Your control plane.
In your agent.

Reports the connected organization and an overview of how MCP servers reach people.

Lists the projects in the organization by identifier, name, and slug.

Creates an empty project in the organization.

Changes the display name of one exact project.

Searches the reviewed MCP Catalog by query or provider key.

Looks at one candidate before adding it, either a catalog entry or an HTTPS streamable HTTP URL.

Adds one catalog entry to a named project with only its declared non-secret configuration.

Adds an MCP server by its streamable HTTP URL to a named project.

Returns the dashboard URL where the rest of a server's setup is finished, including its source and authentication.

Connects a server to the OAuth provider it advertises by resolving provider metadata and performing dynamic client registration.

Creates a new MCP server in a project from tools the project's functions already produce.

Asks an organization administrator to review an MCP server for one project.

Checks the status of one MCP review request the caller submitted, returning only the caller's own privacy-minimized state and never other requesters, evidence, or administrator rationale.

Finds servers already set up.

Returns a summary of one server in a named project.

Renames a fully set-up server.

Turns a server off so people stop being able to use it.

Turns a disabled server back on and republishes the plugins that already carry it.

Reads the stored network mode, visibility, and endpoint identifiers for one MCP server or gateway.

Creates or updates the address for one MCP server or gateway.

Changes network access for one MCP server or gateway to public_only, dual, or private_only.

Reports the organization's private network ingress: whether private networking is switched on, whether an ingress is configured and enabled, its latest observed status and private DNS name, and the one next action standing between the organization and private MCP access.

Lists the tools a project produces, with the function or API document each one came from.

Adds named tools to one exact MCP server, without disturbing the tools it already exposes.

Removes named tools from one exact MCP server, leaving the rest of its tools in place.

Reports whether a server is working from the last stored check.

Lists the safe next actions for a server that is not working, based on the last stored check.

Works out why a server is failing by combining the latest server-side check, its call outcomes against the organization baseline, and which apps reported failures.

Reports stored Okta Cross-App Access readiness for one project and MCP server, with the derived state and the exchange evidence behind it.

Shows the admission setting in force, the settings available, and any custom client ID metadata URLs the server allows.

Sets the admission mode to presets (known apps only), open (any app with a valid client ID metadata document), or disabled (apps fall back to dynamic client registration).

Lists the plugins in a project with how much each carries, who receives it, and whether it has been published.

Returns one plugin and its contents: its MCP servers, its skills with the version each is fixed to, and up to 100 current assignments.

Lists the roles and directory groups that can receive plugins in a project, each with a privacy-safe member count where available.

Returns non-secret, client-specific install guidance for one assigned plugin or one MCP server the caller may connect to.

Checks the caller's own current read and connection access to one exact MCP server, without creating an access challenge.

Checks the caller's own authorization state for one exact MCP server and returns the endpoint for reconnecting.

Adds a working server to an existing plugin so everyone the plugin is shared with receives it.

Removes a server from a plugin, undoing the distribution.

Replaces the complete set of roles and groups a plugin is assigned to.

Creates one empty plugin in a project.

Changes the display name of one exact plugin.

Requests a publish of a project's plugin packages now, for a plugin whose published package is stale, instead of waiting for the periodic refresh.

Removes one exact server membership from a plugin, including an entry added automatically.

Gives one assistant an agent and a workload identity, either a new agent or an existing agent of the same project.

Lists the skills in a project, newest change first, with the number of versions each has.

Reads one skill.

Lists a skill's versions, newest first.

Reviews privacy-minimized feedback and outcome trends for one skill, with aggregate counts and no user identifiers.

Reviews open proposed improvements to skills in a project, with rationale for each, without applying any suggestion.

Reviews the privacy-minimized feedback cited by one proposed skill change, without applying it.

Reports which of a project's skills are paying off: uses, sessions, the cost of those sessions, and, where sessions were scored, how well each skill did and how much time it saved.

Reports the same figures as list_skill_insights for one skill, broken down per version, newest first, including versions nobody used.

Creates a skill from complete SKILL.md content, up to 64 KiB.

Records a new version from complete replacement content.

Renames a skill or changes its display name and summary without changing its instructions.

Takes a proposed improvement from list_skill_suggestions, records it as the skill's new version, and closes the suggestion, as approving it in the dashboard does.

Discards a proposed improvement without changing the skill.

Lists which plugins carry which skills in a project, oldest first, with the version each distribution resolves to and whether it follows the skill's latest version or is pinned.

Gives a skill to one plugin or one assistant in the same project.

Takes a skill back from one plugin or one assistant so agents there stop loading it.

Summarizes observed skill activations for one project, with exact activation counts and privacy-suppressed user counts.

Lists masked people observed activating one skill, with short-lived references for a focused follow-up.

Confirms whether one person, by a reference from the usage list, was observed activating the same skill in the same window.

Lists the organization's roles and summarizes the MCP access each carries.

Shows which roles can enter one server and which known tools or behavior classes each can use.

Finds members by an identity query of at least three characters or by role.

Creates a custom role in one project with MCP access rules for servers in that project.

Adds or removes MCP access rules on a custom role while preserving every non-MCP grant.

Adds one custom role, confined to one server, to one member without removing the member's current roles.

Lists privacy-safe risk policy summaries in a project.

Reads one risk policy with its compatibility metadata.

Creates a standard or prompt-based risk policy in an explicit project.

Patches allowed fields on a risk policy.

Adds and removes exact user and role principals on one targeted policy in a single write, preserving unrelated grants and every policy setting.

Always refuses.

Lists risk exclusions in a project, optionally filtered by policy.

Creates an exclusion matched by exact value, rule ID, source, or entity type.

Enables or disables one exclusion without changing its definition.

Reports whether the Watchdog risk analysis is running for a project and when it last ran.

Reads rule-level Watchdog alerts grouped by rule, with affected users, affected apps, and one redacted sample per alert.

Lists individual findings in a project, newest message first, with every matched value reduced to a length and a hash fingerprint that never reaches the model.

Lists the chat sessions that carry live findings, each with a finding count, the latest detection time, and an organization-scoped user pseudonym.

Counts live findings per rule and detection source for one category over a detection-time window, defaulting to seven days and capped at 31.

Dismisses named findings in a project as reviewed false positives, moving them to the Dismissed tab.

Restores dismissed findings so they return to the active list, undoing the mark.

Finds reusable signals by name or slug in a project, before creating duplicates.

Finds project sensor summaries by name or slug, with matching expressions, signal counts, and configuration readiness.

Reads one exact sensor, its expanded signals, matching expression, and configuration readiness.

Validates a boolean matching expression and evaluates up to 20 caller-supplied role examples, without retrieving messages or running inference.

Creates a sensor with its inline signals and ordered memberships.

Creates a reusable signal that a sensor can reference.

Updates an existing sensor, preserving omitted fields and replacing supplied memberships.

Updates a shared signal, affecting every sensor that references it.

Summarizes how a project's MCP servers have behaved and what has failed over a window of 1h, 24h, 7d, or 30d.

Breaks a project's tool calls down by what they reached: hosted MCP servers, tunneled MCP servers, gateways, shadow MCP servers, local tools, and skills.

Breaks one server's calls down by tool and outcome over a window of up to 24h.

Returns one server's totals over a window of 1h, 24h, or 7d: call volume, failures, failure rate, average latency, and active users.

Lists one server's individual calls, newest first, each reduced to a reference to quote when escalating.

Summarizes observed public and private inbound requests and last-seen times for one MCP server or gateway over 24 hours or 7 days.

Lists the newest tool calls in one project over a window of 1h or 24h, filtered by an outcome of success, error, blocked, or pending.

Lists the people observed using one server, newest first, with masked identities, categorical activity and error evidence, and short-lived references for a focused follow-up.

Shows which tools one person, by a reference from the usage list, was observed using on one server and whether errors were observed.

Searches one project's tool calls across every MCP server over up to 30 days, newest first, narrowed by tool name, error text, outcome, one server, a person reference, or attribute filters found with list_attribute_keys.

Lists the attribute keys on a project's telemetry, split into the custom @-prefixed keys integrations attached and the system keys the platform recorded.

Finds people observed in a project's telemetry whose identity contains a partial email address or user id, over up to 30 days, most recently seen first.

Summarizes one person's activity across a project over up to 30 days, from a reference returned by search_users or list_mcp_usage_users: call volume, failures, failure rate, the servers their tools name, and their most-failing tools with exact counts.

Lists the newest Event Feed entries for the organization, defaulting to 20 from the last day and capped at 50.

Lists a project's chats active in a window of up to 30 days, newest activity first, as metadata only.

Describes the catalog: every dataset, its dimensions and measures, the time grains, and the query limits.

Lists the values one dimension of a dataset holds inside a time window, for choosing filter values before run_analytics_query.

Runs one grouped or ungrouped query against a dataset from describe_analytics_catalog, in catalog vocabulary.

Lists a project's Explore widgets, most recently updated first, with dataset, chart type, creator, version, and the dashboards each is on.

Reads one widget's full query, visualization, version, and the dashboards it is on.

Creates a widget or replaces every field of an existing one, validating the query and visualization before saving.

Copies a widget into a new one the caller owns, for building on a teammate's widget without changing their dashboards.

Deletes a widget, removing it from every dashboard it was on.

Lists observed or requested targets in a project, with use counts, privacy-safe user counts, and review state.

Shows the evidence and review state for one target: aggregate tool declarations, gaps, advisory counts, and research coverage.

Records and enforces an allow or deny decision for one target.

Lists AI tools detected running on enrolled devices, with the gateway access decision for each: allowed, blocked, or unreviewed.

Lists the AI tools device agents probe for, including which were added by the organization and which are blockable at the gateway.

Lists the configured OTEL destinations and routes, either for one named project or across the organization when no project is named.

Creates one destination and one route for a project in a single transaction, sending product_telemetry, risk_findings, or tool_call_logs to an HTTP or HTTPS endpoint that carries no credentials, query parameters, or fragments.

Stops one data export route from sending data to its destination, leaving the route and destination configured so it can be resumed later.

Starts a paused data export route sending data to its destination again.

Lists the connected person's captured coding-agent sessions with titles, summaries, project, working directory, and last activity.

Renders a redacted handoff digest of one previous session so its work can continue in the current conversation.

Searches the reviewed provider setup guides and returns up to five cited excerpts with links to the full guide.

Reads one reviewed setup guide in full, by the URI the search returned.

Stores one short feedback report about the Platform MCP for the Speakeasy team, with a category and optional rating and note.

Records what one run of a Speakeasy workflow handled, for diagnostics while the workflow is new.