Tools

The server exposes 176 tools over 27 resource families. Each one dispatches in-process to the /v1 endpoint that already implements the operation, so filters, validation, upsert matching and tenant isolation are exactly the REST API's — the tool is the endpoint. The exceptions, dashboards_schemas_get, dashboards_workspaces_list and dashboards_me, answer locally and are marked as such. Inside the organization, data lives in workspaces: every data tool takes an optional workspace_id.

How to read these pages

Every tool carries four facts, in this order:

dashboards_portal_users_resend_invite · destructive · resource portal-users · permission portal-users.update · POST /v1/portal_users/:id/resend

Field	Meaning
read / write / destructive	The annotation the MCP client reads. A destructive tool (deletes, suspends, closes, deactivates, sends an e-mail or invite) runs only after the user confirms in the form the server sends, on revision 2026-07-28; a client that cannot confirm gets confirmation_required.
resource	The resource family of the tool — what groups the tools in these docs.
permission	The dashboard permission the person who authorized the client must hold in the organization.
METHOD /path	The /v1 endpoint the tool dispatches to, to cross-reference with the API reference.

Common arguments

These appear across many tools and always mean the same thing.

Argument	Type	Description
page	integer	1-based page number. Default 1.
per_page	integer	Page size. Default 20, max 100.
sort_by	string	Sort column, snake_case. dashboards_schemas_get lists the accepted ones.
sort_order	asc | desc	Direction. A value that is not a direction is an error, not a silent desc.
fields	string[]	Columns to return. Omit for the whole resource; id always comes back.
filters	object	Additional filters, forwarded to the endpoint. Does not take pagination, sorting (page, per_page, sort_by, sort_order, limit, cursor, sort) or a filter the tool already names — pass those as named arguments; inside filters they are refused with VALIDATION_ERROR.
idempotency_key	string	Replay guard, sent as X-Idempotency-Key.
custom_metadata	object	Free-form JSON owned by you, echoed on every read and webhook.

The catalogue

Family	Tools	read	write	destructive
ai-usage — AI usage	1	1	0	0
api-keys — API keys	7	2	2	3
assets — Assets	7	3	3	1
audit-logs — Audit log	3	3	0	0
backups — Backups	7	3	1	3
data-purges — Data purge	2	2	0	0
entities — Entities	20	10	8	2
events — Events	2	2	0	0
exports — Exports	4	3	1	0
imports — Imports	3	2	0	1
integrations — Data sources	19	5	11	3
maintenance — Maintenance	1	0	0	1
notifications — Notifications	4	2	0	2
portal-builder — Portal builder	9	2	3	4
portal-custom-domains — Custom domains	5	2	1	2
portal-oauth-providers — Sign-in providers	5	1	2	2
portal-settings — Portal settings	7	2	3	2
portal-users — Portal users	11	4	2	5
rate-limits — Rate limits	1	1	0	0
roles — Team roles	6	2	3	1
settings — Organization and schemas	6	4	2	0
templates — E-mail templates	15	5	7	3
usage — Usage	1	1	0	0
users — Dashboard users	10	4	2	4
webhook-deliveries — Webhook deliveries	2	2	0	0
webhooks — Webhooks	9	3	2	4
workspaces — Workspaces	9	5	3	1

A tool you cannot run is not listed by tools/list at all. If one from this page is missing, see Authentication.