MCP servers and secrets

Your MCP servers and the tools they offer, and the secrets Bash uses but never shows.

Send Authorization: Bearer vk_test_... on every call. Every route of MCP servers and secrets.

GET/v1/mcp-servers/{server_id}One server and its settings.

Your API key, scope setup or all. On the card: deploy. Over HTTP it is made from the contract: fill in each {…} and every value.

Request1 field

Path

server_idstringrequiredThe MCP server's id (mcp_...).

Type: string

Answers 20011 fields

object"mcp_server"Always mcp_server.

Type: "mcp_server"

idstringThe MCP server's id.

Example: mcp_8f2k

slugstringThe name Bash calls it by.

Type: string

namestringIts name, as people read it.

Type: string

urlstringThe server's https URL.

Type: string

authobjectHow Bash signs in to it.

type"none" | "headers"none, or headers sent with every call.

Type: "none" | "headers"

headersmap of stringmay be absentThe headers, as written: a credential shows as its ${secret:NAME}, never its value.

Type: map of string

toolsobjectWhich of its tools Bash never calls (deny), and which wait for the person's yes (require_approval), in every deployment that uses the server. A deployment may add to either list, never take from it.

denystring[]Tools of the server Bash never calls, by name, at most 200. Every deployment that names the server runs under it.

Type: string[]

require_approvalstring[]Tools of the server that always wait for the person's yes, by name, at most 200.

Type: string[]

secretsstring[]The company secrets it needs (${secret:NAME}), by name: store each with PUT /v1/secrets/{name}.

Type: string[]

user_secretsstring[]The secrets each user needs (${user_secret:NAME}), by name: store each user's with PUT /v1/secrets/{name} and their user_id.

Type: string[]

created_atstringWhen it was made, as an ISO 8601 date and time in UTC.

Type: string

updated_atstringWhen it last changed, as an ISO 8601 date and time in UTC.

Type: string

HTTP

No sample in your language for this route, so here it is over HTTP.

curl "$VESTRA_BASE_URL/v1/mcp-servers/{server_id}" \  -H "Authorization: Bearer $VESTRA_API_KEY"