---
title: "Provision MCP onboarding bundle"
method: POST
path: "/v1/onboarding/provision"
tags: ["Organization"]
---

# Provision MCP onboarding bundle

`POST /v1/onboarding/provision`

## Request

- Base URL: `https://api.1claw.co`
- URL: `https://api.1claw.co/v1/onboarding/provision`
- Auth: HTTP bearer

Creates welcome vault + sample secret, MCP agent, and a policy on the
vault. Returns one-time API key and stdio MCP config.

The grant is `**` only when the welcome vault is newly created. If an
org already has a vault named `default`, it is reused and the agent is
granted `examples/**` instead — enough to read the sample it is asked to
verify with, without exposing secrets already kept there.

Subject to `agent.create` control-plane consensus; see `approval_id`.

## Request body

- OnboardingProvisionRequest
  - `agent_name` string
  - `client` string
  - `approval_id` string, uuid: Approval satisfying an `agent.create` control-plane consensus policy, if the org has one. Same field and meaning as on `POST /v1/agents`: the first call returns 202 with the approval to collect, and the retry passes its id here.
  - `guided` boolean: Seeds `getting-started/**` instead of `examples/**` in the shared `default` vault — the guided onboarding wizard's own sample content, kept distinguishable from the MCP-connect developer flow's.

## Response `200`

Provisioned resources

- OnboardingProvisionResponse
  - `agent_id` string, uuid, required
  - `api_key` string, required
  - `vault_id` string, uuid, required
  - `mcp_stdio_config` object, required
  - `verify_prompt` string, required

---

[API](https://skmtc.dev/1claw/apis/1claw-api.md) · [All operations](https://skmtc.dev/1claw/apis/1claw-api/llms.txt) · [OpenAPI document](https://skmtc.dev/1claw/apis/1claw-api/revisions/ae109b496830?raw)