Moz
Connect Moz to check Domain Authority and Spam Score, explore backlinks and referring domains, research keywords, and manage your local listings.
One Moz API token, created on the API Tokens & Quotas tab of the Moz API dashboard and pasted into PopMCP's API token field. PopMCP sends it as the x-moz-token header.
- Setup time
- 3 min
- Auth
- API credentials
- API base URL
- https://api.moz.com/jsonrpc
- Rate limits
- No published per-second quota. Sending more than 50 requests that return a 4xx error within a 5-minute window throttles the account to 50 requests per 5 minutes, lifted after 30 seconds with no further 4xx responses. Data volume is capped by your plan's monthly row quota instead.
Before you begin
- A Moz account signed in at moz.com
- A Moz API subscription. The Moz API is billed separately from Moz Pro, and even the free tier of 50 rows a month needs a valid, non-expired credit card on file
- Room for another token. An account can hold at most 5 active API tokens at a time
Get your credentials
Open the Moz API dashboard
Sign in at moz.com and open moz.com/api/dashboard. The page lands on the API Tokens & Quotas tab, under the breadcrumb Home / Subscriptions API / Tokens & Quotas.
Moz API
Power your SEO strategy and AI models with Moz's APIs.
| Description | Token | Created | Status |
|---|---|---|---|
| Reporting scriptLinks and Keywords | eyJhbGciOi••••••••7c1e | Mar 4, 2026 | Active |
| Looker StudioRead only dashboard | eyJhbGciOi••••••••9d02 | Jan 22, 2026 | Active |
- Rows used this period
- 12,480 of 50,000
- Active tokens
- 2 of 5
- Endpoint
- https://api.moz.com/jsonrpc
The second tab, Usage Reporting, breaks the same rows down by token.
Add a token
Click + Add Token, type a description such as PopMCP, then click Create.
Moz API
Power your SEO strategy and AI models with Moz's APIs.
The description is the only field. Moz tokens carry no per-endpoint scopes.
Copy the token
Copy the whole token from the new row with its copy control rather than selecting the text by hand.
Moz API
Power your SEO strategy and AI models with Moz's APIs.
Moz keeps tokens readable on this page, so you can return for the value later.
Paste it into PopMCP
Paste the token into PopMCP's API token field and connect.
Connect in PopMCP
Open your workspace, choose Moz in the marketplace, and fill in the connect dialog:
| Field | What to enter |
|---|---|
| API tokensecret | Moz API dashboard (moz.com/api/dashboard) → sign in → generate a token → copy it. Each account can hold up to 5 tokens. Stored encrypted; used server-side only (sent as the x-moz-token header). The connection is locked to this token's account.Encrypted with AES-256-GCM on save and never shown again. |
PopMCP verifies the credential against Moz immediately. On success the connection flips to Verified and its MCP tools are provisioned.
Verify it worked
PopMCP marks Moz as Connected, and asking it for the Domain Authority of a domain you know returns a DA and Spam Score rather than an authentication error.
Troubleshooting
"Missing or invalid authentication" (JSON-RPC error -32651, HTTP 401)
Why: The token was truncated on copy, has been deleted in the Moz dashboard, or belongs to a different Moz account.
Fix: Re-open moz.com/api/dashboard, view the token there, copy the whole string with the copy control, then re-paste it into PopMCP. Generate a fresh token if the old one is gone.
Calls authenticate but every metric comes back empty or zero
Why: The Moz account has no API rows left, or the plan never included API access. Authentication and quota are separate checks.
Fix: Open the Usage Reporting tab on the API dashboard, then top up or upgrade the API plan before retrying.
The + Add Token button will not create another token
Why: The account already holds the maximum of 5 active tokens.
Fix: Delete a token you no longer use, after confirming nothing else depends on it, then create the new one. Deletion is immediate and breaks anything still calling with that token.
You want to rotate the token without downtime
Why: Deleting a token takes effect straight away.
Fix: Create the replacement first, paste it into PopMCP, confirm the connection still works, then delete the old token.