MCP sessions

client.mcpSessions manages the revocable credentials accepted by the Vetta MCP server.

const minted = await client.mcpSessions.create({
  name: "release agent",
  identity_id: "idn_01H...",
  scopes: ["agents:read"],
  allowed_tools: ["agents_list"],
  expires_in_seconds: 3600,
});

create(input) calls POST /v1/mcp_sessions. name, at least one scope, and at least one allowed_tool are required. identity_id is optional and is a label only (not enforced yet). expires_in_seconds defaults to one day. The returned secret is available only on this response.

list(query?) calls GET /v1/mcp_sessions and accepts limit and after.
get(id) calls GET /v1/mcp_sessions/{id}.
revoke(id) calls DELETE /v1/mcp_sessions/{id} and takes effect on the next authenticated call.

List and get results contain the safe display prefix, never the bearer or its stored digest. See MCP sessions for the complete authorization contract.

TypeScript

Control plane

Resources

Identity & access

Automation

Account

MCP sessions