Retrieve a virtual MCP server

Request

OAuth 2.0 scope:

okta.resourceServers.virtualMcpServers.read

Admin roles:

SUPER_ADMIN

Retrieves a virtual MCP server by ID

Path

virtualMcpServerIdstringrequired

ID of a virtual MCP

Example:wlp1aB2cD3eF4gH5iJ6k

GET

/resource-servers/api/v1/virtual-mcp-servers/{virtualMcpServerId}

curl -i -X GET \
  https://subdomain.okta.com/resource-servers/api/v1/virtual-mcp-servers/wlp1aB2cD3eF4gH5iJ6k

Responses

Bodyapplication/json

createdstring, (date-time)read-onlyrequired

Timestamp when the virtual MCP was created

Example:"2025-06-01T10:00:00Z"

idstringread-onlyrequired

Unique identifier for the virtual MCP

Example:"wlp1aB2cD3eF4gH5iJ6k"

lastUpdatedstring, (date-time)read-onlyrequired

Timestamp when the virtual MCP was last updated

Example:"2025-06-15T14:30:00Z"

ornstringread-onlyrequired

The ORN of the virtual MCP

Example:"orn:okta:directory:00o1gjjp4jsdR3Sww4x7:workload-principals:virtual-mcp:wlp1aB2cD3eF4gH5iJ6k"

profileobject(VirtualMCPProfile)required

Profile for the virtual MCP, which can be edited by the admin

statusstringrequired

Current status of the virtual MCP in its lifecycle

Enum Value	Description
INACTIVE	Virtual MCP is inactive
ACTIVE	Virtual MCP is active and operational

Example:"ACTIVE"

resourcePathstring, [ 1 .. 64 ] characters^[a-zA-Z0-9\-._~]+$required

A URI path suffix that uniquely identifies this virtual MCP server. The admin controls this value, and Okta uses it to construct the full resource URL at runtime.

Example:"production"

resourceUrlstring, (uri)read-onlyrequired

The fully resolved URL of the virtual MCP server resource

Example:"https://{yourOktaSubdomain}.gateway.okta.com/mcp/production"

_embeddedobject(VirtualMCPServerResourceEmbedded)read-only

Optional embedded resources on the list endpoint. Populated only when the corresponding value is passed via ?expand; each supported value adds one key here. Not returned on the single-resource GET /virtual-mcp-servers/{virtualMcpServerId} endpoint.

_linksobject(VirtualMCPServerResourceLinks)read-onlyrequired

Specifies link relations (see Web Linking) available using the JSON Hypertext Application Language specification. This object is used for dynamic discovery of related resources and lifecycle operations.

Response

{
  "id": "wlp1aB2cD3eF4gH5iJ6k",
  "orn": "orn:okta:directory:00o1gjjp4jsdR3Sww4x7:resource-servers:virtual-mcp:wlp1aB2cD3eF4gH5iJ6k",
  "resourcePath": "production",
  "resourceUrl": "https://{yourOktaSubdomain}.gateway.okta.com/mcp/production",
  "status": "ACTIVE",
  "profile": {
    "displayName": "Production MCP Servers",
    "description": "Groups all production MCP servers for the engineering team"
  },
  "created": "2025-06-01T10:00:00Z",
  "lastUpdated": "2025-06-15T14:30:00Z",
  "_links": {
    "self": { … },
    "authorization-servers": { … },
    "tools": { … }
  }
}