Retrieve an MCP attachment
/api/v1/agents/{agent_id}/mcp-attachments/{attachment_id}Read whether one attached connector uses provider-hosted or local execution, the version needed to update its configuration, and the selected local catalog and allowed tools when applicable.
Required access
Credentials: automation account, delegated token, user session, user API key
User API keys use the owner’s current permissions, subject to any key restrictions. Capability scopes below apply to automation account keys and delegated tokens.
Scope: agents:read, mcp_servers:read
The caller must be able to read both the agent and connector. A private connector remains usable only on its owner's private agent.
A user-owned key prefixed gsmc_uk_, bound to one organization. It follows its owner's current membership, role and resource permissions, optionally restricted to read-only access. No X-Org-Id header is needed; a conflicting organization is rejected. Credential creation, personal connection setup and human attestations require a signed-in session. Runs are private to the calling user; sharing an agent grants access to your own personal memory of it, never to the agent's own memory.
In: header
Path Parameters
uuiduuidHeader Parameters
Selects the active organization for a direct user session that has more than one membership. Automation account keys and delegated tokens are each bound to one organization and ignore it.
Response Body
application/json
application/json
application/json
application/json
application/json
application/json
application/json
application/json
curl -X GET "https://example.com/api/v1/agents/497f6eca-6276-4993-bfeb-53cbbbba6f08/mcp-attachments/497f6eca-6276-4993-bfeb-53cbbbba6f08" \ -H "Authorization: Bearer $GUEST_MACHINES_API_KEY"{ "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08", "agent_id": "2b1e3b65-2c04-4fa2-a2d7-467901e98978", "server_id": "820efca4-4a15-4ab7-82fc-9e76f6d61325", "execution_mode": "local", "attachment_behavior_version": 1, "catalog_version": 1, "tool_grant": [ "string" ], "effective_tool_count": 0}Start an approved private API task POST
Start a fixed task reviewed by its owner under Triggers > Private API Tasks. Only request_id is accepted; the input, agent, app grants, per-run budgets and hourly limit are frozen. Reuse the same UUID when retrying a request to recover its original run. One active or paused run blocks additional starts. Results and approvals remain owner-private; run_url links to the owner's run page.
Configure an MCP attachment PATCH
Choose provider-hosted execution or select an exact synchronized catalog and explicit tool grant for local execution. Supply `expected_attachment_behavior_version`; a stale version returns `409` and makes no change.