---
title: "MCP endpoint (streamable HTTP)"
method: POST
path: "/mcp"
tags: ["mcp"]
---

# MCP endpoint (streamable HTTP)

`POST /mcp`

## Request

- Base URL: `https://api.agenticcontrolplane.com`
- URL: `https://api.agenticcontrolplane.com/mcp`
- Auth: HTTP bearer

Model Context Protocol over streamable HTTP: 9 governance tools (8 read-only introspection tools plus acp_propose_rule, which drafts a rule for a human to confirm — it never applies policy). Authenticate with a gsk_ key or via the advertised OAuth flow (see /.well-known/oauth-protected-resource). Server card: https://agenticcontrolplane.com/mcp/server-card.json

## Request body

- object: JSON-RPC 2.0 message per the MCP spec.

## Response `200`

JSON-RPC response or SSE stream.

## Other responses

- `401`: Missing, malformed, invalid, or revoked gsk_ API key.

---

[API](https://skmtc.dev/agenticcontrolplane/apis/agentic-control-plane-gateway-api.md) · [All operations](https://skmtc.dev/agenticcontrolplane/apis/agentic-control-plane-gateway-api/llms.txt) · [OpenAPI document](https://skmtc.dev/agenticcontrolplane/apis/agentic-control-plane-gateway-api/revisions/161819f3df00?raw)