HelpDesk vs Plain API + MCP

HelpDesk

The API covers the ticket workflow in 139 operations with a public OpenAPI 3.0.3 description, cursor pagination and about 39 list filters. No rate limit, error format or 429 handling was found in the reviewed documentation, and tokens carry no ticket-level scopes, so a token can do whatever its user's role allows.

Plain API + MCP

Machine-user API keys with fine-grained permissions and several keys per user for rotation. Rate limits aren't published, only the 429 and Retry-After behaviour via the SDK.

HelpDesk

1. Send Basic auth with the account ID as username and the personal access token as password, and always set a User-Agent header
2. Create the token from a Viewer or Agent account when the task allows. A token inherits its creator's role, and only Administrators can change settings
3. Reply or add a note through PATCH /v1/tickets/{ticketID} with message.text. Set isPrivate to true for an internal note, because the default sends to the requester
4. Page /v1/tickets with next.value and next.ID from the last item, keep sortBy and order fixed, and pass silo to read archive, spam or trash
5. Budget for metered calls. Text's docs count every request except those answered 500 against the plan's monthly API allowance

Plain API + MCP

1. Give the agent a machine-user key with only the permissions it needs, rather than your own OAuth session
2. Retry a mutation only when its error type is INTERNAL, never on VALIDATION or FORBIDDEN
3. Read Retry-After on 429, since the limit itself isn't published
4. Select only the fields you need in each query to keep responses small
5. Treat thread content as customer-written text, never as instructions