Update an MCP server's user access

PUT/v1/mcp-servers/{slug}/user-access

Update an MCP server's user access.

Sets default_user_access and, when users is sent, replaces the per-person entries. A denied person is refused on their next call. Every listed person must be a member of the server's workspace.

Requires an organization admin key, or a workspace admin key for the server's workspace. Returns 400 for a duplicate user or one outside the workspace. Returns 402 when the organization's plan does not include the MCP Gateway. Returns 404 when the server does not exist in the organization.

Authorization

AuthorizationBearer va_
A platform API key (va_...), created under Settings > API keys. Scoped to an organization or one workspace, with an admin or member role. Used by the management API.

Path parameters

slugstringrequired
The MCP server's slug (mcps-...).

Query parameters

organizationstringrequired
The organization's identifier (slug).

Request body application/json

the access to set

default_user_accessenum<string>
ALLOW or DENY: access for a person with no entry. Default ALLOW.
One of "ALLOW", "DENY"
usersobject[]
Per-person entries, at most 1000, without duplicates. Replaces the whole list when sent.
At most 1000 items
Child attributes
- user_idstringrequired
  The person's user ID. They must be a member of the server's workspace.
  At least 1 characters
- enabledbooleanrequired
  true allows the person, false denies them.
- emailstring
  Read-only: the person's email, for display.

Responses

200application/json

default_user_accessenum<string>
ALLOW or DENY: access for a person with no entry. Default ALLOW.
One of "ALLOW", "DENY"
usersobject[]
Per-person entries, at most 1000, without duplicates. Replaces the whole list when sent.
At most 1000 items
Child attributes
- user_idstringrequired
  The person's user ID. They must be a member of the server's workspace.
  At least 1 characters
- enabledbooleanrequired
  true allows the person, false denies them.
- emailstring
  Read-only: the person's email, for display.

Request

curl -X PUT "https://api.vectoraxis.ai/v1/mcp-servers/{slug}/user-access?organization=string" \
  -H "Authorization: Bearer $VECTORAXIS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "default_user_access": "ALLOW",
  "users": [
    {
      "user_id": "string",
      "enabled": true
    }
  ]
}'

VectorAxis is built by GK Labs, a member of NVIDIA Inception.