Choose the right integration
Prefer MCP for research inside an MCP-compatible agent. Prefer REST when you need direct endpoint control, persistent application logic, or an OpenAPI-based client.
Make a request without credentials
Papers and Tallies are public. Use either endpoint to confirm connectivity before debugging authentication:Authenticate safely
Need an API key? On Pro, create one in the API Console. Creating a key doesn’t grant every optional scope; see Authentication for feature access. For higher limits or managed credentials, contact sales. Keep the key in an environment variable rather than source code, prompts, command history, or logs. Paste it at this hidden shell prompt:403 User not authorized when its account or scopes don’t include the requested feature.
Choose a capability
Creating an API key does not grant every capability. Use the access matrix in Authentication before treating a
403 as a code defect.
Integration rules for agents
- Treat
401as a missing, invalid, expired, or revoked credential. Treat403as an access or scope problem. - Do not retry
401,403,404, or422without changing the request. Retry429and transient5xxresponses with exponential backoff and jitter. - Read the returned rate-limit headers instead of hard-coding a request rate.
- Preserve the exact task ID returned by Assistant or Reference Check. Poll with backoff and an overall timeout.
- Check
hits[].citations[].snippetHiddenbefore using Search citation text. Self-service keys return redacted snippets. - Use the response schema in the API Reference tab; do not infer fields from examples alone.
What to read next
- Quickstart: make public and authenticated requests
- Authentication: plans, scopes, and Enterprise credentials
- Scite MCP: OAuth and API-key setup for MCP clients
- API Reference: exact parameters, request bodies, and response schemas
