The MCP server uses the same API tokens as the REST API. Every request carries the token in the Authorization header; each tool checks the token holds the right ability before running.
Mint a token
- Open API tokens.
- Click Create token, name it (e.g. "Claude Code").
- Pick the abilities. Less is more - you can always mint another.
- Copy the value. It's shown once.
Set it in your client config (Authorization: Bearer ... for HTTP, AUTH_TOKEN env var for stdio).
Abilities
| Ability | Powers |
|---|---|
forms:read |
List, fetch forms; framework integration catalog |
forms:write |
Create, update, publish, archive, restore |
forms:test-email |
Send test autoresponder / notification emails |
submissions:read |
Read submissions, files, signed URLs, form stats |
submissions:write |
Update, delete, bulk action, mark spam |
submissions:export |
Inline JSON export (up to 500 rows) |
webhooks:read |
List webhooks and deliveries (Pro and above) |
webhooks:write |
Create, update, delete, replay (Pro and above) |
surveys:read |
List, fetch surveys (Pro and above) |
surveys:write |
Create, update, publish, unpublish, delete surveys (Pro and above) |
polls:read |
List and fetch polls and results. |
polls:write |
Create and edit polls. |
polls:publish |
Publish and unpublish polls. |
polls:delete |
Archive and permanently delete polls. |
feedback:read |
Read feedback boards, posts, and the roadmap. |
feedback:write |
Create and edit boards and posts. |
feedback:moderate |
Change post status, merge, and moderate comments. |
feedback:publish |
Publish changelog announcements. |
feedback:delete |
Delete boards, posts, and comments. |
desk:read |
Read Response Desk threads and analytics. |
desk:reply |
Reply to customers from the Response Desk. |
desk:assign |
Assign, resolve, and route threads. |
desk:admin |
Manage Response Desk channels, macros, and settings. |
contacts:read |
List and fetch contacts. |
contacts:write |
Create, edit, merge, and delete contacts. |
action-classes:read |
List in-app survey triggers. |
action-classes:write |
Create and edit in-app survey triggers. |
segments:read |
List and preview audience segments. |
segments:write |
Create and edit audience segments. |
sdk-keys:read |
List website SDK keys. |
sdk-keys:write |
Create and revoke website SDK keys. |
displays:read |
Read survey impressions and delivery analytics. |
funnels:read |
List, fetch funnels (Pro and above) |
funnels:write |
Create, update, delete; add screens/blocks; set logic, score, pixels, CAPI (Pro and above) |
funnels:publish |
Publish or unpublish a funnel (Pro and above) |
funnels:analytics |
Funnel analytics and session lists (Pro and above) |
funnels:delete |
Restore and permanently delete funnels |
funnels:export |
Export funnel submissions |
funnels:reveal |
Reveal encrypted sensitive funnel fields |
links:read |
List, fetch short links (all plans) |
links:write |
Create, update, delete short links (all plans) |
links:analytics:read |
Read link analytics |
bio:read |
List and fetch bio pages. |
bio:write |
Create and edit bio pages and blocks. |
bio:analytics:read |
Bio page views, visitors, and clicks. |
bio:audience:export |
Export and sync the Bio audience (personal data) |
bookings:read |
Read bookings (pages, appointments, calendars) |
bookings:write |
Create and edit booking pages, manage appointments and calendars |
bookings:publish |
Publish and unpublish booking pages |
bookings:delete |
Delete, restore and permanently delete booking pages |
knowledge:read |
Read knowledge base |
knowledge:write |
Manage knowledge base and help center |
support:write |
Contact Formspring support |
automations:read |
List automations, runs, run details (all plans) |
automations:write |
Create, update, enable, disable, delete automations (all plans) |
automations:run |
Manually trigger or replay automation runs (all plans) |
billing:read |
Team summary, plan, usage, subscription state |
billing:write |
Manage subscription, coupons and credit packs (team owner) |
insights:read |
Read AI insights (Pro and above) |
insights:write |
Trigger regeneration (Pro and above) |
account:read |
Read profile, dashboard, search and setup guide |
account:write |
Update setup guide progress |
projects:read |
Read projects |
projects:write |
Create, edit and restore projects |
projects:delete |
Archive and permanently delete projects |
team:read |
Read workspace settings and theme |
team:write |
Change workspace settings, theme and address; create workspaces |
team:delete |
Delete the workspace |
members:read |
Read members and invitations |
members:write |
Invite, remove and change roles of members |
approvals:read |
Read approval requests |
approvals:write |
Approve or reject approval requests |
sso:read |
Read single sign-on settings |
sso:write |
Manage single sign-on |
email:read |
Read email sending settings |
email:write |
Manage SMTP and sending domain |
agency:read |
Read agency settings, client workspaces and the agency portal |
agency:write |
Manage client workspaces, project assignment and the agency portal |
tokens:read |
List your own tokens |
tokens:write |
Mint and revoke tokens (subset of caller's abilities) |
Abilities are independent of plan: you can mint surveys:write on Free, but survey tools are hidden from tools/list and return plan errors if invoked. The in-app setup wizard defaults to every ability except the sensitive ones: tokens:write, team:delete, billing:write, members:write, sso:write, email:write, funnels:reveal, and bio:audience:export. Tick those on only when the agent needs them.
Plan vs. ability
- Ability - does the token include what the tool needs?
- Plan - does the team's subscription include the product (surveys, funnels, webhooks, AI)? Paid-only tools, resources, and prompts are filtered out of list responses on Free.
- Policy - for mutations, does the user have the dashboard permission?
- Team - does the record belong to the calling team?
Miss any check and the tool refuses (or never appears in the client's tool picker).
Team scoping
Every token is minted in one team. Cross-team lookups return "not found" (not "forbidden") so an agent can't enumerate other teams. Switch teams in the dashboard before minting.
Revocation
Pull a token from API tokens in one click. The next call from the agent fails. No grace period.
Refusal message
Token missing required ability `submissions:write`.
The agent sees this in the tool result and either asks you, or falls back to a tool that's in scope.