Skip to content
/
Replace all capabilities...

Replace all capabilities for a virtual MCP connection

Request

OAuth 2.0 scope:
  • okta.resourceServers.virtualMcpServers.manage
Admin roles:
  • SUPER_ADMIN

Replaces the entire set of capabilities for the virtual MCP connection. Any capabilities not included in the request body are removed. Capabilities included in the request are added or updated. Rejects with a 409 error if any alias conflicts exist within the provided list.

Path
virtualMcpServerIdstringrequired

ID of a virtual MCP

Example:wlp1aB2cD3eF4gH5iJ6k
connectionIdstringrequired

Unique identifier for the connection

Example:mcn1a2b3c4d5e6f7g8h9
Bodyapplication/jsonrequired
dataArray of objects, [ 0 .. 100 ] items(ReplaceVirtualMCPConnectionCapabilityItem)required

The full set of capabilities to select for this virtual MCP connection. Replaces any existing selections.

PUT
/workload-principals/api/v1/virtual-mcp-servers/{virtualMcpServerId}/connections/{connectionId}/capabilities
curl -i -X PUT \
  https://subdomain.okta.com/workload-principals/api/v1/virtual-mcp-servers/wlp1aB2cD3eF4gH5iJ6k/connections/mcn1a2b3c4d5e6f7g8h9/capabilities \
  -H 'Content-Type: application/json' \
  -d '{
    "data": [
      {
        "sourceOrn": "orn:okta:directory:00o1gjjp4jsdR3Sww4x7:resource-servers:mcp:ems8nUa7p0g4zrZbs2f4:tools:emt1aB2cD3eF4gH5iJ6k",
        "alias": "get_jira_issues"
      },
      {
        "sourceOrn": "orn:okta:directory:00o1gjjp4jsdR3Sww4x7:resource-servers:mcp:ems8nUa7p0g4zrZbs2f4:tools:emt7lM8nO9pQ0rS1tU2v"
      }
    ]
  }'

Responses

Accepted

Headers
Locationstring, (uri)required

URL to poll for operation status. See Resource Server Operations API.

Example:"https://{yourOktaDomain}/resource-servers/api/v1/operations/op-1a2b3c4d"
Response
No content