Help Center/Code & engines
MCP personal access tokens
How to mint, use and revoke the bearer tokens that CLI-style MCP clients use.
A personal access token is a bearer credential your MCP client uses to prove it is acting on your behalf. Tokens look like gf_mcp_ followed by 32 characters and are shown to you once at creation. GameFoundry stores only a hash, so if you lose the token you must revoke it and create a new one.
Claude Code, Cursor, VS Code and other CLI or config-driven clients use tokens because they cannot open a browser for OAuth. Claude Desktop and ChatGPT default to OAuth but a token also works if you prefer it.
Each token has its own row in your dashboard so you can see when it was last used and revoke it any time. Revoking is instant - the very next tool call fails.
Tip
Give each token a name that says where you use it, such as "Cursor on my laptop", so a leaked token is easy to find and revoke without disrupting your other machines.