Authentication

MCP

ChatGPT and Claude use the same browser sign-in flow Soria already uses.

Add the Soria MCP connection.
Your browser opens the Soria sign-in page.
Sign in with the same account you use at app.soriaanalytics.com.
Soria gives the client an OAuth token for future requests.

ChatGPT and Claude never receive your Soria password or an API key. Soria checks your account whenever the client makes a request. Disconnect Soria in ChatGPT or Claude to remove that client’s access.

Data API

Applications authenticate with a Soria API key sent as a bearer token. Send the key as a bearer token:

curl "https://api.soriaanalytics.com/v1/catalog" \
  --header "Authorization: Bearer $SORIA_API_KEY"

Keep the key in a secrets manager or server-side environment variable. Do not put it in browser code, source control, documentation, or chat messages. Revoke it if it is exposed or no longer needed. A missing, invalid, expired, or revoked credential returns 401 Unauthorized.

⌘I