Skip to content
MCP Gateway

List API sources for one tenant/environment with filters, facets, and safe summary metadata.

GET
/v1/api-sources

Returns API-source registry summaries for the requested tenant and environment. The response is metadata-only and never includes API keys, credential material, request bodies, response bodies, prompts, or tool payloads.

Authorizations

Section titled “Authorizations ”

Parameters

Section titled “ Parameters ”

Query Parameters

Section titled “Query Parameters ”
tenant_id
string
>= 1 characters
environment_id
string
>= 1 characters
approval_status

Comma-separated ApprovalStatus values.

string
detected_format

Comma-separated ApiContractFormat values.

string
owner

Owner team or user id.

string
risk_tier

Comma-separated risk tier values.

string
q
string
page
integer
default: 1 >= 1
page_size
integer
default: 50 >= 1 <= 100
sort
string
default: updated_at:desc
Allowed values: updated_at:desc updated_at:asc created_at:desc created_at:asc api_source_id:asc api_source_id:desc name:asc name:desc approval_status:asc approval_status:desc detected_format:asc detected_format:desc owner:asc owner:desc risk_tier:asc risk_tier:desc

Responses

Section titled “ Responses ”

200

Section titled “200 ”

Paginated API-source list envelope.

object
schemaVersion
required
page
required
integer
>= 1
pageSize
required
integer
>= 1 <= 100
total
required
integer
facets
required
object
environment
required
Array<object>
object
value
required
string
>= 1 characters
count
required
integer
approvalStatus
required
Array<object>
object
value
required
string
>= 1 characters
count
required
integer
detectedFormat
required
Array<object>
object
value
required
string
>= 1 characters
count
required
integer
risk
required
Array<object>
object
value
required
string
>= 1 characters
count
required
integer
owner
required
Array<object>
object
value
required
string
>= 1 characters
count
required
integer
items
required
Array<object>
object
apiSourceId
required
string
>= 1 characters
name
required
string
>= 1 characters
owner
required
object
team
required
string
>= 1 characters
userId
required
string
>= 1 characters
escalationContact
required
string
>= 1 characters
oncallRotation
required
string
>= 1 characters
environmentId
required
string
>= 1 characters
detectedFormat
required
Allowed values: openapi_3 swagger_2 postman_collection unknown
approvalStatus
required
string
Allowed values: submitted under_review approved rejected disabled archived
runtimePlacement
required
object
mode
required
mcpServerCreated
required
boolean
managedMcpHostingAvailable
required
boolean
reasonCode
required
health
required
object
status
required
Allowed values: healthy degraded unhealthy unknown
routeAvailable
required
boolean
latencyMs
required
integer
lastCheckedAt
required
string format: date-time
checkedBy
required
string
>= 1 characters
failureReason
required
string
/^[a-z0-9_]+$/
connectorStatus
required
Allowed values: healthy degraded unhealthy unknown not_configured
selectedOperationCount
required
integer
generatedToolCount
required
integer
credentialBindingId
required
Any of:
string
>= 1 characters
mcpClient
object
gatewayEndpointUrl
required
string format: uri
generatedTools
required
Array<object>
object
toolId
required
string
>= 1 characters
name
required
string
>= 1 characters
authMode
required
Allowed values: gateway_client_auth
transport
required
Allowed values: streamable_http sse
smokeTestCommand
required

Secret-free local command descriptor for MCP client list/call smoke.

string
>= 1 characters
createdAt
required
string format: date-time
updatedAt
required
string format: date-time

403

Section titled “403 ”

Missing api_source.read for the requested tenant/environment.

Type set in Geist, Source Serif 4, and Departure Mono.