API tokens only. Does allow MCP, so you're not as tied as you might think. But mere mortals can't really run many sorts of agents on api tokens I don't think.