curl --request POST \
--url https://api.enkryptai.com/mcp-hub/scan/hosted \
--header 'Content-Type: application/json' \
--header 'apikey: <api-key>' \
--data '
{
"endpoint_url": "https://mcp.example.com/sse",
"server_name": "Example MCP Server",
"auth_config": {
"auth_type": "bearer",
"bearer_token": "your-token-here"
}
}
'{
"job_id": "<string>",
"endpoint_url": "<string>",
"user_email": "<string>",
"job_status": "<string>",
"message": "<string>"
}{
"detail": "<string>"
}{
"detail": [
{
"loc": [
"<string>"
],
"msg": "<string>",
"type": "<string>"
}
]
}🔒 MCP Hub API
Scan a Hosted MCP Server
Create a new hosted MCP server scan job. Connects to a live MCP server, discovers tools/resources/prompts, and runs security analysis on the metadata. The scan runs asynchronously in the background.
POST
/
mcp-hub
/
scan
/
hosted
curl --request POST \
--url https://api.enkryptai.com/mcp-hub/scan/hosted \
--header 'Content-Type: application/json' \
--header 'apikey: <api-key>' \
--data '
{
"endpoint_url": "https://mcp.example.com/sse",
"server_name": "Example MCP Server",
"auth_config": {
"auth_type": "bearer",
"bearer_token": "your-token-here"
}
}
'{
"job_id": "<string>",
"endpoint_url": "<string>",
"user_email": "<string>",
"job_status": "<string>",
"message": "<string>"
}{
"detail": "<string>"
}{
"detail": [
{
"loc": [
"<string>"
],
"msg": "<string>",
"type": "<string>"
}
]
}Authorizations
Body
application/json
Request body for scanning a live, hosted MCP server endpoint.
URL of the hosted MCP server (e.g., https://mcp.example.com/sse)
Example:
"https://mcp.example.com/sse"
Authentication configuration used by the scanner when connecting to the hosted MCP server
Show child attributes
Show child attributes
Example:
{
"auth_type": "bearer",
"bearer_token": "eyJhbGciOiJIUzI1NiIs..."
}
Display name for the server
Example:
"Example MCP Server"
List of expected tool names for shadow-tool detection
Mark this scan as private