Skip to main content
POST
JavaScript

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

id
string
required

The Devbox ID.

Body

application/json

[Beta] Parameters for minting an MCP token for a Devbox. The token grants the Devbox access to the upstream MCP server described by the MCP config, using the supplied credential, with tool-level access control based on the config's allowed_tools.

mcp_config
string
required

The MCP config to use. Can be an MCP config ID (mcp_xxx) or name.

secret
string
required

The secret containing the MCP server credential. Can be a secret ID or name.

Response

MCP token minted successfully.

devbox_id
string
required

The Devbox the token is bound to.

mcp_config_id
string
required

The ID of the MCP config the token grants access to.

token
string
required

The token to send to the MCP hub as a Bearer token in the Authorization header. Only accepted for requests originating from the bound Devbox.

url
string
required

The MCP hub URL the token authenticates against. Matches the RL_MCP_URL environment variable inside the Devbox.

endpoint
string
required

The upstream MCP server endpoint the hub proxies to.

allowed_tools
string[]
required

Glob patterns for the tools the token permits.