API keys with an agent

An agent can list the connected user's token metadata, but the Core MCP does not register tools to create, reveal, or delete a user token. Use the app or Core API for those actions.

Call order

1. Call get_current_user and save its userId.
2. Call list_user_tokens with that userId.

The result has success: true. Its token rows contain tokenId, tokenName, maskedKey, createdAt, and expiresAt. Full secret values are not returned.

Example

{
  "userId": "connected-user-id"
}

Next