> ## Documentation Index
> Fetch the complete documentation index at: https://docs.mcpjam.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get a plugin version

> One imported plugin version with its component projections: declared MCP servers (placement, auth timing, materialized server id) and declared skills (namespaced model refs). Addressed by the version id alone — access is membership of the version's own project, and historical versions of uninstalled plugins stay readable because eval snapshots and stale environment pins reference them.



## OpenAPI

````yaml /reference/openapi.json get /plugin-versions/{pluginVersionId}
openapi: 3.1.0
info:
  title: MCPJam API
  version: 1.0.0-preview
  description: >-
    Programmatic access to MCP servers saved in your MCPJam projects — live
    diagnostics (validate, inspect, export) and operations: call tools, render
    prompts, run eval suites asynchronously and poll their results, and import
    OAuth tokens.


    **The API is in preview**: the surface may change while we finish the
    design. Error `code` values are stable; error `message` strings are not.
    Write clients that ignore unknown response fields.
  contact:
    name: MCPJam
    url: https://github.com/MCPJam/inspector/issues
servers:
  - url: https://app.mcpjam.com/api/v1
    description: Hosted MCPJam
security:
  - bearerAuth: []
tags:
  - name: Hosts
    description: >-
      Project hosts: named model + capability profiles you run chats and eval
      suites against.
  - name: Environments
    description: >-
      Project environments: named, live-editable execution bundles (one host, an
      optional standalone server group, optionally pinned skills and plugin
      versions) that eval suites and journeys run against. Distinct from Sandbox
      images, which are Computer base images. Reads require project membership;
      every write requires project admin.
  - name: Plugins
    description: >-
      Agent Plugins imported into a project — read-only inventory and version
      detail.
  - name: Sandbox images
    description: >-
      Custom Computer images: a digest-pinned Dockerfile built into an immutable
      image your project's computers boot from.
  - name: Server diagnostics
    description: Connect-level health checks against a saved MCP server.
  - name: Primitives
    description: 'The server''s MCP primitives: tools, prompts, and resources.'
  - name: Export
    description: Full-server snapshots for diffing and CI.
  - name: Execution
    description: 'Run the server''s primitives: call tools, render prompts.'
  - name: Eval runs
    description: >-
      Asynchronous eval suite runs: create with 202, poll status, iterations,
      and traces.
  - name: OAuth
    description: 'Bring-your-own OAuth: import externally obtained tokens for a server.'
  - name: Chatboxes
    description: >-
      Read-only access to the chatboxes published from a project: listing,
      settings, attached servers, and share links.
  - name: Catalog
    description: >-
      Discover the resources the other routes operate on: your account,
      projects, servers, eval suites, and chat sessions.
  - name: Tunnels
    description: >-
      Relay tunnels that expose local MCP servers through a public URL,
      registered as first-class project servers (the `mcpjam tunnel` CLI flow).
  - name: Agent
    description: >-
      Headless agent turns over the public API: send a message history, the
      server runs one assistant turn with project-scoped workspace tools (eval
      reads + suite creation) on a pinned hosted model, and returns the reply
      plus created-resource references.
paths:
  /plugin-versions/{pluginVersionId}:
    get:
      tags:
        - Plugins
      summary: Get a plugin version
      description: >-
        One imported plugin version with its component projections: declared MCP
        servers (placement, auth timing, materialized server id) and declared
        skills (namespaced model refs). Addressed by the version id alone —
        access is membership of the version's own project, and historical
        versions of uninstalled plugins stay readable because eval snapshots and
        stale environment pins reference them.
      operationId: getPluginVersion
      parameters:
        - name: pluginVersionId
          in: path
          required: true
          description: >-
            A plugin's `activeVersionId` from the list endpoint, or a pinned id
            from an environment's `pluginVersionIds`.
          schema:
            type: string
      responses:
        '200':
          description: The plugin version.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PluginVersion'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '403':
          $ref: '#/components/responses/Forbidden'
        '404':
          $ref: '#/components/responses/NotFound'
        '429':
          $ref: '#/components/responses/RateLimited'
        '500':
          $ref: '#/components/responses/InternalError'
        '502':
          $ref: '#/components/responses/ServerUnreachable'
components:
  schemas:
    PluginVersion:
      type: object
      description: One immutable imported plugin version with its component projections.
      required:
        - id
        - pluginId
        - bundleHash
        - status
        - componentCounts
        - servers
        - skills
        - createdAt
      properties:
        id:
          type: string
        pluginId:
          type: string
        declaredVersion:
          type: string
          description: '`manifest.version` — metadata only; `bundleHash` is the identity.'
        bundleHash:
          type: string
        manifestHash:
          type: string
        status:
          type: string
          enum:
            - staging
            - ready
            - invalid
          description: Only `ready` versions resolve at runtime.
        componentCounts:
          type: object
          description: >-
            Per-component tallies. `apps` counts preserved `.app.json` metadata
            entries only (no runtime effect).
          required:
            - skills
            - servers
            - apps
            - assets
            - unsupported
          properties:
            skills:
              type: number
            servers:
              type: number
            apps:
              type: number
            assets:
              type: number
            unsupported:
              type: number
        servers:
          type: array
          description: >-
            Declared MCP server components, with the project server row each one
            materialized as.
          items:
            type: object
            required:
              - componentId
              - componentKey
              - declaredName
              - placement
              - authenticationPolicy
              - materializedServerId
            properties:
              componentId:
                type: string
              componentKey:
                type: string
              declaredName:
                type: string
              placement:
                type: string
                enum:
                  - remote
                  - local
                  - computer
                description: >-
                  Where the component can execute; `local`/`computer` components
                  never run on MCPJam hosted servers.
              authenticationPolicy:
                type: string
                enum:
                  - on_install
                  - on_use
              materializedServerId:
                type: string
        skills:
          type: array
          description: >-
            Declared skill components, with the project skill row each one
            materialized as.
          items:
            type: object
            required:
              - componentId
              - componentKey
              - declaredName
              - modelRef
              - materializedSkillId
            properties:
              componentId:
                type: string
              componentKey:
                type: string
              declaredName:
                type: string
              modelRef:
                type: string
                description: >-
                  Namespaced model-facing reference:
                  `<plugin-name>/<skill-name>`.
              materializedSkillId:
                type: string
        createdAt:
          type: number
        readyAt:
          type: number
    Error:
      type: object
      required:
        - code
        - message
      properties:
        code:
          type: string
          description: >-
            Stable, machine-readable error code. New codes may be added over
            time; treat unknown codes as non-retryable failures unless the HTTP
            status says otherwise.
          enum:
            - UNAUTHORIZED
            - FORBIDDEN
            - NOT_FOUND
            - CONFLICT
            - VALIDATION_ERROR
            - RATE_LIMITED
            - FEATURE_NOT_SUPPORTED
            - SERVER_UNREACHABLE
            - TIMEOUT
            - OAUTH_REQUIRED
            - INTERNAL_ERROR
        message:
          type: string
          description: >-
            Human-readable description. May change between releases — don't
            match on it.
        details:
          type: object
          description: Optional, unstructured context bag.
          additionalProperties: true
  responses:
    Unauthorized:
      description: >-
        Missing, invalid, revoked, or orphaned key (`UNAUTHORIZED`) — or the
        **target MCP server** needs an OAuth grant (`OAUTH_REQUIRED`), which is
        a property of the server, not your key.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
          examples:
            badKey:
              summary: Invalid or revoked key
              value:
                code: UNAUTHORIZED
                message: Invalid API key
            oauthRequired:
              summary: Target server needs an OAuth grant
              value:
                code: OAUTH_REQUIRED
                message: Server requires OAuth authorization
    Forbidden:
      description: Key is valid but not allowed to do this.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
          example:
            code: FORBIDDEN
            message: You do not have access to this project
    NotFound:
      description: Unknown project, server, or resource.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
          example:
            code: NOT_FOUND
            message: Server not found
    RateLimited:
      description: >-
        Per-key rate limit exceeded (60 requests/minute sustained, bursts up to
        10). Honor `Retry-After` and back off with jitter.
      headers:
        Retry-After:
          description: Seconds to wait before retrying.
          schema:
            type: integer
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
          example:
            code: RATE_LIMITED
            message: API key rate limit exceeded. Slow down and retry.
    InternalError:
      description: Something failed on MCPJam's side.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
          example:
            code: INTERNAL_ERROR
            message: Unexpected internal error
    ServerUnreachable:
      description: Could not connect to the target MCP server.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
          example:
            code: SERVER_UNREACHABLE
            message: Failed to connect to server
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: >-
        MCPJam API key (`sk_…`). Create one at [Settings → API
        keys](https://app.mcpjam.com/settings/api-keys). Guest sessions cannot
        use the API, and API keys cannot manage other API keys.

````