Send MCP message
Streamable HTTP endpoint for the Model Context Protocol. It serves the 2026-07-28 revision natively and falls back to stateless 2025-era Streamable HTTP for older clients.
Each POST carries one JSON-RPC message; batch arrays are not part of either served transport revision.
The bearer must be a user-delegated OAuth access token issued by the Inth authorization server; organization API keys are rejected. Clients discover the authorization server through /.well-known/oauth-protected-resource/mcp, advertised on the WWW-Authenticate challenge of a 401.
Serving is stateless, so there are no sessions: GET and DELETE answer 405.
Request body
Response
JSON-RPC response. Tool failures are reported in the result body, not as an HTTP status.
Changes
No recorded changes to this endpoint across all 1 revision of this API.