List Generated MCP Tools
GET /mcp_servers/{mcp_server_id}/tools
GET /mcp_servers/{mcp_server_id}/toolsInteractive request editor loads with JavaScript.
Authorization
BearerAdminToken Organization-scoped admin token. Read operations require a valid token, and write operations require a token with write permission.
In: header
Path Parameters
MCP server ID.
uuidResponse Body
application/json
application/json
application/json
application/json
curl -X GET "$AISIX_CP/mcp_servers/$MCP_SERVER_ID/tools" \ -H "Authorization: Bearer $AISIX_TOKEN"OK
{
"data": [
{
"name": "string",
"namespaced_name": "string",
"method": "string",
"path": "string",
"description": "string"
}
]
}Request body or parameters failed validation.
{
"error": {
"code": "string",
"message": "string"
}
}Missing or invalid bearer.
{
"error": {
"code": "UNAUTHENTICATED",
"message": "no org context"
}
}Resource not found.
{
"error": {
"code": "NOT_FOUND",
"message": "provider key not found"
}
}Complete operation details and schema variants
GET /mcp_servers/{mcp_server_id}/tools
List Generated MCP Tools
List the MCP tools an OpenAPI-backed server generates, derived from its stored OpenAPI document by the same walk that validated it at write time.
Only servers of type: openapi can be listed: an upstream MCP
server's tool set lives on the upstream, which the control
plane never connects to (400 otherwise).
Parameters
mcp_server_id(path, string, required): MCP server ID.
Responses
-
200: OK -
data(array, required): Tools generated from the server's stored OpenAPI document, in generation order. -
data[].name(string, required): The tool's own name, from the sanitizedoperationId. -
data[].namespaced_name(string, required): The<server>__<tool>name MCP callers use — the form that goes into an API key's tool allowlist and into MCP access policy patterns. -
data[].method(string, required): HTTP method of the operation the tool calls. -
data[].path(string, required): Path template of the operation, relative to the server's baseurl. -
data[].description(string, required): The operation'ssummary, itsdescriptionwhen there is no summary, or<METHOD> <path>when it has neither. -
400: Request body or parameters failed validation. -
error(object, required): Error details. -
error.code(string, required): Machine-readable identifier. Examples:UNAUTHENTICATED,INVALID_REQUEST,MASTER_KEY_UNSET,INTERNAL. -
error.message(string, required): Human-readable explanation; safe to surface to operators. -
401: Missing or invalid bearer. Response fields (application/json): identical toGET /mcp_servers/{mcp_server_id}/tools, response 400 above. -
404: Resource not found. Response fields (application/json): identical toGET /mcp_servers/{mcp_server_id}/tools, response 400 above.
cURL
curl -X GET '$AISIX_CP/mcp_servers/{mcp_server_id}/tools' -H 'Authorization: Bearer $AISIX_TOKEN'