Export workload configuration
Export a workload's run configuration as JSON
Path parameters
Workload name
Response
OK
AllowDockerGateway permits outbound connections to Docker gateway addresses (host.docker.internal, gateway.docker.internal, 172.17.0.1). These are blocked by default in the egress proxy even when InsecureAllowAll is set. Only applicable to Docker deployments with network isolation enabled.
DEPRECATED: Middleware configuration. AuditConfigPath is the path to the audit configuration file
DEPRECATED: Middleware configuration. AuthzConfigPath is the path to the authorization configuration file
BaseName is the base name used for the container (without prefixes)
CmdArgs are the arguments to pass to the container
ContainerLabels are the labels to apply to the container
ContainerName is the name of the container
Debug indicates whether debug mode is enabled
EndpointPrefix is an explicit prefix to prepend to SSE endpoint URLs. This is used to handle path-based ingress routing scenarios.
DEPRECATED: No longer appears to be used. EnvFileDir is the directory path to load environment files from
EnvVars are the parsed environment variables as key-value pairs
Group is the name of the group this workload belongs to, if any
Host is the host for the HTTP proxy
Image is the Docker image to run
IsolateNetwork indicates whether to isolate the network for the container
DEPRECATED: No longer appears to be used. JWKSAuthTokenFile is the path to file containing auth token for JWKS/OIDC requests
K8sPodTemplatePatch is a JSON string to patch the Kubernetes pod template Only applicable when using Kubernetes runtime
Name is the name of the MCP server
PermissionProfileNameOrPath is the name or path of the permission profile
Port is the port for the HTTP proxy to listen on (host port)
ProxyMode is the effective HTTP protocol the proxy uses. For stdio transports, this is the configured mode (sse or streamable-http). For direct transports (sse/streamable-http), this matches the transport type. Note: "sse" is deprecated; use "streamable-http" instead.
Publish lists ports to publish to the host in format "hostPort:containerPort"
RateLimitNamespace is the Kubernetes namespace for Redis key derivation.
RegistryAPIURL is the registry API URL that served this server's metadata. Empty when the server was not discovered via registry lookup.
RegistryServerName is the registry entry name used to look up this server's metadata. Empty when the server was not discovered via registry lookup.
RegistryURL is the registry URL that served this server's metadata. Empty when the server was not discovered via registry lookup.
RemoteURL is the URL of the remote MCP server (if running remotely)
SchemaVersion is the version of the RunConfig schema
Secrets are the secret parameters to pass to the container Format: "<secret name>,target=<target environment variable>"
TargetHost is the host to forward traffic to (only applicable to SSE transport)
TargetPort is the port for the container to expose (only applicable to SSE transport)
DEPRECATED: No longer appears to be used. ThvCABundle is the path to the CA certificate bundle for ToolHive HTTP operations
DEPRECATED: Middleware configuration. ToolsFilter is the list of tools to filter
DEPRECATED: Middleware configuration. ToolsOverride is a map from an actual tool to its overridden name and/or description
Transport is the transport mode (stdio, sse, or streamable-http)
TrustProxyHeaders indicates whether to trust X-Forwarded-* headers from reverse proxies
Volumes are the directory mounts to pass to the container Format: "host-path:container-path[:ro]"
Example response
{
"remote_auth_config": {
"timeout": "5m"
}
}