---
title: "List connected MCP clients"
method: GET
path: "/api/v1/manage/agents"
tags: ["Agents"]
---

# List connected MCP clients

`GET /api/v1/manage/agents`

## Request

- Base URL: `https://fillo.so`
- URL: `https://fillo.so/api/v1/manage/agents`
- Auth: HTTP bearer

The MCP clients currently authorized against the key's project, with the same ids Settings → Agents shows and each grant's approval policy. Never returns key material. Tier A. Scope: workspace:manage.

## Response `200`

The project's MCP grants.

- object
  - `grants` AgentGrant[], required
    - `id` string, required: The grant id — also the value a revocation must confirm with.
    - `client` string, required
    - `scopes` string[], required
    - `approvalPolicy` 'ask' | 'auto', required: `ask` sends every outward action to a human approval link first; `auto` runs Tier B directly. Destructive actions always need the link.
    - `createdAt` string, date-time, required
    - `lastUsedAt` string, date-time, nullable, required
    - `expiresAt` string, date-time, nullable, required
    - `expired` boolean, required

## Other responses

- `400`: Invalid request (e.g. a body on a GET/DELETE, or a missing required query parameter).
- `401`: Missing, malformed, unknown, revoked, or expired key.
- `403`: The key is valid but lacks the required scope.
- `404`: No such resource in this project (returned instead of 403 for ids in other projects).
- `429`: Per-key (120/min), per-workspace (240/min), or per-IP (300/min) rate limit exceeded. Retry after the Retry-After header.

---

[API](https://skmtc.dev/fillo/apis/fillo-management-api.md) · [All operations](https://skmtc.dev/fillo/apis/fillo-management-api/llms.txt) · [OpenAPI document](https://skmtc.dev/fillo/apis/fillo-management-api/revisions/867f943f04f5?raw)