PARSER GUIDES

Authentication

How to authenticate API requests

All API requests require authentication using API keys.

MCP uses OAuth instead of API keys. See MCP Server if you are connecting PARSER to an AI agent.

Getting Your API Key

1. Log in to PARSER

2. Go to Team Settings -> API Keys

3. Click "Create API Key"

4. Copy and save your API key securely

Important: API keys are only shown once. Save them securely.

Using API Keys

Include your API key in the request header:

Authorization: Bearer YOUR_API_KEY

The API also accepts the raw key value in the Authorization header for backward compatibility:

Authorization: YOUR_API_KEY

Example Request

curl -X GET "https://api.PARSER.com/api/v1/parsers" \
  -H "Authorization: Bearer YOUR_API_KEY"

After finding a parser ID, you can list its documents:

curl -X GET "https://api.PARSER.com/api/v1/parsers/YOUR_PARSER_ID/documents?limit=50" \
  -H "Authorization: Bearer YOUR_API_KEY"

After finding a classifier ID, you can inspect classifier routing results:

curl -X GET "https://api.PARSER.com/api/v1/classifiers/YOUR_CLASSIFIER_ID/documents?limit=50" \
  -H "Authorization: Bearer YOUR_API_KEY"

For Reviews & Approvals endpoints, the API key needs the relevant permissions and access to the document's parser. The request body includes the reviewerId for approve, reject, and reset actions. PARSER also validates that reviewer against the team and the document's current assignment.

MCP OAuth

The remote PARSER MCP server uses OAuth because MCP clients act on behalf of a logged-in user and selected team.

Use this server URL in MCP clients:

https://mcp.PARSER.com/mcp

During setup, PARSER asks you to log in, choose one team, and approve the requested MCP access. The MCP connection is scoped to that team. Do not paste an API key into an MCP client.

To review or revoke access later, open Profile settings -> Connections. See Manage Connected Applications.

API Key Security

• Never commit API keys to version control
• Use environment variables
• Rotate keys regularly
• Revoke unused keys

Rate Limits

• 100 requests per minute
• 10,000 requests per day

Rate limit headers are included in responses:

• X-RateLimit-Limit: Maximum requests allowed
• X-RateLimit-Remaining: Requests remaining
• X-RateLimit-Reset: When the limit resets