Skip to main content
POST
/
mcp-hub
/
scan
/
hosted
curl --request POST \ --url https://api.enkryptai.com/mcp-hub/scan/hosted \ --header 'Content-Type: application/json' \ --header 'apikey: <api-key>' \ --data ' { "endpoint_url": "https://mcp.example.com/sse", "server_name": "Example MCP Server", "auth_config": { "auth_type": "bearer", "bearer_token": "your-token-here" } } '
{
  "job_id": "<string>",
  "endpoint_url": "<string>",
  "user_email": "<string>",
  "job_status": "<string>",
  "message": "<string>"
}

Authorizations

​
apikey
string
header
required

Body

application/json

Request body for scanning a live, hosted MCP server endpoint.

​
endpoint_url
string
required

URL of the hosted MCP server (e.g., https://mcp.example.com/sse)

Example:

"https://mcp.example.com/sse"

​
auth_config
MCPHubAuthConfig · object

Authentication configuration used by the scanner when connecting to the hosted MCP server

Example:
{
  "auth_type": "bearer",
  "bearer_token": "eyJhbGciOiJIUzI1NiIs..."
}
​
server_name
string | null

Display name for the server

Example:

"Example MCP Server"

​
expected_tools
string[] | null

List of expected tool names for shadow-tool detection

​
is_private
boolean
default:false

Mark this scan as private

Response

Hosted scan job accepted

Response returned when a hosted scan job is accepted.

​
job_id
string
required

Unique identifier for the scan job

​
endpoint_url
string
required
​
user_email
string
required
​
job_status
string
required
​
message
string
required

Human-readable status message