API
The management API for your whole instance
Everything the dashboard does, as REST. Create connectors, generate tools, flip code mode, mint keys and run File Search — from a script, a CI job or an agent.
# a management key from the dashboard or `amcp login --browser`$ export AMCP_API_KEY=amk_live_xxx# the CLI resolves the base URL and auth for you$ amcp api GET /api/connectors$ amcp api POST /api/mcp-servers --data '{"name":"ops"}'# or call the HTTP API directly$ curl -H "Authorization: Bearer $AMCP_API_KEY" \ https://cloud.anythingmcp.com/api/connectors
Authentication
Two realms reach the API, and both respect your role. Pick the one that fits the caller.
Session (JWT)
Signed-in users in the dashboard. Nothing to configure — the browser carries the session.
Management key
For scripts and agents. Mint a scoped key in Settings or with `amcp login --browser`, then send it as a Bearer token.
scope — A key carries a scope — management-read or management-admin — and its effective power is the lower of the key's scope and the owner's role. Agent keys default to read-only.
What you can call
Over 200 operations, grouped by resource. Browse the full, always-current schema in the interactive reference.
Connectors
/api/connectorsCreate connectors and import tools from OpenAPI, WSDL, GraphQL, Postman, cURL or HAR — or discover them from an MCP server.
Tools
/api/connectors/:id/toolsList, create, update and delete the tools a connector exposes, with their input schemas.
MCP servers
/api/mcp-serversCreate servers, assign tools and roles, and switch code mode between off, tools and inline.
Adapters
/api/adaptersImport from the built-in catalogue of ready-made connectors by slug.
API keys
/api/mcp-keysMint, list and revoke MCP and management-scoped keys — self-service, scoped to your account.
File Search
/api/file-searchManage searchable spaces and folders so agents can retrieve from your documents.
Conventions
Base URL
cloud.anythingmcp.com on Cloud, or your own host when self-hosted. The CLI resolves it for you.
Auth header
Authorization: Bearer <key>. The same guard accepts a session JWT.
Format
JSON in, JSON out. Send a body with --data (CLI) or Content-Type: application/json (HTTP).
Scoping
Every query is scoped to your organization; a key never reaches another tenant's data.
Rate limit
300 requests per minute per key by default, tunable by the operator. A 429 means back off.
Errors
Standard HTTP status codes; 401 wrong or missing auth, 403 scope or role too low, 404 not found.
Build against the API
Grab a key, open the interactive reference, and script your instance end to end.