Skip to main content

Get an API Key

CrashSight MCP authenticates with a personal API Key (token). The key is bound to your CrashSight account. After the client sends it in the X-CSMCP-API-KEY request header, queries run with the same permissions you have in the console.

1 Open token management​

Sign in to CrashSight and go to Personal Settings → MCP Token Management:

Create the key on the site you actually use. Keys from the China site and the international site are not interchangeable.

2 Generate a token​

  1. Click Generate Token
  2. Enter a token name (for example codebuddy-mcp)
  3. Choose an expiration: 7 days, 30 days, 90 days, or 1 year
  4. After creation, the page shows the full key (it starts with csk_)

Copy and store the key immediately. The list view shows a masked value; you can still copy the full key from View.

3 Use and protect the key​

  • Put the key in the client mcp.json file, replacing csk_xxx. See mcp.json Configuration
  • Do not commit the key to a shared repository, chat history, or screenshot
  • Prefer a user-level config file (for example ~/.codebuddy/.mcp.json) so it is not submitted with the project
  • If the key is leaked, revoke it on the token page, generate a new key, and update the client config. See FAQ

4 Renew a token​

Before a token expires, click Renew in the list and choose a duration (up to 1 year). Each token can be renewed at most twice. If you have reached the renewal limit, revoke the token and generate a new one.