call_provider_api
Makes authenticated HTTP requests to provider APIs using stored client credentials. Specify provider, path, method, and optional query/body to execute calls.
Instructions
One HTTP call to a provider's own API, with one client's credential.
The way down a layer when a provider's MCP server does not publish what you need. Vercel's publishes no environment-variable write and no way to attach a domain to a project, so those are reachable through no tool at any layer; this is how they become reachable.
path is a path, not a URL, and that is enforced rather than assumed:
an absolute URL would send this client's credential to whatever host it
named. The provider's host is asserted before anything is sent.
Every call is recorded as a mutation whatever the method, because an HTTP verb is a convention and not an annotation, and this will not claim a read on the strength of one. The response body is deliberately not logged: a raw environment endpoint returns secret values.
Works for cloudflare, vercel and resend, the three whose REST base URL and header shape Munim knows. It is not a universal escape hatch.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | JSON request body, as an object. | |
| path | Yes | A path beginning with one slash, for example /v9/projects. Never a full URL: an absolute URL is refused before the request is built, because it would send this client's credential to another host. | |
| query | No | Query string parameters, as an object. | |
| client | Yes | The client to act on, by the name you registered them under. A write resolves this one client's credentials and no other. | |
| method | No | GET, POST, PATCH, PUT or DELETE. Every call is recorded as a mutation whatever the method, because an HTTP verb is a convention rather than a guarantee. | GET |
| provider | Yes | cloudflare, vercel or resend. Only these three have a known REST base URL and header shape. |