List MCP Gateway calls

GET/v1/mcp-runs

List MCP Gateway calls.

Calls through the gateway, newest first, filtered by workspace, server, verdict, caller, approval state and time. Paginated. A call held for approval appears with approval_status: PENDING; once a person approves it in the dashboard, the agent's identical retry goes ahead once.

With workspace_id, requires an organization admin key or a key of that workspace; without, an organization admin key. Returns 400 for an unknown status or approval_status.

Authorization

AuthorizationBearer va_
A platform API key (va_...), created under Settings > API keys. Scoped to an organization or one workspace, with an admin or member role. Used by the management API.

Query parameters

organizationstringrequired
The organization's identifier (slug).
workspace_idstring<uuid>
Only calls through this workspace's servers (UUID).
serverstring
Only calls through this MCP server (slug).
statusstring
Only calls with this verdict: COMPLETED, FAILED, BLOCKED or TIMED_OUT.
user_idstring
Only calls made by this person (through an MCP client connected with OAuth).
approval_statusstring
Only calls in this approval state: PENDING, APPROVED, REJECTED or USED. (EXPIRED is worked out when a call is read, so it cannot be filtered on.)
parent_run_idstring<uuid>
Only the requests and retries that belong to this call (UUID).
start_timestring<date-time>
Only calls made at or after this time (ISO 8601).
end_timestring<date-time>
Only calls made before this time (ISO 8601).
pageinteger<int32>
The page number, starting at 1. Default 1.
page_sizeinteger<int32>
Calls per page. Default 50, at most 200.

Responses

200application/json

dataobject[]
The calls.
Child attributes
- idstring<uuid>
  The run's ID (UUID).
- created_atstring<date-time>
  When the call was made (ISO 8601).
- request_idstring
  The request ID (X-Request-ID) of the call.
- virtual_key_slugstring
  Calls made before MCP keys existed, when the gateway took virtual keys. New calls carry mcp_key_id.
- user_idstring
  Set when a person called through an MCP client they connected with OAuth (no MCP key).
- upstream_accountstring
  OAUTH_AUTO calls: whose upstream account was used, USER (the caller's own) or ORGANIZATION (the organization connection). Absent for other auth types.
- user_emailstring
  The caller's email, for display, when user_id is set.
- workspace_idstring<uuid>
  The MCP server's workspace (UUID).
- server_slugstring
  The MCP server the call went through.
- server_namestring
  The server's name, for display. Absent once the server is deleted.
- integration_slugstring
  The connector behind the server.
- mcp_methodstring
  The MCP method, for example tools/call, prompts/get or resources/read.
- mcp_namestring
  The tool or prompt name, or the resource URI.
- capability_typeenum<string>
  TOOL, PROMPT, RESOURCE or RESOURCE_TEMPLATE.
  One of "TOOL", "PROMPT", "RESOURCE", "RESOURCE_TEMPLATE"
- protocol_versionstring
  The MCP protocol version the client sent.
- statusenum<string>
  The gateway's verdict: COMPLETED, FAILED, BLOCKED or TIMED_OUT.
  One of "COMPLETED", "FAILED", "BLOCKED", "TIMED_OUT"
- provider_http_statusinteger<int32>
  The HTTP status the upstream answered with. Absent when it was not called.
- tool_errorboolean
  true when the call worked but the tool reported a failure (its isError).
- blocked_controlstring
  BLOCKED calls: the control that refused it, for example DISABLED, DISABLED_ON_SERVER, DRIFT, QUARANTINED, NOT_IN_KEY_ALLOWLIST, RATE_LIMITED, USER_ACCESS_DENIED, GUARDRAIL, TAINTED, APPROVAL_REQUIRED, CONNECTION_REQUIRED, SAMPLING_REFUSED, ELICITATION_REFUSED or NESTING_DEPTH.
- blocked_reasonstring
  BLOCKED calls: why, in a sentence.
- error_messagestring
  FAILED and TIMED_OUT calls: what went wrong.
- guardrail_statusstring
  The guardrails' verdict: PASS, MONITOR, REDACT or BLOCK, from the built-in scan and the guardrails on the connector and server. Absent when none ran.
- guardrail_violationsobject
  What they found: a list of objects with check_type, target, action and description. Never the matched text.
- inputobject
  The call's arguments. Present only when the organization stores log bodies, or when the call awaits approval.
- outputstring
  The upstream's reply, truncated. Present only when the organization stores log bodies.
- latency_msinteger<int64>
  How long the call took at the gateway, in milliseconds.
- output_taintstring
  TRUSTED or UNTRUSTED, when content went back to the caller. UNTRUSTED (any result from a capability not marked trusted_output) makes the caller untrusted for a while, so privileged tools are refused.
- approval_statusstring
  On a call held for approval: PENDING, APPROVED, REJECTED, USED (the caller's retry went ahead on it) or EXPIRED (not decided, or not used, in time).
- approval_decided_bystring
  The user who approved or rejected it.
- approval_decided_atstring<date-time>
  When it was approved or rejected (ISO 8601).
- approval_expires_atstring<date-time>
  Until when a PENDING call can be approved, or an APPROVED one used (ISO 8601).
- approval_used_bystring<uuid>
  The run that went ahead on this approval.
- approval_run_idstring<uuid>
  On a run that went ahead with an approval: the run that was approved.
- mcp_key_idstring
  The MCP key the call came in on.
- mcp_key_namestring
  That key's name, for display.
- initiatorstring
  AGENT: the client's own call. MCP_SERVER: a request the upstream made while answering a call (sampling, elicitation or roots).
- parent_run_idstring<uuid>
  The call a server's request belongs to, or the round a client's retry continues.
- nesting_depthinteger<int32>
  0 for a client's first call; one more per round of sampling, elicitation or roots requests.
- regionstring
  The AWS region whose database holds this record. Absent on older records.
pageinteger<int32>
The page number.
page_sizeinteger<int32>
Calls per page.
totalinteger<int64>
Matching calls across all pages.

VectorAxis is built by GK Labs, a member of NVIDIA Inception.