Skip to main content
I would keep this page clean and focused, similar to Stripe or Anthropic’s authentication pages. Here’s a polished version.

Authentication

The SERPtag MCP Server uses API key authentication for every request. Before your AI assistant can access your projects and keyword rankings, you’ll need to create an API key from your SERPtag dashboard.
MCP Server https://mcp.serptag.com/mcp

Create an API Key

If you haven’t already created an API key, follow the guide below. 👉 Getting Started → Create an API Key Your API key will look similar to:
Requirements:
  • Agency or Enterprise plan (2,500+ keywords)
  • One active API key per account

Authentication Methods

The SERPtag MCP Server supports three authentication methods depending on your AI application. This is the preferred method for applications that support remote HTTP MCP, including Cursor and VS Code.

HTTP Header

Cursor Example


X-API-Key Header

The SERPtag MCP Server also accepts an X-API-Key header.
This method is also supported by the SERPtag REST API.

Environment Variable

Applications that use the npm bridge, such as Claude Desktop, should store the API key as an environment variable.
The local bridge automatically sends your API key as a Bearer token when communicating with the hosted SERPtag MCP Server.

Authentication Requirements

Every request is validated before data is returned.

Rate Limits

Each API key includes generous usage limits. The rate limit is shared across both the SERPtag MCP Server and the SERPtag REST API.

Security Best Practices

  • Store API keys in environment variables
  • Use a password manager to save your key
  • Revoke and regenerate keys if they’re ever exposed
  • Only share keys with trusted team members

❌ Avoid

  • Committing API keys to Git
  • Posting keys in public repositories
  • Sharing keys in emails or chat messages
  • Embedding keys directly into websites or frontend applications

Common Authentication Errors


OAuth Support

SERPtag currently authenticates using API keys only. OAuth authentication is planned for a future release but is not available today.