Capability Sources

Replace who can use an External MCP Connection

Changed on

Owners, admins, and the member who added the connection. Full-replace semantics: send the complete desired access set (orgWide, or memberIds + teamIds). Team and member ids come from GET /v1/org. A non-admin creator cannot grant org-wide access and always keeps their own access.

put/v1/mcp-connections/{connectionId}/access

Request

  • Base URL: https://api.openworklabs.com
  • URL: https://api.openworklabs.com/v1/mcp-connections/{connectionId}/access
  • Auth: one of:
    • API key in header x-api-key
    • HTTP bearer

Path parameters

connectionIdstring typeid required

Den TypeID with 'emc_' prefix and a 26-character base32 suffix.

Request body

Response

Access updated.

idstring required
namestring required
externalKeystring nullable required
urlstring required
authType'oauth' | 'apikey' | 'none' required
credentialMode'shared' | 'per_member' required
apiKeyAuthScheme'bearer' | 'token' required
exposeDirectlyboolean required
connectedboolean required
connectedAtstring date-time nullable required
createdByNamestring nullable
createdByYouboolean
createdAtstring date-time
updatedAtstring date-time
connectedForMeboolean required
needsReconnectboolean
credentialHealth'unknown' | 'ready' | 'reconnect_required'
credentialHealthReason'authorization_rejected' | 'credential_expired' | 'post_authorization_validation_failed' nullable
credentialHealthCheckedAtstring date-time nullable
issuerReviewRequiredboolean
reconnectActionOwner'member' | 'organization_admin' nullable
missingFeaturesstring[]
externalAccountIdstring nullable
grantedScopesstring[]
tenantIdstring nullable
requiredAuthType'oauth' | 'apikey' | 'none' nullable
authPolicyConfirmedboolean
authTypeMismatchboolean
oauthClientConfiguredboolean
oauthClientRequiredboolean
setupRequiredboolean
oauthClientIdstring nullable
oauthClientHasSecretboolean

Whether a client secret is configured. Only returned with explicit connection-settings view permission; never the secret itself.

oauthCallbackUrlstring nullable
oauthSharedCallbackUrlstring nullable
oauthClientMetadataUrlstring nullable
oauthCallbackMode'shared-v1' | 'isolated-v1' | 'legacy-v1' nullable
oauthRegistrationSource'pre-registered' | 'client-metadata' | 'dynamic' nullable
authorizationServerIssuerstring nullable
requestedScopesstring[]

Changes

  • b3e69054b120Revision changes
    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

  • 13ebcfe8505aRevision changes
    • info

      added the optional property to the response with the status