---
title: "Test a remote MCP server and list its tools (nothing stored)"
method: POST
path: "/integrations/mcp/probe"
tags: ["Integrations"]
---

# Test a remote MCP server and list its tools (nothing stored)

`POST /integrations/mcp/probe`

## Request

- Base URL: `https://api.atako.ai`
- URL: `https://api.atako.ai/integrations/mcp/probe`
- Auth: HTTP bearer

The platform acts as the MCP client (Streamable HTTP, SSE fallback). https only; private, local and metadata addresses are refused, redirects are never followed. 10 per minute per user.

## Request body

- object
  - `url` string, uri, required
  - `auth` object: How the platform authenticates to the MCP server. The token is encrypted at rest and never returned nor shown to agents.
    - `mode` 'none' | 'bearer' | 'header', required
    - `token` string: bearer/header modes. Write-only.
    - `headerName` string: header mode only (e.g. X-API-Key).

## Response `200`

- object
  - `server` object
    - `name` string
    - `version` string
    - `instructions` string
  - `tools` object[]
    - `name` string
    - `title` string, nullable
    - `description` string
    - `inputSchema` object
    - `scope` 'read' | 'write': 'read' when the server annotates readOnlyHint, else 'write' (editable).
    - `destructive` boolean

## Other responses

- `400`: auth_invalid
- `401`: Missing, malformed, or invalid bearer token / API key, or revoked session (SESSION_REVOKED).
- `409`: provider_coming_soon — custom MCP servers are disabled on this deployment
- `422`: url_invalid / url_blocked (private, local or non-public address, or a redirect) / unreachable / auth_required (with `oauth: true` when the server asks for OAuth) / auth_rejected / not_mcp / too_many_tools / timeout
- `429`: too_many_requests

---

[API](https://skmtc.dev/atako/apis/atako-api.md) · [All operations](https://skmtc.dev/atako/apis/atako-api/llms.txt) · [OpenAPI document](https://skmtc.dev/atako/apis/atako-api/revisions/aa555c56fbd7?raw)