Admin · Daemon API

On this page

Installed MCP packages (npm and Python)

GET/admin/mcp/packages

Operation listMcpPackagesAuthBearer token

Responses

Status Description Body

200 Packages PackagesResponse

packagesrequired array<InstalledPackage>

6 fields of packages

`package`required	string
`version`required	string
`command`required	string	Resolved entry point
`installPath`required	string
`installedAt`required	integer
`runtime`	string	One of `npm`, `uvx`, `pip`

Errors 401 · 403 · 503

401	Missing or wrong bearer token (`unauthorized`)
403	The request guard refused it: Host header not allowed (`host_not_allowed`, DNS-rebinding protection) or a browser cross-site request (`cross_origin`)`host_not_allowedcross_origin`
503	The subsystem is not configured on this daemon

Error bodies use the error format.

Example

Request

curl "http://127.0.0.1:7385/admin/mcp/packages" \
  -H "Authorization: Bearer $ADF_DAEMON_TOKEN"

Install an MCP npm package

POST/admin/mcp/packages/npm

Operation installMcpNpmPackageAuthBearer token

Request bodyapplication/json · PackageInstallBody · required

Field	Type	Description
`package`	string	Package name (alias: name)
`name`	string
`version`	string	Python and sandbox packages
`agentName`	string	Sandbox: recorded as installedBy

Responses

Status Description Body

200 Installed PackageInstallResponse

successrequired

boolean

Value true

installedrequired object

6 fields of installed · InstalledPackage

`package`required	string
`version`required	string
`command`required	string	Resolved entry point
`installPath`required	string
`installedAt`required	integer
`runtime`	string	One of `npm`, `uvx`, `pip`

Errors 400 · 401 · 403 · 500 · 503

400	Invalid request: missing or malformed field, query parameter or body. A body Fastify cannot parse gets Fastify's own shape (`statusCode`, `code`, `error`, `message`).`bad_requestFST_ERR_CTP_EMPTY_JSON_BODY`
401	Missing or wrong bearer token (`unauthorized`)
403	The request guard refused it: Host header not allowed (`host_not_allowed`, DNS-rebinding protection) or a browser cross-site request (`cross_origin`)`host_not_allowedcross_origin`
500	Unexpected runtime failure
503	The subsystem is not configured on this daemon

Error bodies use the error format.

Example

Request

curl -X POST "http://127.0.0.1:7385/admin/mcp/packages/npm" \
  -H "Authorization: Bearer $ADF_DAEMON_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"package":"@modelcontextprotocol/server-filesystem"}'

Uninstall an MCP npm package

DELETE/admin/mcp/packages/npm

Operation uninstallMcpNpmPackageAuthBearer token

Query parameters

Name	Type	Description
`package`required	string	Package name

Responses

Status Description Body

200 Uninstalled SuccessResponse

successrequired boolean

Errors 400 · 401 · 403 · 500 · 503

400	Invalid request: missing or malformed field, query parameter or body. A body Fastify cannot parse gets Fastify's own shape (`statusCode`, `code`, `error`, `message`).`bad_requestFST_ERR_CTP_EMPTY_JSON_BODY`
401	Missing or wrong bearer token (`unauthorized`)
403	The request guard refused it: Host header not allowed (`host_not_allowed`, DNS-rebinding protection) or a browser cross-site request (`cross_origin`)`host_not_allowedcross_origin`
500	Unexpected runtime failure
503	The subsystem is not configured on this daemon

Error bodies use the error format.

Example

Request

curl -X DELETE "http://127.0.0.1:7385/admin/mcp/packages/npm?package=PACKAGE" \
  -H "Authorization: Bearer $ADF_DAEMON_TOKEN"

Response 200

{
  "success": true
}

Install an MCP Python package (uvx)

POST/admin/mcp/packages/python

Operation installMcpPythonPackageAuthBearer token

Request bodyapplication/json · PackageInstallBody · required

Field	Type	Description
`package`	string	Package name (alias: name)
`name`	string
`version`	string	Python and sandbox packages
`agentName`	string	Sandbox: recorded as installedBy

Responses

Status	Description	Body
200	Installed	PackageInstallResponse
Fields as in PackageInstallResponse above.

Errors 400 · 401 · 403 · 500 · 503

400	Invalid request: missing or malformed field, query parameter or body. A body Fastify cannot parse gets Fastify's own shape (`statusCode`, `code`, `error`, `message`).`bad_requestFST_ERR_CTP_EMPTY_JSON_BODY`
401	Missing or wrong bearer token (`unauthorized`)
403	The request guard refused it: Host header not allowed (`host_not_allowed`, DNS-rebinding protection) or a browser cross-site request (`cross_origin`)`host_not_allowedcross_origin`
500	Unexpected runtime failure
503	The subsystem is not configured on this daemon

Error bodies use the error format.

Example

Request

curl -X POST "http://127.0.0.1:7385/admin/mcp/packages/python" \
  -H "Authorization: Bearer $ADF_DAEMON_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"package":"mcp-server-fetch"}'

Uninstall an MCP Python package

DELETE/admin/mcp/packages/python

Operation uninstallMcpPythonPackageAuthBearer token

Query parameters

Name	Type	Description
`package`required	string	Package name

Responses

Status Description Body

200 Uninstalled SuccessResponse

successrequired boolean

Errors 400 · 401 · 403 · 500 · 503

400	Invalid request: missing or malformed field, query parameter or body. A body Fastify cannot parse gets Fastify's own shape (`statusCode`, `code`, `error`, `message`).`bad_requestFST_ERR_CTP_EMPTY_JSON_BODY`
401	Missing or wrong bearer token (`unauthorized`)
403	The request guard refused it: Host header not allowed (`host_not_allowed`, DNS-rebinding protection) or a browser cross-site request (`cross_origin`)`host_not_allowedcross_origin`
500	Unexpected runtime failure
503	The subsystem is not configured on this daemon

Error bodies use the error format.

Example

Request

curl -X DELETE "http://127.0.0.1:7385/admin/mcp/packages/python?package=PACKAGE" \
  -H "Authorization: Bearer $ADF_DAEMON_TOKEN"

Response 200

{
  "success": true
}

Installed channel adapter packages

GET/admin/adapters/packages

Operation listAdapterPackagesAuthBearer token

Responses

Status	Description	Body
200	Packages	PackagesResponse
Fields as in PackagesResponse above.

Errors 401 · 403 · 503

401	Missing or wrong bearer token (`unauthorized`)
403	The request guard refused it: Host header not allowed (`host_not_allowed`, DNS-rebinding protection) or a browser cross-site request (`cross_origin`)`host_not_allowedcross_origin`
503	The subsystem is not configured on this daemon

Error bodies use the error format.

Example

Request

curl "http://127.0.0.1:7385/admin/adapters/packages" \
  -H "Authorization: Bearer $ADF_DAEMON_TOKEN"

Install a channel adapter npm package

POST/admin/adapters/packages

Operation installAdapterPackageAuthBearer token

Request bodyapplication/json · PackageInstallBody · required

Field	Type	Description
`package`	string	Package name (alias: name)
`name`	string
`version`	string	Python and sandbox packages
`agentName`	string	Sandbox: recorded as installedBy

Responses

Status	Description	Body
200	Installed	PackageInstallResponse
Fields as in PackageInstallResponse above.

Errors 400 · 401 · 403 · 500 · 503

400	Invalid request: missing or malformed field, query parameter or body. A body Fastify cannot parse gets Fastify's own shape (`statusCode`, `code`, `error`, `message`).`bad_requestFST_ERR_CTP_EMPTY_JSON_BODY`
401	Missing or wrong bearer token (`unauthorized`)
403	The request guard refused it: Host header not allowed (`host_not_allowed`, DNS-rebinding protection) or a browser cross-site request (`cross_origin`)`host_not_allowedcross_origin`
500	Unexpected runtime failure
503	The subsystem is not configured on this daemon

Error bodies use the error format.

Example

Request

curl -X POST "http://127.0.0.1:7385/admin/adapters/packages" \
  -H "Authorization: Bearer $ADF_DAEMON_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"package":"@modelcontextprotocol/server-filesystem"}'

Uninstall a channel adapter package

DELETE/admin/adapters/packages

Operation uninstallAdapterPackageAuthBearer token

Query parameters

Name	Type	Description
`package`required	string	Package name

Responses

Status Description Body

200 Uninstalled SuccessResponse

successrequired boolean

Errors 400 · 401 · 403 · 500 · 503

400	Invalid request: missing or malformed field, query parameter or body. A body Fastify cannot parse gets Fastify's own shape (`statusCode`, `code`, `error`, `message`).`bad_requestFST_ERR_CTP_EMPTY_JSON_BODY`
401	Missing or wrong bearer token (`unauthorized`)
403	The request guard refused it: Host header not allowed (`host_not_allowed`, DNS-rebinding protection) or a browser cross-site request (`cross_origin`)`host_not_allowedcross_origin`
500	Unexpected runtime failure
503	The subsystem is not configured on this daemon

Error bodies use the error format.

Example

Request

curl -X DELETE "http://127.0.0.1:7385/admin/adapters/packages?package=PACKAGE" \
  -H "Authorization: Bearer $ADF_DAEMON_TOKEN"

Response 200

{
  "success": true
}

Packages available to the code sandbox

GET/admin/sandbox/packages

Operation listSandboxPackagesAuthBearer token

Responses

Status Description Body

200 Packages SandboxPackagesResponse

basePathrequired string

modulesrequired array<string>

packagesrequired array<SandboxPackage>

5 fields of packages

`name`required	string
`version`required	string
`installedAt`required	integer
`size_mb`required	number
`installedBy`	string

Errors 401 · 403 · 503

401	Missing or wrong bearer token (`unauthorized`)
403	The request guard refused it: Host header not allowed (`host_not_allowed`, DNS-rebinding protection) or a browser cross-site request (`cross_origin`)`host_not_allowedcross_origin`
503	The subsystem is not configured on this daemon

Error bodies use the error format.

Example

Request

curl "http://127.0.0.1:7385/admin/sandbox/packages" \
  -H "Authorization: Bearer $ADF_DAEMON_TOKEN"

Install a sandbox package

POST/admin/sandbox/packages

Operation installSandboxPackageAuthBearer token

Request bodyapplication/json · PackageInstallBody · required

Field	Type	Description
`package`	string	Package name (alias: name)
`name`	string
`version`	string	Python and sandbox packages
`agentName`	string	Sandbox: recorded as installedBy

Responses

Status Description Body

200 Installed SandboxInstallResponse

successrequired

boolean

Value true

installedrequired object

4 fields of installed

`name`required	string
`version`required	string
`size_mb`required	number
`already_installed`required	boolean

Errors 400 · 401 · 403 · 500 · 503

400	Invalid request: missing or malformed field, query parameter or body. A body Fastify cannot parse gets Fastify's own shape (`statusCode`, `code`, `error`, `message`).`bad_requestFST_ERR_CTP_EMPTY_JSON_BODY`
401	Missing or wrong bearer token (`unauthorized`)
403	The request guard refused it: Host header not allowed (`host_not_allowed`, DNS-rebinding protection) or a browser cross-site request (`cross_origin`)`host_not_allowedcross_origin`
500	Unexpected runtime failure
503	The subsystem is not configured on this daemon

Error bodies use the error format.

Example

Request

curl -X POST "http://127.0.0.1:7385/admin/sandbox/packages" \
  -H "Authorization: Bearer $ADF_DAEMON_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"package":"lodash","version":"4.17.21"}'

Uninstall a sandbox package

DELETE/admin/sandbox/packages

Operation uninstallSandboxPackageAuthBearer token

Query parameters

Name	Type	Description
`name`	string	Package name (alias: package) example: lodash
`package`	string	Alias of name

Responses

Status Description Body

200 success is false when it was not installed SuccessResponse

successrequired boolean

Errors 400 · 401 · 403 · 503

400	Invalid request: missing or malformed field, query parameter or body. A body Fastify cannot parse gets Fastify's own shape (`statusCode`, `code`, `error`, `message`).`bad_requestFST_ERR_CTP_EMPTY_JSON_BODY`
401	Missing or wrong bearer token (`unauthorized`)
403	The request guard refused it: Host header not allowed (`host_not_allowed`, DNS-rebinding protection) or a browser cross-site request (`cross_origin`)`host_not_allowedcross_origin`
503	The subsystem is not configured on this daemon

Error bodies use the error format.

Example

Request

curl -X DELETE "http://127.0.0.1:7385/admin/sandbox/packages" \
  -H "Authorization: Bearer $ADF_DAEMON_TOKEN"

Response 200

{
  "success": true
}

Which of these packages are missing

POST/admin/sandbox/packages/check

Operation checkSandboxPackagesAuthBearer token

Request bodyapplication/json · SandboxCheckBody · required

Field Type Description

packagesrequired array<object>

2 fields of packages

`name`required	string
`version`required	string

Responses

Status Description Body

200 Missing packages SandboxCheckResponse

successrequired

boolean

Value true

missingrequired array<object>

2 fields of missing

`name`required	string
`version`required	string

Errors 400 · 401 · 403 · 503

400	Invalid request: missing or malformed field, query parameter or body. A body Fastify cannot parse gets Fastify's own shape (`statusCode`, `code`, `error`, `message`).`bad_requestFST_ERR_CTP_EMPTY_JSON_BODY`
401	Missing or wrong bearer token (`unauthorized`)
403	The request guard refused it: Host header not allowed (`host_not_allowed`, DNS-rebinding protection) or a browser cross-site request (`cross_origin`)`host_not_allowedcross_origin`
503	The subsystem is not configured on this daemon

Error bodies use the error format.

Example

Request

curl -X POST "http://127.0.0.1:7385/admin/sandbox/packages/check" \
  -H "Authorization: Bearer $ADF_DAEMON_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"packages":[{"name":"lodash","version":"4.17.21"}]}'