Authentication.
Send
X-API-Key: sky_live_… with every request. Create a key in the
dashboard under Login & security → API keys. Read-only keys cannot
trigger scans, generate reports or change settings. Browser sessions use
Authorization: Bearer <jwt> instead — one credential per
request; if both are present the API key wins.
AI assistants (MCP).
The same measured data is available to Claude, ChatGPT, Cursor or your
own agent over the
Model
Context Protocol at
https://dashboard.skyqon.com/mcp —
eight read-only tools (posture summary, trust-score history,
certificates, findings, remediation plan, evidence reports, value
ledger, and a free check of any domain for supplier due
diligence). Authenticate with the same API key, either
X-API-Key or Authorization: Bearer. In Claude
Code: claude mcp add --transport http skyqon
https://dashboard.skyqon.com/mcp --header "X-API-Key: sky_live_…"