Governed MCP Sessions

Create time-bound MCP sessions for multi-step tool interactions.

POST /runtime/mcp/session creates a governed MCP session after policy evaluation. Sessions are stored in-memory with a 30-minute TTL.

bash

curl -X POST https://app.korclaw.com/api/v1/runtime/mcp/session \
  -H "Authorization: Bearer kc_live_your_api_key_here" \
  -H "Content-Type: application/json" \
  -d '{
    "server": "analytics",
    "input": { "action": "session_start", "agent": "research-agent" }
  }'

Response

{
  "data": {
    "allowed": true,
    "result": "allowed",
    "server": "analytics",
    "session_id": "uuid",
    "expires_at": "2026-09-20T10:30:00Z"
  }
}

Sessions are bound to the workspace and server. They expire automatically after 30 minutes. Agent identity is required for session creation.