Delegated MCP User Authentication

An API Key with type Delegated MCP user defines which signed-in users and Workflows can participate in Workflow MCP for one Environment.

No static secret is copied into the MCP client. The client completes Flowgear OAuth and the platform applies the user's security context.

Create the key from API Keys, select Delegated MCP user, choose the target Environment, assign permitted users and Workflows, and save. The Environment and key type become immutable after creation.

See Workflow MCP Server, MCP Screen, and MCP Authentication and Hostname Troubleshooting.