Call authenticated MCP endpoint

OAuth scopes read/act bound access but do not grant device functions. Every device tool also checks current owner grant. The separate public /docs-mcp service is read-only documentation.

POST/mcp

Authorization

AuthorizationBearer token (ol_agent token) · headerrequired

Owner-issued agent API connection; access ceiling and live device grants are checked separately.

AuthorizationBearer token (OAuth access token) · headerrequired

OAuth read/act scope is a ceiling. Scopes do not create device grants.

Header parameters

MCP-Protocol-Versionstring

Required for modern requests; must match params._meta protocolVersion.

Mcp-Methodstring

Required for modern requests; must match the JSON-RPC method.

Mcp-Namestring

Required for modern tools/call and resources/read; match tool name or resource URI. Unicode values use the protocol's base64 header encoding.

Request body

requiredapplication/json

jsonrpcstringrequired

idinteger | string

methodstringrequired

paramsobject

Responses

200

MCP JSON response or server-sent event stream

400

JSON-RPC or MCP protocol error

401

Authentication required

errorobjectrequired

Show properties

codestringrequired

messagestring

issuesobject[]

Show properties

Array of object

pathstring

messagestring

403

Scope or live device grant required

errorobjectrequired

Show properties

codestringrequired

messagestring

issuesobject[]

Show properties

Array of object

pathstring

messagestring

406

Accept must include application/json and text/event-stream

415

Content-Type must be application/json

Try it

Server

Base URLCustom base URLOverrides the selected server when set.

Authorization

Bearer token (ol_agent token)Remember on this deviceInclude my values in samples

Parameters

MCP-Protocol-VersionheaderRequired for modern requests; must match params._meta protocolVersion.Mcp-MethodheaderRequired for modern requests; must match the JSON-RPC method.Mcp-NameheaderRequired for modern tools/call and resources/read; match tool name or resource URI. Unicode values use the protocol's base64 header encoding.

Bodyapplication/json

Request body

Request

curl -X POST 'https://www.openlaunch.dev/mcp' \
  -H 'Authorization: Bearer YOUR_TOKEN' \
  -H 'Content-Type: application/json' \
  -d '{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "server/discover",
  "params": {
    "_meta": {
      "io.modelcontextprotocol/protocolVersion": "2026-07-28",
      "io.modelcontextprotocol/clientCapabilities": {}
    }
  }
}'

const response: Response = await fetch("https://www.openlaunch.dev/mcp", {
  method: "POST",
  headers: {
    "Authorization": "Bearer YOUR_TOKEN",
    "Content-Type": "application/json"
  },
  body: "{\n  \"jsonrpc\": \"2.0\",\n  \"id\": 1,\n  \"method\": \"server/discover\",\n  \"params\": {\n    \"_meta\": {\n      \"io.modelcontextprotocol/protocolVersion\": \"2026-07-28\",\n      \"io.modelcontextprotocol/clientCapabilities\": {}\n    }\n  }\n}"
});

import requests

response = requests.post(
    "https://www.openlaunch.dev/mcp",
    headers={
        "Authorization": "Bearer YOUR_TOKEN",
        "Content-Type": "application/json"
    },
    data="{\n  \"jsonrpc\": \"2.0\",\n  \"id\": 1,\n  \"method\": \"server/discover\",\n  \"params\": {\n    \"_meta\": {\n      \"io.modelcontextprotocol/protocolVersion\": \"2026-07-28\",\n      \"io.modelcontextprotocol/clientCapabilities\": {}\n    }\n  }\n}",
)

package main

import (
	"fmt"
	"io"
	"net/http"
	"strings"
)

func main() {
	body := strings.NewReader("{\n  \"jsonrpc\": \"2.0\",\n  \"id\": 1,\n  \"method\": \"server/discover\",\n  \"params\": {\n    \"_meta\": {\n      \"io.modelcontextprotocol/protocolVersion\": \"2026-07-28\",\n      \"io.modelcontextprotocol/clientCapabilities\": {}\n    }\n  }\n}")
	req, err := http.NewRequest("POST", "https://www.openlaunch.dev/mcp", body)
	if err != nil {
		panic(err)
	}
	req.Header.Set("Authorization", "Bearer YOUR_TOKEN")
	req.Header.Set("Content-Type", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	data, _ := io.ReadAll(res.Body)
	fmt.Println(string(data))
}

Response

MCP JSON response or server-sent event stream

{
  "error": {
    "code": "string",
    "message": "string",
    "issues": [
      {
        "path": "string",
        "message": "string"
      }
    ]
  }
}

{
  "error": {
    "code": "string",
    "message": "string",
    "issues": [
      {
        "path": "string",
        "message": "string"
      }
    ]
  }
}