Agents and API keys
Updated 3 min readNeeds a free account
FloorGen runs an MCP server at https://floorgen.app/mcp, so AI apps such as Claude, ChatGPT and Cursor can read and edit the projects in your account. Apps that take only a URL sign in with your FloorGen account; the rest use an API key you make in Agents & MCP.
Create an API key
- Step 1: Open Agents & MCP
On the projects page, click Agents & MCP at the foot of the sidebar. The dialog shows the Server URL with a copy button.
- Step 2: Name the key
Under Create key, type a Name you will recognise later, such as “Claude Code on my laptop”. A name is required, up to 80 characters.
- Step 3: Choose the access
Pick Read only, Read & edit or Full (can delete). Give an app the least it needs.
- Step 4: Choose projects and expiry
Pick All projects or Chosen projects and tick the ones it may use. Chosen projects lists the projects on this device; tick at least one. Under Expires, pick 30 days, 90 days (the default), 365 days or Never.
- Step 5: Create and copy it
Click Create key. The key starts with
fg_live_and is shown only once, so copy it now. Set up your app fills it into the setup text for each app.
| Field | What it does | Range | Default |
|---|---|---|---|
| Name | How the key is listed under Your keys | 1 to 80 characters | Empty (required) |
| Access | What the app may do, see below | Read only, Read & edit, Full (can delete) | Read & edit |
| Projects | Which projects the key reaches | All projects or Chosen projects | All projects |
| Expires | When the key stops working | 30 days, 90 days, 365 days, Never | 90 days |
| Access | What the app can do |
|---|---|
| Read only | Look at projects but not change them. It gets none of the live tools, so it can’t read or change the selection or view in your open tab. |
| Read & edit | Look at and change projects, and use the live tools. This is the default for a new key. |
| Full (can delete) | Also the deletes that skip the trash: delete projects, floors, designs and rooms, clear a design, empty the trash and restore a checkpoint. Each of these still asks for confirmation. Read & edit can already move things, rooms included, to the trash. |
If you forget the name, the form says Give the key a name. With Chosen projects and nothing ticked it says Pick at least one project, or choose all projects. When a key is made, FloorGen emails your confirmed address with its name, access and last 4 characters.
Keys or sign-in
claude.ai and ChatGPT take only the server URL. When you connect, FloorGen asks you to sign in and shows a page titled “Connect … to FloorGen” where you pick the access level and click Approve. Apps connected this way are listed under Connected apps, with Disconnect. A sign-in covers every project in the account; to limit an app to some projects, use a key.
Revoke a key
Your keys lists each key, newest first, with the start of the key (such as fg_live_ab12…), its access, projects, expiry and when it was last used. A key reads, for example, Never used, Expires in 12 days, Expires today, Expired or Never expires. Click the bin button next to a key (Revoke with its name), then Revoke; apps using the key stop working right away. If you lose a key, revoke it and make a new one.
An account can hold up to 20 keys by default; a plan can set its own limit. At the limit, revoke a key before you make another.
Questions
Is an API key safe to paste into a config file?
Treat it like a password. Most setups read it from an environment variable such as FLOORGEN_API_KEY, so the file holds no key.
What does an agent see of my account?
Your projects, within the key’s access and project list. It cannot see your password or other people’s projects.
Are there rate limits?
Yes. Each key or connected app can make 300 calls and 60 edits a minute.