peekpandaOAuth reference
OAuth lets a client sign in to PeekPanda and receive an access token for the MCP resource. The token is not your dashboard session.
Download Markdown ↓Resource
The protected resource is https://mcp.peekpanda.com/mcp. Tokens are audience-pinned to that resource. A token issued for another product cannot call PeekPanda. Preview contract: these routes and tools are implemented in the shared contract, but the public host, customer API access and OAuth flow have not been deployment verified.
Sign in and approve access
The client opens the shared issuer. You sign in with your PeekPanda account, review the requested scopes, and allow access. The client stores the access token and refreshes it. Your password is not shared with the client.
Scopes
context:read covers catalogue, creative, keyword, chart, and market reads. content:write covers save, remove, and data-request commands. Missing scopes fail before the operation runs.
Scopes and tenancy →What the token cannot do
An MCP token cannot delete your account, change billing, or stand in for a dashboard session. A website or app id in a tool request is a target to check, not proof of access.
API keys
Clients that cannot complete OAuth use an API key as a bearer token on the same MCP URL. Create, copy, and revoke keys from Account. The secret is shown once.
API keys →AI agent or LLM? Read this page as markdown