Upsert Auth Schemes
Upserts every auth type given in the body, keyed by (listing, auth_type). Types absent from the body are left untouched - a publisher retires one by sending it with enabled=false, so a partial form submission cannot silently drop the types it does not render. A scheme's secret is left unchanged when omitted and cleared when sent as an empty string.
Authorization
OAuth2AuthorizationCodeBearer In: header
Path Parameters
uuidQuery Parameters
trueRequest Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
One auth type a listing accepts, with the publisher's defaults for it.
secret distinguishes three states deliberately: absent/None
leaves the stored secret untouched (a publisher editing an OAuth app's
scopes never holds the client secret to re-send), "" clears it, and
any other value replaces it.
Response Body
application/json
application/json
curl -X PUT "https://example.com/v1/mcp/497f6eca-6276-4993-bfeb-53cbbbba6f08/auth-schemes" \ -H "Content-Type: application/json" \ -d '[ { "auth_type": "api_key" } ]'[ { "auth_type": "api_key", "enabled": true, "config": {}, "has_secret": true }]{ "detail": [ { "loc": [ "string" ], "msg": "string", "type": "string" } ]}