Skip to content

Automation (MCP) API

The /mcp endpoint lets MCP clients - Claude and other assistants that speak the Model Context Protocol - drive your account. Ask in plain language ("clone my staging pod", "how much credit is left?") and the client calls the matching tool.

Authentication

MCP is API key only. A login token will not work here.

http
Authorization: Bearer mck_...

Create a key, scope it to exactly what the assistant should be allowed to touch, and optionally IP-bind it - see API keys. The key's permissions decide which tools it can call, and a key only ever sees the tools it is allowed to use.

Protocol

/mcp speaks JSON-RPC 2.0 over plain HTTP POST. It is stateless (no sessions, no streaming), so every call is a self-contained request to:

POST https://cloud-api.microapps.io/mcp
MethodWhat it does
initializeHandshake; the client announces itself and gets server info back
pingLiveness check
tools/listList the tools this key may call
tools/callRun a tool, with params: { name, arguments }

Most MCP clients only need the URL and your API key; they handle the JSON-RPC plumbing for you.

Tools

Each tool is gated by the same permission as its REST equivalent, so a key can never do more through MCP than it could through the API. Tools the key cannot use do not show up in tools/list.

ToolDoesPermission
list_podsList your podspods:read
get_podDescribe one podpods:read
pod_actionStart, stop, or restart a pod (action: start / stop / restart)pods:update
clone_podClone a pod into a new onepods:create
list_snapshotsList a pod's snapshotssnapshots:read
create_snapshotTake a snapshotsnapshots:create
list_backupsList a pod's backupsbackups:read
list_account_backupsList every backup on the accountbackups:read
create_backupTake a backupbackups:create
list_domainsList your domainsdomains:read
list_networksList your networksnetworks:read
get_accountRead credit, limits, and contact detailsany key

Tools that change things (pod_action, clone_pod, create_snapshot, create_backup) obey the same $3 credit minimum as the API and show up in your activity log, just like a console click.

Example: list tools

bash
curl -X POST https://cloud-api.microapps.io/mcp \
  -H "Authorization: Bearer $MCK_KEY" \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

See also

Built for the long tail.