Register an MCP upstream the broker may front (BROKER-1)

Owner-plane. Stores the upstream's URL and optional auth header SEC-1-encrypted under the reserved mcp:<name> vault label. Agents then speak to /mcp/broker/{name} with only their Sanction key; every tools/call is authorized before forwarding and the upstream credential is injected server-side. URL must be public https (SSRF-guarded). Re-registering a name replaces the prior config.

post/broker/upstreams

Request

  • Base URL: https://getsanction.com/api/v1
  • URL: https://getsanction.com/api/v1/broker/upstreams
  • Auth: API key in header x-mgmt-key

Request body

wallet_idstring required
namestring required
urlstring uri required
auth_headerstring
auth_valuestring

Response

Registered; body carries broker_url

Changes

No recorded changes to this operation across all 1 revision of this API.