XISUITEDokumentation

MCP Settings

6 Endpunkte. Basis-URL: https://xapi.ambertech.cloud/api/v1

Get MCP settings + the tool catalog for the org#

GET/mcp-settingsToken

Antworten

  • 200Settings and tool catalog.
Beispiel (cURL)
curl -X GET "https://xapi.ambertech.cloud/api/v1/mcp-settings" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Update MCP master toggles (enable / write tools)#

PATCH/mcp-settingsToken

Request-Bodyapplication/jsonUpdateMcpSettingsDto

NameTypBeschreibung
is_enabledboolean

Whether MCP is enabled for the org

allow_write_toolsboolean

Whether MCP write tools are allowed (master gate for writes)

Antworten

  • 200Updated settings.
  • 403Owner/admin only.
Beispiel (cURL)
curl -X PATCH "https://xapi.ambertech.cloud/api/v1/mcp-settings" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"is_enabled":true,"allow_write_tools":true}'

Recent MCP tool-usage audit slice for the org#

GET/mcp-settings/auditToken

Parameter

NameOrtTypBeschreibung
limitPflichtQuerystring–

Antworten

  • 200Recent tool invocations.
Beispiel (cURL)
curl -X GET "https://xapi.ambertech.cloud/api/v1/mcp-settings/audit" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

List active connected clients (grants) for the org#

GET/mcp-settings/grantsToken

Antworten

  • 200Active grants.
Beispiel (cURL)
curl -X GET "https://xapi.ambertech.cloud/api/v1/mcp-settings/grants" \
  -H "Authorization: Bearer $XISUITE_TOKEN"

Revoke a connected client grant#

POST/mcp-settings/grants/{grantId}/revokeToken

Parameter

NameOrtTypBeschreibung
grantIdPflichtPfadstring–

Request-Bodyapplication/jsonRevokeGrantDto

NameTypBeschreibung
reasonstring

Why the grant is being revoked

Antworten

  • 200Grant revoked.
  • 404Grant not found in this org.
Beispiel (cURL)
curl -X POST "https://xapi.ambertech.cloud/api/v1/mcp-settings/grants/{grantId}/revoke" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"reason":"…"}'

Enable/disable a single tool (per-tool allow-list)#

PATCH/mcp-settings/tools/{toolName}Token

Parameter

NameOrtTypBeschreibung
toolNamePflichtPfadstring–

Request-Bodyapplication/jsonUpdateMcpToolDto

NameTypBeschreibung
enabledPflichtboolean

Whether this tool is allowed for the org

Antworten

  • 200Updated settings.
  • 400Unknown tool name.
Beispiel (cURL)
curl -X PATCH "https://xapi.ambertech.cloud/api/v1/mcp-settings/tools/{toolName}" \
  -H "Authorization: Bearer $XISUITE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"enabled":true}'
Stand: 25. Oktober 2026© 2026 XISUITE · AmberTech Solutions