> ## Documentation Index
> Fetch the complete documentation index at: https://docs.etonecarg.com/llms.txt
> Use this file to discover all available pages before exploring further.

# API Keys and Browser Access

> Understand why Sports MCP Server is a trusted-host capability layer rather than a public browser API.

# API Keys and Browser Access

Sports MCP Server is designed for server-side or trusted-host use.

## Deployment posture

<Tabs>
  <Tab title="Recommended">
    Call the server from a trusted backend, orchestrator, or MCP host.

    This keeps:

    * bearer keys off public clients
    * product-scoped auth under your control
    * rate limiting and quota behavior consistent
    * partials and ambiguity handling inside a trusted integration layer
  </Tab>

  <Tab title="Not recommended">
    Do not expose the MCP server directly as a public browser API.
  </Tab>
</Tabs>

## Why this matters

The server owns:

* product-scoped auth
* rate limiting and quota
* source routing across GSD and On Sports
* explicit partial and limitation handling

## Read this next

* [Access and API Keys](/sports-mcp-server/getting-started/access-and-api-keys)
* [MCP Basics](/sports-mcp-server/reference/mcp-basics)