# API reference · ClosedLoop AI > Programmatic access to ClosedLoop AI: MCP with OAuth 2.1, read-only REST with X-API-Key, and inbound webhooks signed with a dedicated Webhook Key. --- [Skip to main content](#main-content) ## API reference - [Overview](#top) - [The contract](#contract) - [Tools](#endpoints) - [Get started](#start) ## More - [Full tools reference](https://closedloop.sh/docs/mcp-server/tools) - [MCP for Claude Code](https://closedloop.sh/mcp-server) - [Browse integrations](https://closedloop.sh/integrations) - [Talk to us](https://closedloop.sh/contact) [Home](https://closedloop.sh/)/ Developers / API API reference # Programmatic access, scoped by surface Query product insights through the MCP with OAuth, read them from the `/v1`REST API with a scoped key, or push data in over signed webhooks. Each authentication method stays on its own surface. [Read docs](https://closedloop.sh/docs/mcp-server/tools)[Set up webhooks](https://closedloop.sh/docs/integrations/webhooks) - MCP: OAuth 2.1 - REST: X-API-Key - Webhooks: HMAC ## Your first connection The read surface is the MCP endpoint. Point any MCP-capable client (or your own code speaking the protocol) at the base URL; auth is OAuth 2.1, auto-discovered: bash Connect from Claude Code ``` `# US workspace claude mcp add --transport http closedloop-ai https://mcp.closedloop.sh # EU workspace claude mcp add --transport http closedloop-ai https://eu.mcp.closedloop.sh` ``` Any other MCP client works with the same URL. Cursor, Windsurf, Zed, or your own script: add the endpoint, authorize once in the browser, and every tool below is callable. ## Built for builders OAuth on the MCP, a scoped key on REST, and signed webhooks on ingestion. The pieces you check before you commit to an integration. 01 / Read ### MCP over HTTP The Model Context Protocol on standard HTTP transport. Every insight, customer, and opportunity, queryable by tool call. 02 / REST ### Read-only `/v1`API Team- and region-scoped `X-API-Key`authentication for server-side reads. A REST key never authenticates the MCP. 03 / Write ### Signed webhooks Push surveys, reviews, and custom feedback with an HMAC-SHA256 signature generated from a dedicated Webhook Key. Keep credentials separate MCP uses OAuth 2.1. The `/v1`REST API uses `X-API-Key`. Inbound webhooks use a separate Webhook Key for HMAC signing. Store keys in a secret manager, never in client-side code or version control. Reference tools ## The tools you'll call first Every MCP tool is callable from agents and scripts alike. A few of the workhorses, with the full reference in the docs: Tool Description Docs get_overview Aggregate counts, trends, and the shape of your feedback over a time window. [Docs](https://closedloop.sh/docs/mcp-server/tools)search_insights Hybrid search across every product insight, with semantic matching and filters. [Docs](https://closedloop.sh/docs/mcp-server/tools)search_customers Find customers by name, industry, deal state, churn risk, or insight volume. [Docs](https://closedloop.sh/docs/mcp-server/tools)search_opportunities Automatically discovered product problems, ranked by business impact and revenue. [Docs](https://closedloop.sh/docs/mcp-server/tools)get_trends Time-series volume for any topic, category, or feature area. [Docs](https://closedloop.sh/docs/mcp-server/tools) ## Get started in 3 steps From signup to your first tool call in under five minutes. - ### Sign up free Create your workspace. No credit card required. Generate a REST API key or Webhook Key only for the surface you plan to use. - ### Connect your data Connect Gong, Typeform, Slack, or any of our 44 native integrations, or push data in over webhooks. - ### Point your client at the MCP Add `https://mcp.closedloop.sh`to your agent or script, authorize once, and start querying. ## Next steps [Reference Read the tools docs → Every tool with parameters and return values.](https://closedloop.sh/docs/mcp-server/tools)[Webhooks Configure ingestion → Authenticate custom feedback and verify every payload.](https://closedloop.sh/docs/integrations/webhooks)[Editors Add the MCP → Query the same data from Claude, Cursor, or VS Code.](https://closedloop.sh/mcp-server)[REST Read the REST API docs → Use the read-only `/v1`API from server-side applications.](https://closedloop.sh/docs/api-reference/introduction) --- ## More Information - Website: https://closedloop.sh - Documentation: /docs - Pricing: https://closedloop.sh/pricing - Contact: https://closedloop.sh/contact