---
title: "[Beta] Get an McpConfig."
method: GET
path: "/v1/mcp-configs/{id}"
tags: ["mcp-configs"]
---

# [Beta] Get an McpConfig.

`GET /v1/mcp-configs/{id}`

[Beta] Get a specific McpConfig by its unique identifier.

## Path parameters

- `id` string, required

## Response `200`

Successfully retrieved the McpConfig.

- McpConfigView — An McpConfig defines a configuration for connecting to an upstream MCP (Model Context Protocol) server. It specifies the target endpoint and which tools are allowed.
  - `id` string, required — The unique identifier of the McpConfig.
  - `name` string, required — The human-readable name of the McpConfig. Unique per account.
  - `endpoint` string, required — The target MCP server endpoint URL (e.g., 'https://mcp.example.com').
  - `allowed_tools` string[], required — Glob patterns specifying which tools are allowed from this MCP server (e.g., ['github.search_*', 'github.get_*'] or ['*'] for all tools).
  - `description` string, nullable — Optional description for this MCP configuration.
  - `custom_headers` CustomHeaderView[], nullable — Additional headers applied to upstream requests after the credential. Secret-backed entries reference the secret by 'sec_' id; values are never returned.
    - `name` string, required — The header name (e.g., 'DD-APPLICATION-KEY').
    - `secret` string, nullable — Account secret providing the header value. Accepts a secret name or 'sec_' id on writes; reads always return the 'sec_' id.
    - `value` string, nullable — Literal header value. Stored in plaintext and returned by reads - use 'secret' for credentials or other sensitive values.
  - `auth_mechanism` AuthMechanismView, required — Defines how the primary credential is applied to requests proxied to the upstream.
    - `type` string, required — The type of authentication mechanism: 'header', 'bearer', or 'basic'. For 'basic', store the secret as plain 'user:pass'; the proxy base64-encodes it.
    - `key` string, nullable — The header name (e.g., 'x-api-key'). Required for 'header' type; invalid for other types.
  - `create_time_ms` integer, required — Creation time of the McpConfig (Unix timestamp in milliseconds).

## Other responses

- `401` — Unauthorized. Invalid or missing authentication.
- `403` — Forbidden. Account does not have devbox capability.
- `404` — McpConfig not found.
- `500` — Internal server error.

---

[API](https://skmtc.dev/runloopai/apis/runloop-api.md) · [All operations](https://skmtc.dev/runloopai/apis/runloop-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/runloopai/runloop-api/revisions/e9dc776053e4/schema)