MCP servers and secrets

Your MCP servers and the tools they offer, and the secrets Bash uses but never shows.

Send Authorization: Bearer vk_test_... on every call. Every route of MCP servers and secrets.

GET/v1/mcp-servers/{server_id}/toolsThe tools we found, each with its setting in the server's tool policy floor.

A deployment version's own policy can add to it.

Your API key, scope setup or all. On the card: deploy. Over HTTP it is made from the contract: fill in each {…} and every value.

Request2 fields

Path

server_idstringrequiredThe MCP server's id (mcp_...).

Query

user_idstringYour id for a user, to fill in their ${user_secret:NAME} headers. Absent: the company's own secrets only.

Answers 2002 fields

dataobject[]The items on this page.

object"mcp_tool"Always mcp_tool.

namestringThe tool's name, as the server gives it.

deniedbooleantrue when the floor says Bash never calls it.

requires_approvalbooleantrue when the floor says it waits for the person's yes.

next_cursorstring | nullSend it as cursor for the next page; null on the last page.

HTTP

No sample in your language for this route, so here it is over HTTP.

curl "$VESTRA_BASE_URL/v1/mcp-servers/{server_id}/tools" \  -H "Authorization: Bearer $VESTRA_API_KEY"