Streamable HTTP MCP JSON-RPC endpoint for one approved API-source import.

POST

/v1/mcp/api-sources/{api_source_id}

Runtime-facing endpoint generated for approved API sources. Supports tools/list and tools/call for gateway API-adapter tools only; it does not create or proxy to a separate backend MCP server. Responses are metadata-only and never include request bodies, response bodies, prompts, tokens, or credential material.

Authorizations

• oidc

Parameters

Path Parameters

api_source_id

required

string

>= 1 characters

Query Parameters

tenant_id

string

>= 1 characters

environment_id

string

>= 1 characters

Request Body ^required

object

jsonrpc

string

id

Client JSON-RPC correlation id. Backend derives an internal request_id from this value.

string | integer | null

method

required

string

Allowed values: tools/list tools/call

params

For tools/call, include name plus arguments. Arguments are used for validation/materialization only and are never echoed.

object

key

additional properties

any

key

additional properties

any

Responses

200

JSON-RPC response for tools/list, tools/call, or JSON-RPC method errors.

object

jsonrpc

required

string

id

string | integer | null

result

MCP tools/list or tools/call result. Metadata and audit flags only; no payloads, response bodies, prompts, tokens, or credential material.

object

key

additional properties

any

error

Any of:

object

object

code

required

integer

message

required

string

data

required

object

reasonCode

required

string

/^[a-z0-9_]+$/

key

additional properties

any

null

null

401

Runtime actor identity is missing or invalid.

404

API source is missing or not approved as a runtime endpoint.