curl --request POST \
  --url https://{controlPlaneURL}/api/svc/v1/mcp/bulk \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "manifests": [
    {
      "type": "mcp-server/tfy-managed",
      "name": "<string>",
      "description": "<string>",
      "server_identifier": "<string>",
      "display_name": "<string>",
      "tool_settings": [
        {
          "name": "<string>",
          "description": "<string>",
          "disabled": true,
          "annotations": {
            "readOnlyHint": true,
            "destructiveHint": true
          }
        }
      ],
      "tool_metadata": {},
      "collaborators": [
        {
          "subject": "<string>",
          "role_id": "<string>"
        }
      ],
      "tags": {}
    }
  ]
}
'

import requests

url = "https://{controlPlaneURL}/api/svc/v1/mcp/bulk"

payload = { "manifests": [
        {
            "type": "mcp-server/tfy-managed",
            "name": "<string>",
            "description": "<string>",
            "server_identifier": "<string>",
            "display_name": "<string>",
            "tool_settings": [
                {
                    "name": "<string>",
                    "description": "<string>",
                    "disabled": True,
                    "annotations": {
                        "readOnlyHint": True,
                        "destructiveHint": True
                    }
                }
            ],
            "tool_metadata": {},
            "collaborators": [
                {
                    "subject": "<string>",
                    "role_id": "<string>"
                }
            ],
            "tags": {}
        }
    ] }
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    manifests: [
      {
        type: 'mcp-server/tfy-managed',
        name: '<string>',
        description: '<string>',
        server_identifier: '<string>',
        display_name: '<string>',
        tool_settings: [
          {
            name: '<string>',
            description: '<string>',
            disabled: true,
            annotations: {readOnlyHint: true, destructiveHint: true}
          }
        ],
        tool_metadata: {},
        collaborators: [{subject: '<string>', role_id: '<string>'}],
        tags: {}
      }
    ]
  })
};

fetch('https://{controlPlaneURL}/api/svc/v1/mcp/bulk', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://{controlPlaneURL}/api/svc/v1/mcp/bulk",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'manifests' => [
        [
                'type' => 'mcp-server/tfy-managed',
                'name' => '<string>',
                'description' => '<string>',
                'server_identifier' => '<string>',
                'display_name' => '<string>',
                'tool_settings' => [
                                [
                                                                'name' => '<string>',
                                                                'description' => '<string>',
                                                                'disabled' => true,
                                                                'annotations' => [
                                                                                                                                'readOnlyHint' => true,
                                                                                                                                'destructiveHint' => true
                                                                ]
                                ]
                ],
                'tool_metadata' => [
                                
                ],
                'collaborators' => [
                                [
                                                                'subject' => '<string>',
                                                                'role_id' => '<string>'
                                ]
                ],
                'tags' => [
                                
                ]
        ]
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://{controlPlaneURL}/api/svc/v1/mcp/bulk"

	payload := strings.NewReader("{\n  \"manifests\": [\n    {\n      \"type\": \"mcp-server/tfy-managed\",\n      \"name\": \"<string>\",\n      \"description\": \"<string>\",\n      \"server_identifier\": \"<string>\",\n      \"display_name\": \"<string>\",\n      \"tool_settings\": [\n        {\n          \"name\": \"<string>\",\n          \"description\": \"<string>\",\n          \"disabled\": true,\n          \"annotations\": {\n            \"readOnlyHint\": true,\n            \"destructiveHint\": true\n          }\n        }\n      ],\n      \"tool_metadata\": {},\n      \"collaborators\": [\n        {\n          \"subject\": \"<string>\",\n          \"role_id\": \"<string>\"\n        }\n      ],\n      \"tags\": {}\n    }\n  ]\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://{controlPlaneURL}/api/svc/v1/mcp/bulk")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"manifests\": [\n    {\n      \"type\": \"mcp-server/tfy-managed\",\n      \"name\": \"<string>\",\n      \"description\": \"<string>\",\n      \"server_identifier\": \"<string>\",\n      \"display_name\": \"<string>\",\n      \"tool_settings\": [\n        {\n          \"name\": \"<string>\",\n          \"description\": \"<string>\",\n          \"disabled\": true,\n          \"annotations\": {\n            \"readOnlyHint\": true,\n            \"destructiveHint\": true\n          }\n        }\n      ],\n      \"tool_metadata\": {},\n      \"collaborators\": [\n        {\n          \"subject\": \"<string>\",\n          \"role_id\": \"<string>\"\n        }\n      ],\n      \"tags\": {}\n    }\n  ]\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://{controlPlaneURL}/api/svc/v1/mcp/bulk")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"manifests\": [\n    {\n      \"type\": \"mcp-server/tfy-managed\",\n      \"name\": \"<string>\",\n      \"description\": \"<string>\",\n      \"server_identifier\": \"<string>\",\n      \"display_name\": \"<string>\",\n      \"tool_settings\": [\n        {\n          \"name\": \"<string>\",\n          \"description\": \"<string>\",\n          \"disabled\": true,\n          \"annotations\": {\n            \"readOnlyHint\": true,\n            \"destructiveHint\": true\n          }\n        }\n      ],\n      \"tool_metadata\": {},\n      \"collaborators\": [\n        {\n          \"subject\": \"<string>\",\n          \"role_id\": \"<string>\"\n        }\n      ],\n      \"tags\": {}\n    }\n  ]\n}"

response = http.request(request)
puts response.read_body

{
  "data": [
    {
      "fqn": "my-tenant:mcp-server:filesystem-tools",
      "tenantName": "<string>",
      "manifest": {
        "type": "mcp-server/remote",
        "name": "<string>",
        "description": "<string>",
        "url": "<string>",
        "display_name": "<string>",
        "tls_settings": {
          "reject_unauthorized": true,
          "ca_cert": "<string>"
        },
        "tool_settings": [
          {
            "name": "<string>",
            "description": "<string>",
            "disabled": true,
            "annotations": {
              "readOnlyHint": true,
              "destructiveHint": true
            }
          }
        ],
        "tool_policy": {
          "enable_tools_by_default": true,
          "disabled_tools": [
            "<string>"
          ],
          "enabled_tools": [
            "<string>"
          ]
        },
        "tool_metadata": {},
        "auth_data": {
          "type": "header",
          "headers": {},
          "auth_level": "global"
        },
        "collaborators": [
          {
            "subject": "<string>",
            "role_id": "<string>"
          }
        ],
        "ownedBy": {
          "account": "<string>"
        },
        "additional_headers": {},
        "forwarded_headers": [
          "<string>"
        ],
        "tags": {}
      },
      "createdBySubject": {
        "subjectId": "<string>",
        "subjectType": "user",
        "subjectSlug": "<string>",
        "subjectDisplayName": "<string>",
        "subjectPatName": "<string>",
        "subjectControllerName": "<string>",
        "subjectExternalIdentitySlug": "<string>"
      },
      "id": "<string>",
      "createdAt": "2023-11-07T05:31:56Z",
      "updatedAt": "2023-11-07T05:31:56Z",
      "proxyUrl": "<string>",
      "isAuthOverrideSupported": true,
      "authStatus": {
        "status": "authenticated",
        "method": "oauth",
        "expiresAt": "2026-10-01T12:40:00.000Z",
        "isRefreshable": true,
        "lastUpdatedAt": "2026-10-01T11:40:00.000Z",
        "refreshFailureCount": 0,
        "refreshFailureMessage": "invalid_grant: refresh token expired"
      }
    }
  ],
  "errors": {}
}