# Imagelato authentication

> Authentication entry point for Imagelato. Canonical URL: https://www.imagelato.com/auth.md. Updated 2026-09-21.

## REST API

Read the [API reference](https://www.imagelato.com/api/) and [OpenAPI specification](https://www.imagelato.com/openapi.json) before selecting an authentication method. Never place credentials in URLs, logs, prompts, or tool output.

## MCP

Connect to https://mcp.imagelato.com/mcp. It uses OAuth 2.0 and advertises protected-resource metadata at https://www.imagelato.com/.well-known/oauth-protected-resource. Request only the scopes needed for the task.

## Scopes

- `imagelato:read`
- `imagelato:write`