Set or clear the person's risk label for one tool of their custom MCP server.

PUT

/v1/virtual-users/{identity_id}/mcp-servers/{server_id}/tools/{tool_name}/label

curl --request PUT \
  --url https://app.everruns.com/api/v1/virtual-users/example/mcp-servers/example/tools/example/label \
  --header 'Content-Type: application/json' \
  --data '{ "label": "read_only" }'

• Production API

Parameters

Path Parameters

identity_id

required

string

me or a virtual user id

server_id

required

string

tool_name

required

string

Request Body^required

Media typeapplication/json

Set or clear the person’s risk label for one tool.

object

label

One of:

string

read_only never asks for approval in the normal mode, changes always asks. Null clears the label.

string

Allowed values: read_only changes

null

null

Responses

200

Success

Media typeapplication/json

One tool an MCP server offers, with its saved risk label.

object

annotations

One of:

object

Hints the server declares about the tool (read-only, destructive, …).

object

destructiveHint

boolean | null

idempotentHint

boolean | null

openWorldHint

boolean | null

readOnlyHint

boolean | null

null

null

description

What the tool does, as the server describes it.

string | null

label

One of:

string

Risk label a person set. It wins over the annotations; null means none.

string

Allowed values: read_only changes

null

null

name

required

The tool’s own name on the MCP server.

string

suggested_label

One of:

string

Suggested label waiting for a person to confirm. Never applied by itself.

string

Allowed values: read_only changes

null

null

title

Human-readable title the server gives the tool.

string | null

Example

{
  "label": "read_only",
  "name": "search_docs",
  "suggested_label": "read_only"
}

400

Server was added from the catalog

401

Authentication required

403

Permission denied

404

Server or tool not found