---
title: "List External MCP Connections"
method: GET
path: "/v1/mcp-connections"
tags: ["Capability Sources"]
---

# List External MCP Connections

`GET /v1/mcp-connections`

scope=usable (default): connections the calling member has been granted (org-wide, direct, or via a team), with per-member connection status. scope=manageable: every org connection with access summaries — workspace owners and admins only.

## Query parameters

- `scope` 'usable' | 'manageable'

## Response `200`

Connections.

- ExternalMcpConnectionListResponse
  - `connections` ExternalMcpConnectionResponse[], required
    - `id` string, required
    - `name` string, required
    - `url` string, required
    - `authType` 'oauth' | 'apikey' | 'none', required
    - `credentialMode` 'shared' | 'per_member', required
    - `connected` boolean, required
    - `connectedAt` string, nullable, required
    - `createdByName` string, nullable
    - `updatedAt` string, date-time
    - `connectedForMe` boolean, required
    - `needsReconnect` boolean
    - `credentialHealth` 'unknown' | 'ready' | 'reconnect_required'
    - `credentialHealthReason` 'authorization_rejected' | 'credential_expired' | 'post_authorization_validation_failed', nullable
    - `credentialHealthCheckedAt` string, date-time, nullable
    - `issuerReviewRequired` boolean
    - `reconnectActionOwner` 'member' | 'organization_admin', nullable
    - `missingFeatures` string[]
    - `externalAccountId` string, nullable
    - `grantedScopes` string[]
    - `tenantId` string, nullable
    - `requiredBy` ExternalMcpConnectionRequiredBy[], required
      - `pluginId` string, required
      - `name` string, required
    - `identityManagedBy` ExternalMcpConnectionRequiredBy[]
      - `pluginId` string, required
      - `name` string, required
    - `requiredAuthType` 'oauth' | 'apikey' | 'none', nullable
    - `authPolicyConfirmed` boolean
    - `authTypeMismatch` boolean
    - `oauthClientConfigured` boolean
    - `oauthClientRequired` boolean
    - `setupRequired` boolean
    - `access` ExternalMcpConnectionAccessSummary, required
      - `orgWide` boolean, required
      - `memberIds` string[], required
      - `teamIds` string[], required
    - `oauthClientId` string, nullable
    - `oauthCallbackUrl` string, nullable
    - `oauthSharedCallbackUrl` string, nullable
    - `oauthClientMetadataUrl` string, nullable
    - `oauthCallbackMode` 'shared-v1' | 'isolated-v1' | 'legacy-v1', nullable
    - `oauthRegistrationSource` 'pre-registered' | 'client-metadata' | 'dynamic', nullable
    - `authorizationServerIssuer` string, nullable
    - `requestedScopes` string[]

## Other responses

- `401` — The caller must be signed in.
- `403` — scope=manageable requires a workspace owner or admin.

---

[API](https://skmtc.net/openworklabs/apis/den-api.md) · [All operations](https://skmtc.net/openworklabs/apis/den-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/openworklabs/den-api/revisions/54cdbd4ecffa/schema)