---
title: "Get MCP config"
method: GET
path: "/api/apps/platform/{app_id}/mcp/config"
---

# Get MCP config

`GET /api/apps/platform/{app_id}/mcp/config`

## Request

- Base URL: `https://app.base44.com`
- URL: `https://app.base44.com/api/apps/platform/{app_id}/mcp/config`
- Auth: HTTP bearer

<Info>This API is in beta. Endpoints, fields, and behavior may still change, so avoid depending on it in production.</Info>

Returns the app's editable MCP config and the tools it resolves to.

Every entity and agent the app has is served unless the config holds it back, so `tools` lists each tool the next publish could serve, with `exposed` telling you whether the config serves it. `pending_removal` lists tools the live server still has that the config no longer produces. A publish removes them.

This is limited to 240 requests a minute for each app. Some workspaces have a different limit.

<Note>This endpoint accepts a personal API key belonging to a user with access to the app, including a read-only key. Workspace API keys are not accepted.</Note>

## Path parameters

- `app_id` string, required: ID of the app.

## Response `200`

The app's MCP config and its tools.

- AppMcpConfigResponse: The app's editable MCP config and the tools it resolves to.
  - `config` object, nullable: The editable config, or `null` when the app has no MCP server. It has `auth`, `login_path`, `consent_path`, and the `tools` object that [Update MCP config](/api-reference/update-mcp-config) replaces.
  - `tools` AppMcpToolRow[]: Every tool the config can serve, and whether it does.
    - `key` string, required: Stable ID of the row. Two rows can share a `name`, but never a `key`.
    - `name` string, required: Name AI clients call the tool by.
    - `kind` 'entity' | 'agent' | 'function', required: Where the tool comes from. Either `"entity"`, `"agent"`, or `"function"` for a custom tool.
    - `source` string, required: Entity, agent, or custom tool in the config that this row belongs to.
    - `operation` string, nullable: Entity operation the tool performs, or `null` for agent and custom tools. One of `read`, `create`, `update`, or `delete`.
    - `handler` string, nullable: Backend function a custom tool runs, or the server route path it calls (starting with `/`), or `null` for other tools.
    - `title` string, nullable: Display title of the tool, or `null` when it has none.
    - `description` string: What the tool does, as AI clients see it.
    - `read_only_hint` boolean: Whether the tool is marked as only reading data.
    - `exposed` boolean, required: Whether the config serves the tool.
    - `published` boolean, required: Whether the live server already matches `exposed`. It's `false` while a change waits for a publish.
  - `pending_removal` AppMcpLiveToolRow[]: Tools the live server still serves that the config no longer produces. The next publish removes them.
    - `name` string, required: Name AI clients call the tool by.
    - `kind` 'entity' | 'agent' | 'function', required: Where the tool comes from. Either `"entity"`, `"agent"`, or `"function"` for a custom tool.
    - `title` string, nullable: Display title of the tool, or `null` when it has none.
    - `description` string: What the tool does, as AI clients see it.
    - `read_only_hint` boolean: Whether the tool is marked as only reading data.

## Other responses

- `401`: Missing or invalid credentials.
- `403`: You don't have access to this app, or it doesn't exist.
- `404`: App not found, or it's outside the workspace your credential is scoped to.
- `429`: Too many MCP config reads for this app in the last minute.

## Changes

> 58 revisions in range; 1 not diffed.

- **2026-10-13** `b92cc2f13639`: 2 info
  - the security scope `read_only` was added to the endpoint's security scheme `PersonalAccessTokenAuth`
  - the security scope `full_access` was removed from the endpoint's security scheme `PersonalAccessTokenAuth`
- **2026-10-12** `5e139db2e643`: 1 info
  - the endpoint scheme security `PersonalAccessTokenAuth` was added to the API
- **2026-09-28** `347e2afcf94a`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/adexad/apis/base44-app-management-api/changes/api/apps/platform/:app_id/mcp/config/get.md)

---

[API](https://skmtc.dev/adexad/apis/base44-app-management-api.md) · [All operations](https://skmtc.dev/adexad/apis/base44-app-management-api/llms.txt) · [OpenAPI document](https://skmtc.dev/adexad/apis/base44-app-management-api/revisions/fa29e915c226?raw)