agent_invite

Agent invite payload

This is the template text an operator sends to an external agent (OpenClaw, Cursor, Claude Desktop, a custom client) when inviting it from Admin → Federation → Agents. Replace the two placeholders with the values from that page.

Never commit a real key. <INSTANCE_URL> and <MCP_KEY> are per-instance secrets. An earlier revision of this file contained a live key; if you are auditing an instance, rotate any key that has ever been pasted into a repo, issue tracker or chat.

---

Connection

• Base URL: <INSTANCE_URL>/functions/v1/mcp-server
• Authentication: Authorization: Bearer <MCP_KEY>

The server speaks two protocols on the same URL — both expose the same tools and resources. Pick whichever the client supports.

Option A — native MCP (JSON-RPC over Streamable HTTP)

For MCP-capable clients (Cursor, Claude Desktop, mcp-inspector, OpenClaw).

• Method: POST / (root path)
• Headers:
  • Authorization: Bearer <MCP_KEY>
  • Content-Type: application/json
  • Accept: application/json, text/event-stream — mandatory per the MCP Streamable HTTP spec; without it the server answers 406.
• Methods: initialize, tools/list, tools/call, resources/list, resources/read, notifications/*.
• Surface control (avoids context bloat):
  • ?groups=crm,commerce,hr — only those categories' tools. Live list at GET /rest/groups.
  • ?mode=dispatch — a 2-tool surface: search_skills then execute_skill.
  • no parameter — every tool of every active module.

curl -X POST "$INSTANCE_URL/functions/v1/mcp-server" \
  -H "Authorization: Bearer $MCP_KEY" \
  -H "Content-Type: application/json" \
  -H "Accept: application/json, text/event-stream" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"acquire_lock","arguments":{"lane":"lead_abc","ttl_seconds":60}}}'

Two failure modes worth knowing

Symptom	Cause
406 Not Acceptable	Missing Accept: application/json, text/event-stream.
Method not found (-32601) right after fixing the header	The tool name doesn't exist. Discover real names with tools/list — e.g. there is no site_health_check; read the flowwink://health resource instead.