Connect an AI client
Let an AI client, such as a chat assistant or a coding tool, read your Nectar library and these guides with a personal token.
Before you start
AI access is switched on by the service. If you don't see AI access in Settings, it is not available yet. The client must be able to connect to an MCP server over HTTPS, either directly or through a small local bridge.
Create a token
- Open Settings and find AI access.
- Choose Create a token. You need to have signed in within the last 10 minutes; if not, Nectar asks you to sign in again.
- Give the token a name that says which client and device it is for, and choose when it expires: 1 to 90 days, 30 by default.
- Choose what it may do. Reading is what the tools use today; the other permissions are for tools that will change your data, and they do nothing yet.
- Copy the token. It is shown only once, and Nectar stores only a fingerprint of it.
Connect your client
Settings shows the address your client connects to, ending in /mcp/me, and a ready-made configuration.
- Clients that accept a custom header connect to that address with the header
Authorization: Bearer YOUR_TOKEN. - Clients that start a local command use the bridge shown in the configuration, with the address and your token in its settings.
Keep the token in the client's settings, never in a chat message or a file you share.
What the client can do
The client sees what you see in the app, and nothing more:
me: your account, level, streak, daily goal and quests, and how many Scrolls and Collections you have;scrolls_listandscroll_inspect: your library, the Scrolls you own and the public catalog, and one Scroll with its chapters, ideas and examples;collections_listandcollection_inspect: your Collections and the ones you liked;saved_list,review_listandrevisit_due: liked ideas, saved Scrolls, Review later and the ideas due in Revisit;friends_list: your friends and friend requests;docs_searchanddocs_read: these guides, so the client can explain how Nectar works.
A client cannot earn XP or reading progress for you, change your email or password, or delete your account. Ask your client to list its tools to see exactly what your token allows.
Keep tokens safe
You can have up to 10 active tokens. Revoke a token in Settings as soon as you stop using it or think it was exposed; it stops working at once. A token also stops working when it expires.