Update Credentials

UpdateCredentials replaces the auth config and/or config fields for an MCP server.

POST /api/v1/apps/{app_id}/mcp_servers/{connector_id}/credentials

UpdateCredentials

Go

package main

import(
	"context"
	"github.com/conductorone/conductorone-sdk-go/pkg/models/shared"
	conductoronesdkgo "github.com/conductorone/conductorone-sdk-go"
	"github.com/conductorone/conductorone-sdk-go/pkg/models/operations"
	"log"
)

func main() {
    ctx := context.Background()

    s := conductoronesdkgo.New(
        conductoronesdkgo.WithSecurity(shared.Security{
            BearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
            Oauth: "<YOUR_OAUTH_HERE>",
        }),
    )

    res, err := s.MCPServer.UpdateCredentials(ctx, operations.C1APIAiGovernanceV1MCPServerServiceUpdateCredentialsRequest{
        AppID: "<id>",
        ConnectorID: "<id>",
    })
    if err != nil {
        log.Fatal(err)
    }
    if res.MCPServerServiceUpdateCredentialsResponse != nil {
        // handle response
    }
}

curl --request POST \
  --url https://{tenantDomain}.conductor.one/api/v1/apps/{app_id}/mcp_servers/{connector_id}/credentials \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "externalConfig": {
    "basicAuth": {
      "password": "<string>",
      "username": "<string>"
    },
    "bearerToken": {
      "token": "<string>"
    },
    "customHeader": {
      "headerName": "<string>",
      "headerValue": "<string>"
    },
    "none": {},
    "oauth2": {
      "authorizeUrl": "<string>",
      "clientId": "<string>",
      "clientSecret": "<string>",
      "codeChallengeMethodsSupported": [
        "<string>"
      ],
      "extraAuthorizeParams": {},
      "extraTokenParams": {},
      "issuerUrl": "<string>",
      "jwtAudience": "<string>",
      "jwtIssuer": "<string>",
      "jwtPrivateKey": "<string>",
      "jwtSubject": "<string>",
      "pkce": "<string>",
      "scopes": [
        "<string>"
      ],
      "scopesSupported": [
        "<string>"
      ],
      "tokenEndpointAuthMethod": "<string>",
      "tokenUrl": "<string>"
    },
    "url": "<string>"
  },
  "hostedConfig": {
    "awsSigv4": {
      "accessKeyId": "<string>",
      "secretAccessKey": "<string>",
      "sessionToken": "<string>"
    },
    "basicAuth": {
      "password": "<string>",
      "username": "<string>"
    },
    "bearerToken": {
      "token": "<string>"
    },
    "configFields": {},
    "customHeader": {
      "headerName": "<string>",
      "headerValue": "<string>"
    },
    "googleServiceAccount": {
      "credentialsJson": "<string>",
      "scopes": [
        "<string>"
      ]
    },
    "mcpServerCatalogId": "<string>",
    "none": {},
    "oauth2": {
      "authorizeUrl": "<string>",
      "clientId": "<string>",
      "clientSecret": "<string>",
      "codeChallengeMethodsSupported": [
        "<string>"
      ],
      "extraAuthorizeParams": {},
      "extraTokenParams": {},
      "issuerUrl": "<string>",
      "jwtAudience": "<string>",
      "jwtIssuer": "<string>",
      "jwtPrivateKey": "<string>",
      "jwtSubject": "<string>",
      "pkce": "<string>",
      "scopes": [
        "<string>"
      ],
      "scopesSupported": [
        "<string>"
      ],
      "tokenEndpointAuthMethod": "<string>",
      "tokenUrl": "<string>"
    },
    "sourceAppId": "<string>"
  },
  "updateMask": "<string>"
}
'

import requests

url = "https://{tenantDomain}.conductor.one/api/v1/apps/{app_id}/mcp_servers/{connector_id}/credentials"

payload = {
    "externalConfig": {
        "basicAuth": {
            "password": "<string>",
            "username": "<string>"
        },
        "bearerToken": { "token": "<string>" },
        "customHeader": {
            "headerName": "<string>",
            "headerValue": "<string>"
        },
        "none": {},
        "oauth2": {
            "authorizeUrl": "<string>",
            "clientId": "<string>",
            "clientSecret": "<string>",
            "codeChallengeMethodsSupported": ["<string>"],
            "extraAuthorizeParams": {},
            "extraTokenParams": {},
            "issuerUrl": "<string>",
            "jwtAudience": "<string>",
            "jwtIssuer": "<string>",
            "jwtPrivateKey": "<string>",
            "jwtSubject": "<string>",
            "pkce": "<string>",
            "scopes": ["<string>"],
            "scopesSupported": ["<string>"],
            "tokenEndpointAuthMethod": "<string>",
            "tokenUrl": "<string>"
        },
        "url": "<string>"
    },
    "hostedConfig": {
        "awsSigv4": {
            "accessKeyId": "<string>",
            "secretAccessKey": "<string>",
            "sessionToken": "<string>"
        },
        "basicAuth": {
            "password": "<string>",
            "username": "<string>"
        },
        "bearerToken": { "token": "<string>" },
        "configFields": {},
        "customHeader": {
            "headerName": "<string>",
            "headerValue": "<string>"
        },
        "googleServiceAccount": {
            "credentialsJson": "<string>",
            "scopes": ["<string>"]
        },
        "mcpServerCatalogId": "<string>",
        "none": {},
        "oauth2": {
            "authorizeUrl": "<string>",
            "clientId": "<string>",
            "clientSecret": "<string>",
            "codeChallengeMethodsSupported": ["<string>"],
            "extraAuthorizeParams": {},
            "extraTokenParams": {},
            "issuerUrl": "<string>",
            "jwtAudience": "<string>",
            "jwtIssuer": "<string>",
            "jwtPrivateKey": "<string>",
            "jwtSubject": "<string>",
            "pkce": "<string>",
            "scopes": ["<string>"],
            "scopesSupported": ["<string>"],
            "tokenEndpointAuthMethod": "<string>",
            "tokenUrl": "<string>"
        },
        "sourceAppId": "<string>"
    },
    "updateMask": "<string>"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    externalConfig: {
      basicAuth: {password: '<string>', username: '<string>'},
      bearerToken: {token: '<string>'},
      customHeader: {headerName: '<string>', headerValue: '<string>'},
      none: {},
      oauth2: {
        authorizeUrl: '<string>',
        clientId: '<string>',
        clientSecret: '<string>',
        codeChallengeMethodsSupported: ['<string>'],
        extraAuthorizeParams: {},
        extraTokenParams: {},
        issuerUrl: '<string>',
        jwtAudience: '<string>',
        jwtIssuer: '<string>',
        jwtPrivateKey: '<string>',
        jwtSubject: '<string>',
        pkce: '<string>',
        scopes: ['<string>'],
        scopesSupported: ['<string>'],
        tokenEndpointAuthMethod: '<string>',
        tokenUrl: '<string>'
      },
      url: '<string>'
    },
    hostedConfig: {
      awsSigv4: {accessKeyId: '<string>', secretAccessKey: '<string>', sessionToken: '<string>'},
      basicAuth: {password: '<string>', username: '<string>'},
      bearerToken: {token: '<string>'},
      configFields: {},
      customHeader: {headerName: '<string>', headerValue: '<string>'},
      googleServiceAccount: {credentialsJson: '<string>', scopes: ['<string>']},
      mcpServerCatalogId: '<string>',
      none: {},
      oauth2: {
        authorizeUrl: '<string>',
        clientId: '<string>',
        clientSecret: '<string>',
        codeChallengeMethodsSupported: ['<string>'],
        extraAuthorizeParams: {},
        extraTokenParams: {},
        issuerUrl: '<string>',
        jwtAudience: '<string>',
        jwtIssuer: '<string>',
        jwtPrivateKey: '<string>',
        jwtSubject: '<string>',
        pkce: '<string>',
        scopes: ['<string>'],
        scopesSupported: ['<string>'],
        tokenEndpointAuthMethod: '<string>',
        tokenUrl: '<string>'
      },
      sourceAppId: '<string>'
    },
    updateMask: '<string>'
  })
};

fetch('https://{tenantDomain}.conductor.one/api/v1/apps/{app_id}/mcp_servers/{connector_id}/credentials', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://{tenantDomain}.conductor.one/api/v1/apps/{app_id}/mcp_servers/{connector_id}/credentials",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'externalConfig' => [
        'basicAuth' => [
                'password' => '<string>',
                'username' => '<string>'
        ],
        'bearerToken' => [
                'token' => '<string>'
        ],
        'customHeader' => [
                'headerName' => '<string>',
                'headerValue' => '<string>'
        ],
        'none' => [
                
        ],
        'oauth2' => [
                'authorizeUrl' => '<string>',
                'clientId' => '<string>',
                'clientSecret' => '<string>',
                'codeChallengeMethodsSupported' => [
                                '<string>'
                ],
                'extraAuthorizeParams' => [
                                
                ],
                'extraTokenParams' => [
                                
                ],
                'issuerUrl' => '<string>',
                'jwtAudience' => '<string>',
                'jwtIssuer' => '<string>',
                'jwtPrivateKey' => '<string>',
                'jwtSubject' => '<string>',
                'pkce' => '<string>',
                'scopes' => [
                                '<string>'
                ],
                'scopesSupported' => [
                                '<string>'
                ],
                'tokenEndpointAuthMethod' => '<string>',
                'tokenUrl' => '<string>'
        ],
        'url' => '<string>'
    ],
    'hostedConfig' => [
        'awsSigv4' => [
                'accessKeyId' => '<string>',
                'secretAccessKey' => '<string>',
                'sessionToken' => '<string>'
        ],
        'basicAuth' => [
                'password' => '<string>',
                'username' => '<string>'
        ],
        'bearerToken' => [
                'token' => '<string>'
        ],
        'configFields' => [
                
        ],
        'customHeader' => [
                'headerName' => '<string>',
                'headerValue' => '<string>'
        ],
        'googleServiceAccount' => [
                'credentialsJson' => '<string>',
                'scopes' => [
                                '<string>'
                ]
        ],
        'mcpServerCatalogId' => '<string>',
        'none' => [
                
        ],
        'oauth2' => [
                'authorizeUrl' => '<string>',
                'clientId' => '<string>',
                'clientSecret' => '<string>',
                'codeChallengeMethodsSupported' => [
                                '<string>'
                ],
                'extraAuthorizeParams' => [
                                
                ],
                'extraTokenParams' => [
                                
                ],
                'issuerUrl' => '<string>',
                'jwtAudience' => '<string>',
                'jwtIssuer' => '<string>',
                'jwtPrivateKey' => '<string>',
                'jwtSubject' => '<string>',
                'pkce' => '<string>',
                'scopes' => [
                                '<string>'
                ],
                'scopesSupported' => [
                                '<string>'
                ],
                'tokenEndpointAuthMethod' => '<string>',
                'tokenUrl' => '<string>'
        ],
        'sourceAppId' => '<string>'
    ],
    'updateMask' => '<string>'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

HttpResponse<String> response = Unirest.post("https://{tenantDomain}.conductor.one/api/v1/apps/{app_id}/mcp_servers/{connector_id}/credentials")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"externalConfig\": {\n    \"basicAuth\": {\n      \"password\": \"<string>\",\n      \"username\": \"<string>\"\n    },\n    \"bearerToken\": {\n      \"token\": \"<string>\"\n    },\n    \"customHeader\": {\n      \"headerName\": \"<string>\",\n      \"headerValue\": \"<string>\"\n    },\n    \"none\": {},\n    \"oauth2\": {\n      \"authorizeUrl\": \"<string>\",\n      \"clientId\": \"<string>\",\n      \"clientSecret\": \"<string>\",\n      \"codeChallengeMethodsSupported\": [\n        \"<string>\"\n      ],\n      \"extraAuthorizeParams\": {},\n      \"extraTokenParams\": {},\n      \"issuerUrl\": \"<string>\",\n      \"jwtAudience\": \"<string>\",\n      \"jwtIssuer\": \"<string>\",\n      \"jwtPrivateKey\": \"<string>\",\n      \"jwtSubject\": \"<string>\",\n      \"pkce\": \"<string>\",\n      \"scopes\": [\n        \"<string>\"\n      ],\n      \"scopesSupported\": [\n        \"<string>\"\n      ],\n      \"tokenEndpointAuthMethod\": \"<string>\",\n      \"tokenUrl\": \"<string>\"\n    },\n    \"url\": \"<string>\"\n  },\n  \"hostedConfig\": {\n    \"awsSigv4\": {\n      \"accessKeyId\": \"<string>\",\n      \"secretAccessKey\": \"<string>\",\n      \"sessionToken\": \"<string>\"\n    },\n    \"basicAuth\": {\n      \"password\": \"<string>\",\n      \"username\": \"<string>\"\n    },\n    \"bearerToken\": {\n      \"token\": \"<string>\"\n    },\n    \"configFields\": {},\n    \"customHeader\": {\n      \"headerName\": \"<string>\",\n      \"headerValue\": \"<string>\"\n    },\n    \"googleServiceAccount\": {\n      \"credentialsJson\": \"<string>\",\n      \"scopes\": [\n        \"<string>\"\n      ]\n    },\n    \"mcpServerCatalogId\": \"<string>\",\n    \"none\": {},\n    \"oauth2\": {\n      \"authorizeUrl\": \"<string>\",\n      \"clientId\": \"<string>\",\n      \"clientSecret\": \"<string>\",\n      \"codeChallengeMethodsSupported\": [\n        \"<string>\"\n      ],\n      \"extraAuthorizeParams\": {},\n      \"extraTokenParams\": {},\n      \"issuerUrl\": \"<string>\",\n      \"jwtAudience\": \"<string>\",\n      \"jwtIssuer\": \"<string>\",\n      \"jwtPrivateKey\": \"<string>\",\n      \"jwtSubject\": \"<string>\",\n      \"pkce\": \"<string>\",\n      \"scopes\": [\n        \"<string>\"\n      ],\n      \"scopesSupported\": [\n        \"<string>\"\n      ],\n      \"tokenEndpointAuthMethod\": \"<string>\",\n      \"tokenUrl\": \"<string>\"\n    },\n    \"sourceAppId\": \"<string>\"\n  },\n  \"updateMask\": \"<string>\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://{tenantDomain}.conductor.one/api/v1/apps/{app_id}/mcp_servers/{connector_id}/credentials")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"externalConfig\": {\n    \"basicAuth\": {\n      \"password\": \"<string>\",\n      \"username\": \"<string>\"\n    },\n    \"bearerToken\": {\n      \"token\": \"<string>\"\n    },\n    \"customHeader\": {\n      \"headerName\": \"<string>\",\n      \"headerValue\": \"<string>\"\n    },\n    \"none\": {},\n    \"oauth2\": {\n      \"authorizeUrl\": \"<string>\",\n      \"clientId\": \"<string>\",\n      \"clientSecret\": \"<string>\",\n      \"codeChallengeMethodsSupported\": [\n        \"<string>\"\n      ],\n      \"extraAuthorizeParams\": {},\n      \"extraTokenParams\": {},\n      \"issuerUrl\": \"<string>\",\n      \"jwtAudience\": \"<string>\",\n      \"jwtIssuer\": \"<string>\",\n      \"jwtPrivateKey\": \"<string>\",\n      \"jwtSubject\": \"<string>\",\n      \"pkce\": \"<string>\",\n      \"scopes\": [\n        \"<string>\"\n      ],\n      \"scopesSupported\": [\n        \"<string>\"\n      ],\n      \"tokenEndpointAuthMethod\": \"<string>\",\n      \"tokenUrl\": \"<string>\"\n    },\n    \"url\": \"<string>\"\n  },\n  \"hostedConfig\": {\n    \"awsSigv4\": {\n      \"accessKeyId\": \"<string>\",\n      \"secretAccessKey\": \"<string>\",\n      \"sessionToken\": \"<string>\"\n    },\n    \"basicAuth\": {\n      \"password\": \"<string>\",\n      \"username\": \"<string>\"\n    },\n    \"bearerToken\": {\n      \"token\": \"<string>\"\n    },\n    \"configFields\": {},\n    \"customHeader\": {\n      \"headerName\": \"<string>\",\n      \"headerValue\": \"<string>\"\n    },\n    \"googleServiceAccount\": {\n      \"credentialsJson\": \"<string>\",\n      \"scopes\": [\n        \"<string>\"\n      ]\n    },\n    \"mcpServerCatalogId\": \"<string>\",\n    \"none\": {},\n    \"oauth2\": {\n      \"authorizeUrl\": \"<string>\",\n      \"clientId\": \"<string>\",\n      \"clientSecret\": \"<string>\",\n      \"codeChallengeMethodsSupported\": [\n        \"<string>\"\n      ],\n      \"extraAuthorizeParams\": {},\n      \"extraTokenParams\": {},\n      \"issuerUrl\": \"<string>\",\n      \"jwtAudience\": \"<string>\",\n      \"jwtIssuer\": \"<string>\",\n      \"jwtPrivateKey\": \"<string>\",\n      \"jwtSubject\": \"<string>\",\n      \"pkce\": \"<string>\",\n      \"scopes\": [\n        \"<string>\"\n      ],\n      \"scopesSupported\": [\n        \"<string>\"\n      ],\n      \"tokenEndpointAuthMethod\": \"<string>\",\n      \"tokenUrl\": \"<string>\"\n    },\n    \"sourceAppId\": \"<string>\"\n  },\n  \"updateMask\": \"<string>\"\n}"

response = http.request(request)
puts response.read_body

200

{
  "mcpServer": {
    "appId": "<string>",
    "awsAccessKeyId": "<string>",
    "awsSecretAccessKeyConfigured": true,
    "awsSessionTokenConfigured": true,
    "basicAuthPasswordConfigured": true,
    "basicAuthUsername": "<string>",
    "bearerTokenConfigured": true,
    "configFieldValues": {},
    "connectorId": "<string>",
    "createdAt": "2023-11-07T05:31:56Z",
    "credentialsSetupUrl": "<string>",
    "customHeaderName": "<string>",
    "customHeaderValueConfigured": true,
    "defaultToolPrefix": "<string>",
    "description": "<string>",
    "displayName": "<string>",
    "endpointUrl": "<string>",
    "lastCalledAt": "2023-11-07T05:31:56Z",
    "mcpServerCatalogId": "<string>",
    "oauth2AuthorizeUrl": "<string>",
    "oauth2ClientId": "<string>",
    "oauth2ClientSecretExpiresAt": "<string>",
    "oauth2CodeChallengeMethodsSupported": [
      "<string>"
    ],
    "oauth2CredentialsConfigured": true,
    "oauth2ExtraAuthorizeParams": {},
    "oauth2ExtraTokenParams": {},
    "oauth2IssuerUrl": "<string>",
    "oauth2JwtAudience": "<string>",
    "oauth2JwtIssuer": "<string>",
    "oauth2JwtPrivateKeyConfigured": true,
    "oauth2JwtSubject": "<string>",
    "oauth2Pkce": "<string>",
    "oauth2Scopes": [
      "<string>"
    ],
    "oauth2ScopesSupported": [
      "<string>"
    ],
    "oauth2ServiceAuthorized": true,
    "oauth2ServiceAuthorizedAsEmail": "<string>",
    "oauth2ServiceAuthorizedAsName": "<string>",
    "oauth2ServiceAuthorizedAt": "2023-11-07T05:31:56Z",
    "oauth2ServiceAuthorizedBy": "<string>",
    "oauth2TokenEndpointAuthMethod": "<string>",
    "oauth2TokenUrl": "<string>",
    "sourceAppId": "<string>",
    "toolPrefix": "<string>",
    "tunnelApplianceId": "<string>",
    "tunnelBridgeId": "<string>",
    "tunnelServiceName": "<string>",
    "tunneled": true,
    "updatedAt": "2023-11-07T05:31:56Z"
  }
}

Authorizations

Authorization · string · header · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Authorization · string · header · required

This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the c1TokenSource.Token() function.

Path Parameters

app_id · string · required

App identifier.

connector_id · string · required

MCP server identifier (connector ID).

Body

application/json

MCPServerServiceUpdateCredentialsRequest updates the auth credentials and config fields for an existing MCP server. Secrets are sealed before storage.

externalConfig · Mcp Server External Config · object | null

MCPServerExternalConfig configures an external MCP server accessed via HTTP transport. The server is routed through the MCP gateway for credential decryption.

This message contains a oneof named auth_config. Only a single field of the following list may be set at a time:

• none
• bearerToken
• oauth2
• customHeader
• basicAuth

Show child attributes

hostedConfig · Mcp Server Hosted Config · object | null

MCPServerHostedConfig configures a hosted MCP server backed by the MCP gateway.

This message contains a oneof named auth_config. Only a single field of the following list may be set at a time:

• none
• bearerToken
• oauth2
• customHeader
• googleServiceAccount
• awsSigv4
• basicAuth

Show child attributes

updateMask · string | null

Response

200 - application/json

MCPServerServiceUpdateCredentialsResponse returns the updated MCP server.

MCPServerServiceUpdateCredentialsResponse returns the updated MCP server.

mcpServer · Mcp Server View · object | null

MCPServerView is the API representation of an MCP server (backed by a Connector).

Show child attributes