Skip to main content
POST
MCP JSON-RPC endpoint

Authorizations

Authorization
string
header
required

API key or personal access token (NEX-1042). Send as Authorization: Bearer <token>. Token format:

  • nex_live_… — live API key (server-to-server)
  • nex_test_… — sandbox API key
  • nex_pat_… — personal access token (acts as the issuing user)

Authorization is decided by the key's scopes array, not the owning user's RBAC role. See POST /api/api-keys to mint a key.

Headers

Idempotency-Key
string

Optional idempotency key for a mutating tools/call. Also accepted as params._meta.idempotencyKey in the JSON-RPC body.

Maximum string length: 255

Body

application/json
jsonrpc
enum<string>
required
Available options:
2.0
method
enum<string>
required
Available options:
initialize,
tools/list,
tools/call,
ping
id
params
object

JSON-RPC method parameters (shape varies by method)

Response

JSON-RPC response

jsonrpc
string
id
result
object

JSON-RPC result payload (shape varies by method)

error
object