Create a connection

POST

api

connections

Create a connection

curl --request POST \
  --url https://api.igrisecurity.com/api/v1/connections \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "slug": "github-prod",
  "name": "GitHub Production",
  "serverType": "http",
  "upstreamUrl": "https://api.github.com/mcp",
  "authType": "bearer",
  "credential": "ghp_xxx"
}
'

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    slug: 'github-prod',
    name: 'GitHub Production',
    serverType: 'http',
    upstreamUrl: 'https://api.github.com/mcp',
    authType: 'bearer',
    credential: 'ghp_xxx'
  })
};

fetch('https://api.igrisecurity.com/api/v1/connections', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://api.igrisecurity.com/api/v1/connections"

payload = {
    "slug": "github-prod",
    "name": "GitHub Production",
    "serverType": "http",
    "upstreamUrl": "https://api.github.com/mcp",
    "authType": "bearer",
    "credential": "ghp_xxx"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

{
  "data": {
    "id": "3f0c2a9e-0000-4000-8000-000000000001",
    "slug": "github-prod",
    "name": "GitHub Production",
    "description": null,
    "serverType": "http",
    "upstreamUrl": "https://api.github.com/mcp",
    "authType": "bearer",
    "customHeaders": null,
    "enabled": true,
    "timeoutSeconds": 30,
    "retries": 2,
    "rateLimitRpm": null,
    "denyByDefault": true,
    "logSampling": "all",
    "createdAt": "2026-01-01T00:00:00Z",
    "updatedAt": "2026-01-01T00:00:00Z"
  }
}

{
  "error": "credential is required when authType is bearer"
}

{
  "error": "Unauthorized"
}

{
  "error": "Body retention exceeds plan limit",
  "code": "PLAN_LIMIT_REACHED",
  "limit": "dataRetentionDays",
  "current": 365,
  "max": 30,
  "plan": "free",
  "upgradeTo": "growth"
}

{
  "error": "A connection with this slug already exists"
}

{
  "success": false,
  "error": {
    "name": "ZodError",
    "message": "<string>"
  }
}

Authorizations

Authorization

string

header

required

An Igris API key. It acts with the current role and permission overrides of the member who created it.

Body

application/json

slug

string

required

Lowercase letters, digits, - and _. 3 to 64 characters, starts with a letter or digit.

Pattern: ^[a-z0-9][a-z0-9_-]{2,63}$

name

string

required

Required string length: 1 - 255

description

string

Maximum string length: 2000

serverType

enum<string>

default:http

stdio is rejected.

Available options:

http,

llm

upstreamUrl

string<uri>

Required for http.

authType

enum<string>

default:none

For MCP connections use none, bearer, or header. api_key is accepted only on LLM connections and needs authConfig: { "name": "...", "in": "header" | "query" }. oauth, mtls, azure, aws, and gcp are rejected with 400, because the gateway does not apply them.

Available options:

none,

bearer,

header,

api_key

credential

string

Required for bearer and api_key. Required for header except on self-hosted LLM providers.

Required string length: 1 - 8192

authHeaderName

string

Header name for header auth. Defaults to Authorization.

Required string length: 1 - 100

customHeaders

object

Show child attributes

llmProvider

string

Required when serverType is llm. Must be a slug from GET /api/v1/llm-providers.

customBaseUrl

string<uri>

allowedModels

string[]

logFullContent

boolean

default:false

bodyRetentionDays

integer

Must be within your plan's retention limit, otherwise 403 with code PLAN_LIMIT_REACHED. Omit it to use the plan's default.

Required range: 1 <= x <= 1095

anomalyConfig

object | null

authConfig

object | null

timeoutSeconds

integer

default:30

Required range: 1 <= x <= 300

retries

integer

default:2

Required range: 0 <= x <= 5

rateLimitRpm

integer | null

Required range: 0 <= x <= 100000

denyByDefault

boolean

default:true

logSampling

enum<string>

default:all

Available options:

all,

10pct,

1pct,

errors_only

Response

The created connection.

data

object

A connection. Credentials are never returned. Custom header values come back blank (names only).

Show child attributes

Create a connection

curl --request POST \
  --url https://api.igrisecurity.com/api/v1/connections \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "slug": "github-prod",
  "name": "GitHub Production",
  "serverType": "http",
  "upstreamUrl": "https://api.github.com/mcp",
  "authType": "bearer",
  "credential": "ghp_xxx"
}
'

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    slug: 'github-prod',
    name: 'GitHub Production',
    serverType: 'http',
    upstreamUrl: 'https://api.github.com/mcp',
    authType: 'bearer',
    credential: 'ghp_xxx'
  })
};

fetch('https://api.igrisecurity.com/api/v1/connections', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://api.igrisecurity.com/api/v1/connections"

payload = {
    "slug": "github-prod",
    "name": "GitHub Production",
    "serverType": "http",
    "upstreamUrl": "https://api.github.com/mcp",
    "authType": "bearer",
    "credential": "ghp_xxx"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

{
  "data": {
    "id": "3f0c2a9e-0000-4000-8000-000000000001",
    "slug": "github-prod",
    "name": "GitHub Production",
    "description": null,
    "serverType": "http",
    "upstreamUrl": "https://api.github.com/mcp",
    "authType": "bearer",
    "customHeaders": null,
    "enabled": true,
    "timeoutSeconds": 30,
    "retries": 2,
    "rateLimitRpm": null,
    "denyByDefault": true,
    "logSampling": "all",
    "createdAt": "2026-01-01T00:00:00Z",
    "updatedAt": "2026-01-01T00:00:00Z"
  }
}

{
  "error": "credential is required when authType is bearer"
}

{
  "error": "Unauthorized"
}

{
  "error": "Body retention exceeds plan limit",
  "code": "PLAN_LIMIT_REACHED",
  "limit": "dataRetentionDays",
  "current": 365,
  "max": 30,
  "plan": "free",
  "upgradeTo": "growth"
}

{
  "error": "A connection with this slug already exists"
}

{
  "success": false,
  "error": {
    "name": "ZodError",
    "message": "<string>"
  }
}

Get Started

Connect

Govern

Monitor

Reference

API Reference

Authorizations

Body

Response