> ## Documentation Index > Fetch the complete documentation index at: https://docs.flashduty.com/llms.txt > Use this file to discover all available pages before exploring further. # Update MCP server > Update an MCP server's configuration. Omit a field to leave it unchanged. ## Restrictions | Aspect | Value | | ----------- | ------------------------------------------------------------- | | Rate limits | **1,000 requests/minute**; **50 requests/second** per account | | Permissions | **MCP Manage** (`ai-sre`) | ## Usage * Masked secret values in `env`/`headers` are preserved — sending the masked value back does not overwrite the stored secret. * Every call is recorded in the account audit log. ## OpenAPI ````yaml /api-reference/safari.openapi.en.json post /safari/mcp/server/update openapi: 3.1.0 info: title: Flashduty Open API description: >- Public HTTP API for the Flashduty AI SRE platform — skills, MCP servers (connectors), A2A agents, and sessions. Every operation is authenticated with an `app_key` query parameter issued from the Flashduty console. version: 1.0.0 servers: - url: https://api.flashcat.cloud description: Flashduty Open API security: - AppKeyAuth: [] tags: - name: AI SRE/Skills - name: AI SRE/MCP servers - name: AI SRE/A2A agents - name: AI SRE/Sessions - name: AI SRE/Automations paths: /safari/mcp/server/update: post: tags: - AI SRE/MCP servers summary: Update MCP server description: >- Update an MCP server's configuration. Omit a field to leave it unchanged. operationId: mcp-write-server-update requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/MCPServerUpdateRequest' example: server_id: mcp_4kP9wQ2nLceRtY7uVb3xA1 description: Query Prometheus metrics, alerts, and rules. responses: '200': description: Success content: application/json: schema: allOf: - $ref: '#/components/schemas/ResponseEnvelope' - type: object properties: data: $ref: '#/components/schemas/MCPServerItem' example: request_id: 01HK8XQE3Z7JM2NTFQ5YJ8P9R4 data: server_id: mcp_4kP9wQ2nLceRtY7uVb3xA1 account_id: 10023 team_id: 0 can_edit: true server_name: prometheus description: Query Prometheus metrics, alerts, and rules. transport: streamable-http url: https://mcp.example.com/prometheus status: enabled connect_timeout: 10 call_timeout: 60 tool_count: 2 tools: - name: query description: Run a PromQL instant query. - name: query_range description: Run a PromQL range query. auth_mode: shared created_by: 80011 created_at: 1716960000000 updated_at: 1717046400000 '400': $ref: '#/components/responses/BadRequest' '401': $ref: '#/components/responses/Unauthorized' '403': $ref: '#/components/responses/Forbidden' '429': $ref: '#/components/responses/TooManyRequests' '500': $ref: '#/components/responses/ServerError' security: - AppKeyAuth: [] components: schemas: MCPServerUpdateRequest: type: object description: Partial update of an MCP server. Omit a field to leave it unchanged. properties: server_id: type: string description: Target MCP server ID. server_name: type: string description: New name. minLength: 1 maxLength: 255 description: type: string description: New description. minLength: 1 maxLength: 1024 transport: type: string description: Transport protocol. enum: - stdio - sse - streamable-http command: type: string description: Executable command (stdio transport). args: type: array items: type: string description: Command arguments (stdio transport). env: type: object additionalProperties: type: string description: Environment variables (stdio transport). url: type: string description: Server URL (sse / streamable-http transport). headers: type: object additionalProperties: type: string description: HTTP headers (sse / streamable-http). connect_timeout: type: integer description: Connection timeout in seconds. 0 = default (10s). call_timeout: type: integer description: Tool-call timeout in seconds. 0 = default (60s). auth_mode: type: string description: >- Authentication mode: shared (default), per_user_secret, or per_user_oauth. secret_schema: type: string description: JSON secret schema; required when auth_mode=per_user_secret. oauth_metadata: type: string description: JSON OAuth metadata; reserved for per_user_oauth. team_id: type: - integer - 'null' description: >- Reassign team scope: 0 = account-wide; >0 = team. Omit to leave unchanged. format: int64 required: - server_id ResponseEnvelope: type: object description: >- Standard response envelope used by every Flashduty public API. On success `data` contains the endpoint-specific payload and `error` is absent. On failure `error` is present and `data` is absent. `request_id` is always present and is also mirrored in the `Flashcat-Request-Id` response header. properties: request_id: type: string description: >- Unique ID for this request. Mirrored in the Flashcat-Request-Id header. Include it when reporting issues. example: 01HK8XQE3Z7JM2NTFQ5YJ8P9R4 error: $ref: '#/components/schemas/DutyError' data: description: Endpoint-specific payload. See each operation's 200 response schema. required: - request_id MCPServerItem: type: object description: An MCP server (connector) registered on the account. properties: server_id: type: string description: Unique MCP server ID (prefix `mcp_`). account_id: type: integer description: Owning account ID. format: int64 team_id: type: integer description: 'Team scope: 0 = account-wide; >0 = the owning team.' format: int64 can_edit: type: boolean description: Whether the caller may edit this server. server_name: type: string description: MCP server name, unique within the account. description: type: string description: Server description. ai_description: type: string description: >- LLM-generated description, preferred over `description` when present. transport: type: string description: Transport protocol. enum: - stdio - sse - streamable-http command: type: string description: Executable command (stdio transport only). args: type: array items: type: string description: Command arguments (stdio transport). env: type: object additionalProperties: type: string description: Environment variables (stdio transport). Secret values are masked. url: type: string description: Server URL (sse / streamable-http transport). headers: type: object additionalProperties: type: string description: HTTP headers (sse / streamable-http). Secret values are masked. proxy_url: type: string description: Outbound proxy URL used to reach the server. status: type: string description: Server status. enum: - enabled - disabled connect_timeout: type: integer description: Connection timeout in seconds (0 = server default, 10s). call_timeout: type: integer description: Tool-call timeout in seconds (0 = server default, 60s). tools: type: array items: $ref: '#/components/schemas/MCPToolInfo' description: Live tool list; populated by the get/test endpoints. tool_count: type: integer description: Number of tools in the live list. list_error: type: string description: Error message when the live tool list failed. auth_mode: type: string description: Authentication mode. enum: - shared - per_user_secret - per_user_oauth secret_schema: type: string description: JSON-encoded secret schema (per_user_secret mode). oauth_metadata: type: string description: JSON-encoded OAuth metadata (per_user_oauth mode). source_template_name: type: string description: >- Marketplace template this connector was installed from; empty for user-authored. created_by: type: integer description: Member ID that created the server. format: int64 created_at: type: integer format: int64 description: Creation time. Unix timestamp in milliseconds. updated_at: type: integer format: int64 description: Last update time. Unix timestamp in milliseconds. required: - server_id - account_id - team_id - can_edit - server_name - description - transport - status - connect_timeout - call_timeout - created_by - created_at - updated_at DutyError: type: object description: >- Error payload inside the response envelope. Present only on non-2xx responses. properties: code: $ref: '#/components/schemas/ErrorCode' message: type: string description: >- Human-readable error message, localized by the caller's Accept-Language. May contain field names, IDs, or other context from the failing request. required: - code - message MCPToolInfo: type: object description: Metadata for one tool exposed by an MCP server. properties: name: type: string description: Tool name. description: type: string description: Tool description. input_schema: type: object additionalProperties: true description: JSON Schema describing the tool's input parameters. required: - name - description ErrorResponse: type: object description: Response envelope for errors. `error` is required; `data` is absent. properties: request_id: type: string example: 01HK8XQE3Z7JM2NTFQ5YJ8P9R4 error: $ref: '#/components/schemas/DutyError' required: - request_id - error ErrorCode: type: string description: >- Flashduty error code enum. Every failed API response sets `error.code` to one of these values. The value is a stable wire string — not a localized message and not a numeric status. HTTP status is informational. enum: - OK - InvalidParameter - BadRequest - InvalidContentType - ResourceNotFound - NoLicense - ReferenceExist - Unauthorized - BalanceNotEnough - AccessDenied - RouteNotFound - MethodNotAllowed - UndonedOrderExist - RequestLocked - EntityTooLarge - RequestTooFrequently - RequestVerifyRequired - DangerousOperation - InternalError - ServiceUnavailable responses: BadRequest: description: Invalid request — usually a missing or malformed parameter. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' examples: missingParameter: summary: Missing required parameter value: request_id: 01HK8XQE3Z7JM2NTFQ5YJ8P9R4 error: code: InvalidParameter message: The specified parameter skill_id is not valid. Unauthorized: description: Missing or invalid app_key. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' examples: missingAppKey: value: request_id: 01HK8XQE3Z7JM2NTFQ5YJ8P9R4 error: code: Unauthorized message: You are unauthorized. Forbidden: description: The app_key is valid but lacks permission for this operation. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' examples: accessDenied: value: request_id: 01HK8XQE3Z7JM2NTFQ5YJ8P9R4 error: code: AccessDenied message: Access Denied. TooManyRequests: description: Rate limit hit. Either the global API limit or a per-account limit. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' examples: rateLimited: value: request_id: 01HK8XQE3Z7JM2NTFQ5YJ8P9R4 error: code: RequestTooFrequently message: Request too frequently. ServerError: description: Unexpected server-side error. Include the request_id when reporting. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' examples: internal: value: request_id: 01HK8XQE3Z7JM2NTFQ5YJ8P9R4 error: code: InternalError message: >- We encountered an internal error, and it has been reported. Please try again later. securitySchemes: AppKeyAuth: type: apiKey in: query name: app_key description: >- App key issued from the Flashduty console. Required on every public API call. Keep it secret — it grants the same access as the owning account. ````