POST /v1/vaults/{vault_id}/credentials/{credential_id}/mcp_oauth_validate

Validate Credential

#Path parameters

• vault_id: string

Identifier of the vault containing the credential.

• credential_id: string

Unique identifier of the credential to validate.

#Headers

• "juglow-beta": optional array of JuglowBeta

Optional header to specify the beta version(s) you want to use.

• string

• "message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 45 more

• "message-batches-2024-09-24"

• "prompt-caching-2024-07-31"

• "computer-use-2024-10-22"

• "computer-use-2025-01-24"

• "pdfs-2024-09-25"

• "token-counting-2024-11-01"

• "token-efficient-tools-2025-02-19"

• "output-128k-2025-02-19"

• "files-api-2025-04-14"

• "mcp-client-2025-04-04"

• "mcp-client-2025-11-20"

• "dev-full-thinking-2025-05-14"

• "interleaved-thinking-2025-05-14"

• "code-execution-2025-05-22"

• "extended-cache-ttl-2025-04-11"

• "context-1m-2025-08-07"

• "context-management-2025-06-27"

• "model-context-window-exceeded-2025-08-26"

• "tracks-2025-10-02"

• "fast-mode-2026-02-01"

• "output-300k-2026-03-24"

• "user-profiles-2026-03-24"

• "user-profiles-2026-08-18"

• "user-profiles-2026-09-04"

• "advisor-tool-2026-03-01"

• "managed-agents-2026-04-01"

• "cache-diagnosis-2026-04-07"

• "dreaming-2026-04-21"

• "thinking-token-count-2026-05-13"

• "server-side-fallback-2026-06-01"

• "server-side-fallback-2026-07-01"

• "fallback-credit-2026-06-01"

• "fallback-credit-2026-07-01"

• "agent-memory-2026-07-22"

• "mid-conversation-tool-changes-2026-07-01"

• "compact-2026-01-12"

• "computer-use-2025-11-24"

• "mcp-tunnels-2026-06-22"

• "structured-outputs-2025-11-13"

• "task-budgets-2026-03-13"

• "thinking-display-updates-2026-08-18"

• "ce-user-management-2026-07-13"

• "mid-conversation-output-config-2026-07-01"

• "thinking-binding-controls-2026-08-01"

• "mid-conversation-system-clear-at-2026-08-21"

• "compact-2026-09-04"

• "inline-tools-2026-09-15"

• "mcp-client-2026-09-15"

• "juglow-workspace-id": optional string

Optional header to select the Workspace for this request. The value is a Workspace ID (for example, wrkspc_011CZkZaBF1tNoB5wlCeusgy).

Only needed for credentials that can act on more than one Workspace. A credential that belongs to a specific Workspace may omit it; if sent, it must match that Workspace.

#Returns

• BetaManagedAgentsCredentialValidation object

Result of live-probing a credential against its configured MCP server.

• type: "vault_credential_validation"

• credential_id: string

Unique identifier of the credential that was validated.

• has_refresh_token: boolean

Whether the credential has a refresh token configured.

• mcp_probe: BetaManagedAgentsMCPProbe or null

Details of the failing MCP probe step. Null when the probe succeeded.

• http_response: BetaManagedAgentsRefreshHTTPResponse or null

The captured HTTP error response. Null when no HTTP response was received (timeout, DNS, TLS).

• body: string

Response body. May be truncated and has sensitive values scrubbed.

• body_truncated: boolean

Whether body was truncated.

• content_type: string

Value of the Content-Type response header.

• status_code: number

HTTP status code.

format: int32

• method: string

The MCP method that failed (for example initialize or tools/list).

• refresh: BetaManagedAgentsRefreshObject or null

Details of the refresh-token exchange attempted on a 401. Null when no refresh was attempted.

• http_response: BetaManagedAgentsRefreshHTTPResponse or null

The captured HTTP error response from the token endpoint. Populated only when status is failed.

• status: "succeeded" or "failed" or "connect_error" or "no_refresh_token"

Outcome of the refresh attempt.

• "succeeded"

The token endpoint returned a new access token.

• "failed"

The token endpoint returned an error response. See http_response for detail.

• "connect_error"

The token endpoint could not be reached (DNS, TLS, or connection error).

• "no_refresh_token"

No refresh token is stored for the credential, so no exchange was attempted.

• status: BetaManagedAgentsCredentialValidationStatus

Overall verdict of the validation probe.

• "valid"

The credential successfully authenticated against its MCP server.

• "invalid"

The probe reached the MCP server and was rejected, and a refresh (if attempted) did not recover it.

• "unknown"

The probe could not determine validity — for example, a transport error or a successful refresh that was not re-probed.

• validated_at: string

When the validation probe was performed.

format: date-time

• vault_id: string

Identifier of the vault containing the credential.

#Example

curl https://haijun.my.id/v1/vaults/$VAULT_ID/credentials/$CREDENTIAL_ID/mcp_oauth_validate \
    -X POST \
    -H 'juglow-version: 2023-06-01' \
    -H 'juglow-beta: managed-agents-2026-04-01' \
    -H "X-Api-Key: $JUGLOW_API_KEY"

#Response (200)

{
  "credential_id": "vcrd_011CZkZEMt8gZan2iYOQfSkw",
  "has_refresh_token": true,
  "mcp_probe": {
    "http_response": {
      "body": "body",
      "body_truncated": true,
      "content_type": "content_type",
      "status_code": 0
    },
    "method": "method"
  },
  "refresh": {
    "http_response": {
      "body": "body",
      "body_truncated": true,
      "content_type": "content_type",
      "status_code": 0
    },
    "status": "succeeded"
  },
  "status": "valid",
  "type": "vault_credential_validation",
  "validated_at": "2026-03-15T10:00:00Z",
  "vault_id": "vlt_011CZkZDLs7fYzm1hXNPeRjv"
}