Update

Update modifies an MCP tool’s admin-editable fields via update_mask. This is how a tool is approved: set tool.state = MCP_TOOL_STATE_APPROVED with update_mask “state” to move it out of PENDING_REVIEW (or DISABLED to block it). Editable paths: display_name, description, classification, state, allowed_client_types, visibility. tool must include id, app_id, connector_id.

POST /api/v1/apps/{app_id}/connectors/{connector_id}/mcp_tools/{id}

Typescript (SDK)

TypeScript

import { ConductoroneSDKTypescript } from "conductorone-sdk-typescript";

const conductoroneSDKTypescript = new ConductoroneSDKTypescript({
  security: {
    bearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
    oauth: "<YOUR_OAUTH_HERE>",
  },
});

async function run() {
  const result = await conductoroneSDKTypescript.mcpTool.update({
    appId: "<id>",
    connectorId: "<id>",
    id: "<id>",
  });

  console.log(result);
}

run();

curl --request POST \
  --url https://{tenantDomain}.conductor.one/api/v1/apps/{app_id}/connectors/{connector_id}/mcp_tools/{id} \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "tool": {
    "allowedClientTypes": [],
    "appEntitlementId": "<string>",
    "appId": "<string>",
    "connectorId": "<string>",
    "createdAt": "2023-11-07T05:31:56Z",
    "defaultDisplayName": "<string>",
    "deletedAt": "2023-11-07T05:31:56Z",
    "description": "<string>",
    "discoveryHash": "<string>",
    "displayName": "<string>",
    "id": "<string>",
    "inputSchemaJson": "<string>",
    "toolName": "<string>",
    "updatedAt": "2023-11-07T05:31:56Z"
  },
  "updateMask": "<string>"
}
'

import requests

url = "https://{tenantDomain}.conductor.one/api/v1/apps/{app_id}/connectors/{connector_id}/mcp_tools/{id}"

payload = {
    "tool": {
        "allowedClientTypes": [],
        "appEntitlementId": "<string>",
        "appId": "<string>",
        "connectorId": "<string>",
        "createdAt": "2023-11-07T05:31:56Z",
        "defaultDisplayName": "<string>",
        "deletedAt": "2023-11-07T05:31:56Z",
        "description": "<string>",
        "discoveryHash": "<string>",
        "displayName": "<string>",
        "id": "<string>",
        "inputSchemaJson": "<string>",
        "toolName": "<string>",
        "updatedAt": "2023-11-07T05:31:56Z"
    },
    "updateMask": "<string>"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    tool: {
      allowedClientTypes: [],
      appEntitlementId: '<string>',
      appId: '<string>',
      connectorId: '<string>',
      createdAt: '2023-11-07T05:31:56Z',
      defaultDisplayName: '<string>',
      deletedAt: '2023-11-07T05:31:56Z',
      description: '<string>',
      discoveryHash: '<string>',
      displayName: '<string>',
      id: '<string>',
      inputSchemaJson: '<string>',
      toolName: '<string>',
      updatedAt: '2023-11-07T05:31:56Z'
    },
    updateMask: '<string>'
  })
};

fetch('https://{tenantDomain}.conductor.one/api/v1/apps/{app_id}/connectors/{connector_id}/mcp_tools/{id}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://{tenantDomain}.conductor.one/api/v1/apps/{app_id}/connectors/{connector_id}/mcp_tools/{id}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'tool' => [
        'allowedClientTypes' => [
                
        ],
        'appEntitlementId' => '<string>',
        'appId' => '<string>',
        'connectorId' => '<string>',
        'createdAt' => '2023-11-07T05:31:56Z',
        'defaultDisplayName' => '<string>',
        'deletedAt' => '2023-11-07T05:31:56Z',
        'description' => '<string>',
        'discoveryHash' => '<string>',
        'displayName' => '<string>',
        'id' => '<string>',
        'inputSchemaJson' => '<string>',
        'toolName' => '<string>',
        'updatedAt' => '2023-11-07T05:31:56Z'
    ],
    'updateMask' => '<string>'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://{tenantDomain}.conductor.one/api/v1/apps/{app_id}/connectors/{connector_id}/mcp_tools/{id}"

	payload := strings.NewReader("{\n  \"tool\": {\n    \"allowedClientTypes\": [],\n    \"appEntitlementId\": \"<string>\",\n    \"appId\": \"<string>\",\n    \"connectorId\": \"<string>\",\n    \"createdAt\": \"2023-11-07T05:31:56Z\",\n    \"defaultDisplayName\": \"<string>\",\n    \"deletedAt\": \"2023-11-07T05:31:56Z\",\n    \"description\": \"<string>\",\n    \"discoveryHash\": \"<string>\",\n    \"displayName\": \"<string>\",\n    \"id\": \"<string>\",\n    \"inputSchemaJson\": \"<string>\",\n    \"toolName\": \"<string>\",\n    \"updatedAt\": \"2023-11-07T05:31:56Z\"\n  },\n  \"updateMask\": \"<string>\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://{tenantDomain}.conductor.one/api/v1/apps/{app_id}/connectors/{connector_id}/mcp_tools/{id}")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"tool\": {\n    \"allowedClientTypes\": [],\n    \"appEntitlementId\": \"<string>\",\n    \"appId\": \"<string>\",\n    \"connectorId\": \"<string>\",\n    \"createdAt\": \"2023-11-07T05:31:56Z\",\n    \"defaultDisplayName\": \"<string>\",\n    \"deletedAt\": \"2023-11-07T05:31:56Z\",\n    \"description\": \"<string>\",\n    \"discoveryHash\": \"<string>\",\n    \"displayName\": \"<string>\",\n    \"id\": \"<string>\",\n    \"inputSchemaJson\": \"<string>\",\n    \"toolName\": \"<string>\",\n    \"updatedAt\": \"2023-11-07T05:31:56Z\"\n  },\n  \"updateMask\": \"<string>\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://{tenantDomain}.conductor.one/api/v1/apps/{app_id}/connectors/{connector_id}/mcp_tools/{id}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"tool\": {\n    \"allowedClientTypes\": [],\n    \"appEntitlementId\": \"<string>\",\n    \"appId\": \"<string>\",\n    \"connectorId\": \"<string>\",\n    \"createdAt\": \"2023-11-07T05:31:56Z\",\n    \"defaultDisplayName\": \"<string>\",\n    \"deletedAt\": \"2023-11-07T05:31:56Z\",\n    \"description\": \"<string>\",\n    \"discoveryHash\": \"<string>\",\n    \"displayName\": \"<string>\",\n    \"id\": \"<string>\",\n    \"inputSchemaJson\": \"<string>\",\n    \"toolName\": \"<string>\",\n    \"updatedAt\": \"2023-11-07T05:31:56Z\"\n  },\n  \"updateMask\": \"<string>\"\n}"

response = http.request(request)
puts response.read_body

200

{
  "tool": {
    "allowedClientTypes": [],
    "appEntitlementId": "<string>",
    "appId": "<string>",
    "connectorId": "<string>",
    "createdAt": "2023-11-07T05:31:56Z",
    "defaultDisplayName": "<string>",
    "deletedAt": "2023-11-07T05:31:56Z",
    "description": "<string>",
    "discoveryHash": "<string>",
    "displayName": "<string>",
    "id": "<string>",
    "inputSchemaJson": "<string>",
    "lastCalledAt": "2023-11-07T05:31:56Z",
    "toolName": "<string>",
    "updatedAt": "2023-11-07T05:31:56Z"
  }
}

Authorizations

Authorization · string · header · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Authorization · string · header · required

This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the c1TokenSource.Token() function.

Path Parameters

app_id · string · required

App identifier (app that owns the connector).

connector_id · string · required

Connector identifier.

id · string · required

Unique identifier for this MCP tool record.

Body

application/json

MCPToolServiceUpdateRequest updates an existing MCP tool.

tool · Mcp Tool · object | null

MCPTool represents metadata about individual tools discovered from an MCP server.

Show child attributes

updateMask · string | null

Response

200 - application/json

MCPToolServiceUpdateResponse returns the updated MCP tool.

MCPToolServiceUpdateResponse returns the updated MCP tool.

tool · Mcp Tool · object | null

MCPTool represents metadata about individual tools discovered from an MCP server.

Show child attributes