Documentation
MCPTool reference

Authentication tools

Arguments, results, errors, and access, confirmation, and retry policy for each Authentication tool in FloPay MCP, from the reviewed API contract.

Authentication tools

Generated from the FloPay MCP contract version 1, revision cc71a476426ea531d369de5441cde85ab81ab52c9764406e5f09501857d7ed32.

ApiToken_create

Create a client-scoped API token

PolicyValue
OperationPOST /v1/api-tokens
Classmutating
Riskcritical
Confirmationrequired
Retrysame-idempotency-key
Rate-limit tierrestricted
Rolesowner, admin, member
Scopesmcp:write

Arguments

ArgumentInTypeRequiredDescription
descriptionbodystringNoMaximum length: 255.
namebodystringYesMinimum length: 1. Maximum length: 100.

Result

Returns 201 with a JSON body.

FieldTypeRequiredDescription
createdAtstring (date-time)Yes
descriptionstring or nullYesMaximum length: 255.
idstring (uuid)Yes
lastUsedAtstring (date-time) or nullYesMost recently recorded successful authentication time; null means no successful use has been recorded.
namestringYesMaximum length: 100.
tokenstringYesThe usable secret. It is returned only by this create operation.

Errors

StatusDescription
401A valid OAuth client_user access token is required.
409The active-token limit has been reached.

ApiToken_get

Read one of the caller’s API tokens for the selected client

PolicyValue
OperationGET /v1/api-tokens/{id}
Classread-only
Risklow
Confirmationnot-required
Retrysafe
Rate-limit tierread
Rolesowner, admin, member
Scopesmcp:read

Arguments

ArgumentInTypeRequiredDescription
idpathstringYesThe API token id.

Result

Returns 200 with a JSON body.

FieldTypeRequiredDescription
createdAtstring (date-time)Yes
descriptionstring or nullYesMaximum length: 255.
idstring (uuid)Yes
lastUsedAtstring (date-time) or nullYesMost recently recorded successful authentication time; null means no successful use has been recorded.
namestringYesMaximum length: 100.

Errors

StatusDescription
401A valid OAuth client_user access token is required.

ApiToken_list

List the caller’s active API tokens for the selected client

PolicyValue
OperationGET /v1/api-tokens
Classread-only
Risklow
Confirmationnot-required
Retrysafe
Rate-limit tierread
Rolesowner, admin, member
Scopesmcp:read

Arguments

This tool takes no arguments.

Result

Returns 200 with a JSON body.

FieldTypeRequiredDescription
dataarray of objectYes
data[].createdAtstring (date-time)Yes
data[].descriptionstring or nullYesMaximum length: 255.
data[].idstring (uuid)Yes
data[].lastUsedAtstring (date-time) or nullYesMost recently recorded successful authentication time; null means no successful use has been recorded.
data[].namestringYesMaximum length: 100.

Errors

StatusDescription
401A valid OAuth client_user access token is required.

ApiToken_revoke

Revoke one of the caller’s API tokens for the selected client

PolicyValue
OperationDELETE /v1/api-tokens/{id}
Classmutating
Riskhigh
Confirmationrequired
Retrysame-idempotency-key
Rate-limit tierrestricted
Rolesowner, admin, member
Scopesmcp:write

Arguments

ArgumentInTypeRequiredDescription
idpathstringYesThe API token id.

Result

Returns 204 with no body. The API token was revoked.

Errors

StatusDescription
401A valid OAuth client_user access token is required.

On this page