Registers a new managed config for an MCP server, recording the first revision snapshot and a self-audit attributed to the real principal.

POST

/v1/m/capabilities/configs

curl --request POST \
  --url https://example.com/v1/m/capabilities/configs \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "enabled": true, "endpoint": "example", "id": "example", "note": "example", "revision": 1, "scope": "example", "secret_refs": [ { "hint": "example", "name": "example", "ref": "example", "ref_kind": "example" } ], "server_ref": "example", "transport": "example" }'

• this engine

Registers a new managed config for an MCP server, recording the first revision snapshot and a self-audit attributed to the real principal.

Authorizations

• bearerAuth

Parameters

Header Parameters

X-Olivares-Tenant

string format: uuid

Target tenant id; required when the principal can act in more than one tenant.

Request Body ^required

Media type application/json

object

enabled

Any of:

boolean

boolean

null

null

endpoint

Any of:

string

Trimmed and rejected when it contains inline credential material.

string

null

null

id

Any of:

string

Accepted by the DTO but ignored on writes.

string

null

null

note

Any of:

string

string

null

null

revision

Any of:

integer

Accepted by the DTO but assigned by the server on writes.

integer

null

null

scope

Any of:

string

string

null

null

secret_refs

Any of:

Array<object>

Array<object>

<= 64 items

object

hint

Any of:

string

At most 64 UTF-8 bytes.

string

null

null

name

required

After trimming, must be non-empty.

string

ref

required

After trimming, must be a non-empty locator and not inline credential material.

string

ref_kind

required

After trimming and lowercasing, must be env, vault, secret_manager, file or other.

string

null

null

server_ref

required

Any of:

string

Required on create after trimming; immutable and replaced from storage on update.

string

null

null

transport

required

After trimming and lowercasing, must be stdio, http, sse or ws.

string

Example ^generated

{
  "enabled": true,
  "endpoint": "example",
  "id": "example",
  "note": "example",
  "revision": 1,
  "scope": "example",
  "secret_refs": [
    {
      "hint": "example",
      "name": "example",
      "ref": "example",
      "ref_kind": "example"
    }
  ],
  "server_ref": "example",
  "transport": "example"
}

Responses

200

OK

Media type application/json

object

Example ^generated

{}

400

Bad request

Media type application/json

object

Example ^generated

{}

401

Unauthenticated

Media type application/json

object

Example ^generated

{}

403

Forbidden

Media type application/json

object

Example ^generated

{}

404

Not found

Media type application/json

object

Example ^generated

{}

409

Conflict / setup required

Media type application/json

object

Example ^generated

{}

429

Rate limited

Media type application/json

object

Example ^generated

{}