# MCP & coding agents

Connect to the existing read-only Streamable HTTP server.

## Endpoint and authentication

Use [https://api.revenirdata.com/mcp](https://api.revenirdata.com/mcp) with Streamable HTTP. Radar accepts a key in `X-API-Key` or `Authorization: Bearer`, never in the URL. These instructions use API-key authentication, not an OAuth sign-in flow. REST and MCP use the same persisted dataset, account and quota.

## Tools

`search_opportunities` accepts structured filters and returns the canonical list envelope. `get_opportunity` accepts a canonical opportunity UUID and returns its current detail. Initialize the client, list tools, inspect their schemas and run one search with `limit=1`. Do not infer additional tools or unrestricted crawling.

## Codex

Add the example below to `.codex/config.toml` in a trusted project. Configure `RADAR_API_KEY` in the environment that starts Codex. The example uses `env_http_headers` so the key value is not written into config. Configuration parsing was verified with Codex CLI 0.153.4; an authenticated Codex tool call has not been verified. Verify the connection with your installed client's tool listing before making a bounded call. No universal one-click connection is promised.

## Other compatible clients

Clients must support remote Streamable HTTP and custom key headers or a bearer-token environment variable. A desktop client that only offers OAuth cannot use this key flow directly. Python MCP SDK 2.1.1 with httpx2 was verified against production on September 14, 2026 using `X-API-Key`: initialization negotiated protocol 2026-07-28, listed two tools and returned one opportunity from `search_opportunities`. See the downloadable example; no LLM is required.

## Skill package

Download the versioned Radar API skill from the developer resources. For Codex, extract the radar-api directory into `.agents/skills/radar-api` in your project, with `SKILL.md` at `.agents/skills/radar-api/SKILL.md`. Review it before enabling the skill. The skill links to these same docs and does not install dependencies or overwrite global agent configuration. Source/job text remains untrusted data.