AUTHENTICATION

API keys, Bearer tokens, and OAuth.
Pick the auth that fits.

Exchange your API key and secret for a short-lived Bearer token and call the REST API as your own account. Use OAuth 2.0 to connect the hosted MCP server, so an assistant like Claude, ChatGPT or Cursor can act on your account.

$20 in credits. No credit card.

API KEYS

Exchange your key for a token.

Get your API key and secret from the portal's API Access page. Exchange them for a Bearer token, valid for 7 days, and pass it in the Authorization header. Refresh tokens last 6 months, and revocation from the portal is immediate.

# Step 1: exchange your API key and secret for a token (valid 7 days)
curl -X POST https://platform-oauth.convirza.com/oauth/token/client-credentials \
  -H "Content-Type: application/json" \
  -d '{"api_key": "your-api-key", "api_secret": "your-api-secret"}'

# Step 2: use the token
curl https://platform-api.convirza.com/v3/conversations/calls \
  -H "Authorization: Bearer <access_token>"
OAUTH 2.0

For the hosted MCP server.

Connect Claude, ChatGPT, Cursor, VS Code or Codex to the hosted Convirza MCP server at connect.convirza.com/mcp using OAuth 2.0 with PKCE, included at no extra charge. Webhooks and subscriptions created through MCP still require the Admin role.

Read the MCP auth flow (opens in a new tab)
OPERATIONS

Rotate without downtime.

  1. Issue a new key from the dev portal. Old key keeps working.
  2. Deploy the new key to your application secrets.
  3. Confirm the new key is in use by checking the per-key request logs in the portal.
  4. Revoke the old key. Effective immediately.
  5. Set a calendar reminder. We recommend rotating every 90 days.
START AUTHENTICATING

One header. Every request scoped.

Get your key from the portal, drop it in your secret manager, and ship. OAuth for the MCP server is documented in the reference for the day you need it.

Ready to build on Convirza?
Start freeGet a demo