Show this access

The access this call is made with: account, main or sub access, authentication, expiry, what it may do.

RReadIdempotentbeta

Tool

manitu_access_geton https://mcp.manitu.de/mcp

POST

/v1/access/geton https://api.manitu.de

Annotations as tools/list sends them

readOnlyHint truedestructiveHint falseidempotentHint trueopenWorldHint false

Description for the model

Tells which manitu customer account this connection works in, and through which access: the account id (it is also the customer number the customer knows), the access id (main or sub access), how the connection authenticated, and until when; for a key also what it may do (access_level: read only, write, or write without confirmation) and which ways in it can use (rest, mcp). Call it first when you need to know whose account you act in, before telling the customer which account a later answer refers to, or when a change is refused and you need to know whether this key may change anything at all. It returns no contact or contract data - no name, no address, no products.

Arguments

Takes no arguments.

Result structuredContent, checked against the schema

account_idintegerrequired

The customer account - its id is also its customer number.

account_user_idintegerrequired

The access on that account this call is made with.

credential_typestringrequired

What this call was made with.

One of session apikey oauth

auth_strengthstringrequired

How the access authenticated.

One of password tfa token oauth

expires_atstring | nullrequired

When the credential ends at the latest (ISO 8601), or null.

access_levelstring | nullrequired

What a key may do: read only; write, with what needs a confirmation refused; or write without confirmation. null for a session.

One of read write write_unconfirmed null

facadestring | nullrequired

The way this call came: rest or mcp; null if not known.

One of rest mcp null

usable_channel_listarray of stringrequired

The ways in this credential can use now: rest and mcp for a key; panel for a session - its sign-in to the customer panel, which also covers calls made with the session over REST (a session never works over MCP). A way not listed is closed for it - the customer sets the ways in in the customer panel.

Authentication

One of X-API-Key, Authorization: Bearer … - never more than one in a request. More

Request body JSON; unknown fields are refused

No fields - send {} or no body.

Response in `data`; the rest of the body as on every call

account_idintegerrequired

The customer account - its id is also its customer number.

account_user_idintegerrequired

The access on that account this call is made with.

credential_typestringrequired

What this call was made with.

One of session apikey oauth

auth_strengthstringrequired

How the access authenticated.

One of password tfa token oauth

expires_atstring | nullrequired

When the credential ends at the latest (ISO 8601), or null.

access_levelstring | nullrequired

What a key may do: read only; write, with what needs a confirmation refused; or write without confirmation. null for a session.

One of read write write_unconfirmed null

facadestring | nullrequired

The way this call came: rest or mcp; null if not known.

One of rest mcp null

usable_channel_listarray of stringrequired

The ways in this credential can use now: rest and mcp for a key; panel for a session - its sign-in to the customer panel, which also covers calls made with the session over REST (a session never works over MCP). A way not listed is closed for it - the customer sets the ways in in the customer panel.

Statuses

200Success.400The request does not match the declared input schema.401No credential was presented, or it was not recognised.403The credential is not permitted to use this operation.500The server failed. Nothing about the request was wrong. Whether a change took effect is not known - check before trying it again.503The channel this operation forwards through is unavailable.

MCPtools/call

Request

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "manitu_access_get",
    "arguments": {}
  }
}

Result

{
  "structuredContent": {
    "account_id": 12345,
    "account_user_id": 12345,
    "credential_type": "session",
    "auth_strength": "password",
    "expires_at": "2026-10-23T12:00:00+02:00",
    "access_level": "read",
    "facade": "rest",
    "usable_channel_list": [
      "panel"
    ]
  },
  "content": [
    {
      "type": "text",
      "text": "… the same answer as text …"
    }
  ],
  "isError": false
}

POST/v1/access/get

Request

curl -X POST 'https://api.manitu.de/v1/access/get' \
  -H 'X-API-Key: $API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{}'

const response = await fetch('https://api.manitu.de/v1/access/get', {
  method: 'POST',
  headers: {
    'X-API-Key': process.env.API_KEY,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({}),
});
const answer = await response.json();

<?php

$curl = curl_init('https://api.manitu.de/v1/access/get');

curl_setopt_array($curl, [
    CURLOPT_CUSTOMREQUEST  => 'POST',
    CURLOPT_HTTPHEADER     => [
        'X-API-Key: ' . getenv('API_KEY'),
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS     => '{}',
    CURLOPT_RETURNTRANSFER => true,
]);

$answer = json_decode(curl_exec($curl), true);

import os

import requests

response = requests.request(
    "POST",
    "https://api.manitu.de/v1/access/get",
    headers={"X-API-Key": os.environ["API_KEY"]},
    json={},
)
answer = response.json()

Response 200

{
  "status": {
    "type": "success",
    "code": 200
  },
  "meta": {},
  "data": {
    "account_id": 12345,
    "account_user_id": 12345,
    "credential_type": "session",
    "auth_strength": "password",
    "expires_at": "2026-10-23T12:00:00+02:00",
    "access_level": "read",
    "facade": "rest",
    "usable_channel_list": [
      "panel"
    ]
  }
}