generated: '2026-07-22'
method: searched
source: https://console.harmonic.ai/ (llms.txt "API Authentication") + https://mcp.api.harmonic.ai/.well-known/oauth-authorization-server
docs: https://console.harmonic.ai/docs/api-reference/introduction
summary:
  types: [apiKey, oauth2]
  api_key_in: [header]
  oauth2_flows: [authorizationCode]
schemes:
  - name: apiKey
    type: apiKey
    in: header
    parameter_name: apikey
    description: >-
      Include your Harmonic API key as the `apikey` header on requests to api.harmonic.ai.
      Obtain the key from your Harmonic account settings (console.harmonic.ai). Recommended for
      programmatic / server-to-server access, including API-key auth to the MCP server.
    sources: [llms.txt]
  - name: oauth2
    type: oauth2
    description: >-
      OAuth 2.0 used by the MCP server and web application; authenticates through console.harmonic.ai
      with Firebase JWT tokens and supports automatic token refresh.
    flows:
      - flow: authorizationCode
        authorization_server: https://mcp.api.harmonic.ai/
        authorization_endpoint: https://mcp.api.harmonic.ai/authorize
        token_endpoint: https://mcp.api.harmonic.ai/token
        registration_endpoint: https://mcp.api.harmonic.ai/register
        pkce: S256
        grant_types: [authorization_code, refresh_token]
        scopes: [read, write]
    sources: [well-known/harmonic-ai-mcp-oauth-authorization-server.json, llms.txt]