Skip to main content
Here’s how you can use the REST API, MCP, and CLI, what’s free, and what’s paid.

Authentication

The REST API, MCP, and CLI all share the same credential scheme.
  • API Key: a Bearer token in the form {id}.{secret}. Works across REST, MCP, and the CLI.
  • JWT: MCP also accepts a JWT issued through OAuth (for conversational AI clients).
This is independent of how you sign in. Whether you registered with Google, Apple, Microsoft, or enterprise SSO, a valid API Key or token works exactly the same. For details on issuing and using keys, see Authentication.

Who issues keys

You can issue an API Key from platform.tiro.ooo on any plan. Only a team admin can issue team keys.

What’s free and what’s paid

Most endpoints are free. Reading notes, folders, share links, document templates, transcripts, and word memory costs no credits.
Wiki endpoints require a paid plan. A personal workspace needs Pro or higher, and a team workspace needs Team or higher. Calling them on a plan without access returns 402 Payment Required.
The wiki gate applies the same way to REST and MCP (MCP search_wiki, get_wiki_page, list_wiki_mentions, get_wiki_graph).
Response codeWhen it happensHow to resolve
402 WIKI_PLAN_REQUIREDThe workspace plan can’t use the wiki (Free, Lite, no subscription, or inactive)Upgrade to Pro or higher for personal, Team or higher for teams
402 WIKI_NOT_ACTIVATEDThe plan qualifies, but an admin hasn’t turned the wiki onHave a workspace admin activate the wiki feature
Charges for speech recognition (STT) and bulk LLM processing don’t yet apply through the API or MCP.

Rate limit

A single API Key can send up to 600 requests per 60 seconds. Go over that and you get 429 Too Many Requests, with Retry-After and X-RateLimit-* headers in the response telling you when to try again. For the full response format, see Error handling.