MetriBeacon
Menu

PUT Change plugin permissions in the browser

/api/v1/auth/mcp/connections/{id}/permissions

Apply browser-selected catalog scopes with CSRF protection and an expected revision. Older access tokens become invalid; an empty scope list revokes the connection. Workspace roles remain unchanged.

On this page

Access and permissions

Apply browser-selected catalog scopes with CSRF protection and an expected revision. Older access tokens become invalid; an empty scope list revokes the connection. Workspace roles remain unchanged.

Browser session: __Host-mb_session cookie.

When using a browser session for a mutation, send the current CSRF token in X-CSRF-Token with the same-site cookie. OAuth consent uses its documented form field.

Parameters and headers

FieldLocationType and limitsRequiredMeaning
idPathstring; {"format":"uuid"}YesUUID of an owned resource

Request body

FieldType and limitsRequiredMeaning
$object; {"additionalProperties":false}Yes—
$.scopesarray<string; {"enum":["account:read","config:read","config:write","telemetry:read","telemetry:write","enterprise:read","notifications:manage"]}>; {"maxItems":7}Yes—
$.scopes[]string; {"enum":["account:read","config:read","config:write","telemetry:read","telemetry:write","enterprise:read","notifications:manage"]}Yes—
$.expected_revisioninteger; {"minimum":1}Yes—
$.confirmboolean; {"const":true}Yes—

Responses

application/json

FieldType and limitsRequiredMeaning
$objectYes—

application/json

FieldType and limitsRequiredMeaning
$objectYes—

application/json

FieldType and limitsRequiredMeaning
$objectYes—
Stable error codes
browser_required

application/json

FieldType and limitsRequiredMeaning
$objectYes—

application/json

FieldType and limitsRequiredMeaning
$objectYes—

application/json

FieldType and limitsRequiredMeaning
$objectYes—
Stable error codes
invalid_request

application/json

FieldType and limitsRequiredMeaning
$objectYes—

application/json

FieldType and limitsRequiredMeaning
$objectYes—

application/json

FieldType and limitsRequiredMeaning
$objectYes—

Retries and asynchronous work

This change does not have a general retry guarantee. If the response is unclear, read the affected resource before trying again. Follow Retry-After waiting times and request new sign-in or action codes when they expire.

Request examples

Replace demo IDs, timestamps and placeholders with your own values. For a retry, keep the same IDs, time and content. These examples do not run requests on this page.

Keep login links, codes, cookies and keys private. Do not print them in logs or share them in support requests.

shell
curl --silent --show-error --output /dev/null --write-out "%{http_code}\n" \
  --request PUT \
  --header @"$HOME/.config/metribeacon/headers.txt" \
  "https://metribeacon.com/api/v1/auth/mcp/connections/{id}/permissions"
python
import json
from pathlib import Path
from urllib.request import Request, HTTPRedirectHandler, build_opener
from urllib.error import HTTPError

headers = json.loads((Path.home() / ".config/metribeacon/headers.json").read_text())
request = Request("https://metribeacon.com/api/v1/auth/mcp/connections/{id}/permissions", data=None, headers=headers, method="PUT")
class NoRedirect(HTTPRedirectHandler):
    def redirect_request(self, request, fp, code, message, headers, target):
        return None

opener = build_opener(NoRedirect())
try:
    with opener.open(request, timeout=10) as response:
        print(response.status)
except HTTPError as error:
    print(error.code)
    error.close()
javascript
import { readFile } from "node:fs/promises";
import { homedir } from "node:os";
import { join } from "node:path";

const headers = JSON.parse(await readFile(join(homedir(), ".config/metribeacon/headers.json"), "utf8"));
const response = await fetch("https://metribeacon.com/api/v1/auth/mcp/connections/{id}/permissions", {
  method: "PUT", headers, redirect: "manual",
  signal: AbortSignal.timeout(10000),
});
console.log(response.status);
await response.body?.cancel();
go
package main

import (
  "fmt"
  "net/http"
  "time"
  "encoding/json"
  "os"
  "path/filepath"
)

func main() {
  home, err := os.UserHomeDir(); if err != nil { panic("request failed; credentials and response omitted") }
  raw, err := os.ReadFile(filepath.Join(home, ".config/metribeacon/headers.json")); if err != nil { panic("request failed; credentials and response omitted") }
  var headers map[string]string
  if json.Unmarshal(raw, &headers) != nil { panic("invalid local headers") }
  request, err := http.NewRequest("PUT", "https://metribeacon.com/api/v1/auth/mcp/connections/{id}/permissions", nil)
  if err != nil { panic("request failed; credentials and response omitted") }
  for name, value := range headers { request.Header.Set(name, value) }
  client := &http.Client{Timeout: 10*time.Second, CheckRedirect: func(*http.Request, []*http.Request) error { return http.ErrUseLastResponse }}
  response, err := client.Do(request)
  if err != nil { panic("request failed; credentials and response omitted") }
  defer response.Body.Close()
  fmt.Println(response.StatusCode)
}