Know what to build next.Skip the busywork and the per-user bill.

curl https://api.swingback.dev/v1/workspaces/$WORKSPACE_ID/end-users \
  -H "Authorization: Bearer $SWINGBACK_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "external_id": "user_8412",
    "email": "dana@example.com",
    "name": "Dana",
    "companies": [
      { "external_id": "globex", "name": "Globex", "value": 240000 }
    ]
  }'

claude mcp add --transport http swingback https://api.swingback.dev/v1/mcp \
  --header "Authorization: Bearer $SWINGBACK_API_KEY"

import { createHmac } from "node:crypto";

const part = (value) => Buffer.from(JSON.stringify(value)).toString("base64url");

// An identity token for the user signed in to your app: HS256, at most an hour.
export function widgetToken(user) {
  const now = Math.floor(Date.now() / 1000);
  const header = part({ alg: "HS256", typ: "JWT", kid: process.env.SWINGBACK_IDENTITY_SECRET_ID });
  const claims = part({
    iss: process.env.SWINGBACK_WORKSPACE_ID,
    aud: "swingback",
    sub: user.id,
    iat: now,
    exp: now + 600,
    email: user.email,
    name: user.name,
  });
  const signature = createHmac("sha256", process.env.SWINGBACK_IDENTITY_SECRET)
    .update(`${header}.${claims}`)
    .digest("base64url");
  return `${header}.${claims}.${signature}`;
}