Auth and quotas

Tiers (summary)

Tier	Study Assistant & Scout search_scout	Other notes
Anonymous	3 ask_study_assistant and 3 search_scout calls per IP per calendar month (separate counters)	Lessons, list/get Scout, etc. are unmetered
Signed-in (member)	9 per tool per month with Authorization: Bearer <Supabase access token>	Same free read tools as anonymous
Exam Academy (€99)	Unlimited for those tools	Unlocks generate_mock_exam, more AI tutor support, and the Cases Workspace
Agent Pro (€420/year)	Unlimited for those tools	Adds Scout research workflows, AI integrations, Cases Workspace, and agent-law research; see Agent Pro

Call get_account_status (study) and get_scout_usage (Scout search) to show “questions left” in your UI. Reset is per calendar month (check the reset / reset_date fields in each response on the live API).

TIP

Scout read tools — list_scout_articles, get_scout_article, list_scout_players, get_scout_player — are unmetered for everyone. Only search_scout is search-quota gated.

Generating a fam_live_ key

1. In app: Account → MCP keys (paid accounts only).
2. Operator (repo): with ADMIN_WORKER_SECRET and a premium profile email, npm run mcp:mint from the fifa-agent-mentor repo (see the Ops section in the canonical fifa-mcp-server.md skill).

Use the value as: Authorization: Bearer fam_live_… on every POST https://fifa.qtech.hr/mcp request that should run as premium.

Paid-only surfaces

The following endpoints / tools require a paid tier (premium or agent_pro) bearer or session:

• Cases Workspace — /cases web UI and the cases MCP tools (list_cases, get_case, search_case, add_case_note, add_case_link, request_case_research, search_juris_library). See Cases tools →.
• Agent Pro tools — research_player, orchestrate_transfer_dossier, generate_negotiation_brief, market pulse, etc. See Agent Pro tools →.
• Mock exam generator — generate_mock_exam.

OAuth / OpenID (discovery)

The Worker publishes wrappers so tools can find token endpoints without hard-coding Supabase:

• OpenID configuration
• Protected resource

Next steps: MCP endpoint and authentication details →