Create and revoke API keys

Mint personal fcs_ keys for MCP and scripts, then revoke them from Settings → API keys.

Who can do this: Studio administrators (the same people who can edit company settings).

Where

Open Settings → API keys. This is separate from Settings → Developer (legacy 64-hex company tokens).

Create a key

  1. Sign in as a studio administrator of the studio you want the key bound to.
  2. Name the key (for example Claude desktop).
  3. Click Create key.
  4. Copy the full fcs_… token from the dialog. Fitness Class Studio stores only a prefix and a hash after you close the dialog.

Use the token as Authorization: Bearer fcs_… on /api/mcp and /api/v1/studio/*.

Revoke a key

On the same page, click Revoke next to the prefix. Revocation takes effect immediately. The full token cannot be recovered — create a new key if you still need access.

Who can create keys

The create and revoke buttons are enabled only when you can edit company settings (studio admin). Active managers and staff can use a key that an admin created for them if that key is bound to their user; students cannot use MCP or these keys.

Gotchas

  • Super-admin access to other studios does not replace selecting the correct active studio before you create a key. Keys are bound to that company_id.
  • Last-used time updates when the key is accepted on the API.
  • Do not paste keys into public chats or screenshots.

Related articles