Skip to content
MCP Gateway

Register or submit an MCP server manifest for approval.

POST
/v1/mcp-servers

Authorizations

Section titled “Authorizations ”

Request Body required

Section titled “Request Body required ”
object
submitted_by
required
string
>= 1 characters
manifest
required
object
schema_version
required
server_id
required
string
>= 1 characters
name
required
string
>= 1 characters
tenant_id
required
string
>= 1 characters
owner
required
object
team
required
string
>= 1 characters
user_id
required
string
>= 1 characters
escalation_contact
required
string
>= 1 characters
oncall_rotation
required
string
>= 1 characters
environment_id
required
string
>= 1 characters
endpoint
string format: uri
/^https:///
transport
required
One of:
version
required
string
>= 1 characters
registration_status
required
Allowed values: registered disabled deprecated
credential_mode
required
Allowed values: service_account user_delegated agent_scoped workload_mapped
requested_approval_status
required
Allowed values: submitted under_review
docs_url
required
string format: uri
tools
required
Array<object>
>= 1 items
object
tool_id
required
string
>= 1 characters
name
required
string
>= 1 characters
description
required
string
>= 1 characters
risk_tier
required
Allowed values: low medium high critical
gateway_status
required
Allowed values: allowed denied_candidate
denied_reason
string
/^[a-z0-9_]+$/
input_schema_ref
required
string
>= 1 characters
input_schema

Sanitized MCP tool input schema preserved in the approved snapshot and runtime projection.

object
policy_refs
required
Array<string>
>= 1 items

Responses

Section titled “ Responses ”

202

Section titled “202 ”

Submitted for owner/platform approval.

object
schema_version
required
server_id
required
string
>= 1 characters
name
required
string
>= 1 characters
lifecycle_state
required
Allowed values: submitted under_review approved rejected disabled archived
approval_status
required
Allowed values: submitted under_review approved rejected disabled archived
registration_status
required
Allowed values: registered disabled deprecated
live_snapshot_id
string
>= 1 characters
live_manifest_hash
string
/^sha256:[0-9a-f]{64}$/
latest_submission
object
submission_id
required
string
>= 1 characters
sequence
required
integer
>= 1
status
required
string
Allowed values: submitted under_review approved rejected superseded
manifest_hash
required
string
/^sha256:[0-9a-f]{64}$/
submitted_by
required
string
>= 1 characters
submitted_at
required
string format: date-time
reviewed_by
string
reviewed_at
string format: date-time
review_reason_code
string
/^[a-z0-9_]+$/
review_reason
string
>= 1 characters
version
required
string
>= 1 characters
max_tool_risk_tier
required
Allowed values: low medium high critical
approved_tool_count
required
integer
denied_candidate_count
required
integer
superseded_by_submission_id
string
created_from_snapshot_id
string
pending_submission
object
submission_id
required
string
>= 1 characters
sequence
required
integer
>= 1
status
required
string
Allowed values: submitted under_review approved rejected superseded
manifest_hash
required
string
/^sha256:[0-9a-f]{64}$/
submitted_by
required
string
>= 1 characters
submitted_at
required
string format: date-time
reviewed_by
string
reviewed_at
string format: date-time
review_reason_code
string
/^[a-z0-9_]+$/
review_reason
string
>= 1 characters
version
required
string
>= 1 characters
max_tool_risk_tier
required
Allowed values: low medium high critical
approved_tool_count
required
integer
denied_candidate_count
required
integer
superseded_by_submission_id
string
created_from_snapshot_id
string
updated_at
required
string format: date-time
last_used_at
required
string format: date-time
nullable
owner
required
object
team
required
string
>= 1 characters
user_id
required
string
>= 1 characters
escalation_contact
required
string
>= 1 characters
oncall_rotation
required
string
>= 1 characters
environment_id
required
string
>= 1 characters
endpoint
string format: uri
transport
required
One of:
version
required
string
>= 1 characters
credential_mode
required
Allowed values: service_account user_delegated agent_scoped workload_mapped
max_tool_risk_tier
required
Allowed values: low medium high critical
health
required
object
status
required
Allowed values: healthy degraded unhealthy unknown
route_available
required
boolean
last_checked_at
required
string format: date-time
latency_ms
required
integer
checked_by
required
string
>= 1 characters
failure_reason
required
string
nullable /^[a-z0-9_]+$/
connector_status
required
Allowed values: healthy degraded unhealthy unknown not_configured
approved_tools
required
Array<object>
object
tool_id
required
string
>= 1 characters
name
required
string
>= 1 characters
description
required
string
>= 1 characters
risk_tier
required
Allowed values: low medium high critical
denied_candidates
required
Array<object>
object
tool_id
required
string
>= 1 characters
name
required
string
>= 1 characters
risk_tier
required
Allowed values: low medium high critical
reason_code
required
string
/^[a-z0-9_]+$/
change_history_pointers
required
Array<string>
catalog_visible
required
boolean

Type set in Geist, Source Serif 4, and Departure Mono.