ClusterHack MCP API
The mcp API from ClusterHack — 5 operation(s) for mcp.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/clusterhack-dev:clusterhack-dev-mcp-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: Clusterhack Dev MCP API
version: 1.3.0
description: 'Operations tagged mcp across 2 of this provider''s published API definitions: clusterhack-dev-openapi-original.json, clusterhack-dev-openapi.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://clusterhack.dev
description: Production. Not stated in the provider spec (no servers[]); the spec is served from https://clusterhack.dev/api/schema/ and its paths are rooted at /api/v1 and /geo-api.
tags:
- name: MCP
paths:
/api/v1/mcp/connections/:
get:
operationId: mcp_connections_list
description: 'The AI clients connected to your account, and how to cut one off.
``DELETE`` performs the same teardown as the "Connected apps" page: the
consent is withdrawn, the client''s live tokens are revoked and its open MCP
sessions are terminated. The row is not deleted — a withdrawn consent is
part of the record — it simply stops being listed.'
parameters:
- name: ordering
required: false
in: query
description: Which field to use when ordering the results.
schema:
type: string
- name: page
required: false
in: query
description: A page number within the paginated result set.
schema:
type: integer
- name: page_size
required: false
in: query
description: Number of results to return per page.
schema:
type: integer
tags:
- MCP
security:
- jwtAuth: []
- tokenAuth: []
- cookieAuth: []
- basicAuth: []
responses:
'200':
content:
application/json:
schema:
$ref: '#/components/schemas/PaginatedConnectionList'
description: ''
'401':
description: 'Not authenticated. The response carries `WWW-Authenticate: Bearer realm="api"`; obtain or refresh a token and retry.'
headers:
WWW-Authenticate:
description: Always `Bearer realm="api"`.
schema:
type: string
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorDetail'
'403':
description: Authenticated, but not permitted to perform this action on this object.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorDetail'
'429':
description: Rate limit exceeded (see `DEFAULT_THROTTLE_RATES`). `Retry-After` gives the number of seconds to wait.
headers:
Retry-After:
description: Seconds until the caller may retry.
schema:
type: integer
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorDetail'
'500':
description: Unhandled server error.
summary: Mcp connections list
x-summary-source: derived
/api/v1/mcp/connections/{id}/:
delete:
operationId: mcp_connections_destroy
description: 'The AI clients connected to your account, and how to cut one off.
``DELETE`` performs the same teardown as the "Connected apps" page: the
consent is withdrawn, the client''s live tokens are revoked and its open MCP
sessions are terminated. The row is not deleted — a withdrawn consent is
part of the record — it simply stops being listed.'
parameters:
- in: path
name: id
schema:
type: integer
description: A unique integer value identifying this o auth consent.
required: true
tags:
- MCP
security:
- jwtAuth: []
- tokenAuth: []
- cookieAuth: []
- basicAuth: []
responses:
'204':
description: No response body
'401':
description: 'Not authenticated. The response carries `WWW-Authenticate: Bearer realm="api"`; obtain or refresh a token and retry.'
headers:
WWW-Authenticate:
description: Always `Bearer realm="api"`.
schema:
type: string
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorDetail'
'403':
description: Authenticated, but not permitted to perform this action on this object.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorDetail'
'404':
description: No such object, or it is not visible to you.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorDetail'
'429':
description: Rate limit exceeded (see `DEFAULT_THROTTLE_RATES`). `Retry-After` gives the number of seconds to wait.
headers:
Retry-After:
description: Seconds until the caller may retry.
schema:
type: integer
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorDetail'
'500':
description: Unhandled server error.
summary: Mcp connections destroy
x-summary-source: derived
/api/v1/mcp/sessions/:
get:
operationId: mcp_sessions_list
description: 'The MCP sessions currently open on your account.
The MCP transport can already end a session (``DELETE /mcp/`` with the
``Mcp-Session-Id`` header), but only for an id the caller already holds —
which means a session you do not recognise is a session you cannot see.
This lists them.'
parameters:
- name: ordering
required: false
in: query
description: Which field to use when ordering the results.
schema:
type: string
- name: page
required: false
in: query
description: A page number within the paginated result set.
schema:
type: integer
- name: page_size
required: false
in: query
description: Number of results to return per page.
schema:
type: integer
tags:
- MCP
security:
- jwtAuth: []
- tokenAuth: []
- cookieAuth: []
- basicAuth: []
responses:
'200':
content:
application/json:
schema:
$ref: '#/components/schemas/PaginatedMcpSessionList'
description: ''
'401':
description: 'Not authenticated. The response carries `WWW-Authenticate: Bearer realm="api"`; obtain or refresh a token and retry.'
headers:
WWW-Authenticate:
description: Always `Bearer realm="api"`.
schema:
type: string
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorDetail'
'403':
description: Authenticated, but not permitted to perform this action on this object.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorDetail'
'429':
description: Rate limit exceeded (see `DEFAULT_THROTTLE_RATES`). `Retry-After` gives the number of seconds to wait.
headers:
Retry-After:
description: Seconds until the caller may retry.
schema:
type: integer
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorDetail'
'500':
description: Unhandled server error.
summary: Mcp sessions list
x-summary-source: derived
/api/v1/mcp/sessions/{session_id}/:
delete:
operationId: mcp_sessions_destroy
description: 'The MCP sessions currently open on your account.
The MCP transport can already end a session (``DELETE /mcp/`` with the
``Mcp-Session-Id`` header), but only for an id the caller already holds —
which means a session you do not recognise is a session you cannot see.
This lists them.'
parameters:
- in: path
name: session_id
schema:
type: string
format: uuid
required: true
tags:
- MCP
security:
- jwtAuth: []
- tokenAuth: []
- cookieAuth: []
- basicAuth: []
responses:
'204':
description: No response body
'401':
description: 'Not authenticated. The response carries `WWW-Authenticate: Bearer realm="api"`; obtain or refresh a token and retry.'
headers:
WWW-Authenticate:
description: Always `Bearer realm="api"`.
schema:
type: string
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorDetail'
'403':
description: Authenticated, but not permitted to perform this action on this object.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorDetail'
'404':
description: No such object, or it is not visible to you.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorDetail'
'429':
description: Rate limit exceeded (see `DEFAULT_THROTTLE_RATES`). `Retry-After` gives the number of seconds to wait.
headers:
Retry-After:
description: Seconds until the caller may retry.
schema:
type: integer
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorDetail'
'500':
description: Unhandled server error.
summary: Mcp sessions destroy
x-summary-source: derived
/api/v1/mcp/audit-log/:
get:
operationId: mcp_audit_log_list
description: 'What an AI client did in your name.
Your own rows by default. Staff may pass ``?user=`` — the same
reach they already have through the Django admin, but scriptable. Rows are
append-only: there is no write or delete route, because a trail a client
could edit would not be a trail.'
parameters:
- name: ordering
required: false
in: query
description: Which field to use when ordering the results.
schema:
type: string
- name: page
required: false
in: query
description: A page number within the paginated result set.
schema:
type: integer
- name: page_size
required: false
in: query
description: Number of results to return per page.
schema:
type: integer
- in: query
name: user
schema:
type: string
description: '**Staff only.** Read another account''s trail, by username or numeric id (an all-digits value matches either). Sent by a non-staff caller it is ignored — the answer is still your own rows, never a 403.'
tags:
- MCP
security:
- jwtAuth: []
- tokenAuth: []
- cookieAuth: []
- basicAuth: []
responses:
'200':
content:
application/json:
schema:
$ref: '#/components/schemas/PaginatedMcpAuditLogList'
description: ''
'401':
description: 'Not authenticated. The response carries `WWW-Authenticate: Bearer realm="api"`; obtain or refresh a token and retry.'
headers:
WWW-Authenticate:
description: Always `Bearer realm="api"`.
schema:
type: string
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorDetail'
'403':
description: Authenticated, but not permitted to perform this action on this object.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorDetail'
'429':
description: Rate limit exceeded (see `DEFAULT_THROTTLE_RATES`). `Retry-After` gives the number of seconds to wait.
headers:
Retry-After:
description: Seconds until the caller may retry.
schema:
type: integer
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorDetail'
'500':
description: Unhandled server error.
summary: Mcp audit log list
x-summary-source: derived
components:
schemas:
PaginatedMcpAuditLogList:
type: object
required:
- count
- results
properties:
count:
type: integer
example: 123
next:
type:
- string
- 'null'
format: uri
example: http://api.example.org/accounts/?page=4
previous:
type:
- string
- 'null'
format: uri
example: http://api.example.org/accounts/?page=2
results:
type: array
items:
$ref: '#/components/schemas/McpAuditLog'
McpAuditLog:
type: object
description: 'One recorded action an MCP caller took as the user.
``arguments`` are stored redacted by :func:`apps.mcp.audit.record`;
:func:`~apps.mcp.audit.redact` is applied again on the way out so a row
written by any other path (a fixture, a future writer) cannot smuggle
unredacted text through this endpoint. ``error_message`` is *not* redacted
at rest — it is free text straight off an exception — so it gets the same
treatment here rather than being served raw.'
properties:
id:
type: integer
readOnly: true
created_at:
type: string
format: date-time
readOnly: true
method:
type: string
readOnly: true
tool_name:
type: string
readOnly: true
arguments:
type: object
additionalProperties: {}
readOnly: true
status:
allOf:
- $ref: '#/components/schemas/McpAuditLogStatusEnum'
readOnly: true
error_code:
type:
- integer
- 'null'
readOnly: true
error_message:
type: string
readOnly: true
duration_ms:
type: integer
readOnly: true
ip_address:
type:
- string
- 'null'
readOnly: true
application:
type:
- object
- 'null'
additionalProperties: {}
readOnly: true
session:
type:
- string
- 'null'
readOnly: true
required:
- application
- arguments
- created_at
- duration_ms
- error_code
- error_message
- id
- ip_address
- method
- session
- status
- tool_name
ErrorDetail:
type: object
description: The body DRF returns for a handled error.
properties:
detail:
type: string
description: Human-readable explanation of the failure.
required:
- detail
PaginatedConnectionList:
type: object
required:
- count
- results
properties:
count:
type: integer
example: 123
next:
type:
- string
- 'null'
format: uri
example: http://api.example.org/accounts/?page=4
previous:
type:
- string
- 'null'
format: uri
example: http://api.example.org/accounts/?page=2
results:
type: array
items:
$ref: '#/components/schemas/Connection'
Connection:
type: object
description: One granted connection, as the "Connected apps" page shows it.
properties:
id:
type: integer
readOnly: true
client_id:
type:
- string
- 'null'
readOnly: true
client_name:
type: string
readOnly: true
application:
type:
- object
- 'null'
additionalProperties: {}
readOnly: true
scopes:
type: array
items:
type: string
readOnly: true
scope_groups:
type: array
items:
type: object
additionalProperties: {}
readOnly: true
granted_at:
type: string
format: date-time
readOnly: true
updated_at:
type: string
format: date-time
readOnly: true
terms_version:
type: string
readOnly: true
active_tokens:
type: integer
readOnly: true
last_used:
type:
- string
- 'null'
format: date-time
readOnly: true
required:
- active_tokens
- application
- client_id
- client_name
- granted_at
- id
- last_used
- scope_groups
- scopes
- terms_version
- updated_at
PaginatedMcpSessionList:
type: object
required:
- count
- results
properties:
count:
type: integer
example: 123
next:
type:
- string
- 'null'
format: uri
example: http://api.example.org/accounts/?page=4
previous:
type:
- string
- 'null'
format: uri
example: http://api.example.org/accounts/?page=2
results:
type: array
items:
$ref: '#/components/schemas/McpSession'
McpSession:
type: object
description: One live MCP session — who is holding an open line to the account.
properties:
session_id:
type: string
format: uuid
readOnly: true
client_name:
type: string
readOnly: true
client_version:
type: string
readOnly: true
protocol_version:
type: string
readOnly: true
application:
type:
- object
- 'null'
additionalProperties: {}
readOnly: true
initialized_at:
type:
- string
- 'null'
format: date-time
readOnly: true
created_at:
type: string
format: date-time
readOnly: true
last_seen_at:
type: string
format: date-time
readOnly: true
terminated_at:
type:
- string
- 'null'
format: date-time
readOnly: true
is_active:
type: boolean
readOnly: true
required:
- application
- client_name
- client_version
- created_at
- initialized_at
- is_active
- last_seen_at
- protocol_version
- session_id
- terminated_at
McpAuditLogStatusEnum:
enum:
- ok
- error
- denied
type: string
description: '* `ok` - ok
* `error` - error
* `denied` - denied'
securitySchemes:
basicAuth:
type: http
scheme: basic
cookieAuth:
type: apiKey
in: cookie
name: sessionid
jwtAuth:
type: http
scheme: bearer
bearerFormat: JWT
description: 'Access token from `POST /api/v1/auth/jwt/`, refreshed at `POST /api/v1/auth/jwt/refresh/`. Send as `Authorization: Bearer <access>`.'
tokenAuth:
type: apiKey
in: header
name: Authorization
description: Token-based authentication with required prefix "Token"
x-refined-from:
- clusterhack-dev-openapi-original.json
- clusterhack-dev-openapi.yml