Login and security

Authorization

You sign in with your Noctral account, and every connection asks for your approval on a screen that shows the app and its return address. The app provides its own name, so check the address.

Tokens

• The app gets a token that lasts 1 hour and renews by itself.
• It never sees your password or your API keys.
• The token only works on this MCP server and only reads data.
• The plan is checked on every call: if the subscription ends, access stops immediately.

Disconnect an app

Go to API & MCP, Connect tab, and click Disconnect. The token stops working immediately. Each account keeps up to 10 connected apps; past that, the oldest is disconnected.

Quota

Connected apps and keys share the same account quota. See the limits