Use a static auth key when your MCP server does not support automatic sign-in. You paste a key once and Mando sends it with every request to the server.
When you will see this form
Enter your Server URL and click Continue as usual. If the server does not offer automatic authorization, Mando shows the auth-key form instead of the approval window.
Fill in the connection
- Auth Key: the key your server expects. It is optional and is encrypted before it is stored. Leave it empty if your server needs no key.
- Transport Type: keep Streamable HTTP, which is recommended for most servers. Choose Server-Sent Events (SSE) only if your server documentation asks for it.
Save and confirm
Save the connection from the unsaved-changes bar that appears. The card switches to a connected state and lists the tools the agent can use. Click Test Connection to confirm the key works.
Keep the key current
A static key does not refresh on its own. If your server rotates or revokes the key, calls start failing with no reconnect prompt. Disconnect the server and enter the new key to restore it.