feat(api): add v2 endpoints for MCP servers, skills, custom tools, folders, and credentials (#6150)

* feat(api): add v2 endpoints for MCP servers, skills, custom tools, folders, and credentials

* fix(api): correct credential role, skill permission bar, MCP url identity, and custom-tool conflict mapping

* fix(api): align credential mutation gating, provider-outage status, and unique-violation conflicts

* fix(api): close unique-violation, revival, orphan-write, and env-rename gaps

* fix(api): treat every provider-outage code as unavailable on create and update

* fix(credentials): use the shared outage predicate on the session update path

Author: TheodoreSpeaks

apps/docs/content/docs/de/api-reference/meta.json

@@ -15,6 +15,11 @@
     "(generated)/tables",
     "(generated)/files",
     "(generated)/knowledge-bases",
+    "(generated)/mcp-servers",
+    "(generated)/skills",
+    "(generated)/custom-tools",
+    "(generated)/folders",
+    "(generated)/credentials",
     "---Execution and Usage---",
     "(generated)/execution",
     "(generated)/human-in-the-loop",

apps/docs/content/docs/en/api-reference/meta.json

@@ -15,6 +15,11 @@
     "(generated)/tables",
     "(generated)/files",
     "(generated)/knowledge-bases",
+    "(generated)/mcp-servers",
+    "(generated)/skills",
+    "(generated)/custom-tools",
+    "(generated)/folders",
+    "(generated)/credentials",
     "---Execution and Usage---",
     "(generated)/execution",
     "(generated)/human-in-the-loop",

apps/docs/content/docs/es/api-reference/meta.json

@@ -15,6 +15,11 @@
     "(generated)/tables",
     "(generated)/files",
     "(generated)/knowledge-bases",
+    "(generated)/mcp-servers",
+    "(generated)/skills",
+    "(generated)/custom-tools",
+    "(generated)/folders",
+    "(generated)/credentials",
     "---Execution and Usage---",
     "(generated)/execution",
     "(generated)/human-in-the-loop",

apps/docs/content/docs/fr/api-reference/meta.json

@@ -15,6 +15,11 @@
     "(generated)/tables",
     "(generated)/files",
     "(generated)/knowledge-bases",
+    "(generated)/mcp-servers",
+    "(generated)/skills",
+    "(generated)/custom-tools",
+    "(generated)/folders",
+    "(generated)/credentials",
     "---Execution and Usage---",
     "(generated)/execution",
     "(generated)/human-in-the-loop",

apps/docs/content/docs/ja/api-reference/meta.json

@@ -15,6 +15,11 @@
     "(generated)/tables",
     "(generated)/files",
     "(generated)/knowledge-bases",
+    "(generated)/mcp-servers",
+    "(generated)/skills",
+    "(generated)/custom-tools",
+    "(generated)/folders",
+    "(generated)/credentials",
     "---Execution and Usage---",
     "(generated)/execution",
     "(generated)/human-in-the-loop",

apps/docs/content/docs/zh/api-reference/meta.json

@@ -15,6 +15,11 @@
     "(generated)/tables",
     "(generated)/files",
     "(generated)/knowledge-bases",
+    "(generated)/mcp-servers",
+    "(generated)/skills",
+    "(generated)/custom-tools",
+    "(generated)/folders",
+    "(generated)/credentials",
     "---Execution and Usage---",
     "(generated)/execution",
     "(generated)/human-in-the-loop",

apps/docs/lib/openapi.ts

@@ -9,6 +9,7 @@ const SPEC_FILES = [
   'openapi-v2-tables.json',
   'openapi-v2-knowledge.json',
   'openapi-v2-files-audit.json',
+  'openapi-v2-resources.json',
 ] as const
 
 export const openapi = createOpenAPI({

apps/docs/openapi-v2-resources.json

@@ -5,7 +5,11 @@ import { getValidationErrorMessage, parseRequest } from '@/lib/api/server'
 import { getSession } from '@/lib/auth'
 import { withRouteHandler } from '@/lib/core/utils/with-route-handler'
 import { type CredentialActorContext, getCredentialActorContext } from '@/lib/credentials/access'
-import { performDeleteCredential, performUpdateCredential } from '@/lib/credentials/orchestration'
+import {
+  isProviderOutageCode,
+  performDeleteCredential,
+  performUpdateCredential,
+} from '@/lib/credentials/orchestration'
 
 const logger = createLogger('CredentialByIdAPI')
 
@@ -101,7 +105,9 @@ export const PUT = withRouteHandler(
                 ? 409
                 : // A provider outage during reconnect is infra, not a bad
                   // request — mirror the create route and runtime token route.
-                  result.providerErrorCode === 'provider_unavailable'
+                  // Every provider family names its own outage code, so this
+                  // asks the shared predicate rather than matching one literal.
+                  isProviderOutageCode(result.providerErrorCode)
                   ? 502
                   : result.errorCode === 'validation'
                     ? 400