MCP

List available MCP tools

get

Returns all registered MCP tools with their schemas.

Authentication: Requires bearer token via Authorization: Bearer <token> header.

Testing with MCP Inspector:

npx @modelcontextprotocol/inspector --transport streamable-http --url http://localhost:3478/sfp/api/mcp

Then enter your application token in the "Bearer Token" field.

Client configuration (e.g., .claude/settings.json or .vscode/mcp.json):

{
  "mcpServers": {
    "sfp": {
      "type": "http",
      "url": "https://your-server.com/sfp/api/mcp",
      "headers": {
        "Authorization": "Bearer <your-application-token>"
      }
    }
  }
}

Responses

200

List of available MCP tools

No content

403

Forbidden - Requires role: owner, member, application

get/sfp/api/mcp/tools

HTTPcURLJavaScriptPython

GET /sfp/api/mcp/tools HTTP/1.1
Accept: */*

No content

MCP Streamable HTTP GET endpoint

get

Receives responses and notifications via Streamable HTTP transport. Part of the bidirectional MCP communication flow. Requires bearer token authentication.

Responses

200

Streamable HTTP response

No content

403

Forbidden - Requires role: owner, member, application

get/sfp/api/mcp

HTTPcURLJavaScriptPython

GET /sfp/api/mcp HTTP/1.1
Accept: */*

No content

MCP JSON-RPC endpoint

post

Handles MCP protocol requests via Streamable HTTP transport. Send JSON-RPC messages to invoke tools, list resources, or interact with the MCP server. Requires bearer token authentication. See https://modelcontextprotocol.io/docs/concepts/transports#streamable-http

Responses

201

JSON-RPC response or SSE stream

No content

403

Forbidden - Requires role: owner, member, application

post/sfp/api/mcp

HTTPcURLJavaScriptPython

POST /sfp/api/mcp HTTP/1.1
Accept: */*

No content

Close MCP session

delete

Terminates an active MCP session and cleans up server-side resources. Requires bearer token authentication.

Responses

200

Session closed

No content

403

Forbidden - Requires role: owner, member, application

delete/sfp/api/mcp

HTTPcURLJavaScriptPython

DELETE /sfp/api/mcp HTTP/1.1
Accept: */*

No content