Skip to main content
Everyone·Organization

API Keys

Generate and manage API keys for connecting MentorStack to external tools and AI assistants

API keys let you connect MentorStack to external tools — including AI assistants via the MCP server. Each key grants a specific level of access and can be revoked at any time.

Types of API keys

Admin keys — Full access to your organization's data: members, matches, analytics, and admin operations. Use for HR workflows, reporting integrations, or organizational automation.

Participant keys — Scoped to a single member's data only: their matches, goals, meetings, and messages. Use when setting up an AI assistant for an individual mentor or mentee.

Generating a key

Go to Settings → API & Integrations → API Keys and click Generate API key.

  1. Choose the key role (Admin or Participant)
  2. For participant keys, select the member the key belongs to
  3. Give the key a descriptive name (e.g. Claude Desktop — HR team, Cursor — Jane Smith)
  4. Click Generate
  5. Copy the key immediately — it's shown in full only once

API keys start with ms_live_ and are unique per creation. The raw key value cannot be retrieved after you close the generation dialog.

Managing your keys

All keys appear in the API Keys table with:

  • Name and role
  • Linked member (for participant keys)
  • Creation date
  • Last used timestamp

Use the last-used timestamp to identify keys that are no longer active and can be safely revoked.

Revoking a key

Click Revoke next to a key to immediately invalidate it. Any tool using that key will lose access instantly. Revoked keys remain visible in the table for audit purposes but cannot be reactivated.

If a key is ever exposed (committed to a repository, shared accidentally), revoke it immediately and generate a replacement.

Key security

  • Store keys in a secrets manager or environment variable — never hardcode them in source files
  • Use participant keys for individual AI assistant setups rather than sharing a single admin key
  • Rotate keys periodically for long-lived integrations
  • Revoke keys for former employees or decommissioned integrations promptly

Using keys with the MCP server

API keys are the authentication method for MentorStack's MCP server, which lets AI assistants like Claude and Cursor query your mentoring data. See the MCP Server Setup guide for full configuration instructions.