Sume MCP with an API key versus OAuth: which tools your AI client sees
Why Claude, Cursor, Codex or Copilot may show fewer Sume tools: OAuth is read-only until consent includes write; an API key shows all.
If a client lists fewer Sume tools than you expected, check how it authenticated. An OAuth session starts read-only (mcp:read) and gains write tools only if the user turned on mcp:write at consent. An API key sent as Authorization: Bearer or x-api-key returns the full tool set and spends against that key's workspace.
Start diagnosis with the discovery tools: mcp_health, tools_list, tools_schema, catalog_list, account_me and generation_admission_preview.
Symptoms and fixes
| Symptom | Likely cause | Fix |
|---|---|---|
| Paid tools missing | OAuth without mcp:write | Re-consent with Write on |
| insufficient_scope on generate | Read-only OAuth session | Re-consent with Write on, or use a key |
| Tool list differs between clients | Different credentials | Compare account_me output |
| Image 1.0 or Video 1.0 not listed | REST-only | Call images_create or videos_create over REST |
Preview before paying
generation_admission_preview and dry_run let a client check admission and cost without submitting, and max_spend_usd caps a call when sent. They are arguments the model writes, so they are guidance, not a limit your client enforces.
Sources
Related posts
More in Integrations
- Email on Sume job done: Resend with a job-keyed Idempotency-Key
Verify the Sume webhook with the SDK, then send via Resend keyed sume-<job_id>. Resend keys expire after 24 hours, so keep your own sent table too.
- Tavus MCP server and CLI vs Sume hosted MCP: auth and spend caps
Tavus MCP uses browser OAuth plus a tavus CLI; Sume hosted MCP has read-only OAuth, opt-in write, API keys, idempotency_key, dry_run and max_spend_usd.
- Theia AI MCP oauth block and ~{mcp_} tool syntax with Sume tools
Theia AI can sign in to a remote MCP server with an oauth block and call its tools as ~{mcp_server_tool}. Here is how that maps to Sume's jobs_wait and gates.
- Theia AI remote MCP server: serverUrl and serverAuthToken for Sume
Theia AI's remote MCP config takes serverUrl, serverAuthToken and an optional serverAuthTokenHeader. The entry for Sume's hosted MCP with a Bearer API key.
Written by Sume