Update an MCP server

Update an MCP server’s URL, credential headers, or auth configuration. Passing headers replaces the entire stored header array — partial diffs are not supported. Use this endpoint to rotate credentials.

PATCH /mcp-servers/{mcp_server_id}

Update an MCP server

cURL

curl --request PATCH \
  --url https://api.smith.langchain.com/v1/deepagents/mcp-servers/{mcp_server_id} \
  --header 'Content-Type: application/json' \
  --header 'X-Api-Key: <api-key>' \
  --data '
{
  "headers": [
    {
      "key": "Authorization",
      "value": "Bearer tvly-rotated-..."
    }
  ]
}
'

200

Example

{ "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a", "tenant_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a", "name": "<string>", "url": "<string>", "headers": [ { "key": "<string>", "value": "<string>" } ], "auth_type": "<string>", "oauth_provider_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a", "oauth_mode": "<string>", "created_at": "2023-11-07T05:31:56Z", "updated_at": "2023-11-07T05:31:56Z", "mcp_vendor_id": "<string>", "vendor_id": "<string>", "external_system_id": "<string>", "can_invoke": true }

Authorizations

X-Api-Key · string · header · default: LANGSMITH_API_KEY · required

Path Parameters

mcp_server_id · string<uuid> · required

MCP server ID.

Body

application/json

All fields are optional. Passing headers replaces the entire stored header array.

url · string<uri>

headers · object[]

Credential headers attached to every invocation of this MCP server. Omitted from response bodies when the caller lacks invoke permission on the server. Passing this field replaces the entire stored array.

Show child attributes

auth_type · string

oauth_provider_id · string<uuid> | null

Response

200

application/json

MCP server updated.

id · string<uuid>

tenant_id · string<uuid>

name · string

url · string<uri>

headers · object[]

Credential headers attached to every invocation of this MCP server. Omitted from response bodies when the caller lacks invoke permission on the server.

Show child attributes

auth_type · string

oauth_provider_id · string<uuid> | null

oauth_mode · string

created_at · string<date-time>

updated_at · string<date-time>

mcp_vendor_id · string | null

vendor_id · string | null

external_system_id · string | null

can_invoke · boolean

Whether the caller has invoke permission on this server. Omitted when ambient permissions already imply invoke.