Probe a custom MCP URL
Dry-run discovery for a pasted MCP server URL: detects the server’s authentication method (none, API key, or OAuth), reports whether the workspace can finish connecting it self-serve, and previews the server’s tool list - without writing anything. The URL is checked against the workspace’s custom-integration policy before any outbound call is made. Admin only; scoped to the caller’s own workspace.
Authorizations
Personal Access Token. Send as Authorization: Bearer hq_pat_....
Body
Enqueue a hq.mcp.tenant.{tenant_id}.changed event into the
outbox. The publisher relays to NATS; every gateway instance
receives it and invalidates the per-tenant Forge catalog cache.
Response
Detected auth + connectability + tool preview
none | api_key | oauth | oauth_unsupported
Short human label for the detected method.
True when the tenant can finish the connection with no operator involvement (open, OAuth + DCR public client, or paste-a-key).
x >= 0Set when connectable is false: why, in one sentence.