Preview, draft, and publish an MCP

Review the operations and authentication of a standalone MCP deployment before making it callable.

Preview the tool selection

evlio --collection "Orders API" mcp create \
  --name "Orders MCP" --operations "GET /orders" \
  --auth-type bearer --dry-run

Use operation keys exactly as returned by collection endpoints. Repeat --operations for multiple keys, or use --operations - for a JSON list on stdin. Omitting the operations filter can expose the entire collection. Set authentication explicitly; the default no-auth setting is suitable only for intentionally public APIs.

--auth-type accepts none (the default), bearer, or api_key. For api_key, also set --api-key-header and --api-key-in (header or query). For oauth, openid_connect, basic, or jwt, pass the full request body with --from request.json. Supply an OAuth client secret with --client-secret as a reference, env:NAME, file:PATH, or - for stdin, never as the secret itself.

Save and inspect a draft

evlio --collection "Orders API" --yes mcp create \
  --name "Orders MCP" --operations "GET /orders" \
  --auth-type bearer --draft
evlio mcp list
evlio mcp show orders-mcp

Use the actual slug returned by creation in subsequent commands. --dry-run saves nothing; --draft saves the configuration without publishing. These two options cannot be combined. Drafts don't count toward your plan's hosted MCP server limit, but creation is refused when the workspace is already at the limit. --base-url overrides the upstream target and --timeout accepts a request budget from 1000 to 300000 milliseconds.

Publish and verify

evlio --yes mcp publish orders-mcp
evlio mcp show orders-mcp

Use the returned runtime URL and install-page instructions to connect a client. Confirm the tools and make a read-only test call. Contract-generated MCP servers must be published through their parent contract so approval and governance checks apply. A published server counts toward your plan's hosted MCP server limit; at the limit, create and publish exit with code 5 and report the limit.