MCP staff key management bundle (Command Center)

Platform admins only (requireSaasOwner). Returns active staff, workspaces, every MCP staff key (never its hash or value) with its exact workspace grants, expires_at, is_expired, is_global, and the key expiry policy. Before migration 20261005a the keys come back without expires_at.

GET

https://api.channelautomation.com/api/admin/mcp-permissions

Authorization

BearerAuth
HTTP Bearer (JWT)
required

Returns

200

{ success, data: { staff, workspaces, keys, key_policy: { default_ttl_days, max_ttl_days, expiry_supported } } }

401

Authentication required

JSON

error
optional
string
success
optional
boolean

403

Not a platform admin

500

Internal server error

JSON

error
optional
string
details
optional
string
success
optional
boolean

MCP staff key management bundle (Command Center)

curl --request GET \
  --url https://api.channelautomation.com/api/admin/mcp-permissions \
  --header 'Authorization: Bearer <token>'

const url = 'https://api.channelautomation.com/api/admin/mcp-permissions';
const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch(url, options)
  .then(res => res.json())
  .then(json => console.log(json))
  .catch(err => console.error(err));

import requests

url = "https://api.channelautomation.com/api/admin/mcp-permissions"

headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, headers=headers)

print(response.text)

Response example

{
  "error": "Authentication required",
  "success": false
}

{
  "error": "Internal server error",
  "details": "string",
  "success": false
}