# Ingress

URL: https://docs.hanzo.ai/docs/mcp-tools/ingress

> ingress: 18 operations.

Also for this capability: [API](https://docs.hanzo.ai/docs/openapi/ingress) · [CLI](https://docs.hanzo.ai/docs/cli/ingress) · **MCP** · [SDKs](https://docs.hanzo.ai/docs/sdks)

ingress: 18 operations. Name one in "op" and pass that operation's own arguments in "input". describe returns an operation's input schema.

|               |                                                       |
| ------------- | ----------------------------------------------------- |
| **Tool**      | `ingress`                                             |
| **Address**   | `https://api.hanzo.ai/v1/mcp`                         |
| **Method**    | `tools/call` (JSON-RPC 2.0)                           |
| **Arguments** | 2, 1 required                                         |
| **Operation** | `GET /v1/ingress/status` · `GET /v1/ingress/tls`      |
| **Product**   | [ingress](https://docs.hanzo.ai/docs/openapi/ingress) |

## Arguments

| Field   | Type     | Required | Default | Values | Description                 |
| ------- | -------- | -------- | ------- | ------ | --------------------------- |
| `input` | `object` | —        | —       | —      | arguments for the chosen op |
| `op`    | `string` | **yes**  | —       | —      | —                           |

`tools/list` declares a type, a description, which fields are required and an enumerated value set for each field and nothing further, and every column above is MCP's own. This tool takes an operation name and that operation's arguments, so what the document constrains is what goes inside `input`, field by field, on the operation you name — ask `describe` for that. A `—` means MCP does not constrain the field.

## Call it

A `tools/call` carries every argument in one flat object — nothing binds to a path or a query string. This call carries exactly the arguments the operation requires, so it is the smallest one that can run.

```bash
curl -X POST https://api.hanzo.ai/v1/mcp \
  -H "Authorization: Bearer $HANZO_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
       "jsonrpc": "2.0",
       "id": 1,
       "method": "tools/call",
       "params": {
         "name": "ingress",
         "arguments": {
           "op": "list_ingress_middlewares"
         }
       }
     }'
```

Values are the operation's own defaults and enumerated values where it declares them, and a `<placeholder>` where neither source declares one. `tools/list` needs no credential; `tools/call` does — called without one MCP answers HTTP 200 with a JSON-RPC result whose `isError` is set and whose text says what was missing. [How to get a key →](https://docs.hanzo.ai/docs/mcp-tools#credentials)

## The operation behind it

`ingress` dispatches to 18 operations. 2 of them MCP names exactly as the document ids them, and those are below; for the rest MCP has its own verb, which `describe` resolves.

| Operation            | Route                    | Product                                               | Summary                                                                                                                                                                                                                                                                                                                                                                                                                    |
| -------------------- | ------------------------ | ----------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `get_ingress_status` | `GET /v1/ingress/status` | [ingress](https://docs.hanzo.ai/docs/openapi/ingress) | Reports the ingress edge's live posture: the role this instance runs in (app or edge), whether its listeners are bound and on which addresses, the ACME posture (staging flag and certificate cache directory), how many hosts the compiled route table currently serves, and how many the ACME HostPolicy will issue a certificate for.                                                                                   |
| `get_ingress_tls`    | `GET /v1/ingress/tls`    | [ingress](https://docs.hanzo.ai/docs/openapi/ingress) | Returns the caller org's ACME intent together with the edge-wide TLS facts it lands in: which role this instance runs in, whether its listeners are bound, every host the ACME HostPolicy will issue a certificate for (the union across ALL orgs of TLS-marked routes and configured extraHosts, because one process holds one certificate cache), and the ACME directory and account email the process was started with. |

The same capability over plain HTTP is in the [ingress API reference](https://docs.hanzo.ai/docs/openapi/ingress), on `https://api.hanzo.ai`.

---

[All 120 tools](https://docs.hanzo.ai/docs/mcp-tools/all-tools) · [MCP](https://docs.hanzo.ai/docs/mcp-tools) · [API reference](https://docs.hanzo.ai/docs/openapi)

Generated from `tools/list` on `https://api.hanzo.ai/v1/mcp` — 120 tools captured 2026-09-30.