Agents

AI agents connected through the MCP server (OAuth). The dashboard approves and disconnects them; agents use https://api.marsial.dev/mcp.

See who asks for access

GET/v1/oauth/requests/{id}

Dashboard only. The id comes from the request parameter of the consent page; requests last 10 minutes.

Parameters

• idstringrequired

Response 200

data

• clientNamestringrequired

  The name the agent registered with.

• redirectHoststringrequired

  Where the user goes back to after deciding.

• workspaceNamestringrequired

curl

curl "https://api.marsial.dev/v1/oauth/requests/authz_…" \
  -H "Authorization: Bearer $MARSIAL_API_KEY"

Node

const res = await fetch('https://api.marsial.dev/v1/oauth/requests/authz_…', {
  headers: {
    Authorization: `Bearer ${process.env.MARSIAL_API_KEY}`,
  },
});
const { data } = await res.json();

Python

import os, requests

res = requests.get(
    "https://api.marsial.dev/v1/oauth/requests/authz_…",
    headers={"Authorization": f"Bearer {os.environ['MARSIAL_API_KEY']}"},
)
data = res.json()["data"]

Let the agent in

POST/v1/oauth/requests/{id}/approve

Dashboard only. The agent acts as the caller, with their role, until disconnected.

Parameters

• idstringrequired

Response 200

data

• redirectTostringrequired

  Send the browser here: the agent gets a code or an error.

curl

curl -X POST "https://api.marsial.dev/v1/oauth/requests/authz_…/approve" \
  -H "Authorization: Bearer $MARSIAL_API_KEY"

Node

const res = await fetch('https://api.marsial.dev/v1/oauth/requests/authz_…/approve', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${process.env.MARSIAL_API_KEY}`,
  },
});
const { data } = await res.json();

Python

import os, requests

res = requests.post(
    "https://api.marsial.dev/v1/oauth/requests/authz_…/approve",
    headers={"Authorization": f"Bearer {os.environ['MARSIAL_API_KEY']}"},
)
data = res.json()["data"]

Refuse the agent

POST/v1/oauth/requests/{id}/deny

Dashboard only.

Parameters

• idstringrequired

Response 200

data

• redirectTostringrequired

  Send the browser here: the agent gets a code or an error.

curl

curl -X POST "https://api.marsial.dev/v1/oauth/requests/authz_…/deny" \
  -H "Authorization: Bearer $MARSIAL_API_KEY"

Node

const res = await fetch('https://api.marsial.dev/v1/oauth/requests/authz_…/deny', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${process.env.MARSIAL_API_KEY}`,
  },
});
const { data } = await res.json();

Python

import os, requests

res = requests.post(
    "https://api.marsial.dev/v1/oauth/requests/authz_…/deny",
    headers={"Authorization": f"Bearer {os.environ['MARSIAL_API_KEY']}"},
)
data = res.json()["data"]

List connected agents

GET/v1/oauth/grants

Dashboard only.

Response 200

data []

• idstringrequired
• clientNamestringrequired
• createdAtstring (date-time)required
• lastUsedAtstring (date-time)

  The last day the agent called Marsial.

• yoursbooleanrequired

  Whether the caller let it in.

curl

curl "https://api.marsial.dev/v1/oauth/grants" \
  -H "Authorization: Bearer $MARSIAL_API_KEY"

Node

const res = await fetch('https://api.marsial.dev/v1/oauth/grants', {
  headers: {
    Authorization: `Bearer ${process.env.MARSIAL_API_KEY}`,
  },
});
const { data } = await res.json();

Python

import os, requests

res = requests.get(
    "https://api.marsial.dev/v1/oauth/grants",
    headers={"Authorization": f"Bearer {os.environ['MARSIAL_API_KEY']}"},
)
data = res.json()["data"]

Disconnect an agent

DELETE/v1/oauth/grants/{id}

Dashboard only. Its tokens stop working at once. Members disconnect their own; owners and admins any.

Parameters

• idstringrequired

Response 204

No content

curl

curl -X DELETE "https://api.marsial.dev/v1/oauth/grants/grt_5k2j8h" \
  -H "Authorization: Bearer $MARSIAL_API_KEY"

Node

await fetch('https://api.marsial.dev/v1/oauth/grants/grt_5k2j8h', {
  method: 'DELETE',
  headers: {
    Authorization: `Bearer ${process.env.MARSIAL_API_KEY}`,
  },
});

Python

import os, requests

requests.delete(
    "https://api.marsial.dev/v1/oauth/grants/grt_5k2j8h",
    headers={"Authorization": f"Bearer {os.environ['MARSIAL_API_KEY']}"},
)