> ## Documentation Index > Fetch the complete documentation index at: https://docs.sidenet.ai/llms.txt > Use this file to discover all available pages before exploring further. # Create tool provider > Creates an api/mcp/sidenet provider for the org. For API providers an optional `tools` array creates tools in the same call; tool names must be unique per provider, so path punctuation (`/`, `{}`) is stripped and repeated names (the same OpenAPI summary on two operations) are disambiguated with the method and, if needed, a counter — the saved names are in the response. Sensitive credentials go in `auth_secret` and are stored securely. Reloads the org tools and rebuilds dependent agents. ## OpenAPI ````yaml /api-reference/openapi.json post /v1/tool-providers openapi: 3.1.0 info: title: Sidenet API version: 1.0.0 description: >- Sidenet HTTP endpoints exposed by the Sidenet Studio. All routes require an api key that can be generated through the studio in studio.sidenet.ai. servers: - url: https://api.sidenet.ai security: - bearerAuth: [] paths: /v1/tool-providers: post: tags: - Tool providers summary: Create tool provider description: >- Creates an api/mcp/sidenet provider for the org. For API providers an optional `tools` array creates tools in the same call; tool names must be unique per provider, so path punctuation (`/`, `{}`) is stripped and repeated names (the same OpenAPI summary on two operations) are disambiguated with the method and, if needed, a counter — the saved names are in the response. Sensitive credentials go in `auth_secret` and are stored securely. Reloads the org tools and rebuilds dependent agents. parameters: [] requestBody: required: true content: application/json: schema: type: object properties: name: type: string minLength: 1 example: Acme CRM type: type: string enum: - api - mcp - sidenet default: api base_url: type: string format: uri example: https://api.acme.example description: type: string nullable: true example: Customer records auth_type: type: string enum: - basic - bearer - api-key - oauth2 - custom nullable: true auth_config: type: object additionalProperties: {} nullable: true example: header: Authorization scheme: Bearer default_headers: type: object additionalProperties: type: string nullable: true example: X-Acme-Version: '2026-01-01' runtime_auth: type: boolean example: false timeout_ms: type: integer minimum: 1000 maximum: 30000 example: 30000 mcp_transport: type: string enum: - streamable_http - sse nullable: true auth_secret: type: object additionalProperties: {} example: token: the API key to store in the vault tools: type: array items: type: object properties: name: type: string minLength: 1 description: type: string nullable: true method: type: string enum: - GET - POST - PUT - PATCH - DELETE default: GET path: type: string minLength: 1 input_schema: type: object additionalProperties: {} nullable: true output_schema: type: object additionalProperties: {} nullable: true timeout_ms: type: integer minimum: 1000 maximum: 120000 is_enabled: type: boolean operation_id: type: string tags: type: array items: type: string deprecated: type: boolean required: - name - path additionalProperties: false example: - name: Get customer method: GET path: /customers/{customerId} input_schema: type: object properties: customerId: type: string required: - customerId required: - name - base_url additionalProperties: false responses: '201': description: >- The provider, any tools created with it, and the rebuild that followed content: application/json: schema: type: object properties: provider: type: object properties: id: type: string format: uuid org_id: type: string format: uuid name: type: string type: type: string enum: - api - mcp - sidenet description: type: string nullable: true base_url: type: string nullable: true auth_type: type: string nullable: true auth_config: type: object nullable: true description: >- Non-sensitive auth settings only. Credentials are redacted out of this. has_vault_secret: type: boolean description: >- A credential is stored. The value itself is never returned. runtime_auth: type: boolean mcp_transport: type: string nullable: true created_at: type: string format: date-time updated_at: type: string format: date-time tools: type: array description: >- The tools created from the `tools` array, with the names they were actually saved under — repeats are disambiguated, so check these rather than assuming. items: type: object properties: id: type: string format: uuid tool_provider_id: type: string format: uuid name: type: string description: >- Unique within the provider. May differ from what you sent — path punctuation is stripped and a repeated name is disambiguated with the method and a counter. description: type: string nullable: true method: type: string path: type: string input_schema: type: object nullable: true output_schema: type: object nullable: true timeout_ms: type: integer nullable: true is_enabled: type: boolean operation_id: type: string nullable: true tags: type: array nullable: true items: type: string deprecated: type: boolean nullable: true created_at: type: string format: date-time updated_at: type: string format: date-time rebuild: type: object properties: scope: type: string description: >- Which slice of the registry was reloaded: `custom`, `mcp` or `all`. tools: type: object properties: affectedToolIds: type: array items: type: string totalToolIds: type: integer description: Tools in the org after the reload. providerCounts: type: object properties: api: type: integer mcp: type: integer other: type: integer mcpErrors: type: array description: >- MCP providers that failed to connect or list tools during the reload. They contributed ZERO tools — an empty array is the healthy case. items: type: object properties: providerId: type: string providerName: type: string error: type: string rebuilt: type: integer description: Agents rebuilt successfully. failed: type: integer description: Agents that failed to rebuild. Non-zero is a problem. skipped: type: integer agents: type: array items: type: object failedAgents: type: array description: >- Present when `failed` is non-zero: which agents, and why. items: type: object properties: agentVersionId: type: string format: uuid mastraId: type: string error: type: string totalBuildTime: type: integer description: Milliseconds spent rebuilding. warning: type: string description: >- Present only when an MCP provider was saved but its tools failed to load. The row IS persisted — it just has zero tools until the config is fixed. '400': description: Bad request '403': description: Forbidden '409': description: >- A tool name / method+path / operation_id is duplicated within the provider components: securitySchemes: bearerAuth: type: http scheme: bearer description: >- Organization API key, generated in studio.sidenet.ai. Backend only — never in a browser. ````