---
title: "Hosted MCP server (JSON-RPC over Streamable HTTP)"
method: POST
path: "/mcp"
---

# Hosted MCP server (JSON-RPC over Streamable HTTP)

`POST /mcp`

## Request

- Base URL: `https://api.vakantio.de`
- URL: `https://api.vakantio.de/mcp`
- Auth: one of:
  - HTTP bearer
  - OAuth 2 (authorization code, authorization URL `https://api.vakantio.de/authorize`, token URL `https://api.vakantio.de/token`, scopes: `vakantio:full`)
  - none

Model Context Protocol endpoint — canonical URL https://mcp.vakantio.de/mcp. Unauthenticated requests receive 401 with OAuth discovery metadata (RFC 9728); MCP clients handle the flow automatically.

## Request body

- object: JSON-RPC 2.0 message

## Response `200`

JSON-RPC response

## Other responses

- `401`: Authentication required (triggers the client's OAuth flow)

---

[API](https://skmtc.dev/vakantio/apis/vakantio-api.md) · [All operations](https://skmtc.dev/vakantio/apis/vakantio-api/llms.txt) · [OpenAPI document](https://skmtc.dev/vakantio/apis/vakantio-api/revisions/2e1306807326?raw)