Start

Authentication

Use delegated OAuth for ChatGPT, Claude, and other user-operated MCP clients. API keys remain available for the CLI, CI, and service automation.

API keys

Create a personal key from Account Connections, or an organization key from Organization Connections. Organization keys stay inside that organization. Personal keys follow the user's current access and let platform administrators automate Admin Console work. The secret is shown once and can be revoked immediately.

API access is included with the Year-Round subscription; keys stop authenticating if the subscription lapses.

Authorization: Bearer ak_••••••••

OAuth

Remote MCP clients discover Clerk's OAuth authorization server automatically. The person signs into Endurance HQ, reviews the requested scopes, and every call continues to enforce that person's organization, event, and platform permissions.

https://api.endurancehq.app/.well-known/oauth-protected-resource/mcp

Scopes

tasks:read

Read tasks and their activity in authorized organizations.

tasks:write

Create, update, and comment on tasks in authorized organizations.

schedule:read

Discover authorized events and read their schedule items.

schedule:write

Update schedule items for authorized events.

event-intake:read

Preview event websites and read staged website-import status for authorized events.

event-intake:write

Create customer draft events and start staged website imports in authorized organizations.

capabilities:read

Discover and invoke read-only EHQ capabilities as the authenticated user.

crm:read

Read company accounts in an authorized CRM workspace.

crm:write

Save public company websites as CRM prospects. Does not send outreach or grant marketing consent.

product-knowledge:read

Read internal source-backed EHQ Product Knowledge as a platform admin.

sponsors:read

Read public-facing sponsor content for authorized events.

sponsors:write

Update public-facing sponsor content for authorized events.

compliance:read

Read validated public compliance rules and evaluate qualified facts.

webhooks:read

Read webhook subscriptions and delivery status.

webhooks:write

Create and disable webhook subscriptions.

registration:write

Prepare prefilled registration hand-offs for public events on a runner's behalf. Never pays or signs.

team:read

Read who has access to authorized events, at which scope, and which dashboard areas they see.

team:write

Invite teammates to one authorized event or to a whole organization, with the same permission checks as the dashboard Team tab.