Tool catalog
Every MCP tool, grouped by what it does and the scope it needs.
The tools your client sees depend on your token's scope. The five read tools are available under both scopes; everything else needs full.
Read (both scopes)
| Tool | What it does |
|---|---|
query_knowledge_base | Ask the Knowledge Base a question; get a grounded answer with citations |
get_usage_stats | Lifetime conversation, query, and document counts |
get_recent_questions | Sample of worker questions over a date range (defaults to 30 days) |
list_prompt_cards | Read the mobile app's prompt-card categories and starter questions |
get_import_status | Check a file-import batch by batch_id |
Content management (full)
| Tool | What it does |
|---|---|
add_files | Upload documents (PDF, DOCX, XLSX, PPTX, TXT, MD; up to 20 files, 10 MB each) to the Knowledge Base. Async — the Admin is emailed when the batch finishes |
preview_prompt_card_edits | Validate a batch of Prompt Card edits and return a diff — no write |
apply_prompt_card_edits | Atomically apply a confirmed batch; English live immediately, es/fr/pt within ~30 s |
Prompt Card edits aren't worker-facing
preview_prompt_card_edits/apply_prompt_card_editswrite to the agent's configuration, not to worker inboxes, so they don't use the stage → confirm token model. Show the user the preview diff, then apply —apply_prompt_card_editsre-validates server-side regardless.
Worker-facing (full) — stage → confirm
These reach real people, so they use the two-call stage → confirm gate: stage_* returns a preview + single-use confirmation_token; the matching send_*/schedule_* call takes only that token.
| Tool | What it does |
|---|---|
resolve_message_recipients | Read-only preview of workers matching a name/role/location filter |
stage_alert / send_alert | Stage, then dispatch, a broadcast Alert |
stage_message / send_message | Stage, then dispatch, a targeted Message |
stage_scheduled_message / schedule_message | Stage, then queue, a future-dated Scheduled Reminder |
list_scheduled_messages | List pending Scheduled Reminders |
update_scheduled_message | Edit a pending Scheduled Reminder's content, time, or targeting |
cancel_scheduled_message | Cancel a pending Scheduled Reminder |
list_pending_user_questions | List worker questions awaiting an Admin reply |
reply_to_user_message | Reply to a worker question via the in-app Inbox (no token — server re-checks ownership and status) |
All worker-facing tools require an active agent; they're refused on a deactivated one (bot_not_active). Broadcast Alerts are capped at one per hour, shared across MCP, the REST API, and the email Virtual Operations Agent.
Related
- Safety: stage → confirm — the send gate + error reference.
- Token scopes — read vs full.
Updated about 1 hour ago

