MCP lets a compatible AI client discover We.Inc tools and work with your organization's projects. This guide describes the published server contract and current access checks. It is not a report of a completed build in every client.
Endpoint and authentication
Use the Streamable HTTP endpoint https://my.we.inc/api/mcp. The [MCP manifest](/.well-known/mcp) and [developer portal](/developers) describe discovery. OAuth uses PKCE (S256) and the mcp scope. REST API keys start with wk_ and are scoped to one organization.
- 1. In your MCP client's connection settings, choose a remote Streamable HTTP server and enter https://my.we.inc/api/mcp. Exact menus and remote-server support vary by client and subscription.
- 2. Follow the OAuth sign-in and consent flow when your client supports it. Confirm you are authorizing the intended account and organization.
- 3. If your client supports bearer-key authentication instead, an organization owner can create a key in Settings > API. Keep it in your client's secret settings; never paste it into site code, a public prompt, or a Git repository.
- 4. First request tool discovery, then a read-only project list. Check the returned organization and project names before allowing changes.
What can be checked without a paid build?
initialize, ping and tools/list are available without a token. tools/call requires an OAuth token or API key. Discovery alone does not prove that an authenticated call will succeed. API key creation requires organization ownership; it has no paid-subscription check. AI generation and editing depend on the plan and available credits. Free has no recurring AI credit allowance.
If the connection fails
- Check that the endpoint ends in /api/mcp, not the marketing-site URL.
- If discovery works but a tool call returns unauthorized, reconnect OAuth or check that the key is valid and has the needed read or write permission.
- If there is no organization to authorize or you cannot create a key, verify organization ownership in the dashboard. Do not assume every free personal account is already an organization owner.
- For a rate-limit response, wait for the Retry-After interval instead of repeatedly retrying.
Pro Tip
Use read-only calls for setup. Creating, editing, deleting or publishing projects is a separate action that can change real sites or consume credits. Review each proposed tool call.
Sources: [We.Inc developer reference](/developers), [MCP manifest](/.well-known/mcp), and the application's MCP transport and organization-key access checks, reviewed October 7, 2026.