Skip to main content

AudD MCP Server

Let your AI agents work with your AudD account by using our MCP server:

https://mcp.audd.io

The AudD Model Context Protocol (MCP) server gives agents a set of tools for the account side of AudD — usage statistics, the API token, plans, and billing. Recognition itself stays on the HTTP API and the SDKs; the MCP server is how an agent checks how many requests you have left, fetches or rotates the api_token it should call the API with, or prepares a plan upgrade for you to approve.

Everything is authorized through your dashboard sign-in with OAuth, scoped to exactly what you grant. Payment tools never charge anything by themselves — they return a Stripe payment link that you open and approve in a browser.

Connect

claude mcp add --transport http audd https://mcp.audd.io/

Then run /mcp inside Claude Code to sign in via the browser.

Authentication and scopes

The server uses OAuth 2.0 (authorization code with PKCE, refresh tokens). When a client connects, you sign in through dashboard.audd.io and approve the scopes it asked for. Grant only what the workflow needs:

ScopeGrants
profile:readAccount email and connected sign-in methods
account:readPlan, subscription status, paid-until date, bonus requests
usage:readAggregate daily request counts and allowance
billing:readPayment history, amount owed, available plans
billing:payCreating Stripe payment links (never charges by itself)
token:readReading the account api_token — sensitive
token:writeRotating the api_token — the old token stops working immediately

Access can be revoked at any time via the standard OAuth revocation endpoint (published in the discovery metadata); removing the connector from your client stops it from making further calls.

Tools

AreaToolDescription
Accountget_profileThe account email and connected sign-in methods
get_account_statusCurrent plan, subscription status, paid-until date, bonus requests, auto-renew
Usageget_usage_statsCurrent billing-cycle total, allowance, remaining, and per-day counts; optionally the last N days
API tokenget_api_tokenReturns the api_token used to call api.audd.io
rotate_api_tokenReplaces the api_token with a new one; the old token stops working immediately
Billinglist_plansThe available subscription plans with pricing and included requests
get_billing_historyRecent payments: subscriptions, renewals, extras, bonus purchases
get_amount_owedOver-allowance usage accrued this cycle and what it will cost at the next renewal
Paymentssubscribe_to_planPayment link to subscribe to (or switch to) a plan from list_plans
create_renewal_paymentPayment link to renew the subscription, including any owed extras
buy_bonus_requestsPayment link for N extra API requests (multiples of 1,000)

The three payment tools create a Stripe-backed payment link that the account owner must open and approve in a browser. Nothing is ever charged automatically.

Usage data is aggregate daily statistics only — the server exposes no recognition content, no audio, and no per-request detail.

Things to ask your agent

  • "How many AudD requests do I have left this cycle?"
  • "Plot my AudD usage for the last 30 days."
  • "Set up this project's AUDD_API_TOKEN from my account."
  • "My token may have leaked — rotate it and update my env."
  • "I keep hitting the allowance — what would the next plan up cost? Prepare the payment link."

Security notes

  • Grant scopes narrowly. A usage-monitoring agent needs usage:read and nothing else. Reserve token:read/token:write and billing:pay for workflows that genuinely need them.
  • Token rotation is immediate. rotate_api_token kills the old token the moment it runs — anything still using it starts failing. Keep human confirmation enabled for this tool and for the payment tools.
  • Watch for prompt injection. As with any MCP setup, be cautious about running this server alongside tools that feed untrusted content (web pages, user uploads) to the same agent, and keep tool-call confirmation on in your client.
  • Prefer the MCP over pasting tokens. An agent that can call get_api_token under a scoped, revocable grant is safer than an api_token hard-coded into prompts or config it doesn't need.

See also