> ## Documentation Index > Fetch the complete documentation index at: https://infisical.com/docs/llms.txt > Use this file to discover all available pages before exploring further. # List session services > List the services a session can use: what each one is for, the hosts or server it covers, what the proxy adds to requests, what it allows, and how an agent calls it. Never a credential or a value the proxy fills in. Authenticate with the session token as `Authorization: Bearer agv_...`. Through its proxy, an agent reaches this list at the same path on the proxy's Infisical with no token of its own; `infisical agent-vault run` sets `INFISICAL_AGENT_VAULT_URL` to that Infisical's URL, such as `https://app.infisical.com`. ## OpenAPI ````yaml GET /api/v1/agent-vault/session/services openapi: 3.0.3 info: title: Infisical API description: List of all available APIs that can be consumed version: 0.0.1 servers: - url: https://us.infisical.com description: Production server (US) - url: https://eu.infisical.com description: Production server (EU) - url: http://localhost:8080 description: Local server security: [] paths: /api/v1/agent-vault/session/services: get: tags: - Agent Vault Sessions description: >- List the services a session can use: what each one is for, the hosts or server it covers, what the proxy adds to requests, what it allows, and how an agent calls it. Never a credential or a value the proxy fills in. Authenticate with the session token as `Authorization: Bearer agv_...`. Through its proxy, an agent reaches this list at the same path on the proxy's Infisical with no token of its own; `infisical agent-vault run` sets `INFISICAL_AGENT_VAULT_URL` to that Infisical's URL, such as `https://app.infisical.com`. operationId: listAgentVaultSessionServices responses: '200': description: Default Response content: application/json: schema: type: object properties: agentVault: type: object properties: proxy: type: string nullable: true description: The name of the proxy the request came through. version: type: string nullable: true description: >- The version of the Infisical CLI that runs the proxy, as the proxy reported it. trafficPolicy: type: string enum: - any-host - service-hosts nullable: true description: >- any-host if the proxy forwards requests to hosts no service covers, service-hosts if it refuses them, apart from the exception hosts the notes name. required: - proxy - version - trafficPolicy additionalProperties: false description: >- The proxy the request came through: its name, its Infisical CLI version, and its traffic policy. Each is null when the request didn't come through a proxy in the session's project. session: type: object properties: expiresAt: type: string nullable: true description: >- When the session expires, as an RFC 3339 time, or null if it doesn't expire. accessBundle: type: string nullable: true description: >- The name of the session's access bundle, or null if its owner can no longer reach one. required: - expiresAt - accessBundle additionalProperties: false description: >- The session's expiry as an RFC 3339 time, and the name of its access bundle. services: type: array items: type: object properties: name: type: string description: The service's name. description: type: string nullable: true description: >- What the service is for, as an admin wrote it, or null if it has no description. type: type: string enum: - http - mcp - postgres - mysql - ssh description: >- http for an HTTP API, mcp for a remote MCP server, or postgres, mysql or ssh for a database or SSH server the agent reaches with `infisical agent-vault connect`. hosts: type: array items: type: string description: >- The host patterns the service covers, as an admin wrote them. Empty for a database or SSH service. url: type: string nullable: true description: >- The URL to call: an MCP server's URL, or for an HTTP service with exactly one host that isn't a wildcard, that host's URL. transport: type: string description: >- The MCP server's transport, streamable-http or sse. Only set for an MCP service. status: type: string enum: - ready - needs-personal-values description: >- ready, or needs-personal-values if the session's owner, or the user it was started on behalf of, hasn't set every personal value the service needs or connected their account. The proxy refuses requests to the service until they do. credential: type: object properties: type: type: string enum: - bearer - oauth - basic - login - none description: >- The kind of credential the proxy adds: bearer, oauth, basic, login (the account the proxy logs in to a database or SSH server as), or none. header: type: string description: The header the proxy sets the credential in. addedByProxy: type: boolean description: >- Whether the proxy adds a credential to the service's requests. memberProvided: type: boolean description: >- Whether some part of the credential is a personal value of the session's owner, or the user it was started on behalf of, so that person, not an admin, fixes it when the service rejects it. required: - type - addedByProxy - memberProvided additionalProperties: false description: >- What the proxy adds to each request: its type, the header it sets, and whether it adds one at all. Never the credential itself. customHeaders: type: array items: type: string description: >- The names of the headers the proxy adds. Never their values. placeholders: type: array items: type: object properties: placeholder: type: string description: >- The text the agent writes where the secret goes. surfaces: type: array items: type: string description: >- The parts of a request the proxy replaces the placeholder in: path, query, header, or body. required: - placeholder - surfaces additionalProperties: false description: >- Text the agent writes where a secret goes, and the parts of a request the proxy replaces it in. allowedMethods: type: array items: type: string nullable: true description: >- The HTTP methods the service allows, or null if it allows every method. allowedPathPrefixes: type: array items: type: string nullable: true description: >- The path prefixes the service allows, or null if it allows every path. allowedTools: type: array items: type: string nullable: true description: >- The MCP tools the agent can call, or null if it can call every tool. howToUse: type: string description: >- One paragraph that tells an agent how to call the service. required: - name - description - type - hosts - url - status - credential - customHeaders - placeholders - allowedMethods - allowedPathPrefixes - allowedTools - howToUse additionalProperties: false description: >- The services the session can use, bundle services first, then the session's own. notes: type: array items: type: string description: >- Facts about working behind the proxy that apply to every service. required: - agentVault - session - services - notes additionalProperties: false '400': description: Default Response content: application/json: schema: type: object properties: reqId: type: string statusCode: type: number enum: - 400 message: type: string error: type: string details: {} required: - reqId - statusCode - message - error additionalProperties: false '401': description: Default Response content: application/json: schema: type: object properties: reqId: type: string statusCode: type: number enum: - 401 message: type: string error: type: string required: - reqId - statusCode - message - error additionalProperties: false '403': description: Default Response content: application/json: schema: type: object properties: reqId: type: string statusCode: type: number enum: - 403 message: type: string details: {} error: type: string required: - reqId - statusCode - message - error additionalProperties: false '404': description: Default Response content: application/json: schema: type: object properties: reqId: type: string statusCode: type: number enum: - 404 message: type: string error: type: string required: - reqId - statusCode - message - error additionalProperties: false '422': description: Default Response content: application/json: schema: type: object properties: reqId: type: string statusCode: type: number enum: - 422 message: {} error: type: string required: - reqId - statusCode - error additionalProperties: false '500': description: Default Response content: application/json: schema: type: object properties: reqId: type: string statusCode: type: number enum: - 500 message: type: string error: type: string required: - reqId - statusCode - message - error additionalProperties: false ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.