Get an MCP Gateway call

GET/v1/mcp-runs/{id}

Get an MCP Gateway call.

One call, with its approval state worked out (EXPIRED when it was not decided, or not used, in time).

Requires an organization admin key, or a key of the call's workspace. Returns 404 when the organization has no such call.

Authorization

AuthorizationBearer va_
A platform API key (va_...), created under Settings > API keys. Scoped to an organization or one workspace, with an admin or member role. Used by the management API.

Path parameters

idstring<uuid>required
The call's ID (UUID).

Query parameters

organizationstringrequired
The organization's identifier (slug).

Responses

200application/json

idstring<uuid>
The run's ID (UUID).
created_atstring<date-time>
When the call was made (ISO 8601).
request_idstring
The request ID (X-Request-ID) of the call.
virtual_key_slugstring
Calls made before MCP keys existed, when the gateway took virtual keys. New calls carry mcp_key_id.
user_idstring
Set when a person called through an MCP client they connected with OAuth (no MCP key).
upstream_accountstring
OAUTH_AUTO calls: whose upstream account was used, USER (the caller's own) or ORGANIZATION (the organization connection). Absent for other auth types.
user_emailstring
The caller's email, for display, when user_id is set.
workspace_idstring<uuid>
The MCP server's workspace (UUID).
server_slugstring
The MCP server the call went through.
server_namestring
The server's name, for display. Absent once the server is deleted.
integration_slugstring
The connector behind the server.
mcp_methodstring
The MCP method, for example tools/call, prompts/get or resources/read.
mcp_namestring
The tool or prompt name, or the resource URI.
capability_typeenum<string>
TOOL, PROMPT, RESOURCE or RESOURCE_TEMPLATE.
One of "TOOL", "PROMPT", "RESOURCE", "RESOURCE_TEMPLATE"
protocol_versionstring
The MCP protocol version the client sent.
statusenum<string>
The gateway's verdict: COMPLETED, FAILED, BLOCKED or TIMED_OUT.
One of "COMPLETED", "FAILED", "BLOCKED", "TIMED_OUT"
provider_http_statusinteger<int32>
The HTTP status the upstream answered with. Absent when it was not called.
tool_errorboolean
true when the call worked but the tool reported a failure (its isError).
blocked_controlstring
BLOCKED calls: the control that refused it, for example DISABLED, DISABLED_ON_SERVER, DRIFT, QUARANTINED, NOT_IN_KEY_ALLOWLIST, RATE_LIMITED, USER_ACCESS_DENIED, GUARDRAIL, TAINTED, APPROVAL_REQUIRED, CONNECTION_REQUIRED, SAMPLING_REFUSED, ELICITATION_REFUSED or NESTING_DEPTH.
blocked_reasonstring
BLOCKED calls: why, in a sentence.
error_messagestring
FAILED and TIMED_OUT calls: what went wrong.
guardrail_statusstring
The guardrails' verdict: PASS, MONITOR, REDACT or BLOCK, from the built-in scan and the guardrails on the connector and server. Absent when none ran.
guardrail_violationsobject
What they found: a list of objects with check_type, target, action and description. Never the matched text.
inputobject
The call's arguments. Present only when the organization stores log bodies, or when the call awaits approval.
outputstring
The upstream's reply, truncated. Present only when the organization stores log bodies.
latency_msinteger<int64>
How long the call took at the gateway, in milliseconds.
output_taintstring
TRUSTED or UNTRUSTED, when content went back to the caller. UNTRUSTED (any result from a capability not marked trusted_output) makes the caller untrusted for a while, so privileged tools are refused.
approval_statusstring
On a call held for approval: PENDING, APPROVED, REJECTED, USED (the caller's retry went ahead on it) or EXPIRED (not decided, or not used, in time).
approval_decided_bystring
The user who approved or rejected it.
approval_decided_atstring<date-time>
When it was approved or rejected (ISO 8601).
approval_expires_atstring<date-time>
Until when a PENDING call can be approved, or an APPROVED one used (ISO 8601).
approval_used_bystring<uuid>
The run that went ahead on this approval.
approval_run_idstring<uuid>
On a run that went ahead with an approval: the run that was approved.
mcp_key_idstring
The MCP key the call came in on.
mcp_key_namestring
That key's name, for display.
initiatorstring
AGENT: the client's own call. MCP_SERVER: a request the upstream made while answering a call (sampling, elicitation or roots).
parent_run_idstring<uuid>
The call a server's request belongs to, or the round a client's retry continues.
nesting_depthinteger<int32>
0 for a client's first call; one more per round of sampling, elicitation or roots requests.
regionstring
The AWS region whose database holds this record. Absent on older records.

VectorAxis is built by GK Labs, a member of NVIDIA Inception.