> ## Documentation Index
> Fetch the complete documentation index at: https://docs.streamkap.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get Project Key Mcp Config

> Returns authoritative MCP tool scoping config for server-side enforcement.

Called by the MCP server on session start to verify tool_profile, allowed_tools,
and blocked_tools — preventing credential file tampering.



## OpenAPI

````yaml /openapi/openapi.json get /project-keys/{project_key_id}/mcp-config
openapi: 3.1.0
info:
  title: Streamkap REST API
  description: >-
    The Streamkap REST API allows you to programmatically manage your CDC
    pipelines, sources, destinations, transforms, and more.


    Authenticate using a bearer token obtained from the [Access
    Token](/api-reference/auth/access-token) endpoint with your API client
    credentials.
  contact:
    name: Streamkap Support
    url: https://streamkap.com/
    email: support@streamkap.com
  license:
    name: Proprietary
  version: 2.0.0
servers:
  - url: https://api.streamkap.com
    description: Production
security: []
tags:
  - name: Alerts
    description: Manage alert subscribers, preferences, and notification credentials.
  - name: Authentication
    description: Obtain and refresh access tokens, manage client credentials and roles.
  - name: Billing
    description: Retrieve usage metrics, summaries, and export billing data.
  - name: Consumer Groups
    description: List, inspect, and reset Kafka consumer group offsets.
  - name: Dashboard
    description: Retrieve organisation-level statistics and overview data.
  - name: Destinations
    description: Create, configure, and manage data destinations and their lifecycle.
  - name: Kafka Access
    description: Manage Kafka users and their access permissions.
  - name: Logs
    description: Query and summarise system logs.
  - name: Pipelines
    description: Create, configure, and manage CDC pipelines and their lifecycle.
  - name: Project Keys
    description: Manage project keys that bundle API credentials and optional Kafka access.
  - name: Schema Registry
    description: Browse schema subjects, versions, and retrieve schema definitions.
  - name: Services
    description: View and switch service metadata.
  - name: Sources
    description: >-
      Create, configure, and manage data sources, snapshots, and their
      lifecycle.
  - name: Tags
    description: Create, update, and manage resource tags for organisation.
  - name: Topics
    description: Browse topic details, statistics, configurations, metrics, and messages.
  - name: Transforms
    description: >-
      Create, deploy, and manage data transforms, unit tests, and implementation
      details.
paths:
  /project-keys/{project_key_id}/mcp-config:
    get:
      tags:
        - Project Keys
      summary: Get Project Key Mcp Config
      description: >-
        Returns authoritative MCP tool scoping config for server-side
        enforcement.


        Called by the MCP server on session start to verify tool_profile,
        allowed_tools,

        and blocked_tools — preventing credential file tampering.
      operationId: getProjectKeyMcpConfig
      parameters:
        - name: project_key_id
          in: path
          required: true
          schema:
            type: string
            title: Project Key Id
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ProjectKeyMcpConfig'
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      security:
        - FronteggHTTPAuthentication: []
components:
  schemas:
    ProjectKeyMcpConfig:
      properties:
        project_key_id:
          type: string
          title: Project Key Id
        tenant_id:
          type: string
          title: Tenant Id
        service_id:
          type: string
          title: Service Id
        kafka_username:
          anyOf:
            - type: string
            - type: 'null'
          title: Kafka Username
        tool_profile:
          anyOf:
            - $ref: '#/components/schemas/ToolProfile'
            - type: 'null'
        allowed_tools:
          anyOf:
            - items:
                type: string
              type: array
            - type: 'null'
          title: Allowed Tools
        blocked_tools:
          anyOf:
            - items:
                type: string
              type: array
            - type: 'null'
          title: Blocked Tools
      additionalProperties: true
      type: object
      required:
        - project_key_id
        - tenant_id
        - service_id
      title: ProjectKeyMcpConfig
      description: >-
        Authoritative MCP tool scoping config for server-side enforcement.


        Includes identity fields (tenant_id, service_id, kafka_username) so the
        MCP

        server can enrich audit logs with verified context without trusting the
        credential file.
    HTTPValidationError:
      properties:
        detail:
          items:
            $ref: '#/components/schemas/ValidationError'
          type: array
          title: Detail
      type: object
      title: HTTPValidationError
    ToolProfile:
      type: string
      enum:
        - full
        - read-only
        - agent-operator
        - infra-admin
      title: ToolProfile
    ValidationError:
      properties:
        loc:
          items:
            anyOf:
              - type: string
              - type: integer
          type: array
          title: Location
        msg:
          type: string
          title: Message
        type:
          type: string
          title: Error Type
        input:
          title: Input
        ctx:
          type: object
          title: Context
      type: object
      required:
        - loc
        - msg
        - type
      title: ValidationError
  securitySchemes:
    FronteggHTTPAuthentication:
      type: http
      scheme: bearer

````