Manage Keys & ServersList MCP API keys

List MCP API keys

Keys belonging to your agency. Narrowed to one client when a location is bound to the request. The key hash is never returned, and the raw key is unrecoverable — only key_prefix identifies a key after creation.

curl -X GET "https://mythic-analytics.gulp.workers.dev/builder/mcp/api-keys?location_id=loc_abc123" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer YOUR_API_TOKEN"
{
  "data": [
    {
      "id": "123e4567-e89b-12d3-a456-426614174000",
      "agency_id": "123e4567-e89b-12d3-a456-426614174000",
      "location_id": "loc_abc123",
      "name": "Reporting agent",
      "key_prefix": "mcp_3f9a1c0b",
      "scopes": [
        "people:read",
        "insights:read"
      ],
      "is_active": true,
      "rate_limit_per_minute": 60,
      "last_used_at": "2024-12-25T10:00:00Z",
      "created_at": "2024-12-25T10:00:00Z",
      "updated_at": "2024-12-25T10:00:00Z"
    }
  ]
}
GET
/builder/mcp/api-keys
GET
Base URLstring

Target server for requests. Edit to use your own host.

Bearer Token
Bearer Tokenstring
Required

An agency key (ak_). Location secret keys are rejected. Scoped keys (mcp_) are not accepted here (403 not_available_to_scoped_keys).

An agency key (ak_). Location secret keys are rejected. Scoped keys (mcp_) are not accepted here (403 not_available_to_scoped_keys).
query
location_idstring

Bind the request to one client. The X-Location-Id header does the same.

Request Preview
Response

Response will appear here after sending the request

Authentication

header
Authorizationstring
Required

Bearer token. An agency key (ak_). Location secret keys are rejected. Scoped keys (mcp_) are not accepted here (403 not_available_to_scoped_keys).

Query Parameters

location_idstring

Bind the request to one client. The X-Location-Id header does the same.

Example:
loc_abc123

Responses

dataarray