Skip to main content

Model Context Protocol

Connect your agent to Cadensia.

The hosted MCP server is live. It speaks MCP Streamable HTTP at https://cadensiastudio.com/mcp, so any MCP-compatible client can call the same operations as the public API with a per-account token.

Endpoint: https://cadensiastudio.com/mcp · Transport: Streamable HTTP · Verbs: POST, GET, DELETE · Methods: initialize, ping, tools/list, tools/call

What is MCP?

A standard way for agent hosts to call tools.

The Model Context Protocol (MCP) is an open standard that lets an agent host — Claude Desktop, Cursor, or any MCP-compatible client — discover and call a server's tools over a consistent protocol, instead of each host wiring up a bespoke integration. Cadensia's tools mirror its public API one for one.

Learn about the Model Context Protocol

Connect in 3 steps

From zero to tools/list.

  1. Create an API token

    Tokens are per account and scoped. In the dashboard at /api_tokens, mint a token and copy the secret — it is shown once. Store it in your client's secret manager.

    Token creation happens in the dashboard — after you log in you will find it at /api_tokens.

  2. Add the server to your MCP client

    Add a Streamable HTTP server entry. The generic JSON shape below uses the http transport; the Authorization header carries your token as a Bearer credential.

    {
      "mcpServers": {
        "cadensia": {
          "type": "http",
          "url": "https://cadensiastudio.com/mcp",
          "headers": {
            "Authorization": "Bearer YOUR_API_TOKEN"
          }
        }
      }
    }

    The same entry is the Claude Desktop / Cursor variant — put it in the client's MCP config file (claude_desktop_config.json for Claude Desktop, .cursor/mcp.json for Cursor):

    {
      "mcpServers": {
        "cadensia": {
          "type": "http",
          "url": "https://cadensiastudio.com/mcp",
          "headers": {
            "Authorization": "Bearer YOUR_API_TOKEN"
          }
        }
      }
    }

    Replace YOUR_API_TOKEN with the secret from step 1. Keep the token out of source control.

  3. Verify the connection

    The MCP Inspector runs one method and disconnects. Point it at the hosted endpoint and list the tools:

    npx --yes @modelcontextprotocol/inspector --cli https://cadensiastudio.com/mcp --transport http --header "Authorization: Bearer $CADENSIA_API_TOKEN" --method tools/list

    A valid token returns the fifteen tools. A missing or invalid token returns an HTTP 401, and the Inspector CLI exits with code 3.

Agents can self-serve

Create an account, then discover and buy.

An agent with no account can create one over the API, then use the tools it unlocks. Sign-up, catalog discovery, and checkout are all Bearer-token operations:

  1. POST /api/v1/registrations

    Create an account and receive a restricted, scoped API token — the secret is returned once. Requires accepting the terms.

  2. GET /api/v1/catalog

    List the purchasable plans, credit packs, and one-time SKUs (billing:read).

  3. POST /api/v1/checkouts

    Start a checkout for a plan, credit pack, or one-time SKU (billing:write); payment completes with Stripe.

Every request is scoped to the account behind the token. See the pricing page for what's available.

The tools

Fifteen tools, one per API operation.

Each hosted-MCP tool is a thin wrapper over the same public API v1 endpoint, and scope-checks against the token's scope set.

Tool API operation Scope
get_account GET /api/v1/me account:read
import_product POST /api/v1/products products:write
list_products GET /api/v1/products products:read
get_product GET /api/v1/products/{id} products:read
start_generation POST /api/v1/generations generations:write
get_generation GET /api/v1/generations/{id} generations:read
list_compiled_videos GET /api/v1/compiled_videos videos:read
get_compiled_video GET /api/v1/compiled_videos/{id} videos:read
download_compiled_video GET /api/v1/compiled_videos/{id}/download videos:read
list_catalog GET /api/v1/catalog billing:read
start_checkout POST /api/v1/checkouts billing:write
list_scheduled_posts GET /api/v1/scheduled_posts posts:read
get_scheduled_post GET /api/v1/scheduled_posts/{id} posts:read
schedule_post POST /api/v1/scheduled_posts posts:write
cancel_scheduled_post DELETE /api/v1/scheduled_posts/{id} posts:write

Scopes

A token carries an explicit scope set; a request that needs a scope the token does not have returns 403. A *:write scope implies the matching *:read.

  • account:read Read the account and the usage/quota summary.
  • products:read List and read products.
  • products:write Import products.
  • generations:read Read generation status and outputs.
  • generations:write Start compiles and remixes.
  • videos:read List, read, and download compiled videos.
  • billing:read Read the purchasable catalog (plans, credit packs, one-time SKUs).
  • billing:write Start a checkout for a plan, credit pack, or one-time SKU. Implies billing:read.
  • posts:read List and read scheduled posts.
  • posts:write Schedule and cancel posts. Implies posts:read.

Auth & security

Token-scoped, account-scoped.

Bearer authentication

Every request authenticates with a per-account API token sent as an Authorization: Bearer header.

Session cookies rejected

The endpoint is never session-authenticated, so a cookie-only request returns 401. Agents always use a token.

Per-account scoping

A token can only see and modify records belonging to the account that created it — the same scoping the web app uses.

Scope enforcement

A valid token missing a tool's scope gets 403 insufficient_scope.

Rotate & revoke

Rotate by creating a replacement and cutting over, then revoke the old token. Revoking one token does not affect the others.

TLS only

Tokens are sent over TLS only, through the same proxy that serves cadensiastudio.com.

MCP FAQ

Questions, answered.

What is the Cadensia MCP endpoint?

The hosted MCP server is a Streamable HTTP endpoint at https://cadensiastudio.com/mcp. It speaks JSON-RPC 2.0 and supports the POST, GET, and DELETE verbs.

How do I authenticate an MCP client?

Every request authenticates with a per-account API token sent as an Authorization: Bearer header. Create the token in your account settings at /api_tokens; the secret is shown once.

Can an MCP client use my browser session instead of a token?

No. Session cookies are never accepted — the endpoint is not session-authenticated, so a cookie-only request returns 401. Agents always use a Bearer API token.

What happens if my token is missing a scope?

Tools scope-check against the token's scope set. A valid token missing a tool's scope gets a 403 response with code insufficient_scope.

Which tools does the hosted server expose?

Fifteen tools, one for one with API v1: get_account, import_product, list_products, get_product, start_generation, get_generation, list_compiled_videos, get_compiled_video, download_compiled_video, list_catalog, start_checkout, list_scheduled_posts, get_scheduled_post, schedule_post, and cancel_scheduled_post.

How do I rotate or revoke a token?

From account settings at /api_tokens. Rotate by creating a replacement and cutting over, then revoke the old token; each token can be revoked individually and other tokens are unaffected.

Start connecting

Mint a token. Point your agent at Cadensia.

Create a scoped per-account token, add the server to your MCP client, and verify the connection with the Inspector.

Prefer tools in the browser? See how WebMCP works

We use strictly necessary cookies to run Cadensia Studio (sign-in session). Optional analytics and marketing cookies are off unless you turn them on. See our Cookie Policy.

Preferences