Keys and scopes
How a key acts and what each scope allows.
Authentication
Send the key in the Authorization: Bearer header. It covers one account and acts as its creator: that person's role, permissions and sites apply (the account owner sets them in Team).
curl -H "Authorization: Bearer $WEBVYZE_KEY" https://webvyze.com/api/v1/sites
Scopes
- api:read
- Reads everything the person sees: sites, audits, issues, real-user data, monitoring, team.
- api:write
- Changes what the person may change: audits, issue status, settings, laws, team.
- mcp:read
- MCP read tools for AI agents.
- mcp:verify
- MCP actions: verification, audit and issue status.