mcp

Model Context Protocol (MCP) endpoint — token in URL path

Changed on

Same JSON-RPC 2.0 endpoint as POST /mcp, but the Public API token is supplied as a path parameter instead of through the Authorization header or the ?token= query string.

This variant exists because some MCP clients cannot set custom HTTP headers nor query strings. Behavior is otherwise strictly identical to POST /mcp:

  • same JSON-RPC methods (initialize, tools/list, tools/call)
  • same Streamable HTTP transport (Accept, JSON responses, HTTP 400 transport errors — see the mcp tag)
  • same rate limiting (1 req/s per token, burst 10)
  • same permission and Monitoring rules
  • same stateless behavior (no Mcp-Session-Id)

⚠️ Security note — The token is part of the URL and will likely be logged by proxies, browsers and access logs. Use this variant only when neither the Authorization header nor the ?token= query string is available, and rotate any token that may have leaked.

OpenAPI 3.0 cannot declare an apiKey security scheme located in path, so this operation is documented with the AuthorizationPath scheme (declared as query for tooling compatibility — the actual transport is the URL path shown by the token path parameter below).

post/mcp/{token}

Request

  • Base URL
    https://public-api.ringover.com/v2
  • URL
    https://public-api.ringover.com/v2/mcp/{token}
  • Auth
    API key in query parameter token

Path parameters

tokenstring required
Example:your-public-token

Your Public API token (same value as the Authorization header).

Headers

Acceptstring required
Example:application/json, text/event-stream

Must include both application/json and text/event-stream (comma-separated). Example: application/json, text/event-stream.

Request body

jsonrpc'2.0' required

JSON-RPC protocol version. Must be "2.0".

method'initialize' | 'tools/list' | 'tools/call' required

The JSON-RPC method to call: initialize, tools/list, or tools/call.

paramsobject

Method-specific parameters. Required for initialize and tools/call, optional for tools/list.

Response

JSON-RPC response (Content-Type: application/json). Same as POST /mcp.

jsonrpc'2.0' required
resultobject

Present on success. Content depends on the method called.

Changes