Export workload configuration
Export a workload's run configuration as JSON
Path parameters
Workload name
Response
OK
AllowDockerGateway permits outbound connections to Docker gateway addresses (host.docker.internal, gateway.docker.internal, 172.17.0.1). These are blocked by default in the egress proxy even when InsecureAllowAll is set. Only applicable to Docker deployments with network isolation enabled. Gateway access is port-independent: it ignores the permission profile's allowed ports, so once enabled the gateway is reachable on any port.
AllowedOrigins is the allowlist of values accepted on the HTTP Origin header, used for DNS-rebinding protection per MCP 2025-11-25 §"Security Warning". When empty and Host is loopback (127.0.0.1 / localhost / [::1]), a default loopback-only allowlist is derived at middleware-wiring time. When empty and Host is non-loopback, the middleware is disabled — operators exposing the proxy publicly must configure an explicit allowlist.
DEPRECATED: Middleware configuration. AuditConfigPath is the path to the audit configuration file
DEPRECATED: Middleware configuration. AuthzConfigPath is the path to the authorization configuration file
BaseName is the base name used for the container (without prefixes)
CmdArgs are the arguments to pass to the container
ContainerLabels are the labels to apply to the container
ContainerName is the name of the container
Debug indicates whether debug mode is enabled
EndpointPrefix is an explicit prefix to prepend to SSE endpoint URLs. This is used to handle path-based ingress routing scenarios.
DEPRECATED: No longer appears to be used. EnvFileDir is the directory path to load environment files from
EnvVars are the parsed environment variables as key-value pairs
Group is the name of the group this workload belongs to, if any
Host is the host for the HTTP proxy
Image is the Docker image to run
IsolateNetwork indicates whether to isolate the network for the container
DEPRECATED: No longer appears to be used. JWKSAuthTokenFile is the path to file containing auth token for JWKS/OIDC requests
K8sPodTemplatePatch is a JSON string to patch the Kubernetes pod template Only applicable when using Kubernetes runtime
MCPServerGeneration is the K8s .metadata.generation of the MCPServer CR that rendered this RunConfig. The Kubernetes runtime uses it as a monotonic version to prevent stale rolling-update pods from overwriting a newer RunConfig's StatefulSet apply. Zero value means unversioned (backward-compat with older operators, or non-operator callers).
Name is the name of the MCP server
PermissionProfileNameOrPath is the name or path of the permission profile
Port is the port for the HTTP proxy to listen on (host port)
ProxyMode is the effective HTTP protocol the proxy uses. For stdio transports, this is the configured mode (sse or streamable-http). For direct transports (sse/streamable-http), this matches the transport type. Note: "sse" is deprecated; use "streamable-http" instead.
Publish lists ports to publish to the host in format "hostPort:containerPort"
RateLimitNamespace is the Kubernetes namespace for Redis key derivation.
RegistryAPIURL is the registry API URL that served this server's metadata. Empty when the server was not discovered via registry lookup.
RegistryServerName is the registry entry name used to look up this server's metadata. Empty when the server was not discovered via registry lookup.
RegistryURL is the registry URL that served this server's metadata. Empty when the server was not discovered via registry lookup.
RemoteURL is the URL of the remote MCP server (if running remotely)
SchemaVersion is the version of the RunConfig schema
Secrets are the secret parameters to pass to the container Format: "<secret name>,target=<target environment variable>"
SessionTTL is the inactivity timeout for proxy sessions, expressed as a Go duration string (e.g. "30m", "2h", "168h"). Empty uses the transport default (2h). Negative durations and values that fail time.ParseDuration are rejected at runtime. String (not time.Duration) keeps the wire format unit-explicit: a time.Duration field serializes as nanoseconds in JSON.
Stateless indicates the server only supports POST (no SSE/GET). When true, the proxy returns 405 for incoming GET requests and uses a POST-based health check instead of the default GET probe. Applies to both remote URLs and local container workloads.
StrictProtocolValidation enables strict MCP-Protocol-Version validation on the streamable HTTP proxy: a request whose header names an unknown MCP revision is rejected with HTTP 400. Default false accepts any version string (an absent header is always accepted in either mode).
TargetHost is the host to forward traffic to (only applicable to SSE transport)
TargetPort is the port for the container to expose (only applicable to SSE transport)
DEPRECATED: No longer appears to be used. ThvCABundle is the path to the CA certificate bundle for ToolHive HTTP operations
DEPRECATED: Middleware configuration. ToolsFilter is the list of tools to filter
DEPRECATED: Middleware configuration. ToolsOverride is a map from an actual tool to its overridden name and/or description
Transport is the transport mode (stdio, sse, or streamable-http)
TrustProxyHeaders indicates whether to trust X-Forwarded-* headers from reverse proxies
Volumes are the directory mounts to pass to the container Format: "host-path:container-path[:ro]"
Example response
{
"embedded_auth_server_config": {
"cimd": {
"cache_fallback_ttl": "5m"
}
},
"remote_auth_config": {
"timeout": "5m"
},
"session_ttl": "2h"
}