> ## Documentation Index
> Fetch the complete documentation index at: https://docs.neuraltrust.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# List the MCP servers catalog

> Returns the curated catalog of well-known remote MCP servers, used to prefill MCP registry creation.



## OpenAPI

````yaml /trustgate/api/openapi.json get /v1/mcp-servers-catalog
openapi: 3.0.0
info:
  description: >-
    Administrative API for managing gateways and their registries, policies,
    consumers, roles and auth credentials.
  title: TrustGate Admin API
  contact:
    name: NeuralTrust
    url: https://neuraltrust.ai/contact
    email: support@neuraltrust.ai
  version: '1.0'
servers:
  - url: https://agentgateway-admin.dev.neuraltrust.ai
    description: Admin API
security: []
paths:
  /v1/mcp-servers-catalog:
    get:
      tags:
        - catalog
      summary: List the MCP servers catalog
      description: >-
        Returns the curated catalog of well-known remote MCP servers, used to
        prefill MCP registry creation.
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: >-
                  #/components/schemas/pkg_api_handler_http_catalog.ListMCPServersResponse
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: >-
                  #/components/schemas/github_com_NeuralTrust_TrustGate_pkg_api_handler_http_helpers.ErrorBody
      security:
        - BearerAuth: []
components:
  schemas:
    pkg_api_handler_http_catalog.ListMCPServersResponse:
      type: object
      properties:
        mcp_servers:
          type: array
          items:
            $ref: >-
              #/components/schemas/github_com_NeuralTrust_TrustGate_pkg_domain_catalog.MCPServer
    github_com_NeuralTrust_TrustGate_pkg_api_handler_http_helpers.ErrorBody:
      type: object
      properties:
        error:
          type: string
        message:
          type: string
    github_com_NeuralTrust_TrustGate_pkg_domain_catalog.MCPServer:
      type: object
      properties:
        auth_headers:
          type: array
          items:
            $ref: >-
              #/components/schemas/github_com_NeuralTrust_TrustGate_pkg_domain_catalog.MCPAuthHeader
        auth_hint:
          description: none | static | oauth
          type: string
        category:
          type: string
        code:
          type: string
        description:
          type: string
        display_name:
          type: string
        metadata:
          type: object
          additionalProperties: {}
        oauth:
          $ref: >-
            #/components/schemas/github_com_NeuralTrust_TrustGate_pkg_domain_catalog.MCPOAuth
        relevance:
          description: >-
            Relevance ranks how broadly relevant a server is for enterprises

            (higher = more relevant). Used to sort the catalog; 0 means
            unranked.
          type: integer
        requires_auth:
          type: boolean
        requires_config:
          description: >-
            RequiresConfig reports whether the operator must supply input before
            the

            server can be connected (a required URL variable, a static secret,
            or a

            manual/tenant OAuth client). When false the UI can connect it by
            default

            without a configuration step: public servers, and OAuth servers
            whose

            client self-registers (registration "auto") where the user simply
            logs in

            at runtime.
          type: boolean
        scopes:
          type: array
          items:
            type: string
        source:
          type: string
        tools:
          description: >-
            Tools is a snapshot of the server's advertised tools, captured by an

            unauthenticated tools/list where the server allows it. It is a
            preview for

            the catalog UI; the authoritative per-connection tool set is
            discovered at

            runtime by the gateway's introspector (and may be
            tenant/user-specific).

            Empty when the server requires auth to list tools.
          type: array
          items:
            $ref: >-
              #/components/schemas/github_com_NeuralTrust_TrustGate_pkg_domain_catalog.MCPTool
        transport:
          type: string
        url:
          type: string
        url_variables:
          type: array
          items:
            $ref: >-
              #/components/schemas/github_com_NeuralTrust_TrustGate_pkg_domain_catalog.MCPURLVariable
        vendor:
          type: string
    github_com_NeuralTrust_TrustGate_pkg_domain_catalog.MCPAuthHeader:
      type: object
      properties:
        description:
          type: string
        name:
          type: string
        required:
          type: boolean
        scheme:
          description: >-
            Scheme is the credential prefix the gateway prepends to the supplied

            secret when building the header value: Bearer | Token | Basic |
            ApiKey |

            App | raw (raw = send the value verbatim, no prefix).
          type: string
        secret:
          type: boolean
    github_com_NeuralTrust_TrustGate_pkg_domain_catalog.MCPOAuth:
      type: object
      properties:
        authorize_url:
          description: >-
            AuthorizeURL / TokenURL are required for manual registration

            (Registration == "manual"), where the operator supplies a
            pre-registered

            client_id/secret; they also serve as a discovery fallback otherwise.
          type: string
        dcr:
          description: >-
            DCR reports whether the server supports OAuth Dynamic Client
            Registration

            (RFC 7591). A nil pointer means it could not be determined (e.g. a

            tenant-templated host that must be probed per-instance).
          type: boolean
        pkce:
          description: >-
            PKCE reports whether the authorization server supports PKCE (S256).
            A nil

            pointer means it could not be determined.
          type: boolean
        registration:
          description: >-
            Registration is the recommended gateway registration mode derived
            from

            DCR support: "auto" when the server supports Dynamic Client
            Registration

            (the gateway self-registers and the user just logs in at runtime),

            "manual" when an operator must pre-register a client. Empty means
            the

            server is tenant-hosted and discovery happens per-instance at
            connect time.
          type: string
        required:
          type: boolean
        resource:
          description: >-
            Resource is the RFC 8707 resource indicator / expected token
            audience.
          type: string
        resource_metadata:
          type: boolean
        scopes:
          description: Scopes are the default/required OAuth scopes for the server.
          type: array
          items:
            type: string
        token_url:
          type: string
    github_com_NeuralTrust_TrustGate_pkg_domain_catalog.MCPTool:
      type: object
      properties:
        description:
          type: string
        name:
          type: string
    github_com_NeuralTrust_TrustGate_pkg_domain_catalog.MCPURLVariable:
      type: object
      properties:
        description:
          type: string
        in:
          description: >-
            In is where the variable is substituted: "path" (default) or
            "query".
          type: string
        name:
          type: string
        required:
          type: boolean
        secret:
          description: >-
            Secret marks a variable that carries a credential (e.g. a token
            passed in

            the query string) so the UI/secret store treats it as sensitive.
          type: boolean
  securitySchemes:
    BearerAuth:
      type: apiKey
      name: Authorization
      in: header

````