Sign in

Tool Reference

connection

Manage API connections. Actions: create, authorize, list, delete, get_token, update, secret_url (generate a secure browser link for credential entry so secrets never appear in chat).

Aliases

Old tool names like create_connection, list_connections, delete_connection, authorize_connection, and get_connection_token still work as aliases.

Parameters

NameTypeRequiredDescription
actionstringYesOne of create, authorize, list, delete, get_token, update, secret_url.
connection_idstring—Connection ID. Used with most actions except create and list.
namestring—Display name. Used with create.
providerstring—Provider identifier (e.g. github, slack, stripe). Used with create.
auth_typestring—One of oauth2, api_key, bearer, basic. Used with create.
oauth_configobject—OAuth2 configuration.
api_key_configobject—API key configuration.
basic_auth_configobject—Basic auth configuration.
base_urlstring—Base URL for the API.
default_headersobject—Default headers sent with every request.
allowed_tool_idsstring[]—Tool IDs allowed to use this connection.
templatesboolean—Use a built-in provider template.

create

Create a new API connection. Use templates: true with a known provider to auto-fill OAuth config.

Parameters: name (required), provider (required), auth_type (required), plus the config object for the chosen auth type. Optionally base_url, default_headers, allowed_tool_ids, templates.

{
  "name": "connection",
  "arguments": {
    "action": "create",
    "name": "GitHub API",
    "provider": "github",
    "auth_type": "bearer",
    "base_url": "https://api.github.com"
  }
}

{
  "content": [
    {
      "type": "text",
      "text": "Connection created: GitHub API (conn_a1b2c3)\nProvider: github\nAuth: bearer\nBase URL: https://api.github.com\nStatus: pending — use secret_url to enter your token securely."
    }
  ]
}

secret_url

Generate a one-time secure browser link for entering credentials. The secret is submitted directly to Kyew and never appears in the chat.

Parameters: connection_id (required)

{
  "name": "connection",
  "arguments": {
    "action": "secret_url",
    "connection_id": "conn_a1b2c3"
  }
}

{
  "content": [
    {
      "type": "text",
      "text": "Open this link to securely enter your credentials:\nhttps://mcp.kyew.ai/secret/conn_a1b2c3?token=eyJ...\n\nThis link expires in 15 minutes and can only be used once."
    }
  ]
}

authorize

Start the OAuth2 authorization flow for a connection. Returns an authorization URL to visit.

Parameters: connection_id (required)

{
  "name": "connection",
  "arguments": {
    "action": "authorize",
    "connection_id": "conn_d4e5f6"
  }
}

{
  "content": [
    {
      "type": "text",
      "text": "Authorize this connection by visiting:\nhttps://accounts.google.com/o/oauth2/v2/auth?client_id=...&redirect_uri=https://mcp.kyew.ai/oauth/callback&state=conn_d4e5f6\n\nAfter authorizing, the connection will be active."
    }
  ]
}

list

List all connections, showing their status and provider.

Parameters: none required

{
  "name": "connection",
  "arguments": {
    "action": "list"
  }
}

{
  "content": [
    {
      "type": "text",
      "text": "3 connections:\n\n1. GitHub API (conn_a1b2c3) — bearer, active\n   Base URL: https://api.github.com\n\n2. Google Calendar (conn_d4e5f6) — oauth2, active\n   Scopes: calendar.readonly, calendar.events\n\n3. Slack Workspace (conn_g7h8i9) — bearer, pending\n   Base URL: https://slack.com/api"
    }
  ]
}

get_token

Retrieve a valid access token for a connection. For OAuth2 connections, the token is refreshed automatically if expired.

Parameters: connection_id (required)

{
  "name": "connection",
  "arguments": {
    "action": "get_token",
    "connection_id": "conn_d4e5f6"
  }
}

{
  "content": [
    {
      "type": "text",
      "text": "Token for conn_d4e5f6 (Google Calendar):\nAccess token: ya29.a0ARr...\nExpires: 2026-03-14T16:30:00Z\nType: Bearer"
    }
  ]
}

update

Update a connection's configuration, headers, or allowed tools.

Parameters: connection_id (required), plus any fields to update: name, base_url, default_headers, allowed_tool_ids, oauth_config, api_key_config, basic_auth_config.

{
  "name": "connection",
  "arguments": {
    "action": "update",
    "connection_id": "conn_a1b2c3",
    "default_headers": {
      "Accept": "application/vnd.github.v3+json",
      "X-GitHub-Api-Version": "2022-11-28"
    },
    "allowed_tool_ids": ["tool_w1x2y3", "tool_a4b5c6"]
  }
}

{
  "content": [
    {
      "type": "text",
      "text": "Connection conn_a1b2c3 (GitHub API) updated.\nDefault headers: 2 set\nAllowed tools: tool_w1x2y3, tool_a4b5c6"
    }
  ]
}

delete

Permanently delete a connection and revoke any stored tokens.

Parameters: connection_id (required)

{
  "name": "connection",
  "arguments": {
    "action": "delete",
    "connection_id": "conn_g7h8i9"
  }
}

{
  "content": [
    {
      "type": "text",
      "text": "Connection conn_g7h8i9 (Slack Workspace) deleted. Stored credentials revoked."
    }
  ]
}
Previous
tool
Next
mcp