​
Servers

NameURL
Production APIhttps://api.costmcp.com
Production MCPhttps://mcp.costmcp.com
Local APIhttp://localhost:3000
Local MCPhttp://localhost:3000/api/mcp
REST paths below are relative to the API server root (they include the /api prefix). For agents, use the MCP host — see Remote HTTP MCP.

​
Auth header

Authorization: Bearer <token>
TokenUsed for
cmcp_live_...Ingest & summary APIs
Supabase JWTDashboard / workspace APIs
cmcp_at_...Remote MCP only

​
Endpoint map

​
Public

MethodPathAuth
GET/api/healthNone

​
Ingest & summaries (API key)

MethodPathPermission
POST/api/v1/messageslog_usage (usage/batch/allocation), add_expenses (expense), manage_subscriptions (subscription)
GET/api/v1/summary/monthread_summaries (scoped to key project conditions)
GET/api/v1/projects/{slug}/spendread_summaries
GET/api/v1/budgets/statusread_summaries
API keys may also carry conditions (project scope, monthly limit, expiry, rate limit, CIDRs). See API keys & conditions.

​
Dashboard (user JWT)

MethodPath
GET/api/v1/me
POST/api/v1/workspaces
GET/api/v1/workspaces/{slug}/org
GET/api/v1/workspaces/{slug}/metrics
GET/api/v1/workspaces/{slug}/activity
GET / POST/api/v1/workspaces/{slug}/api-keys
PATCH / DELETE/api/v1/workspaces/{slug}/api-keys/{id}
POST/api/v1/workspaces/{slug}/api-keys/{id}/rotate
GET/api/v1/workspaces/{slug}/connections
DELETE/api/v1/workspaces/{slug}/connections/{id}

​
OAuth & MCP

Documented under the OAuth and MCP tabs.
URL
MCP (agents)POST https://mcp.costmcp.com
Authorization server metadataGET https://api.costmcp.com/.well-known/oauth-authorization-server
Protected resource metadataGET https://mcp.costmcp.com/.well-known/oauth-protected-resource
Legacy MCP path: POST https://api.costmcp.com/api/mcp (still supported).