# Auth.md — Clipia authentication for agents

Clipia (https://clipia.ai) exposes AI image & video generation through a REST API and
a remote MCP server. Two authentication methods are supported.

## 1. API key (simplest)

1. Sign in at https://clipia.ai and open the Developer Console (https://clipia.ai/developer).
2. Create an API key. Keys are prefixed:
   - `clipia_live_*` — production (real credits).
   - `clipia_test_*` — sandbox (no charge, mock results).
3. Send it on every request:
   - REST: `Authorization: Bearer clipia_live_...` (or `X-Api-Key: clipia_live_...`)
   - MCP:  `Authorization: Bearer clipia_live_...`

## 2. OAuth 2.1 (for MCP clients / connectors)

- Authorization server (issuer): https://api.clipia.ai
- Metadata: https://api.clipia.ai/.well-known/oauth-authorization-server
- Protected resource: https://mcp.clipia.ai/mcp
- Resource metadata: https://clipia.ai/.well-known/oauth-protected-resource
- Flow: authorization_code + PKCE (S256). Dynamic Client Registration supported at
  https://api.clipia.ai/oauth/register.
- Scopes: `mcp`

## Endpoints

- REST API base: https://api.clipia.ai/v1
- MCP server (streamable-http): https://mcp.clipia.ai/mcp
- OpenAPI: https://clipia.ai/openapi/clipia-v1.json
- Docs: https://clipia.ai/docs
- This file: https://clipia.ai/auth.md

## Billing

Usage is billed in credits from the connected Clipia account. Every generate call
returns its cost; check the balance with the `get_balance` MCP tool or
`GET https://api.clipia.ai/v1/account`.

## Support

support@clipia.ai