> ## Documentation Index
> Fetch the complete documentation index at: https://docs.agents.labs.bandwidth.com/llms.txt
> Use this file to discover all available pages before exploring further.

# MCP authentication

> Understand Labs OAuth, workspace roles, and the MCP server resource.

The Agent Builder MCP server authenticates through Labs OAuth. Use a client with Streamable HTTP, OAuth, and Client ID Metadata Documents (CIMD) support. The client opens sign-in and consent, then manages token storage and refresh.

| Setting | Value |
| - | - |
| Server and OAuth resource URL | `https://agents.labs.bandwidth.com/api/v1/mcp/` |
| Service-access scope | `voai` |
| Workspace context | Your account's selected workspace |

Keep the final `/` in the server URL. It is part of the OAuth resource identifier. See [client setup](https://docs.agents.labs.bandwidth.com/mcp/clients.md) for client-specific requirements and connection limitations.

## Workspace permissions

The `voai` scope grants service access. Your current workspace membership and role determine which tools you can use. Reading workspace resources requires Viewer or higher. Agent creation and editing require Editor or higher. Some tool or telephony operations require Admin or Owner; check the individual tool's requirements.

Workspace selection is shared by your account. [Switching through MCP](https://docs.agents.labs.bandwidth.com/mcp/workspaces.md#change-workspace) affects subsequent requests from the console and other connected MCP clients. Switching does not grant access to a workspace you do not belong to.

## API keys and REST tokens

Labs API keys and tokens issued for REST endpoints cannot authenticate to this MCP server. Do not add `X-BW-LABS-AGENTS-API-KEY` or `X-VOAI-ORGANIZATION-ID` to an MCP connection. For a server-to-server REST integration, use [REST authentication](https://docs.agents.labs.bandwidth.com/api-reference/authentication.md).

## Reconnect

If access expires or your client reports an authentication error, repeat the client's OAuth login. If authentication succeeds but a tool returns a permission error, check the selected workspace and your role. See [MCP troubleshooting](https://docs.agents.labs.bandwidth.com/mcp/troubleshooting.md).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.