Authentication
The REST API, MCP, and CLI all share the same credential scheme.- API Key: a Bearer token in the form
{id}.{secret}. Works across REST, MCP, and the CLI. - JWT: MCP also accepts a JWT issued through OAuth (for conversational AI clients).
Who issues keys
You can issue an API Key from platform.tiro.ooo on any plan. Only a team admin can issue team keys.What’s free and what’s paid
Most endpoints are free. Reading notes, folders, share links, document templates, transcripts, and word memory costs no credits.Wiki endpoints require a paid plan. A personal workspace needs Pro or higher, and a team workspace needs Team or higher. Calling them on a plan without access returns
402 Payment Required.search_wiki, get_wiki_page, list_wiki_mentions, get_wiki_graph).
| Response code | When it happens | How to resolve |
|---|---|---|
402 WIKI_PLAN_REQUIRED | The workspace plan can’t use the wiki (Free, Lite, no subscription, or inactive) | Upgrade to Pro or higher for personal, Team or higher for teams |
402 WIKI_NOT_ACTIVATED | The plan qualifies, but an admin hasn’t turned the wiki on | Have a workspace admin activate the wiki feature |
Charges for speech recognition (STT) and bulk LLM processing don’t yet apply through the API or MCP.
Rate limit
A single API Key can send up to 600 requests per 60 seconds. Go over that and you get429 Too Many Requests, with Retry-After and X-RateLimit-* headers in the response telling you when to try again.
For the full response format, see Error handling.