List an MCP server's calls

GET/v1/mcp-servers/{slug}/runs

List an MCP server's calls.

The calls through this server, newest first, with the gateway's verdict, guardrail results and approval state. Paginated. For filters across servers use the MCP runs list.

Requires an organization admin key, or a key of the server's workspace (any role). Returns 400 for an unknown status. Returns 404 when the server does not exist in the organization.

Authorization

AuthorizationBearer va_
A platform API key (va_...), created under Settings > API keys. Scoped to an organization or one workspace, with an admin or member role. Used by the management API.

Path parameters

slugstringrequired
The MCP server's slug (mcps-...).

Query parameters

organizationstringrequired
The organization's identifier (slug).
statusstring
Only calls with this verdict: COMPLETED, FAILED, BLOCKED or TIMED_OUT.
pageinteger<int32>
The page number, starting at 1. Default 1.
page_sizeinteger<int32>
Calls per page. Default 50, at most 200.

Responses

200application/json

dataobject[]
The calls.
Child attributes
- idstring<uuid>
  The run's ID (UUID).
- created_atstring<date-time>
  When the call was made (ISO 8601).
- request_idstring
  The request ID (X-Request-ID) of the call.
- virtual_key_slugstring
  Calls made before MCP keys existed, when the gateway took virtual keys. New calls carry mcp_key_id.
- user_idstring
  Set when a person called through an MCP client they connected with OAuth (no MCP key).
- upstream_accountstring
  OAUTH_AUTO calls: whose upstream account was used, USER (the caller's own) or ORGANIZATION (the organization connection). Absent for other auth types.
- user_emailstring
  The caller's email, for display, when user_id is set.
- workspace_idstring<uuid>
  The MCP server's workspace (UUID).
- server_slugstring
  The MCP server the call went through.
- server_namestring
  The server's name, for display. Absent once the server is deleted.
- integration_slugstring
  The connector behind the server.
- mcp_methodstring
  The MCP method, for example tools/call, prompts/get or resources/read.
- mcp_namestring
  The tool or prompt name, or the resource URI.
- capability_typeenum<string>
  TOOL, PROMPT, RESOURCE or RESOURCE_TEMPLATE.
  One of "TOOL", "PROMPT", "RESOURCE", "RESOURCE_TEMPLATE"
- protocol_versionstring
  The MCP protocol version the client sent.
- statusenum<string>
  The gateway's verdict: COMPLETED, FAILED, BLOCKED or TIMED_OUT.
  One of "COMPLETED", "FAILED", "BLOCKED", "TIMED_OUT"
- provider_http_statusinteger<int32>
  The HTTP status the upstream answered with. Absent when it was not called.
- tool_errorboolean
  true when the call worked but the tool reported a failure (its isError).
- blocked_controlstring
  BLOCKED calls: the control that refused it, for example DISABLED, DISABLED_ON_SERVER, DRIFT, QUARANTINED, NOT_IN_KEY_ALLOWLIST, RATE_LIMITED, USER_ACCESS_DENIED, GUARDRAIL, TAINTED, APPROVAL_REQUIRED, CONNECTION_REQUIRED, SAMPLING_REFUSED, ELICITATION_REFUSED or NESTING_DEPTH.
- blocked_reasonstring
  BLOCKED calls: why, in a sentence.
- error_messagestring
  FAILED and TIMED_OUT calls: what went wrong.
- guardrail_statusstring
  The guardrails' verdict: PASS, MONITOR, REDACT or BLOCK, from the built-in scan and the guardrails on the connector and server. Absent when none ran.
- guardrail_violationsobject
  What they found: a list of objects with check_type, target, action and description. Never the matched text.
- inputobject
  The call's arguments. Present only when the organization stores log bodies, or when the call awaits approval.
- outputstring
  The upstream's reply, truncated. Present only when the organization stores log bodies.
- latency_msinteger<int64>
  How long the call took at the gateway, in milliseconds.
- output_taintstring
  TRUSTED or UNTRUSTED, when content went back to the caller. UNTRUSTED (any result from a capability not marked trusted_output) makes the caller untrusted for a while, so privileged tools are refused.
- approval_statusstring
  On a call held for approval: PENDING, APPROVED, REJECTED, USED (the caller's retry went ahead on it) or EXPIRED (not decided, or not used, in time).
- approval_decided_bystring
  The user who approved or rejected it.
- approval_decided_atstring<date-time>
  When it was approved or rejected (ISO 8601).
- approval_expires_atstring<date-time>
  Until when a PENDING call can be approved, or an APPROVED one used (ISO 8601).
- approval_used_bystring<uuid>
  The run that went ahead on this approval.
- approval_run_idstring<uuid>
  On a run that went ahead with an approval: the run that was approved.
- mcp_key_idstring
  The MCP key the call came in on.
- mcp_key_namestring
  That key's name, for display.
- initiatorstring
  AGENT: the client's own call. MCP_SERVER: a request the upstream made while answering a call (sampling, elicitation or roots).
- parent_run_idstring<uuid>
  The call a server's request belongs to, or the round a client's retry continues.
- nesting_depthinteger<int32>
  0 for a client's first call; one more per round of sampling, elicitation or roots requests.
- regionstring
  The AWS region whose database holds this record. Absent on older records.
pageinteger<int32>
The page number.
page_sizeinteger<int32>
Calls per page.
totalinteger<int64>
Matching calls across all pages.

VectorAxis is built by GK Labs, a member of NVIDIA Inception.