Change which workspaces may use an MCP server
The operator (installation.settings.manage, the workspace owner), signed in; an API key is 403 whatever its scopes. The one field changed in place: the workspaces (by slug) are not part of a session's MCP binding. Its URL and credential name never change. A server whose bearer comes from the operator's deployment is 409 not_stored; a disabled one 409 disabled. Writes a set_mcp_server_workspaces receipt.
Auth: cookie session only; no scope. Idempotency-Key: ignored.
cookieSession__Host-werft_session<token>For the web console: the browser session cookie set by POST /v1/auth/login. It holds the scopes of the user's workspace role (owner: all; admin and member: all but sessions:recover). Requests other than GET must also send X-Requested-With: werft-web.
id*stringThe MCP server's id.
1 <= lengthX-Requested-With?"werft-web"Required with a cookie session: the literal werft-web.
"werft-web"application/json- body
workspaces*array<>1 <= itemsThe entry's id and the change's receipt.
application/json- response
id*string1 <= lengthreceipt_id*string^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$uuidcurl -X PATCH 'https://example.com/v1/installation/settings/mcp-servers/string' \ -H 'Content-Type: application/json' \ -d '{ "workspaces": [ "acme", "acme-labs" ]}'{ "id": "docs", "receipt_id": "019a0000-0000-7000-8000-0000000000f3"}