Model Context Protocol
Connect your agent to Cadensia.
The hosted MCP server is live. It speaks MCP Streamable HTTP
at https://cadensiastudio.com/mcp,
so any MCP-compatible client can call the same operations as the public API
with a per-account token.
Endpoint: https://cadensiastudio.com/mcp · Transport: Streamable HTTP · Verbs: POST, GET, DELETE · Methods: initialize, ping, tools/list, tools/call
What is MCP?
A standard way for agent hosts to call tools.
The Model Context Protocol (MCP) is an open standard that lets an agent host — Claude Desktop, Cursor, or any MCP-compatible client — discover and call a server's tools over a consistent protocol, instead of each host wiring up a bespoke integration. Cadensia's tools mirror its public API one for one.
Connect in 3 steps
From zero to tools/list.
-
Create an API token
Tokens are per account and scoped. In the dashboard at
/api_tokens, mint a token and copy the secret — it is shown once. Store it in your client's secret manager.Token creation happens in the dashboard — after you log in you will find it at
/api_tokens. -
Add the server to your MCP client
Add a Streamable HTTP server entry. The generic JSON shape below uses the
httptransport; theAuthorizationheader carries your token as a Bearer credential.{ "mcpServers": { "cadensia": { "type": "http", "url": "https://cadensiastudio.com/mcp", "headers": { "Authorization": "Bearer YOUR_API_TOKEN" } } } }The same entry is the Claude Desktop / Cursor variant — put it in the client's MCP config file (
claude_desktop_config.jsonfor Claude Desktop,.cursor/mcp.jsonfor Cursor):{ "mcpServers": { "cadensia": { "type": "http", "url": "https://cadensiastudio.com/mcp", "headers": { "Authorization": "Bearer YOUR_API_TOKEN" } } } }Replace
YOUR_API_TOKENwith the secret from step 1. Keep the token out of source control. -
Verify the connection
The MCP Inspector runs one method and disconnects. Point it at the hosted endpoint and list the tools:
npx --yes @modelcontextprotocol/inspector --cli https://cadensiastudio.com/mcp --transport http --header "Authorization: Bearer $CADENSIA_API_TOKEN" --method tools/listA valid token returns the fifteen tools. A missing or invalid token returns an HTTP
401, and the Inspector CLI exits with code3.
Agents can self-serve
Create an account, then discover and buy.
An agent with no account can create one over the API, then use the tools it unlocks. Sign-up, catalog discovery, and checkout are all Bearer-token operations:
-
POST /api/v1/registrations
Create an account and receive a restricted, scoped API token — the secret is returned once. Requires accepting the terms.
-
GET /api/v1/catalog
List the purchasable plans, credit packs, and one-time SKUs (
billing:read). -
POST /api/v1/checkouts
Start a checkout for a plan, credit pack, or one-time SKU (
billing:write); payment completes with Stripe.
Every request is scoped to the account behind the token. See the pricing page for what's available.
The tools
Fifteen tools, one per API operation.
Each hosted-MCP tool is a thin wrapper over the same public API v1 endpoint, and scope-checks against the token's scope set.
| Tool | API operation | Scope |
|---|---|---|
| get_account | GET /api/v1/me | account:read |
| import_product | POST /api/v1/products | products:write |
| list_products | GET /api/v1/products | products:read |
| get_product | GET /api/v1/products/{id} | products:read |
| start_generation | POST /api/v1/generations | generations:write |
| get_generation | GET /api/v1/generations/{id} | generations:read |
| list_compiled_videos | GET /api/v1/compiled_videos | videos:read |
| get_compiled_video | GET /api/v1/compiled_videos/{id} | videos:read |
| download_compiled_video | GET /api/v1/compiled_videos/{id}/download | videos:read |
| list_catalog | GET /api/v1/catalog | billing:read |
| start_checkout | POST /api/v1/checkouts | billing:write |
| list_scheduled_posts | GET /api/v1/scheduled_posts | posts:read |
| get_scheduled_post | GET /api/v1/scheduled_posts/{id} | posts:read |
| schedule_post | POST /api/v1/scheduled_posts | posts:write |
| cancel_scheduled_post | DELETE /api/v1/scheduled_posts/{id} | posts:write |
Scopes
A token carries an explicit scope set; a request that needs a scope the
token does not have returns 403.
A *:write scope implies the
matching *:read.
-
account:readRead the account and the usage/quota summary. -
products:readList and read products. -
products:writeImport products. -
generations:readRead generation status and outputs. -
generations:writeStart compiles and remixes. -
videos:readList, read, and download compiled videos. -
billing:readRead the purchasable catalog (plans, credit packs, one-time SKUs). -
billing:writeStart a checkout for a plan, credit pack, or one-time SKU. Implies billing:read. -
posts:readList and read scheduled posts. -
posts:writeSchedule and cancel posts. Implies posts:read.
Auth & security
Token-scoped, account-scoped.
Bearer authentication
Every request authenticates with a per-account API token sent as an
Authorization: Bearer header.
Session cookies rejected
The endpoint is never session-authenticated, so a cookie-only request
returns 401. Agents always
use a token.
Per-account scoping
A token can only see and modify records belonging to the account that created it — the same scoping the web app uses.
Scope enforcement
A valid token missing a tool's scope gets
403 insufficient_scope.
Rotate & revoke
Rotate by creating a replacement and cutting over, then revoke the old token. Revoking one token does not affect the others.
TLS only
Tokens are sent over TLS only, through the same proxy that serves
cadensiastudio.com.
MCP FAQ
Questions, answered.
What is the Cadensia MCP endpoint?
The hosted MCP server is a Streamable HTTP endpoint at https://cadensiastudio.com/mcp. It speaks JSON-RPC 2.0 and supports the POST, GET, and DELETE verbs.
How do I authenticate an MCP client?
Every request authenticates with a per-account API token sent as an Authorization: Bearer header. Create the token in your account settings at /api_tokens; the secret is shown once.
Can an MCP client use my browser session instead of a token?
No. Session cookies are never accepted — the endpoint is not session-authenticated, so a cookie-only request returns 401. Agents always use a Bearer API token.
What happens if my token is missing a scope?
Tools scope-check against the token's scope set. A valid token missing a tool's scope gets a 403 response with code insufficient_scope.
Which tools does the hosted server expose?
Fifteen tools, one for one with API v1: get_account, import_product, list_products, get_product, start_generation, get_generation, list_compiled_videos, get_compiled_video, download_compiled_video, list_catalog, start_checkout, list_scheduled_posts, get_scheduled_post, schedule_post, and cancel_scheduled_post.
How do I rotate or revoke a token?
From account settings at /api_tokens. Rotate by creating a replacement and cutting over, then revoke the old token; each token can be revoked individually and other tokens are unaffected.
Start connecting
Mint a token. Point your agent at Cadensia.
Create a scoped per-account token, add the server to your MCP client, and verify the connection with the Inspector.
Prefer tools in the browser? See how WebMCP works