Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.
openapi: 3.2.0
info:
title: Agentic Control Plane — Gateway MCP API
version: 0.1.0
description: 'The public, gsk_-key-authenticated surface of the ACP gateway: agent profiles, run summaries,
self-introspection (cost / usage / decisions / traces), delegation-chain child-key minting,
scoped-token issuance, the governed model proxy, and the MCP endpoint.
**Rate limits.** Rate-limited endpoints return IETF draft-7 `RateLimit` / `RateLimit-Policy`
headers on every response and a 429 with the same headers when exceeded.
**Errors.** Three envelopes coexist and are documented per-endpoint: `{ error: string }` on
/api/v1/*, `{ error: ''validation_failed'', details }` on schema-validated bodies, and the
OpenAI-compatible `{ error: { message, type, param, code } }` on the model proxy.
**Feature-flagged surfaces.** `/api/v1/keys/child`, `/api/v1/scoped-tokens`, and
`/v1/sandbox-tenants` are deployment-flagged; when disabled they 404.
Human docs: https://agenticcontrolplane.com/agents/configure-as-code — agent-facing site
index: https://agenticcontrolplane.com/llms.txt'
contact:
name: Agentic Control Plane
email: hello@agenticcontrolplane.com
url: https://agenticcontrolplane.com/contact
servers:
- url: https://api.agenticcontrolplane.com
security:
- ApiKeyAuth: []
tags:
- name: MCP
description: Model Context Protocol endpoint (streamable HTTP).
paths:
/mcp:
post:
tags:
- MCP
operationId: mcp
summary: MCP endpoint (streamable HTTP)
description: 'Model Context Protocol over streamable HTTP: 9 governance tools (8 read-only introspection tools plus acp_propose_rule, which drafts a rule for a human to confirm — it never applies policy). Authenticate with a gsk_ key or via the advertised OAuth flow (see /.well-known/oauth-protected-resource). Server card: https://agenticcontrolplane.com/mcp/server-card.json'
requestBody:
required: true
content:
application/json:
schema:
type: object
additionalProperties: true
description: JSON-RPC 2.0 message per the MCP spec.
responses:
'200':
description: JSON-RPC response or SSE stream.
'401':
description: Missing, malformed, invalid, or revoked gsk_ API key.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
components:
schemas:
Error:
type: object
description: 'Default error shape on /api/v1/*: a single machine-readable-ish message string.'
required:
- error
properties:
error:
type: string
securitySchemes:
ApiKeyAuth:
type: http
scheme: bearer
description: 'Workspace API key (`gsk_{slug}_…`) as a Bearer token. Mint keys in the console: https://cloud.agenticcontrolplane.com'