Get MCP server auth status for a subject

Returns the effective per-subject auth status for an MCP server. Permissions: callers with MANAGE_MCP_SERVER (MCP managers) may query any subject; other callers may only query their own subject.

GET /api/svc/v1/mcp/{mcpServerId}/auth/status

Get MCP server auth status for a subject

cURL

curl --request GET \
  --url https://{controlPlaneURL}/api/svc/v1/mcp/{mcpServerId}/auth/status \
  --header 'Authorization: Bearer <token>'

200

{}

Authorizations

Authorization · string · header · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

mcpServerId · string · required

MCP server id (the id returned by GET /v1/mcp, not the name).

Example:

"mcp-01HXYZ..."

Query Parameters

subjectId · string · required

Target subject id.

subjectType · enum<string> · required

Subject type for the target principal.

Available options: user, virtualaccount, external-identity

Response

200

application/json

Per-subject auth status for the MCP server.

MCPServerAuthStatusAuthenticated

MCPServerAuthStatusAuthRequired

MCPServerAuthStatusAuthNotRequired

status · enum<string> · required

Available options: authenticated, authentication_required, authentication_not_required

method · enum<string> | null

Authentication source that satisfied this status.

Available options: oauth, auth-override