Skip to main content

Documentation Index

Fetch the complete documentation index at: https://internal.september.wtf/llms.txt

Use this file to discover all available pages before exploring further.

The Asset Directory holds the user’s MCP connections and credentials. These endpoints let you list available servers, initiate connections, complete OAuth flows, and disconnect. All endpoints require X-Engine-Key.

GET /assets/servers

List MCP servers the Engine knows about.
[
  {
    "server_name": "slack",
    "display_name": "Slack",
    "transport": "sse",
    "auth_method": "oauth",
    "status": "available"
  }
]

GET /assets/connections

List the user’s active connections.
[
  {
    "ref_id": "conn-...",
    "server_name": "slack",
    "status": "connected",
    "scopes": ["channels:read", "chat:write"],
    "expires_at": "2026-05-27T..."
  }
]

POST /assets/connect

Initiate a connection to a server.
POST /assets/connect
Content-Type: application/json

{
  "server_name": "slack",
  "server_config": null
}
For OAuth servers, the response includes a redirect URL the user must visit to grant access:
{
  "ref_id": "conn-...",
  "status": "pending_oauth",
  "auth_url": "https://slack.com/oauth/..."
}
For non-OAuth servers (static API key), the connection is established immediately:
{
  "ref_id": "conn-...",
  "status": "connected"
}

POST /assets/callback

Internal endpoint used by the OAuth completion flow. Application code typically doesn’t call this directly — the user’s browser is redirected to /assets/oauth/callback, which posts to this endpoint.

GET /assets/oauth/callback

OAuth redirect target. The OAuth provider redirects the user’s browser here after consent. The Engine validates the state, completes the token exchange, and either redirects back to the application or returns JSON.
QueryPurpose
codeOAuth authorization code from the provider.
stateCSRF-protection state token.

DELETE /assets/connections/

Disconnect. Revokes the stored credentials and removes the connection.
{ "status": "disconnected", "ref_id": "conn-..." }

See also