey_list_roles

List roles

List the roles defined in the workspace. Read-only despite being a POST. Unkey: POST /v2/permissions.listRoles.

Parameterslimitcursorsearch

unkey_list_ratelimit_overrides

List rate-limit overrides

List the per-identifier overrides in one rate-limit namespace. Read-only despite being a POST. Unkey: POST /v2/ratelimit.listOverrides.

Parameterslimitcursornamespacerequired

unkey_get_ratelimit_override

Get one rate-limit override

Fetch the override for one identifier in a namespace. Read-only despite being a POST. Unkey: POST /v2/ratelimit.getOverride.

Parametersnamespacerequiredidentifierrequired

unkey_query_verification_analytics

Query key-verification analytics

Run a read-only SQL query over key-verification analytics. The query must use one of the public aliases: key_verifications_v1, key_verifications_per_minute_v1, key_verifications_per_hour_v1, key_verifications_per_day_v1 or key_verifications_per_month_v1. Physical default.* table names are rejected, and results are scoped to your workspace. Unkey: POST /v2/analytics.getVerifications.

Parametersqueryrequired

unkey_create_api

Create an API

Create a new API namespace to issue keys under. Unkey: POST /v2/apis.createApi.

Parametersnamerequired

unkey_create_key

Create an API key

Issue a new API key under an API. The plaintext key is returned ONCE in the response and cannot be retrieved later unless recoverable is set. Unkey: POST /v2/keys.createKey.

ParametersmetanameapiIdrequiredrolesprefixenabledexpiresbyteLengthexternalIdpermissionsrecoverable

unkey_update_key

Update a key

Change a key's name, owner, metadata, expiry, roles, permissions or enabled state. Unkey: POST /v2/keys.updateKey.

ParametersmetanamekeyIdrequiredrolesenabledexpiresexternalIdpermissions

unkey_update_key_credits

Update a key's credits

Set, increment or decrement a key's remaining credits. Use set with no value for unlimited. Unkey: POST /v2/keys.updateCredits.

ParameterskeyIdrequiredvalueoperationrequired

unkey_delete_key

Delete a key

Revoke a key. By default this is a soft delete the key stops working but stays queryable; pass permanent to erase it. Unkey: POST /v2/keys.deleteKey.

ParameterskeyIdrequiredpermanent

unkey_create_identity

Create an identity

Create an identity — an end user or organisation that keys and shared rate limits attach to. Unkey: POST /v2/identities.createIdentity.

ParametersmetaexternalIdrequired

unkey_set_ratelimit_override

Set a rate-limit override

Set a custom rate limit for one identifier in a namespace — how you raise or lower a single customer's limit. Unkey: POST /v2/ratelimit.setOverride.

Parameterslimitrequireddurationrequirednamespacerequiredidentifierrequired

Version history

26
  1. v1.39.2LatestNov 14, 2026
  2. v1.39.1Nov 13, 2026
  3. v1.38.0Nov 12, 2026
  4. v1.37.3Nov 11, 2026
  5. v1.36.5Nov 8, 2026
  6. v1.36.4Nov 7, 2026
  7. v1.35.3Nov 5, 2026
  8. v1.35.2Nov 5, 2026
  9. v1.35.1Nov 4, 2026
  10. v1.35.0Nov 3, 2026
  11. v1.34.1Nov 3, 2026
  12. v1.33.0Nov 1, 2026
  13. v1.31.0Oct 31, 2026
  14. v1.30.0Oct 31, 2026
  15. v1.29.2Oct 30, 2026
  16. v1.29.0Oct 30, 2026
  17. v1.24.0Oct 26, 2026
  18. v1.21.3Oct 25, 2026
  19. v1.21.0Oct 25, 2026
  20. v1.20.0Oct 24, 2026
  21. v1.17.0Oct 23, 2026
  22. v1.16.4Oct 22, 2026
  23. v1.16.3Oct 21, 2026
  24. v1.11.1Oct 9, 2026
  25. v1.10.0Oct 9, 2026
  26. v1.0.0Sep 29, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

Other Usefulapi integrations