Trouble setting up MCP with claude - I keep getting error 401

Environment: Ignition 8.3 EA (nightly build), standalone (non-inheritable) test project, Windows VM.

Issue: Every API request returns 401 Unauthorized, regardless of client or endpoint.

What I've tried (all fail identically with 401):

  1. curl.exe from host PC -> VM (network confirmed working: arp resolves, TCP port 8088 reachable, HTTP response received)
  2. curl.exe from inside the VM itself (localhost)
  3. Jython system.net.httpClient.post() from within Ignition's own Script Console (rules out any client-side/shell quoting issue)

Endpoints tried: /data/api/v1/gateway-info, /data/api/v1/resources/com.inductiveautomation.mcp/server-config

API key config tried:

  • Security level: Authenticated (default, no custom restrictions)
  • No IP allowlist, no expiration set
  • Tried both "core" and "local" scope when creating the key - same 401 either way
  • Tried with "Require secure connections for API Keys" both enabled and disabled - same 401 either way (note: enabling it over plain HTTP gives 401, not the 403 the docs describe)
  • Generated a brand new key after each change, tested immediately
  • Restarted the Gateway service after the most recent key creation - no change

Header used: X-Ignition-API-Token:

At this point I've ruled out network, client tooling, and (as far as I can tell from the UI) key configuration. Is there a known issue with API key auth in the current nightly, or something else I should check gateway-side (logs, a master enable toggle for the Gateway API, config sync state)?

It isn't documented clearly, but this is insufficient. The user manual shows the use of a dedicated security level, and this is not optional.