| MCP server URL | |
|---|---|
| OAuth authorize URL | |
| OAuth token URL | |
| Client ID | |
| Client secret | |
Validate bearer tokens on /mcp against one or more external Okta authorization servers. See docs for the full config schema and where to find these values in Okta.
Force this workspace's /mcp and /oauth/token endpoints to return specific HTTP statuses, add an artificial delay, or fail a specific JSON-RPC method (below). Defaults pass through (200 / no fault) — see docs for recipes. Clear faults wipes everything on this card, including method faults.
Force any JSON-RPC method to return a chosen error instead of running its normal handler. Useful for simulating upstream quirks like missing methods, internal errors, or custom application-level codes. initialize and notifications/initialized are protected. See docs for recipes.
| Method | Code | Message |
|---|
Return HTTP 202 with an empty body for these methods and stream the actual JSON-RPC response over the client's GET /mcp SSE connection. Reproduces the Salesforce 2025-06-18 Streamable HTTP pattern. Requires the sessionId conformance toggle on — frames are routed per-Mcp-Session-Id. initialize and notifications/initialized are protected. See docs.
| Method |
|---|
Enforce MCP streamable-HTTP and OAuth spec rules per workspace. Set profile strict to make this workspace behave like a strict remote MCP (e.g. Atlassian) — QA can shake out client-side spec violations here before hitting a real vendor. See docs for recipes and the full dimension list.
| Session id | Created | Last activity | Initialized | Version |
|---|
| Time | Dimension | Method | Rule |
|---|
| Name | Description | inputSchema |
|---|
| Name | Description |
|---|
| URI | Name | MIME type |
|---|
Permanently delete this workspace and all its tools, prompts, resources, and OAuth state. This cannot be undone. Re-creating a workspace with the same name later will give you the same OAuth credentials (since they're derived from the name).