<Info>This API is in beta. Endpoints, fields, and behavior may still change, so avoid depending on it in production.</Info>

Returns the app's editable MCP config and the tools it resolves to.

Every entity and agent the app has is served unless the config holds it back, so tools lists each tool the next publish could serve, with exposed telling you whether the config serves it. pending_removal lists tools the live server still has that the config no longer produces. A publish removes them.

This is limited to 240 requests a minute for each app. Some workspaces have a different limit.

<Note>This endpoint accepts a personal API key belonging to a user with access to the app, including a read-only key. Workspace API keys are not accepted.</Note>

get/api/apps/platform/{app_id}/mcp/config

Request

  • Base URL: https://app.base44.com
  • URL: https://app.base44.com/api/apps/platform/{app_id}/mcp/config
  • Auth: HTTP bearer

Path parameters

app_idstring required

ID of the app.

Response

The app's MCP config and its tools.

configobject nullable

The editable config, or null when the app has no MCP server. It has auth, login_path, consent_path, and the tools object that Update MCP config replaces.

Example response

{
  "config": {
    "auth": "oauth",
    "tools": {
      "entity_overrides": {
        "Invoice": {
          "operations": []
        }
      },
      "excluded_agents": [
        "support_bot"
      ],
      "functions": []
    }
  },
  "tools": [
    {
      "key": "entity:Task:read:",
      "name": "query_task",
      "kind": "entity",
      "source": "Task",
      "operation": "read",
      "handler": "sendInvoice",
      "title": "Query tasks",
      "description": "Find Task records by ID or filter.",
      "read_only_hint": true,
      "exposed": true,
      "published": true
    }
  ],
  "pending_removal": [
    {
      "name": "query_invoice",
      "kind": "entity",
      "title": "Query invoices",
      "description": "Find Invoice records by ID or filter.",
      "read_only_hint": true
    }
  ]
}

Changes

    • info

      the security scope read_only was added to the endpoint's security scheme PersonalAccessTokenAuth

    • info

      the security scope full_access was removed from the endpoint's security scheme PersonalAccessTokenAuth

    • info

      the endpoint scheme security PersonalAccessTokenAuth was added to the API