List plugins

Lists the plugin catalog: Reason’s curated and imported marketplace connectors, the workspace’s custom MCP servers and native app connectors. Each plugin has its auth method, supported scopes, bundled skills (with where each is installed) and every installation the caller sees in accounts, with its signed-in account and cached health. Never includes credentials or another member’s personal installations.

_{Scope: mcp:read}

GET /v3/organizations/{orgId}/plugins

List plugins

cURL

curl --request GET \
  --url https://api.reasonmachines.com/v3/organizations/{orgId}/plugins \
  --header 'Authorization: Bearer <token>'

200

{
  "items": [
    {
      "slug": "<string>",
      "name": "<string>",
      "description": "<string>",
      "icon": "<string>",
      "source": "curated",
      "auth_type": "none",
      "secret_names": [
        "<string>"
      ],
      "scope": "personal",
      "supported_scopes": [
        "personal"
      ],
      "connectable": true,
      "setup": {
        "code": "<string>",
        "owner": "<string>",
        "message": "<string>"
      },
      "docs_url": "<string>",
      "website_url": "<string>",
      "verified": true,
      "bundled_skills": [
        {
          "slug": "<string>",
          "name": "<string>",
          "description": "<string>",
          "installed": true,
          "installed_scopes": [
            "personal"
          ]
        }
      ],
      "installed": true,
      "mcp_server_id": "<string>",
      "connection_state": "<string>",
      "connection_checked_at": "<string>",
      "accounts": [
        {
          "connection_id": "<string>",
          "adapter": "mcp",
          "mcp_server_id": "<string>",
          "scope": "personal",
          "reason_id": "<string>",
          "account_id": "<string>",
          "account_name": "<string>",
          "connection_state": "<string>",
          "connection_checked_at": "<string>",
          "connection_error_code": "<string>",
          "enabled": true,
          "can_manage": true,
          "reason_mode": "member"
        }
      ]
    }
  ]
}

Authorizations

Authorization · string · header · required

Your Reason API key from Settings › API keys. New keys use reason_; legacy ara_ keys remain accepted. Keys are capability-scoped: run, mcp:read, mcp:write, secrets:read, secrets:write, sessions:read, sessions:debug, devices:read, devices:write, devices:use, computers:read, computers:write, ssh:write, knowledge:read, memory:read, memory:write, skills:read, skills:write, pages:read, pages:write, repos:read, repos:write, reviews:read, reviews:write, deployment:read, analytics:read, org:read, org:write, attachments:read, attachments:write, guardrails:read, guardrails:write, network:read, network:write, automations:read, automations:write, agent_auth:read. devices:write, devices:use, computers:read, computers:write, ssh:write, network:read and network:write are opt-in, excluded from default keys. computers:read lists visible cloud and connected computers without waking them or granting execution access. devices:read discovers local Device targets; devices:use separately consents to local execution, so a discover-and-run local workflow needs both. devices:write manages enrollment and device grants; computers:write creates or deletes cloud computers; ssh:write manages retained SSH access. network:read reads the saved workspace network policy; network:write replaces custom allowed hosts and requires a current organization owner/admin. Legacy project PATCH requests containing network_allowed_hosts also require network:write plus their existing run scope and project management permission; saved project hosts do not affect current session egress. Only owners/admins can mint or manage keys with network:write; keys cannot grant themselves more authority. See /docs/network-policies for replacement semantics and runtime applicability. mcp:write manages MCP server configuration only; it does not authorize remote MCP-tool execution. sessions:read reads sessions, including the assistant, reasoning and tool activity in their events. sessions:debug is privileged: only for organization owners/admins, it expands session events to the full diagnostic projection (diagnostic event kinds, status text and raw event metadata).

Scopes

mcp:read

Path Parameters

orgId · string · required

Organization id or slug. Resolve it with GET /v3/self.

Query Parameters

installed · enum<string>

Only installed (true) or not installed (false) plugins.

Available options: true, false

source · enum<string>

Only plugins from this source.

Available options: curated, grok, codex, cursor, devin, custom, native

q · string

Case-insensitive search over slug, name and description.

Maximum string length: 200

reason_id · string<uuid>

Also list this Reason's own installations in accounts (requires access to the Reason).

Response

200

application/json

Plugins.

items · object[] · required

Show child attributes