Skip to main content

Connect & manage your key

Soft launch: try GEOMETRY with the free connector URL — no key required. The steps below apply when you have a Developer Portal subscription and a zpka_… key (metered Free plan or paid). Until then, use https://mcp.geometry.app/mcp from Quickstart.
After you subscribe in the Developer Portal, Zuplo shows a raw key (zpka_…), not a full connector URL. Use the blocks below so you never have to guess where the key goes.

Template

Replace PASTE_YOUR_KEY_HERE (accent #6E7CF6) with the key from My Subscriptions.

Example

Example only — not a working key. Yours starts with zpka_ too. Sample is 46 characters (same length as a real Zuplo key).

Header alternative (option 2)

For clients that support headers (Cursor, VS Code, Claude Code):
The URL form is the default — it works in Claude web/Desktop connectors.

Security

This URL is your password. Anyone who has it can spend your quota. Don’t commit it to a public repo or paste it in a shared channel. If it leaks, roll it in the portal — takes about 30 seconds.

Where each action lives

Rotation

In the Developer Portal go to My Subscriptions → your subscription → Roll API Key. Zuplo issues a new key immediately. Your old key keeps working for 7 days (Zuplo grace window) — update your connector URL anytime in that window (no downtime).

If your key was exposed

Roll in the portal so Zuplo issues a new key. The old key stays valid for 7 days and cannot be deleted early (vendor behavior). If you need the old key killed immediately, open a GitHub issue titled [urgent] key revoke. Do not paste the secret key in the issue body.

Support (builders)

Product / technical questions → Support (GitHub Issues only). Billing card issues stay in the Stripe portal.

Quota behaviour by tier

Planned when metering is live in Production (subject to change during beta):
  • Free / Starter: hard cap — stop at the limit with an upgrade message
  • Builder / Pro / Pro+: soft limit — continue + bill overage (subject to a 2× plan-price goodwill ceiling)
Soft-launch dogfood may still be key-detached (anonymous URL works). Treat portal quotas as the contract once keys are required.