Scan a Hosted MCP Server

curl --request POST \ --url https://api.enkryptai.com/mcp-hub/scan/hosted \ --header 'Content-Type: application/json' \ --header 'apikey: <api-key>' \ --data ' { "endpoint_url": "https://mcp.example.com/sse", "server_name": "Example MCP Server", "auth_config": { "auth_type": "bearer", "bearer_token": "your-token-here" } } '

Authorizations

apikey

string

header

required

Body

application/json

Request body for scanning a live, hosted MCP server endpoint.

endpoint_url

string

required

URL of the hosted MCP server (e.g., https://mcp.example.com/sse)

Example:

"https://mcp.example.com/sse"

auth_config

MCPHubAuthConfig · object | null

Authentication configuration used by the scanner when connecting to the hosted MCP server

Show child attributes

Example:

{
  "auth_type": "bearer",
  "bearer_token": "eyJhbGciOiJIUzI1NiIs..."
}

server_name

string | null

Display name for the server

Example:

"Example MCP Server"

expected_tools

string[] | null

List of expected tool names for shadow-tool detection

is_private

boolean

default:false

Mark this scan as private

Response

Hosted scan job accepted

Response returned when a hosted scan job is accepted.

job_id

string

required

Unique identifier for the scan job

endpoint_url

string

required

user_email

string

required

job_status

string

required

message

string

required

Human-readable status message