MCP Gateway
ApiUser connections

Create a user connection

Create an API-key connection to an MCP server for the authenticated user. Connections are scoped to the current API key owner. The credential is encrypted at rest and never exposed in responses.

POST
/api/v1/connections

Authorization

User API Key
AuthorizationBearer <token>

User API key (mgw_usr_live_* or mgw_usr_test_*)

In: header

access_token?|

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

application/json

curl -X POST "https://loading/api/v1/connections" \  -H "Content-Type: application/json" \  -d '{    "server_id": "820efca4-4a15-4ab7-82fc-9e76f6d61325",    "credential_type": "api_key",    "credential_value": "string"  }'
{
  "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
  "server_id": "820efca4-4a15-4ab7-82fc-9e76f6d61325",
  "user_id": "a169451c-8525-4352-b8ca-070dd449a1a5",
  "credential_type": "string",
  "alias": "string",
  "header_name": "string",
  "prefix": "",
  "credential_masked": "string",
  "is_valid": true,
  "created_at": "2019-08-24T14:15:22Z",
  "updated_at": "2019-08-24T14:15:22Z"
}
{
  "detail": [
    {
      "loc": [
        "string"
      ],
      "msg": "string",
      "type": "string"
    }
  ]
}

Rotate an API key

Rotate an API key by creating a new replacement key. The old key can optionally remain active for a grace period to allow smooth transition. The new key is returned only in this response.

Force-refresh a connection token

Trigger an immediate OAuth token refresh for a connection owned by the authenticated user. Connections are scoped to the current API key owner. Requires a valid refresh token.