---
title: "Call connections.probe_connector_address"
method: POST
path: "/api/v1/tools/connections.probe_connector_address"
tags: ["connections"]
---

# Call connections.probe_connector_address

`POST /api/v1/tools/connections.probe_connector_address`

## Request

- Base URL: `https://app.goosybear.ai`
- URL: `https://app.goosybear.ai/api/v1/tools/connections.probe_connector_address`
- Auth: HTTP bearer

Check how a member's own MCP server or API address wants to sign in, before they set it up — 'check this API address before I add it', 'does this connector need a token'. Ask a member's own MCP server or API address how it signs in, BEFORE they set it up. Use it when the operator says they want to bring their own connector and gives you an address: it dials the address once, reads nothing but the way it refuses, and reports whether it wants a token, a sign-in with the provider, or nothing at all. It writes no row, stores no credential and registers nothing — finishing the setup is the operator's own act in Connections → Add custom connector, because the token they may need to paste is a value no tool may ever carry. Not for refreshing a connector already set up — that is `connections.resync_custom_connector`.

Every result names the workspace it ran in. Say which workspace the answer is about. When the account has more than one workspace and none is selected, this tool refuses with `workspace_ambiguous` and lists the choices — offer them, never pick one.

## Headers

- `x-request-id` string

## Request body

- object
  - `kind` 'mcp' | 'openapi', required: `mcp` for a remote MCP server, `openapi` for a REST API described by an OpenAPI document. Ask the operator which they have rather than guessing from the address.
  - `address` string, required: The address to ask, exactly as the operator gave it: the MCP server's own https URL for `mcp`, or the https URL of the OpenAPI document for `openapi`. It is judged by the same SSRF floor the real dial takes, so a private or non-https address refuses here rather than being probed.
  - `workspace` string: Which workspace to run in — its slug. Omit to use your default. With more than one reachable workspace and no default, the call is refused and the choices are listed.

## Response `200`

The call was admitted and dispatched. `ok` says whether the tool succeeded — a refusal the tool itself produced is still a 200, exactly as it is a successful JSON-RPC result over MCP.

- union
  - object: The tool ran and answered.
    - `ok` true, required
    - `auth_mode` 'oauth' | 'bearer' | 'none', required: `oauth` — the address wants the operator to sign in with the provider; there is nothing to paste. `bearer` — it wants a token the operator holds. `none` — it answered without asking for anything. It is a DEFAULT for the Add custom connector sheet, never a boundary: the operator can override it under Advanced, and the registration re-validates whatever it is actually given.
    - `evidence` string, required: How the answer was reached, in the rail's own vocabulary (for example `oauth_challenge`, `credential_challenge`, `document_key_scheme`, `reachable`). Never an address and never a credential. Quote it only if the operator asks why.
    - `oauth_endpoints_known` boolean, nullable, required: For an API only: whether the rail already knows where the provider's sign-in lives. `false` means the operator will be asked for the authorize and token URLs during setup — say so before they start. `null` for an MCP server, whose endpoints come from its own discovery.
    - `workspace` string, required: The slug of the workspace this call ran in.
    - `working_in` object, required: Which workspace this call ran in, and how that was decided. Present on every workspace-scoped result.
      - `label` string, required: The chip words — e.g. "working in: Acme Main".
      - `note` string, required: Why this workspace — e.g. "your default", "this call only".
      - `workspace` string, required: The resolved workspace's slug.
      - `source` 'call-override' | 'key-pin' | 'stored-default' | 'sole-reachable', required: Which rung of the R7 precedence resolved the workspace.
  - ToolRefusal: A call that was admitted and dispatched, and did not succeed.
    - `ok` false, required
    - `code` string, required: The typed reason — e.g. `workspace_ambiguous`, `invalid_arguments`, or the tool's own failure code.
    - `message` string, required: A sentence a person can act on.
    - `workspaces` string[]: On a workspace refusal: the slugs this key may pass as `workspace`.
    - `issues` object[]: On `invalid_arguments`: which fields failed, and why.
      - `path` string, required
      - `message` string, required
    - `path` string: On an authoring refusal: where in your call's input it points, e.g. `steps.<key>.params.<field>`.
    - `fix` string: On an authoring refusal: the change to your call that would pass.
    - `instruction` string: On an authoring refusal: what to do next with it.

## Other responses

- `400`: The request could not be used: the body is present but not a JSON object (`tenant_api.malformed_body`); it is a top-level array carrying more messages than this endpoint accepts (`tenant_mcp.batch_too_large`); or the `Idempotency-Key` header is malformed (`tenant_api.idempotency_key_invalid`), disagrees with the body's `idempotency_key` (`tenant_api.idempotency_key_conflict`), or was sent to an action that cannot replay a retry (`tenant_api.idempotency_unsupported`). Nothing ran.
- `401`: No bearer credential, or one that did not resolve. Deliberately ONE undifferentiated answer for absent / unknown / revoked / expired, so the endpoint is never an oracle over the key space.
- `403`: The credential is good but the surface is not open to it — the platform or account API switch is off, or the holder lacks the `api.access` capability. The `code` says which.
- `404`: No such tool. The body names no tool and is identical for every unrecognised name.
- `429`: Over this key's per-minute cap. Carries `Retry-After` and `error.retry_after_seconds`.

---

[API](https://skmtc.dev/goosybear/apis/goosy-bear-api.md) · [All operations](https://skmtc.dev/goosybear/apis/goosy-bear-api/llms.txt) · [OpenAPI document](https://skmtc.dev/goosybear/apis/goosy-bear-api/revisions/0e033701d3f7?raw)