MCP CONNECTOR

Turn the MCP connector on or off for your organization.

The per-firm switch the MCP auth path checks on every request.

Without this endpoint the self-service flow did not actually work: absence of a settings row means DISABLED, nothing else created one, so a firm could mint a key and get 401 the MCP connector is not enabled for this organization with no way to fix it from the dashboard.

Disabling does NOT revoke keys. That separation is the point — an operator can suspend a firm without invalidating credentials their team has already deployed into infrastructure we do not control, and re-enabling restores service without a re-integration.

Returns the full connection state so the settings page re-renders from one round trip rather than toggling and then re-fetching.

put/internal/api/mcp/settings

Request

  • Base URL
    https://api.signalshq.io (the document declares no server; this is the origin it was published from)
  • Auth
    OAuth 2
    Password
    Token URL: /auth/login

Request body

mcp_enabledboolean required

Master switch for THIS organization. A valid API key does nothing while this is false, so an operator can suspend one firm without revoking credentials their team has already deployed.

rate_limit_per_minuteinteger nullable

Requests per minute across the whole connector for this organization. Null means no cap. Connector traffic is driven by a third-party host on a schedule you do not control, so this is the ceiling that keeps a looping host from becoming an availability problem for the rest of Signals.

daily_spend_cap_centsinteger nullable

Ceiling on AI spend through the connector per UTC day, in cents. Null means uncapped. Checked before each question, so the cap can be passed by at most one question.

Example request

{
  "rate_limit_per_minute": 60,
  "daily_spend_cap_cents": 5000
}

Response

Successful Response

mcp_enabledboolean required

Whether this organization may use the connector.

server_urlstring required

The MCP endpoint. Must be entered EXACTLY as given — OAuth discovery compares this string rather than normalizing it. Empty when the server has no ELAN_MCP_RESOURCE_URL set, which means the deployment is not ready to accept connectors.

transportstring
auth_headerstring

Header carrying the credential.

auth_schemestring

Sent as Authorization: Bearer <api key>.

active_key_countinteger required

Live keys for this organization. Zero means the connector cannot be used yet however it is configured — the setup screen should lead with 'create a key' in that state.

notesstring[]

Caveats worth showing next to the steps rather than burying in docs — read-only scope, and that access follows the credential rather than the person holding it.

Changes

No recorded changes to this operation across all 1 revision of this API.