MuleSoft Platform MCP Server Tool Reference

MuleSoft Platform MCP Server exposes tools for managing APIs, agents, LLMs, MCP servers, governance strategies, policies, gateways, observability, and cost optimization across Anypoint Platform. Each tool accepts specific input parameters so assistants can search the portfolio, inspect resources, and apply changes on your behalf. Use these tools from your IDE or another MCP client to automate platform administration and surface operational insight.

See Get Started with MuleSoft Platform MCP Server for setup and authentication, including the Connected App scopes that map to each permission tier.

Command Summary

Category	Tool	Required Permission Scopes
Authentication	login	None
logout	None
Business Group & Org	get_business_group	read:organization
list_business_groups	read:organization
select_active_business_group	read:organization
select_active_environment	read:organization
select_active_provider	read:organization
API Management	list_apis	read:exchange
select_api_version	read:exchange
list_provider_gateways	read:organization, read:managedgateways
view_api_instance_details	read:exchange, read:api_configuration
view_api_instance_monitoring	view:monitoring, read:api_configuration
view_api_instance_policies	read:exchange, read:api_configuration, read:api_policies
view_api_version_details	read:exchange
view_api_version_instances	read:exchange, read:api_configuration
Policy Management	apply_policy_to_instance	read:exchange, read:api_configuration, read:api_policies, manage:api_policies
create_automated_policy_strategy	read:api_configuration, read:api_policies, manage:api_policies, read:exchange
delete_automated_policy_strategy	read:api_configuration, read:api_policies, manage:api_policies, read:exchange
fetch_automated_policy_template	read:exchange, read:api_configuration, read:api_policies
get_policy_template_form	read:exchange, read:api_policies
list_governance_strategies	view:ang_governance_profiles, read:exchange, read:api_policies
prepare_automated_policy_creation	read:exchange, read:api_configuration, read:api_policies
prepare_policy_creation	read:exchange, read:api_configuration, read:api_policies
Governance	check_guardrail_scope_targets	read:api_configuration, read:api_policies
check_policy_conformance	read:exchange, read:api_configuration, read:api_policies
create_guardrail	admin:ang_governance_profiles
delete_governance_strategy	admin:ang_governance_profiles, manage:exchange (when deleting customized ruleset asset versions)
fetch_governance_service_report	None
fetch_governance_services	None
fetch_guardrail_ruleset	read:api_configuration, read:api_policies
prepare_guardrail_creation	read:api_configuration, read:api_policies
view_api_version_governance_report	read:exchange
view_governance_report	None
Monitoring & Observability	fetch_monitoring_drill_down	view:monitoring, read:api_configuration; read:applications, read:servers (when querying those resource types)
fetch_monitoring_instance	view:monitoring, read:api_configuration; read:applications, read:servers (when querying those resource types)
fetch_monitoring_overview	view:monitoring, read:api_configuration; read:applications, read:servers (when querying those resource types)
show_observability_performance	view:monitoring, read:api_configuration; read:applications, read:servers (when querying those resource types)
Search & Discovery	fetch_service_facets	read:exchange
fetch_services	read:exchange
get_asset_lineage	read:exchange
get_data_asset_classification	read:exchange
search_assets_semantic	read:exchange
search_global_assets	read:exchange
search_global_content	read:exchange
search_portfolio_services	read:exchange
search_repository_knowledge	None
MCP Servers	get_mcp_server_state	read:exchange, read:api_configuration
get_provision_status	None
get_trusted_mcp_catalog	read:exchange
list_mcp_servers	read:exchange
provision_mcp_server	edit:exchange, read:organization, view:access_controls, manage:api_configuration, manage:api_policies, read:servers, manage:api_proxies
resume_provision_job	edit:exchange
update_mcp_server	edit:exchange, read:organization, view:access_controls, manage:api_configuration, manage:api_policies, read:servers, manage:api_proxies
view_mcp_server_details	read:exchange, read:api_configuration
Agents	list_agents	read:exchange
view_agent_details	read:exchange, read:api_configuration (when enriching deployed API-instance details)
LLMs	list_llms	read:exchange
view_llm_details	read:exchange, read:api_configuration
Cost Management	create_model_wallet	create:apis, read:api_configuration, manage:api_configuration, manage:api_policies
delete_model_wallet	create:apis, read:api_configuration, manage:api_configuration, manage:api_policies
edit_model_wallet	create:apis, read:api_configuration, manage:api_configuration, manage:api_policies
fetch_model_wallet_details	create:apis, read:api_configuration, manage:api_configuration, manage:api_policies
fetch_model_wallets	create:apis, read:api_configuration, manage:api_configuration, manage:api_policies
fetch_cost_instance_timeseries	view:monitoring, read:exchange, read:api_configuration, read:api_policies
fetch_cost_instances	view:monitoring, read:exchange, read:api_configuration, read:api_policies
fetch_cost_optimization_recommendations	view:monitoring, read:exchange, read:api_configuration, read:api_policies
fetch_cost_overview	view:monitoring, read:api_configuration
Omni Gateway	create_omni_gateway	read:organization, read:managedgateways, manage:managedgateways
get_omni_gateway_target_domains	None
get_omni_gateway_usage_report	read:organization, read:managedgateways
list_omni_gateway_environments	read:organization
list_omni_gateway_targets	read:organization, read:managedgateways
Scanners	create_scanner	manage:exchange
list_scanner_providers	manage:exchange
test_scanner_connection	manage:exchange
Secrets Manager	check_secret	read:secrets_metadata
describe_vault_auth_schema	manage:vault_integrations
edit_integration	read:vault_integrations, manage:vault_integrations
list_integration_secrets	read:vault_integrations, read:secrets_metadata
onboard_vault	manage:vault_integrations
search_secrets	read:secrets_metadata
test_integration_connection	read:vault_integrations, manage:vault_integrations

apply_policy_to_instance

Apply the selected policy to the target asset instance using the provided configuration data.

Parameter Description Required

Parameter	Description	Required
`api_instance_id`	API instance ID (string).	Yes
`asset_id`	Asset ID (string or null).	No
`asset_version`	Asset version (string or null).	No
`configuration_data`	Configuration data (PolicyConfigurationData or null).	No
`disabled`	Disabled (boolean or null).	No
`environment_id`	Environment ID (string).	Yes
`group_id`	Group ID (string or null).	No
`order`	Order (integer or null).	No
`organization_id`	Organization ID (string).	Yes
`pointcut_data`	Pointcut data (PolicyPointcutData or null).	No
`policy_template_id`	Policy template ID (string or null).	No

api_instance_id

API instance ID (string).

Yes

asset_id

Asset ID (string or null).

asset_version

Asset version (string or null).

configuration_data

Configuration data (PolicyConfigurationData or null).

disabled

Disabled (boolean or null).

environment_id

Environment ID (string).

Yes

group_id

Group ID (string or null).

order

Order (integer or null).

organization_id

Organization ID (string).

Yes

pointcut_data

Pointcut data (PolicyPointcutData or null).

policy_template_id

Policy template ID (string or null).

Example request

{
  "name": "apply_policy_to_instance",
  "arguments": {
    "organization_id": "<organization_id>",
    "environment_id": "<environment_id>",
    "api_instance_id": "<api_instance_id>"
  }
}

Example response

{
  "policyId": "p_4f8a91d2",
  "apiInstanceId": "16834521",
  "policyTemplateId": "client-id-enforcement",
  "assetId": "client-id-enforcement",
  "assetVersion": "1.3.3",
  "order": 1,
  "disabled": false,
  "status": "applied"
}

check_guardrail_scope_targets

Preview APIs matched by a guardrail scope filter.

Parameter Description Required

Parameter	Description	Required
`organization_id`	Organization ID (string or null).	No
`scope_filter`	Scope filter (string).	Yes

organization_id

Organization ID (string or null).

scope_filter

Scope filter (string).

Yes

Example request

{
  "name": "check_guardrail_scope_targets",
  "arguments": {
    "scope_filter": "apis:*"
  }
}

Example response

{
  "scopeFilter": "apis:*",
  "matchedCount": 47,
  "matches": [
    { "assetId": "orders-api", "assetVersion": "2.1.0", "name": "Orders API" },
    { "assetId": "payments-api", "assetVersion": "1.4.2", "name": "Payments API" },
    { "assetId": "customers-api", "assetVersion": "3.0.1", "name": "Customers API" }
  ],
  "truncated": true
}

check_policy_conformance

Convert the selected policy application payload to JSON-LD and print it in backend logs.

Parameter Description Required

Parameter	Description	Required
`api_instance_id`	API instance ID (string).	Yes
`asset_id`	Asset ID (string or null).	No
`asset_version`	Asset version (string or null).	No
`configuration_data`	Configuration data (PolicyConfigurationData or null).	No
`disabled`	Disabled (boolean or null).	No
`environment_id`	Environment ID (string).	Yes
`group_id`	Group ID (string or null).	No
`order`	Order (integer or null).	No
`organization_id`	Organization ID (string).	Yes
`pointcut_data`	Pointcut data (PolicyPointcutData or null).	No
`policy_template_id`	Policy template ID (string or null).	No

api_instance_id

API instance ID (string).

Yes

asset_id

Asset ID (string or null).

asset_version

Asset version (string or null).

configuration_data

Configuration data (PolicyConfigurationData or null).

disabled

Disabled (boolean or null).

environment_id

Environment ID (string).

Yes

group_id

Group ID (string or null).

order

Order (integer or null).

organization_id

Organization ID (string).

Yes

pointcut_data

Pointcut data (PolicyPointcutData or null).

policy_template_id

Policy template ID (string or null).

Example request

{
  "name": "check_policy_conformance",
  "arguments": {
    "organization_id": "<organization_id>",
    "environment_id": "<environment_id>",
    "api_instance_id": "<api_instance_id>"
  }
}

Example response

{
  "apiInstanceId": "16834521",
  "policyTemplateId": "client-id-enforcement",
  "conformant": true,
  "violations": [],
  "jsonLd": {
    "@context": "https://anypoint.mulesoft.com/governance/policy/v1",
    "@type": "PolicyApplication",
    "policy": "client-id-enforcement",
    "target": "16834521"
  }
}

check_secret

Verify that a secret exists and retrieve its non-sensitive metadata without exposing secret material.

Parameter Description Required

Parameter	Description	Required
`organization_id`	Anypoint organization ID. When omitted, the caller’s authenticated org is used.	No
`environment_id`	Target Anypoint environment ID. Required unless `environment_name` is provided.	No
`environment_name`	Human-readable environment name. Provide this or `environment_id`, not both.	No
`secret_group_name`	Human-readable name of the secret group (as returned by `list_secret_refs` in `secretGroupName`). Pair with `secret_name`.	No
`secret_name`	Human-readable name of the secret. Pair with `secret_group_name`.	No
`secret_group_id`	ID of the secret group. Pair with `secret_id`.	No
`secret_id`	ID of the secret. Pair with `secret_group_id`.	No

organization_id

Anypoint organization ID. When omitted, the caller’s authenticated org is used.

environment_id

Target Anypoint environment ID. Required unless environment_name is provided.

environment_name

Human-readable environment name. Provide this or environment_id, not both.

secret_group_name

Human-readable name of the secret group (as returned by list_secret_refs in secretGroupName). Pair with secret_name.

secret_name

Human-readable name of the secret. Pair with secret_group_name.

secret_group_id

ID of the secret group. Pair with secret_id.

secret_id

ID of the secret. Pair with secret_group_id.

You must provide either (secret_group_name and`secret_name`) or (secret_group_id and secret_id), not both. You must also provide either environment_id or environment_name.

Example request

{
  "name": "check_secret",
  "arguments": {
    "environment_name": "Production",
    "secret_group_name": "My Group",
    "secret_name": "my-api-key"
  }
}

Example response (exists)

{
  "tool": "check_secret",
  "organizationId": "org-uuid",
  "environmentId": "env-uuid",
  "environmentName": "Production",
  "exists": true,
  "name": "my-api-key",
  "type": "sharedSecret",
  "expirationDate": "2027-01-01",
  "lastModified": "2026-08-01T10:00:00Z"
}

Example response (not found)

{
  "tool": "check_secret",
  "organizationId": "org-uuid",
  "environmentId": "env-uuid",
  "exists": false,
  "error": "Secret 'my-api-key' not found in group 'My Group'."
}

create_automated_policy_strategy

Create a new automated-policy governance strategy from wizard inputs.

Parameter Description Required

Parameter	Description	Required
`allow_duplicated`	Allow duplicated (boolean).	No
`automated_policy_configuration`	Automated policy configuration (object or null).	No
`automated_policy_endpoint_type_groups`	Automated policy endpoint type groups (array or null).	No
`automated_policy_endpoint_type_mode`	Automated policy endpoint type mode (string).	No
`automated_policy_environment_id`	Automated policy environment ID (string or null).	No
`automated_policy_id`	Automated policy ID (string or null).	No
`automated_policy_runtime`	Automated policy runtime (string or null).	No
`automated_policy_runtime_range_from`	Automated policy runtime range from (string or null).	No
`automated_policy_runtime_range_to`	Automated policy runtime range to (string or null).	No
`description`	Description (string).	No
`name`	Name (string or null).	No
`organization_id`	Organization ID (string or null).	No
`scope_filter`	Scope filter (string or null).	No

allow_duplicated

Allow duplicated (boolean).

automated_policy_configuration

Automated policy configuration (object or null).

automated_policy_endpoint_type_groups

Automated policy endpoint type groups (array or null).

automated_policy_endpoint_type_mode

Automated policy endpoint type mode (string).

automated_policy_environment_id

Automated policy environment ID (string or null).

automated_policy_id

Automated policy ID (string or null).

automated_policy_runtime

Automated policy runtime (string or null).

automated_policy_runtime_range_from

Automated policy runtime range from (string or null).

automated_policy_runtime_range_to

Automated policy runtime range to (string or null).

description

Description (string).

name

Name (string or null).

organization_id

Organization ID (string or null).

scope_filter

Scope filter (string or null).

Example request

{
  "name": "create_automated_policy_strategy",
  "arguments": {
    "organization_id": "<organization_id>",
    "name": "Auto-apply rate limiting"
  }
}

Example response

{
  "strategyId": "strat_a91f2c4d",
  "strategyType": "automated-policy",
  "name": "Auto-apply rate limiting",
  "status": "active",
  "createdDate": "2026-05-07T14:32:18.412Z"
}

create_guardrail

Create a new guardrail strategy from wizard inputs.

Parameter Description Required

Parameter	Description	Required
`description`	Description (string).	No
`governance_target_type`	Governance target type (string).	No
`name`	Name (string or null).	No
`organization_id`	Organization ID (string or null).	No
`position`	Position (integer or null).	No
`rules`	Rules (array or null).	No
`rulesets`	Rulesets (array or null).	No
`schedule_config`	Schedule config (object or null).	No
`scope_condition_mode`	Scope condition mode (string).	No
`scope_conditions`	Scope conditions (array or null).	No
`scope_filter`	Scope filter (string or null).	No
`strategy_status`	Strategy status (string).	No
`strategy_type`	Strategy type (string).	No

description

Description (string).

governance_target_type

Governance target type (string).

name

Name (string or null).

organization_id

Organization ID (string or null).

position

Position (integer or null).

rules

Rules (array or null).

rulesets

Rulesets (array or null).

schedule_config

Schedule config (object or null).

scope_condition_mode

Scope condition mode (string).

scope_conditions

Scope conditions (array or null).

scope_filter

Scope filter (string or null).

strategy_status

Strategy status (string).

strategy_type

Strategy type (string).

Example request

{
  "name": "create_guardrail",
  "arguments": {
    "description": "",
    "governance_target_type": "service-assets",
    "name": "<name>"
  }
}

Example response

{
  "guardrailId": "gr_72bd1e3a",
  "name": "PII redaction in OpenAPI specs",
  "governanceTargetType": "service-assets",
  "scopeFilter": "apis:*",
  "rulesets": ["openapi-best-practices", "pii-redaction"],
  "status": "active",
  "createdDate": "2026-05-07T14:32:18.412Z"
}

create_model_wallet

Create a model wallet with budget allocation for a specific LLM model. Configures token budgets with a defined cadence and required JWT claims for access control.

Parameter Description Required

Parameter	Description	Required
`amount`	Token amount allocated for the wallet budget.	Yes
`cadence`	Budget replenishment period (for example, `weekly`, `monthly`).	Yes
`claims`	Required JWT claims that must match for budget grants (array or null).	No
`environment_id`	Environment ID to scope the wallet.	Yes
`model_id`	Model ID to associate with the wallet budget.	Yes
`organization_id`	Organization ID to scope the wallet.	Yes
`wallet_id`	Wallet name or ID.	Yes

amount

Token amount allocated for the wallet budget.

Yes

cadence

Budget replenishment period (for example, weekly, monthly).

Yes

claims

Required JWT claims that must match for budget grants (array or null).

environment_id

Environment ID to scope the wallet.

Yes

model_id

Model ID to associate with the wallet budget.

Yes

organization_id

Organization ID to scope the wallet.

Yes

wallet_id

Wallet name or ID.

Yes

Example request

{
  "name": "create_model_wallet",
  "arguments": {
    "organization_id": "<organization_id>",
    "environment_id": "<environment_id>",
    "wallet_id": "orders-team-wallet",
    "model_id": "<model_id>",
    "amount": 3,
    "cadence": "weekly",
    "claims": ["claim_abc123"]
  }
}

Example response

{
  "walletId": "orders-team-wallet",
  "organizationId": "68ef9520-24e9-4cf2-b2f5-620025690913",
  "environmentId": "e1f3b920-4c8a-11ee-be56-0242ac120002",
  "modelId": "claude-opus-4-7",
  "budget": {
    "amount": 3,
    "cadence": "weekly",
    "claims": ["claim_abc123"]
  },
  "status": "active",
  "createdDate": "2026-05-07T14:32:18.412Z"
}

create_omni_gateway

Launch the managed gateway creation wizard for the active MuleSoft provider. When fully configured, creates the gateway in Anypoint Platform.

Parameter Description Required

Parameter	Description	Required
`environment_id`	Environment ID (string or null).	No
`environment_name`	Environment name (string or null).	No
`environment_type`	Environment type (string or null).	No
`governance_override_warnings`	Governance override warnings (boolean).	No
`organization_id`	Organization ID (string or null).	No
`payload`	Payload (FlexGatewayCreatePayload or null).	No
`provider_id`	Provider ID (string or null).	No
`target_type`	Target type (string or null).	No

environment_id

Environment ID (string or null).

environment_name

Environment name (string or null).

environment_type

Environment type (string or null).

governance_override_warnings

Governance override warnings (boolean).

organization_id

Organization ID (string or null).

payload

Payload (FlexGatewayCreatePayload or null).

provider_id

Provider ID (string or null).

target_type

Target type (string or null).

Example request

{
  "name": "create_omni_gateway",
  "arguments": {
    "environment_id": "<environment_id>",
    "environment_name": "<environment_name>",
    "environment_type": "<environment_type>"
  }
}

Example response

{
  "gatewayId": "fg_8c4e92a1",
  "name": "prod-omni-gateway",
  "environmentId": "e1f3b920-4c8a-11ee-be56-0242ac120002",
  "targetType": "cloudhub2",
  "status": "creating",
  "ingressDomains": ["prod-omni-gateway.us-e1.cloudhub.io"],
  "createdDate": "2026-05-07T14:32:18.412Z"
}

create_scanner

Launch the scanner creation wizard to configure and create a new agent scanner. The wizard will guide you through provider selection, authentication, and configuration. On success, returns the created scanner details including scannerId. Pass organization_id when calling this tool. Call WITHOUT name/provider to display the interactive wizard.

Parameter Description Required

Parameter	Description	Required
`auth_fields`	Auth fields (ScannerAuthFields or null).	No
`auth_fields_alias`	Auth fields alias (ScannerAuthFields or null).	No
`auth_method`	Auth method (string or null).	No
`auth_method_alias`	Auth method alias (string or null).	No
`description`	Description (string).	No
`filters`	Filters (array or null).	No
`name`	Name (string or null).	No
`notifications`	Notifications (ScannerNotifications or null).	No
`organization_id`	Organization ID (string or null).	No
`owner_id`	Owner ID (string or null).	No
`provider`	Provider (string or null).	No
`schedule`	Schedule (ScannerSchedule or null).	No

auth_fields

Auth fields (ScannerAuthFields or null).

auth_fields_alias

Auth fields alias (ScannerAuthFields or null).

auth_method

Auth method (string or null).

auth_method_alias

Auth method alias (string or null).

description

Description (string).

filters

Filters (array or null).

name

Name (string or null).

notifications

Notifications (ScannerNotifications or null).

organization_id

Organization ID (string or null).

owner_id

Owner ID (string or null).

provider

Provider (string or null).

schedule

Schedule (ScannerSchedule or null).

Example request

{
  "name": "create_scanner",
  "arguments": {
    "auth_fields": {},
    "auth_fields_alias": {},
    "auth_method": "<auth_method>"
  }
}

Example response

{
  "scannerId": "sc_3d7a4f81",
  "name": "vertex-prod-scanner",
  "provider": "google-vertex",
  "authMethod": "service-account",
  "status": "active",
  "schedule": { "frequency": "daily", "hour": 2 },
  "createdDate": "2026-05-07T14:32:18.412Z"
}

delete_automated_policy_strategy

Delete one automated-policy governance strategy by strategy ID.

Parameter Description Required

Parameter	Description	Required
`organization_id`	Organization ID (string or null).	No
`strategy_id`	Strategy ID (string).	Yes

organization_id

Organization ID (string or null).

strategy_id

Strategy ID (string).

Yes

Example request

{
  "name": "delete_automated_policy_strategy",
  "arguments": {
    "strategy_id": "<strategy_id>"
  }
}

Example response

{
  "strategyId": "strat_a91f2c4d",
  "deleted": true
}

delete_governance_strategy

Delete one governance strategy by strategy id.

Parameter Description Required

Parameter	Description	Required
`organization_id`	Organization ID (string or null).	No
`strategy_id`	Strategy ID (string).	Yes

organization_id

Organization ID (string or null).

strategy_id

Strategy ID (string).

Yes

Example request

{
  "name": "delete_governance_strategy",
  "arguments": {
    "strategy_id": "<strategy_id>"
  }
}

Example response

{
  "strategyId": "gs_5e2f9a18",
  "deleted": true
}

delete_model_wallet

Delete a model wallet.

Parameter Description Required

Parameter	Description	Required
`environment_id`	Environment ID to scope the query.	Yes
`wallet_id`	Wallet ID.	Yes
`wallet_name`	Wallet name.	Yes

environment_id

Environment ID to scope the query.

Yes

wallet_id

Wallet ID.

Yes

wallet_name

Wallet name.

Yes

Example request

{
  "name": "delete_model_wallet",
  "arguments": {
    "wallet_name": "orders-team-wallet",
    "wallet_id": "<wallet_id>",
    "environment_id": "<environment_id>"
  }
}

Example response

{
  "walletId": "wlt_4f8a91d2",
  "walletName": "orders-team-wallet",
  "deleted": true
}

describe_vault_auth_schema

Discover supported vault providers and the credential fields required to onboard or edit a vault integration.

Parameter Description Required

Parameter	Description	Required
`organization_id`	Anypoint organization UUID. When omitted, the caller’s authenticated org is used.	No
`provider`	Vault provider to describe (`aws_secrets_manager`, `azure_key_vault`, `hashicorp_vault`). Omit along with `auth_method` to list all supported combinations.	No
`auth_method`	Authentication method to describe (for example, `azure_sp_secret`). Must be paired with `provider`; omit both to list all combinations.	No

organization_id

Anypoint organization UUID. When omitted, the caller’s authenticated org is used.

provider

Vault provider to describe (aws_secrets_manager, azure_key_vault, hashicorp_vault). Omit along with auth_method to list all supported combinations.

auth_method

Authentication method to describe (for example, azure_sp_secret). Must be paired with provider; omit both to list all combinations.

Example request (list all)

{
  "name": "describe_vault_auth_schema",
  "arguments": {}
}

Example response (list mode)

{
  "tool": "describe_vault_auth_schema",
  "organizationId": "org-uuid",
  "authMethods": [
    {
      "provider": "azure_key_vault",
      "authMethod": "azure_sp_secret",
      "enabled": true
    },
    {
      "provider": "aws_secrets_manager",
      "authMethod": "aws_static",
      "enabled": true
    }
  ],
  "message": "Choose a provider + authMethod, then call describe_vault_auth_schema again with both to see the exact fields required."
}

Example request (specific combination)

{
  "name": "describe_vault_auth_schema",
  "arguments": {
    "provider": "azure_key_vault",
    "auth_method": "azure_sp_secret"
  }
}

Example response (detail mode)

{
  "tool": "describe_vault_auth_schema",
  "organizationId": "org-uuid",
  "schema": {
    "provider": "azure_key_vault",
    "authMethod": "azure_sp_secret",
    "rawSecrets": [
      {
        "key": "azure.spSecret.clientSecret",
        "label": "Client Secret",
        "required": true,
        "type": "password"
      }
    ],
    "connectionConfig": [
      {
        "key": "azure.spSecret.clientId",
        "label": "Client ID",
        "required": true,
        "type": "text"
      },
      {
        "key": "azure.spSecret.tenantId",
        "label": "Tenant ID",
        "required": true,
        "type": "text"
      }
    ]
  }
}

edit_integration

Modify an existing vault integration’s configuration. Validates edited credentials and performs a connectivity test before saving.

Parameter Description Required

Parameter	Description	Required
`organization_id`	Anypoint organization ID. When omitted, the caller’s authenticated org is used.	No
`environment_id`	Target environment ID. Required unless `environment_name` is provided.	No
`environment_name`	Human-readable environment name. Provide this or `environment_id`, not both.	No
`integration_name`	Human-readable name of the vault integration. Provide this or `integration_id`, not both.	No
`integration_id`	UUID of the vault integration. Provide this or `integration_name`, not both.	No
`description`	New description (max 512 characters).	No
`sync_enabled`	Enable or disable automatic sync (reference-based integrations only).	No
`raw_secrets`	Updated credential values (managed integrations only).	No
`connection_config`	Updated non-secret configuration (managed integrations only).	No
`credential_refs`	Updated credential references (reference-based integrations only).	No

organization_id

Anypoint organization ID. When omitted, the caller’s authenticated org is used.

environment_id

Target environment ID. Required unless environment_name is provided.

environment_name

Human-readable environment name. Provide this or environment_id, not both.

integration_name

Human-readable name of the vault integration. Provide this or integration_id, not both.

integration_id

UUID of the vault integration. Provide this or integration_name, not both.

description

New description (max 512 characters).

sync_enabled

Enable or disable automatic sync (reference-based integrations only).

raw_secrets

Updated credential values (managed integrations only).

connection_config

Updated non-secret configuration (managed integrations only).

credential_refs

Updated credential references (reference-based integrations only).

You must provide either integration_name or integration_id. You must also provide either environment_id or environment_name.

Example request

{
  "name": "edit_integration",
  "arguments": {
    "environment_name": "Production",
    "integration_name": "My Azure Vault",
    "description": "Updated description",
    "raw_secrets": {
      "azure.spSecret.clientSecret": "new-secret-value"
    }
  }
}

Example response

{
  "tool": "edit_integration",
  "organizationId": "org-uuid",
  "environmentId": "env-uuid",
  "environmentName": "Production",
  "changedFields": [
    "description",
    "rawSecrets"
  ],
  "integration": {
    "id": "integration-uuid",
    "name": "My Azure Vault",
    "description": "Updated description",
    "provider": "azure_key_vault",
    "authMethod": "azure_sp_secret",
    "managed": true,
    "version": 2,
    "vaultUrl": "https://my-vault.vault.azure.net"
  }
}

edit_model_wallet

Edit an existing model wallet configuration. Updates wallet properties such as the client name for a given wallet and environment.

Parameter Description Required

Parameter	Description	Required
`environment_id`	Environment ID to scope the query.	Yes
`wallet_id`	Wallet name or ID.	Yes

environment_id

Environment ID to scope the query.

Yes

wallet_id

Wallet name or ID.

Yes

Example request

{
  "name": "edit_model_wallet",
  "arguments": {
    "wallet_id": "orders-team-wallet",
    "environment_id": "<environment_id>"
  }
}

Example response

{
  "walletId": "orders-team-wallet",
  "environmentId": "e1f3b920-4c8a-11ee-be56-0242ac120002",
  "name": "orders-team-wallet-v2",
  "status": "active",
  "updatedDate": "2026-05-07T14:32:18.412Z"
}

fetch_automated_policy_template

Fetch one policy template by templateId for configuration details.

Parameter Description Required

Parameter	Description	Required
`organization_id`	Organization ID (string or null).	No
`template_id`	Template ID (string).	Yes

organization_id

Organization ID (string or null).

template_id

Template ID (string).

Yes

Example request

{
  "name": "fetch_automated_policy_template",
  "arguments": {
    "template_id": "<template_id>"
  }
}

Example response

{
  "templateId": "rate-limiting",
  "name": "Rate Limiting",
  "category": "Quality of Service",
  "version": "1.4.0",
  "groupId": "68ef9520-24e9-4cf2-b2f5-620025690913",
  "configurationSchema": {
    "type": "object",
    "properties": {
      "rateLimits": { "type": "array" },
      "exposeHeaders": { "type": "boolean" }
    }
  }
}

fetch_cost_instance_timeseries

Get token usage and response time timeseries for a single instance. This is the only tool that returns an agent timeseries.

Parameter Description Required

Parameter	Description	Required
`category`	Scope of the series. Defaults to `mcp`. Supported values: `mcp` — an MCP server instance; `instance_id` is the API Manager instance ID; buckets carry `totalTokens`, `tokenDelta`, and `avgResponseTimeMs`. `agent` — a single agent (LLM proxy); `instance_id` is the agent’s ID (`agentId` or `llmProxyId` from `fetch_cost_instances(category='agent')`); buckets carry token counts and `avgResponseTimeMs` (no per-bucket dollar figures).	No
`instance_id`	Instance ID to query. For `mcp`, the API Manager instance ID. For `agent`, the `agentId` or `llmProxyId` returned by `fetch_cost_instances(category='agent')`.	Yes
`organization_id`	Organization ID (string).	Yes
`time_range`	Time window for the timeseries. Supported values: `1h`, `6h`, `24h`, `7d`, `30d`. Defaults to `24h`.	No

category

Scope of the series. Defaults to mcp. Supported values: mcp — an MCP server instance; instance_id is the API Manager instance ID; buckets carry totalTokens, tokenDelta, and avgResponseTimeMs. agent — a single agent (LLM proxy); instance_id is the agent’s ID (agentId or llmProxyId from fetch_cost_instances(category='agent')); buckets carry token counts and avgResponseTimeMs (no per-bucket dollar figures).

instance_id

Instance ID to query. For mcp, the API Manager instance ID. For agent, the agentId or llmProxyId returned by fetch_cost_instances(category='agent').

Yes

organization_id

Organization ID (string).

Yes

time_range

Time window for the timeseries. Supported values: 1h, 6h, 24h, 7d, 30d. Defaults to 24h.

Example request

{
  "name": "fetch_cost_instance_timeseries",
  "arguments": {
    "organization_id": "<organization_id>",
    "instance_id": "<instance_id>"
  }
}

Example response

{
  "instanceId": "16834521",
  "timeRange": "7d",
  "buckets": [
    { "timestamp": "2026-04-30T00:00:00Z", "totalTokens": 142318, "tokenDelta": 21405, "avgResponseTimeMs": 312 },
    { "timestamp": "2026-05-01T00:00:00Z", "totalTokens": 158902, "tokenDelta": 24817, "avgResponseTimeMs": 298 },
    { "timestamp": "2026-05-02T00:00:00Z", "totalTokens": 134210, "tokenDelta": 19503, "avgResponseTimeMs": 305 }
  ]
}

fetch_cost_instances

Get per-instance token usage and optimization coverage across MCP servers and agents. To optimize an MCP instance, pass its unappliedCostPolicyIds to prepare_policy_creation.

Parameter Description Required

Parameter	Description	Required
`category`	Scope of the query. Defaults to `mcp`. Supported values: `mcp` returns per-MCP-server-instance token usage with optimization coverage (includes `totalTokens`, `tokenDelta`, `avgResponseTimeMs`, `toolsListTokens`, `toolsCallTokens`, `appliedCostPolicyIds`, `unappliedCostPolicyIds`, and `optimizationCoverage`). `agent` returns per-agent LLM-proxy spend and savings in dollars (not token estimates). Dollar figures depend on cost data being available for the org (the response carries `costDataAvailable`). When `false`, spend and saved are zeroed placeholders. `filter_unoptimized` and `sort_by` do not apply to the agent scope.	No
`filter_unoptimized`	Set to `true` to return only instances that have unapplied cost policies (`unappliedCostPolicyIds` not empty). Use this to find optimization candidates quickly. Defaults to `false`. Applies to `mcp` category only.	No
`organization_id`	Organization ID to query for per-instance usage and optimization coverage.	Yes
`sort_by`	Sort field for results. Supported values: `totalTokens`, `tokenDelta`, `avgResponseTimeMs`, `totalCalls`, `tokensPerCall`. Defaults to `totalTokens`. Applies to `mcp` category only.	No
`time_range`	Time window for usage analysis. Supported values: `1h`, `6h`, `24h`, `7d`, `30d`. Defaults to `30d`.	No
`top_n`	Maximum number of instances to return. Defaults to `10`; maximum is `50`.	No

category

Scope of the query. Defaults to mcp. Supported values: mcp returns per-MCP-server-instance token usage with optimization coverage (includes totalTokens, tokenDelta, avgResponseTimeMs, toolsListTokens, toolsCallTokens, appliedCostPolicyIds, unappliedCostPolicyIds, and optimizationCoverage). agent returns per-agent LLM-proxy spend and savings in dollars (not token estimates). Dollar figures depend on cost data being available for the org (the response carries costDataAvailable). When false, spend and saved are zeroed placeholders. filter_unoptimized and sort_by do not apply to the agent scope.

filter_unoptimized

Set to true to return only instances that have unapplied cost policies (unappliedCostPolicyIds not empty). Use this to find optimization candidates quickly. Defaults to false. Applies to mcp category only.

organization_id

Organization ID to query for per-instance usage and optimization coverage.

Yes

sort_by

Sort field for results. Supported values: totalTokens, tokenDelta, avgResponseTimeMs, totalCalls, tokensPerCall. Defaults to totalTokens. Applies to mcp category only.

time_range

Time window for usage analysis. Supported values: 1h, 6h, 24h, 7d, 30d. Defaults to 30d.

top_n

Maximum number of instances to return. Defaults to 10; maximum is 50.

Example request

{
  "name": "fetch_cost_instances",
  "arguments": {
    "organization_id": "<organization_id>"
  }
}

Example response

{
  "instances": [
    {
      "instanceId": "16834521",
      "instanceName": "orders-mcp-prod",
      "assetId": "orders-mcp-server",
      "environmentId": "e1f3b920-4c8a-11ee-be56-0242ac120002",
      "totalTokens": 4218903,
      "tokenDelta": 612418,
      "avgResponseTimeMs": 287,
      "totalCalls": 5142,
      "tokensPerCall": 820,
      "toolsListTokens": 1402189,
      "toolsCallTokens": 2816714,
      "appliedPolicies": ["client-id-enforcement"],
      "appliedCostPolicyIds": [],
      "unappliedCostPolicyIds": ["tool-output-truncation", "response-caching"],
      "optimizationCoverage": 0.0
    }
  ],
  "policyTemplates": {
    "tool-output-truncation": { "name": "Tool Output Truncation", "description": "Caps tool response token usage." },
    "response-caching": { "name": "Response Caching", "description": "Caches identical tool calls." }
  },
  "total": 18
}

fetch_cost_optimization_recommendations

Get a ranked list of instances with the highest projected token savings from unapplied cost policies.

Parameter Description Required

Parameter	Description	Required
`category`	Scope to rank. Defaults to `mcp`. Supported values: `mcp` — MCP server instances ranked by projected token savings from unapplied cost policies. `agent` — agent and LLM proxy scope. Currently returns an empty list because the upstream per-proxy rate source is not yet available.	No
`organization_id`	Organization ID to query for optimization recommendations.	Yes
`savings_pool_size`	Number of candidate instances to evaluate before ranking the final recommendations; increase this when you want broader coverage before taking the top results. Defaults to `10`.	No
`time_range`	Time window used to detect active instances and estimate projected token savings. Supported values: `1h`, `6h`, `24h`, `7d`, `30d`. Defaults to `30d`.	No
`top_n`	Maximum number of ranked recommendations to return. Defaults to `3`; maximum is `10`.	No

category

Scope to rank. Defaults to mcp. Supported values: mcp — MCP server instances ranked by projected token savings from unapplied cost policies. agent — agent and LLM proxy scope. Currently returns an empty list because the upstream per-proxy rate source is not yet available.

organization_id

Organization ID to query for optimization recommendations.

Yes

savings_pool_size

Number of candidate instances to evaluate before ranking the final recommendations; increase this when you want broader coverage before taking the top results. Defaults to 10.

time_range

Time window used to detect active instances and estimate projected token savings. Supported values: 1h, 6h, 24h, 7d, 30d. Defaults to 30d.

top_n

Maximum number of ranked recommendations to return. Defaults to 3; maximum is 10.

Example request

{
  "name": "fetch_cost_optimization_recommendations",
  "arguments": {
    "organization_id": "<organization_id>"
  }
}

Example response

{
  "recommendations": [
    {
      "instanceId": "16834521",
      "instanceName": "orders-mcp-prod",
      "serverName": "Orders MCP Server",
      "assetId": "orders-mcp-server",
      "environment": "production",
      "totalTokens": 4218903,
      "projectedTokensSaved": 1180294,
      "projectedSavingsPercent": 27.97,
      "unappliedCostPolicyIds": ["tool-output-truncation", "response-caching"],
      "perPolicyProjections": [
        { "policyId": "tool-output-truncation", "policyName": "Tool Output Truncation", "rate": 0.18, "tokensSaved": 759402 },
        { "policyId": "response-caching", "policyName": "Response Caching", "rate": 0.10, "tokensSaved": 420892 }
      ]
    }
  ],
  "savingsPoolSize": 3,
  "timeRange": "30d"
}

fetch_cost_overview

Get the org-wide cost summary: MCP server token KPIs (total tokens, saved tokens from optimization policies, and total tool calls) plus org-wide agent dollar cards (totalManagedSpend and agentAmountSaved). The dollar cards are populated only when cost data is available for the org (costDataAvailable=true). When unavailable, the cards are absent. Optionally includes token usage timeseries.

Parameter Description Required

Parameter	Description	Required
`include_timeseries`	Set to `true` to include token usage timeseries for charting; this increases response size. Defaults to `false`.	No
`organization_id`	Organization ID to query for org-wide MCP token KPIs and agent dollar cards.	Yes
`time_range`	Time window for KPI aggregation. Supported values: `1h`, `6h`, `24h`, `7d`, `30d`. Defaults to `30d`.	No

include_timeseries

Set to true to include token usage timeseries for charting; this increases response size. Defaults to false.

organization_id

Organization ID to query for org-wide MCP token KPIs and agent dollar cards.

Yes

time_range

Time window for KPI aggregation. Supported values: 1h, 6h, 24h, 7d, 30d. Defaults to 30d.

Example request

{
  "name": "fetch_cost_overview",
  "arguments": {
    "organization_id": "<organization_id>"
  }
}

Example response

{
  "timeRange": "30d",
  "kpis": {
    "totalTokens": 18472310,
    "savedTokens": 3214087,
    "totalToolCalls": 24158,
    "tokensPerCall": 765,
    "savingsPercent": 14.8
  },
  "timeseries": [
    { "timestamp": "2026-04-08T00:00:00Z", "totalTokens": 612430, "savedTokens": 98215 },
    { "timestamp": "2026-04-09T00:00:00Z", "totalTokens": 587102, "savedTokens": 104812 }
  ]
}

fetch_governance_service_report

Use this tool to get detailed governance conformance data for a single service.

Parameter Description Required

Parameter	Description	Required
`api_version`	Optional API version to scope the report when a service has multiple versions.	No
`include_rule_messages`	Set to `true` to include per-rule conformance messages in the response.	No
`organization_id`	Organization ID that owns the service.	Yes
`service_id`	Service ID to retrieve detailed governance conformance for.	Yes
`version`	Optional service version selector (legacy alias). Use when you need a specific version’s conformance view.	No

api_version

Optional API version to scope the report when a service has multiple versions.

include_rule_messages

Set to true to include per-rule conformance messages in the response.

organization_id

Organization ID that owns the service.

Yes

service_id

Service ID to retrieve detailed governance conformance for.

Yes

version

Optional service version selector (legacy alias). Use when you need a specific version’s conformance view.

Example request

{
  "name": "fetch_governance_service_report",
  "arguments": {
    "organization_id": "<organization_id>",
    "service_id": "<service_id>"
  }
}

Example response

{
  "service": {
    "serviceId": "orders-api",
    "name": "Orders API",
    "provider": "mulesoft",
    "version": "2.1.0",
    "conformanceStatus": "non-compliant"
  },
  "rulesets": [
    {
      "rulesetId": "openapi-best-practices",
      "name": "OpenAPI Best Practices",
      "errorCount": 2,
      "warningCount": 5,
      "infoCount": 1,
      "rules": [
        { "ruleId": "operation-success-response", "severity": "error", "message": "Operation 'POST /orders' is missing a 2xx response." }
      ]
    }
  ],
  "instanceConformance": [
    { "instanceId": "16834521", "environment": "production", "conformant": false }
  ]
}

fetch_governance_services

Use this tool to search, filter, and count governance conformance across services.

Parameter Description Required

Parameter	Description	Required
`concern_area_ids`	Filter to one or more concern area IDs (for example `security-privacy`, `consumption-economic-governance`, `structural-conformity-lifecycle`).	No
`conformance_status_in`	Filter to one or more conformance states. Canonical values: `compliant`, `non-compliant`, `pending`.	No
`include_rule_messages`	Set to `true` to include rule-level messages in each returned service row.	No
`include_rulesets`	Set to `true` to include violated ruleset details in each service row.	No
`limit`	Page size for results.	No
`min_errors`	Minimum error count threshold for matched services.	No
`min_infos`	Minimum info count threshold for matched services.	No
`min_warnings`	Minimum warning count threshold for matched services.	No
`offset`	Result offset for pagination.	No
`organization_id`	Organization ID to search for governance conformance data.	Yes
`provider_in`	Filter to one or more gateway/provider values. Canonical values include `mulesoft`, `kong`, `apigee`, `aws`, `azure`.	No
`q`	Free-text search across service metadata.	No
`ruleset_ids_in`	Filter to services associated with one or more ruleset IDs.	No
`service_ids`	Filter to specific service IDs.	No
`service_type_in`	Filter to one or more service types.	No

concern_area_ids

Filter to one or more concern area IDs (for example security-privacy, consumption-economic-governance, structural-conformity-lifecycle).

conformance_status_in

Filter to one or more conformance states. Canonical values: compliant, non-compliant, pending.

include_rule_messages

Set to true to include rule-level messages in each returned service row.

include_rulesets

Set to true to include violated ruleset details in each service row.

limit

Page size for results.

min_errors

Minimum error count threshold for matched services.

min_infos

Minimum info count threshold for matched services.

min_warnings

Minimum warning count threshold for matched services.

offset

Result offset for pagination.

organization_id

Organization ID to search for governance conformance data.

Yes

provider_in

Filter to one or more gateway/provider values. Canonical values include mulesoft, kong, apigee, aws, azure.

q

Free-text search across service metadata.

ruleset_ids_in

Filter to services associated with one or more ruleset IDs.

service_ids

Filter to specific service IDs.

service_type_in

Filter to one or more service types.

Example request

{
  "name": "fetch_governance_services",
  "arguments": {
    "organization_id": "<organization_id>"
  }
}

Example response

{
  "services": [
    {
      "serviceId": "orders-api",
      "name": "Orders API",
      "provider": "mulesoft",
      "serviceType": "rest-api",
      "conformanceStatus": "non-compliant",
      "errorCount": 2,
      "warningCount": 5,
      "violatedRulesets": ["openapi-best-practices"]
    },
    {
      "serviceId": "payments-api",
      "name": "Payments API",
      "provider": "mulesoft",
      "serviceType": "rest-api",
      "conformanceStatus": "compliant",
      "errorCount": 0,
      "warningCount": 0,
      "violatedRulesets": []
    }
  ],
  "totals": {
    "statusTotals": { "compliant": 38, "non-compliant": 9, "pending": 2 },
    "concernTotals": {
      "security-privacy": { "errorCount": 4, "warningCount": 11 },
      "structural-conformity-lifecycle": { "errorCount": 2, "warningCount": 5 }
    },
    "providerTotals": {
      "mulesoft": { "compliant": 32, "non-compliant": 7, "pending": 1 },
      "kong": { "compliant": 6, "non-compliant": 2, "pending": 1 }
    }
  },
  "total": 49,
  "limit": 25,
  "offset": 0
}

fetch_guardrail_ruleset

Fetch a guardrail ruleset payload by sourceRulesetKey.

Parameter Description Required

Parameter	Description	Required
`organization_id`	Organization ID (string or null).	No
`source_ruleset_key`	Source ruleset key (string).	Yes

organization_id

Organization ID (string or null).

source_ruleset_key

Source ruleset key (string).

Yes

Example request

{
  "name": "fetch_guardrail_ruleset",
  "arguments": {
    "source_ruleset_key": "<source_ruleset_key>"
  }
}

Example response

{
  "sourceRulesetKey": "openapi-best-practices",
  "name": "OpenAPI Best Practices",
  "version": "1.2.0",
  "rules": [
    { "ruleId": "operation-success-response", "severity": "error", "description": "Operations should declare a successful 2xx response." },
    { "ruleId": "operation-tag-defined", "severity": "warning", "description": "Operations should be tagged for grouping." }
  ]
}

fetch_model_wallet_details

Fetch model wallet details for a given wallet ID and environment.

Parameter Description Required

Parameter	Description	Required
`environment_id`	Environment ID to scope the query.	Yes
`wallet_id`	Wallet ID.	Yes
`wallet_name`	Wallet name.	Yes

environment_id

Environment ID to scope the query.

Yes

wallet_id

Wallet ID.

Yes

wallet_name

Wallet name.

Yes

Example request

{
  "name": "fetch_model_wallet_details",
  "arguments": {
    "wallet_name": "orders-team-wallet",
    "wallet_id": "<wallet_id>",
    "environment_id": "<environment_id>"
  }
}

Example response

{
  "walletId": "wlt_4f8a91d2",
  "walletName": "orders-team-wallet",
  "environmentId": "e1f3b920-4c8a-11ee-be56-0242ac120002",
  "modelId": "claude-opus-4-7",
  "budget": {
    "amount": 3,
    "cadence": "weekly",
    "claims": ["claim_abc123"]
  },
  "status": "active",
  "createdDate": "2026-04-12T08:21:43.000Z"
}

fetch_model_wallets

Fetch the list of model wallets for an environment.

Parameter Description Required

Parameter	Description	Required
`environment_id`	Environment ID to scope the query.	Yes

environment_id

Environment ID to scope the query.

Yes

Example request

{
  "name": "fetch_model_wallets",
  "arguments": {
    "environment_id": "<environment_id>"
  }
}

Example response

{
  "wallets": [
    {
      "walletId": "wlt_4f8a91d2",
      "walletName": "orders-team-wallet",
      "modelId": "claude-opus-4-7",
      "budget": { "amount": 3, "cadence": "weekly" },
      "status": "active"
    },
    {
      "walletId": "wlt_8c4e92a1",
      "walletName": "support-team-wallet",
      "modelId": "gpt-4-turbo",
      "budget": { "amount": 5, "cadence": "monthly" },
      "status": "active"
    }
  ],
  "total": 4
}

fetch_monitoring_drill_down

Use this tool to rank services or instances contributing to a specific performance metric (availability, reliability, avgLatency, requestVolume, errorRate, or policyViolations). Use this tool to answer queries such as, "Which services are driving errors?" or "Rank instances by latency."

Parameter Description Required

Parameter	Description	Required
`entity_type`	Optional entity category to rank. Supported values: `apis`, `agents`, `mcp-servers`, `llms`.	No
`environment`	Optional single environment filter (legacy convenience field).	No
`environments`	Optional list of environments to filter contributors by.	No
`instance_id`	Optional instance ID to narrow results to a single instance.	No
`limit`	Page size for ranked contributors.	No
`metric`	Metric used for ranking. Supported values: `availability`, `reliability`, `avgLatency`, `requestVolume`, `errorRate`, `policyViolations`.	Yes
`offset`	Result offset for pagination.	No
`organization_id`	Optional organization ID scope (required in multi-org contexts).	No
`providers`	Optional list of provider filters.	No
`search`	Free-text filter matching service, instance, or environment names.	No
`service_id`	Optional service ID to narrow the ranking to one service’s instances.	No
`sort_dir`	Sort direction for ranked results, typically `asc` or `desc`.	No
`sort_field`	Field to sort by in the drill-down result set.	No
`time_range`	Time window for metric calculation (for example `24h`).	No

entity_type

Optional entity category to rank. Supported values: apis, agents, mcp-servers, llms.

environment

Optional single environment filter (legacy convenience field).

environments

Optional list of environments to filter contributors by.

instance_id

Optional instance ID to narrow results to a single instance.

limit

Page size for ranked contributors.

metric

Metric used for ranking. Supported values: availability, reliability, avgLatency, requestVolume, errorRate, policyViolations.

Yes

offset

Result offset for pagination.

organization_id

Optional organization ID scope (required in multi-org contexts).

providers

Optional list of provider filters.

search

Free-text filter matching service, instance, or environment names.

service_id

Optional service ID to narrow the ranking to one service’s instances.

sort_dir

Sort direction for ranked results, typically asc or desc.

sort_field

Field to sort by in the drill-down result set.

time_range

Time window for metric calculation (for example 24h).

Example request

{
  "name": "fetch_monitoring_drill_down",
  "arguments": {
    "metric": "availability"
  }
}

Example response

{
  "metric": "availability",
  "rows": [
    { "serviceId": "orders-api", "instanceId": "16834521", "name": "Orders API", "environment": "production", "value": 99.92, "delta": -0.04 },
    { "serviceId": "payments-api", "instanceId": "16834522", "name": "Payments API", "environment": "production", "value": 99.81, "delta": 0.01 },
    { "serviceId": "customers-api", "instanceId": "16834523", "name": "Customers API", "environment": "production", "value": 99.43, "delta": -0.21 }
  ],
  "totalRows": 12,
  "offset": 0,
  "pageSize": 10
}

fetch_monitoring_instance

Use this tool to get monitoring data for a single API instance: time-series charts (requests, error rate, latency, policy violations), top endpoints by traffic, and top clients by traffic.

Parameter Description Required

Parameter	Description	Required
`api_version`	Optional API version selector for the target asset.	No
`asset_id`	API asset ID to retrieve instance monitoring for.	Yes
`asset_version`	Optional asset version selector.	No
`environment`	Target environment for monitoring data. Supported values: `production`, `sandbox`, `development`.	No
`instance_id`	Optional instance ID. If omitted, the first available instance is selected.	No
`organization_id`	Organization ID that owns the API asset and instance.	Yes
`time_range`	Time window for charts and summaries. Supported values: `1h`, `6h`, `24h`, `7d`, `30d`.	No

api_version

Optional API version selector for the target asset.

asset_id

API asset ID to retrieve instance monitoring for.

Yes

asset_version

Optional asset version selector.

environment

Target environment for monitoring data. Supported values: production, sandbox, development.

instance_id

Optional instance ID. If omitted, the first available instance is selected.

organization_id

Organization ID that owns the API asset and instance.

Yes

time_range

Time window for charts and summaries. Supported values: 1h, 6h, 24h, 7d, 30d.

Example request

{
  "name": "fetch_monitoring_instance",
  "arguments": {
    "organization_id": "<organization_id>",
    "asset_id": "<asset_id>"
  }
}

Example response

{
  "instanceId": "16834521",
  "assetId": "orders-api",
  "environment": "production",
  "timeRange": "24h",
  "charts": {
    "requests": [{ "timestamp": "2026-05-07T13:00:00Z", "value": 4218 }],
    "errorRate": [{ "timestamp": "2026-05-07T13:00:00Z", "value": 0.012 }],
    "avgLatency": [{ "timestamp": "2026-05-07T13:00:00Z", "value": 287 }],
    "policyViolations": [{ "timestamp": "2026-05-07T13:00:00Z", "value": 0 }]
  },
  "topEndpoints": [
    { "path": "/orders", "method": "POST", "requests": 18420 },
    { "path": "/orders/{id}", "method": "GET", "requests": 12508 }
  ],
  "topClients": [
    { "clientId": "c_4f8a91d2", "clientName": "checkout-web", "requests": 21408 }
  ]
}

fetch_monitoring_overview

Use this tool to get an org-wide monitoring health snapshot: total requests, error rate, average latency, availability, reliability, and compact trend charts.

Parameter Description Required

Parameter	Description	Required
`environment`	Environment scope for KPI and trend data. Supported values: `production`, `sandbox`, `development`.	No
`include_charts`	Set to `true` to include compact time-series chart data with the KPI summary.	No
`organization_id`	Organization ID to query for org-wide monitoring health metrics.	Yes
`provider`	Optional provider filter. Monitoring data is currently available for `mulesoft`; other canonical providers (`kong`, `apigee`, `aws`, `azure`) return empty results.	No
`time_range`	Time window for KPI and trend calculations. Supported values: `1h`, `6h`, `24h`, `7d`, `30d`.	No

environment

Environment scope for KPI and trend data. Supported values: production, sandbox, development.

include_charts

Set to true to include compact time-series chart data with the KPI summary.

organization_id

Organization ID to query for org-wide monitoring health metrics.

Yes

provider

Optional provider filter. Monitoring data is currently available for mulesoft; other canonical providers (kong, apigee, aws, azure) return empty results.

time_range

Time window for KPI and trend calculations. Supported values: 1h, 6h, 24h, 7d, 30d.

Example request

{
  "name": "fetch_monitoring_overview",
  "arguments": {
    "organization_id": "<organization_id>"
  }
}

Example response

{
  "environment": "production",
  "provider": "mulesoft",
  "timeRange": "7d",
  "kpis": {
    "totalRequests": 9128342,
    "errorRate": 0.018,
    "avgLatencyMs": 312,
    "availability": 99.87,
    "reliability": 99.41
  },
  "charts": {
    "requestVolume": [{ "timestamp": "2026-05-01T00:00:00Z", "value": 1284018 }],
    "errorRate": [{ "timestamp": "2026-05-01T00:00:00Z", "value": 0.021 }],
    "avgLatency": [{ "timestamp": "2026-05-01T00:00:00Z", "value": 305 }],
    "errorVolume": [{ "timestamp": "2026-05-01T00:00:00Z", "value": 26904 }]
  }
}

Use this tool when you need aggregate counts/buckets for summaries, dashboards, or filter panels, not full service-row hydration.

Parameter Description Required

Parameter	Description	Required
`aggregates`	Facet buckets/metrics to compute (for example `totalHits`, `byType`, `byProvider`). Use structured aggregate fields; do not send shorthand strings like `type,provider`.	No
`asset_types`	Optional typed asset filter. Canonical values include API classifiers (`rest-api`, `http-api`, `graphql`, `soap-api`, `grpc-api`, `evented-api`) plus `agent` and `mcp`.	No
`business_group_id`	Business group ID to scope the facet query.	Yes
`filters`	Optional structured typed filters. Do not combine with `q`.	No
`q`	Optional text query mode. When provided, do not send typed `filters` or `aggregates`.	No
`size`	Optional limit for returned facet buckets/results.	No

aggregates

Facet buckets/metrics to compute (for example totalHits, byType, byProvider). Use structured aggregate fields; do not send shorthand strings like type,provider.

asset_types

Optional typed asset filter. Canonical values include API classifiers (rest-api, http-api, graphql, soap-api, grpc-api, evented-api) plus agent and mcp.

business_group_id

Business group ID to scope the facet query.

Yes

filters

Optional structured typed filters. Do not combine with q.

q

Optional text query mode. When provided, do not send typed filters or aggregates.

size

Optional limit for returned facet buckets/results.

Example request

{
  "name": "fetch_service_facets",
  "arguments": {
    "business_group_id": "<business_group_id>"
  }
}

Example response

{
  "businessGroupId": "68ef9520-24e9-4cf2-b2f5-620025690913",
  "total": 142,
  "aggregates": {
    "byType": {
      "rest-api": 87,
      "graphql": 12,
      "soap-api": 18,
      "agent": 14,
      "mcp": 11
    },
    "byProvider": {
      "mulesoft": 118,
      "kong": 15,
      "apigee": 9
    },
    "byStatus": {
      "active": 128,
      "deprecated": 9,
      "draft": 5
    }
  }
}

fetch_services

Use this tool when you need concrete service rows (for example asset IDs/names, detail selection, or navigation affordances).

Parameter Description Required

Parameter	Description	Required
`aggregates`	Optional aggregate blocks to return alongside service rows (for example counts by type/provider). Use structured aggregate fields, not shorthand strings.	No
`asset_types`	Optional typed asset filter. Canonical values include API classifiers (`rest-api`, `http-api`, `graphql`, `soap-api`, `grpc-api`, `evented-api`) plus `agent` and `mcp`.	No
`business_group_id`	Business group ID to scope the service search.	Yes
`filters`	Optional structured typed filters. Do not combine with `q`.	No
`include_affordances`	Set to `true` to include navigation/action affordances in each service row.	No
`q`	Optional text query mode. When provided, do not send typed `filters` or `aggregates`.	No
`size`	Page size for returned service rows.	No

aggregates

Optional aggregate blocks to return alongside service rows (for example counts by type/provider). Use structured aggregate fields, not shorthand strings.

asset_types

Optional typed asset filter. Canonical values include API classifiers (rest-api, http-api, graphql, soap-api, grpc-api, evented-api) plus agent and mcp.

business_group_id

Business group ID to scope the service search.

Yes

filters

Optional structured typed filters. Do not combine with q.

include_affordances

Set to true to include navigation/action affordances in each service row.

q

Optional text query mode. When provided, do not send typed filters or aggregates.

size

Page size for returned service rows.

Example request

{
  "name": "fetch_services",
  "arguments": {
    "business_group_id": "<business_group_id>"
  }
}

Example response

{
  "businessGroupId": "68ef9520-24e9-4cf2-b2f5-620025690913",
  "total": 142,
  "services": [
    {
      "assetId": "orders-api",
      "name": "Orders API",
      "assetType": "rest-api",
      "provider": "mulesoft",
      "version": "2.1.0",
      "status": "active",
      "groupId": "68ef9520-24e9-4cf2-b2f5-620025690913",
      "links": { "self": "/exchange/api/v2/assets/orders-api/2.1.0" }
    },
    {
      "assetId": "payments-api",
      "name": "Payments API",
      "assetType": "rest-api",
      "provider": "mulesoft",
      "version": "1.4.2",
      "status": "active",
      "groupId": "68ef9520-24e9-4cf2-b2f5-620025690913",
      "links": { "self": "/exchange/api/v2/assets/payments-api/1.4.2" }
    }
  ]
}

get_asset_lineage

Get instance-rooted lineage, including design-time and runtime relationships, from the Context Catalog for an agent, MCP server, or API.

Parameter Description Required

Parameter	Description	Required
`asset`	Asset name or ID to resolve lineage for (string).	Yes
`asset_type`	Type of the root asset. Supported values: `agent`, `mcp`, `api`.	Yes
`asset_version`	Version of the asset. Defaults to the latest available (string or null).	No
`direction`	Traversal direction. Supported values: `upstream`, `downstream`. Downstream supports all three asset types; upstream supports `mcp` and `api` only.	Yes
`organization_id`	Organization ID to scope the lineage query. Defaults to the request-scoped active org (string or null).	No
`instance_id`	Deployed instance to get root lineage for. If omitted, the tool returns instance options for clarification (string or null).	No

asset

Asset name or ID to resolve lineage for (string).

Yes

asset_type

Type of the root asset. Supported values: agent, mcp, api.

Yes

asset_version

Version of the asset. Defaults to the latest available (string or null).

direction

Traversal direction. Supported values: upstream, downstream. Downstream supports all three asset types; upstream supports mcp and api only.

Yes

organization_id

Organization ID to scope the lineage query. Defaults to the request-scoped active org (string or null).

instance_id

Deployed instance to get root lineage for. If omitted, the tool returns instance options for clarification (string or null).

Example request

{
  "name": "get_asset_lineage",
  "arguments": {
    "asset": "fraud-detection-mcp",
    "asset_type": "mcp",
    "direction": "upstream"
  }
}

Example response

{
  "root": {
    "assetId": "fraud-detection-mcp",
    "assetType": "mcp",
    "version": "1.2.0",
    "instanceId": "i_7b3f9a12",
    "instanceLabel": "prod-us-east"
  },
  "direction": "upstream",
  "nodes": [
    {
      "assetId": "transactions-api",
      "assetType": "api",
      "version": "3.1.0",
      "instanceId": "i_4e8c2d67",
      "instanceLabel": "prod-transactions"
    },
    {
      "assetId": "customer-profiles-api",
      "assetType": "api",
      "version": "2.0.1",
      "instanceId": "i_9a1f5b83",
      "instanceLabel": "prod-profiles"
    }
  ],
  "edges": [
    {
      "from": "fraud-detection-mcp",
      "to": "transactions-api",
      "relationship": "consumes"
    },
    {
      "from": "fraud-detection-mcp",
      "to": "customer-profiles-api",
      "relationship": "consumes"
    }
  ],
  "totalNodes": 2
}

get_business_group

Get full metadata for a business group by its ID.

Parameter Description Required

Parameter	Description	Required
`group_id`	Group ID (string).	Yes

group_id

Group ID (string).

Yes

Example request

{
  "name": "get_business_group",
  "arguments": {
    "group_id": "<group_id>"
  }
}

Example response

{
  "id": "68ef9520-24e9-4cf2-b2f5-620025690913",
  "name": "Acme Corp",
  "parentId": null,
  "isMaster": true,
  "ownerId": "u-9f2a8c12",
  "subOrganizationIds": ["b21d4f88-1c5e-4a3d-9e7b-0a4c6b3e8d11"],
  "entitlements": {
    "vcoreProduction": 50,
    "vcoreSandbox": 10
  }
}

get_data_asset_classification

Get a data asset’s source-to-column hierarchy, classifications, descriptions, glossary terms, and explicit PII state. Use this tool to answer questions such as "What’s the PII classification for the customer_orders data source?" or "Is there any PII in the finance_reporting data catalog source?"

Parameter Description Required

Parameter	Description	Required
`asset`	Name or ID of a single data asset to resolve (string).	Yes
`organization_id`	Business-group org ID to search. Defaults to the request-scoped active org (string or null).	No
`asset_version`	Asset version to prefer when selecting a document. Defaults to the latest available (string or null).	No

asset

Name or ID of a single data asset to resolve (string).

Yes

organization_id

Business-group org ID to search. Defaults to the request-scoped active org (string or null).

asset_version

Asset version to prefer when selecting a document. Defaults to the latest available (string or null).

Example request

{
  "name": "get_data_asset_classification",
  "arguments": {
    "asset": "customer_orders"
  }
}

Example response

{
  "asset": "customer_orders",
  "assetVersion": "2.1.0",
  "organizationId": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
  "hierarchy": {
    "groupId": "com.example",
    "assetId": "customer_orders",
    "version": "2.1.0"
  },
  "classifications": [
    {
      "fieldName": "email_address",
      "classification": "PII",
      "sensitivity": "high",
      "category": "contact_info"
    },
    {
      "fieldName": "shipping_address",
      "classification": "PII",
      "sensitivity": "medium",
      "category": "contact_info"
    },
    {
      "fieldName": "order_total",
      "classification": "non-PII",
      "sensitivity": "low",
      "category": "transactional"
    }
  ],
  "containsPII": true,
  "totalFields": 12,
  "piiFieldCount": 2
}

get_mcp_server_state

Read the deployed state of a catalog-managed MCP server. Returns current systems, tools, and upstream IDs needed for editing.

Parameter Description Required

Parameter	Description	Required
`asset_id`	Asset ID (string).	Yes
`environment_id`	Environment ID (string).	Yes
`organization_id`	Organization ID (string).	Yes

asset_id

Asset ID (string).

Yes

environment_id

Environment ID (string).

Yes

organization_id

Organization ID (string).

Yes

Example request

{
  "name": "get_mcp_server_state",
  "arguments": {
    "organization_id": "<organization_id>",
    "environment_id": "<environment_id>",
    "asset_id": "<asset_id>"
  }
}

Example response

{
  "assetId": "orders-mcp-server",
  "apiId": 16834521,
  "serverName": "Orders MCP Server",
  "targetId": "fg_8c4e92a1",
  "targetName": "prod-omni-gateway",
  "basePath": "/mcp/orders",
  "deployedSystems": [
    {
      "systemId": "salesforce",
      "tools": ["query", "create-record", "update-record"],
      "upstreamId": "u_2f1a8e44"
    }
  ],
  "currentUpstreamIds": { "salesforce": "u_2f1a8e44" }
}

get_omni_gateway_target_domains

Get ingress domains and app unique id for a managed Omni Gateway target.

Parameter Description Required

Parameter	Description	Required
`environment_id`	Environment ID (string).	Yes
`organization_id`	Organization ID (string or null).	No
`provider_id`	Provider ID (string or null).	No
`target_id`	Target ID (string).	Yes

environment_id

Environment ID (string).

Yes

organization_id

Organization ID (string or null).

provider_id

Provider ID (string or null).

target_id

Target ID (string).

Yes

Example request

{
  "name": "get_omni_gateway_target_domains",
  "arguments": {
    "environment_id": "<environment_id>",
    "target_id": "<target_id>"
  }
}

Example response

{
  "targetId": "fg_8c4e92a1",
  "appUniqueId": "prod-omni-gateway-us-east-1",
  "ingressDomains": [
    "prod-omni-gateway.us-e1.cloudhub.io",
    "api.acme.com"
  ]
}

get_omni_gateway_usage_report

Get current managed Omni Gateway size entitlement usage.

Parameter Description Required

Parameter	Description	Required
`organization_id`	Organization ID (string or null).	No
`provider_id`	Provider ID (string or null).	No

organization_id

Organization ID (string or null).

provider_id

Provider ID (string or null).

Example request

{
  "name": "get_omni_gateway_usage_report",
  "arguments": {
    "organization_id": "<organization_id>",
    "provider_id": "<provider_id>"
  }
}

Example response

{
  "providerId": "p_mulesoft_default",
  "entitlements": {
    "totalSize": "Medium",
    "usedReplicas": 4,
    "totalReplicas": 10
  },
  "byEnvironment": [
    { "environmentId": "e1f3b920-4c8a-11ee-be56-0242ac120002", "name": "production", "replicas": 3 },
    { "environmentId": "e2a4c731-1f9b-4c20-9e43-7a8e22b14d09", "name": "sandbox", "replicas": 1 }
  ]
}

get_policy_template_form

Load one policy template detail, including configuration schema, to dynamically render the creation form. Use this immediately after the user selects a policy in prepare_policy_creation.

Parameter Description Required

Parameter	Description	Required
`api_instance_id`	API instance ID (string).	Yes
`asset_id`	Asset ID (string or null).	No
`asset_version`	Asset version (string or null).	No
`direction`	Direction (string).	No
`environment_id`	Environment ID (string).	Yes
`group_id`	Group ID (string or null).	No
`organization_id`	Organization ID (string).	Yes
`template_id`	Template ID (string or null).	No

api_instance_id

API instance ID (string).

Yes

asset_id

Asset ID (string or null).

asset_version

Asset version (string or null).

direction

Direction (string).

environment_id

Environment ID (string).

Yes

group_id

Group ID (string or null).

organization_id

Organization ID (string).

Yes

template_id

Template ID (string or null).

Example request

{
  "name": "get_policy_template_form",
  "arguments": {
    "organization_id": "<organization_id>",
    "environment_id": "<environment_id>",
    "api_instance_id": "<api_instance_id>"
  }
}

Example response

{
  "templateId": "rate-limiting",
  "name": "Rate Limiting",
  "version": "1.4.0",
  "groupId": "68ef9520-24e9-4cf2-b2f5-620025690913",
  "form": {
    "fields": [
      { "name": "rateLimits", "type": "array", "required": true, "label": "Rate Limits" },
      { "name": "exposeHeaders", "type": "boolean", "required": false, "label": "Expose Headers", "default": true }
    ]
  },
  "direction": "inbound"
}

get_provision_status

Poll the status of a provisioning or update job.

Parameter Description Required

Parameter	Description	Required
`job_id`	Job ID (string).	Yes
`organization_id`	Organization ID (string or null).	No

job_id

Job ID (string).

Yes

organization_id

Organization ID (string or null).

Example request

{
  "name": "get_provision_status",
  "arguments": {
    "job_id": "<job_id>",
    "organization_id": "<organization_id>"
  }
}

Example response

{
  "tool": "get_provision_status",
  "jobId": "job_a1b2c3d4",
  "status": "running",
  "currentStep": 2,
  "totalSteps": 3,
  "stepLabel": "deploying-omni-gateway",
  "error": null,
  "result": null,
  "failure": null
}

get_trusted_mcp_catalog

Return the catalog of SaaS systems available for MCP server provisioning. Each item includes tools, auth type, credential fields, and upstream config.

Parameter Description Required

Parameter	Description	Required
`organization_id`	Organization ID (string or null).	No

organization_id

Organization ID (string or null).

Example request

{
  "name": "get_trusted_mcp_catalog",
  "arguments": {
    "organization_id": "<organization_id>"
  }
}

Example response

{
  "catalog": [
    {
      "systemId": "salesforce",
      "name": "Salesforce",
      "authType": "oauth2",
      "credentialFields": ["clientId", "clientSecret", "instanceUrl"],
      "tools": ["query", "create-record", "update-record", "delete-record"]
    },
    {
      "systemId": "github",
      "name": "GitHub",
      "authType": "personal-access-token",
      "credentialFields": ["token"],
      "tools": ["list-repos", "get-file", "create-issue", "list-pull-requests"]
    }
  ]
}

list_agents

List agents registered in the Omni Platform for a given organization. Presents an interactive UI for browsing, filtering, and selecting agents.

Parameter Description Required

Parameter	Description	Required
`name`	Name (string or null).	No
`organization_id`	Organization ID (string or null).	No
`provider`	Provider (string or null).	No

name

Name (string or null).

organization_id

Organization ID (string or null).

provider

Provider (string or null).

Example request

{
  "name": "list_agents",
  "arguments": {
    "name": "<name>",
    "organization_id": "<organization_id>",
    "provider": "mulesoft"
  }
}

Example response

{
  "agents": [
    {
      "assetId": "invoice-approval-agent",
      "name": "Invoice Approval Agent",
      "version": "1.2.0",
      "provider": "mulesoft",
      "groupId": "68ef9520-24e9-4cf2-b2f5-620025690913",
      "description": "Routes invoices to approvers based on amount thresholds."
    },
    {
      "assetId": "support-triage-agent",
      "name": "Support Triage Agent",
      "version": "0.9.1",
      "provider": "mulesoft",
      "groupId": "68ef9520-24e9-4cf2-b2f5-620025690913",
      "description": "Classifies incoming support tickets."
    }
  ],
  "total": 14
}

list_apis

List APIs from the Omni Platform catalog for a given organization. Presents an interactive UI for browsing, filtering, and selecting APIs.

Parameter Description Required

Parameter	Description	Required
`api_category`	API category (string or null).	No
`name`	Name (string or null).	No
`organization_id`	Organization ID (string or null).	No
`provider`	Provider (string or null).	No

api_category

API category (string or null).

name

Name (string or null).

organization_id

Organization ID (string or null).

provider

Provider (string or null).

Example request

{
  "name": "list_apis",
  "arguments": {
    "api_category": "<api_category>",
    "name": "<name>",
    "organization_id": "<organization_id>"
  }
}

Example response

{
  "apis": [
    {
      "assetId": "orders-api",
      "name": "Orders API",
      "apiCategory": "Commerce",
      "version": "2.1.0",
      "provider": "mulesoft",
      "groupId": "68ef9520-24e9-4cf2-b2f5-620025690913"
    },
    {
      "assetId": "payments-api",
      "name": "Payments API",
      "apiCategory": "Commerce",
      "version": "1.4.2",
      "provider": "mulesoft",
      "groupId": "68ef9520-24e9-4cf2-b2f5-620025690913"
    }
  ],
  "total": 87
}

list_business_groups

List available business groups, optionally filtering by name.

Parameter Description Required

Parameter	Description	Required
`name`	Name (string or null).	No

name

Name (string or null).

Example request

{
  "name": "list_business_groups",
  "arguments": {
    "name": "<name>"
  }
}

Example response

{
  "businessGroups": [
    {
      "id": "68ef9520-24e9-4cf2-b2f5-620025690913",
      "name": "Acme Corp",
      "parentId": null,
      "isMaster": true
    },
    {
      "id": "b21d4f88-1c5e-4a3d-9e7b-0a4c6b3e8d11",
      "name": "Acme Payments Division",
      "parentId": "68ef9520-24e9-4cf2-b2f5-620025690913",
      "isMaster": false
    }
  ],
  "total": 2
}

list_governance_strategies

List governance strategies for an organization. Shows the same searchable and filterable table style as the main web app.

Parameter Description Required

Parameter	Description	Required
`organization_id`	Organization ID (string or null).	No
`strategy_type`	Strategy type (string or null).	No

organization_id

Organization ID (string or null).

strategy_type

Strategy type (string or null).

Example request

{
  "name": "list_governance_strategies",
  "arguments": {
    "organization_id": "<organization_id>",
    "strategy_type": "<strategy_type>"
  }
}

Example response

{
  "strategies": [
    {
      "strategyId": "strat_a91f2c4d",
      "name": "Auto-apply rate limiting",
      "strategyType": "automated-policy",
      "status": "active",
      "scopeFilter": "apis:*",
      "createdDate": "2026-04-12T08:21:43.000Z"
    },
    {
      "strategyId": "gs_5e2f9a18",
      "name": "PII redaction guardrail",
      "strategyType": "guardrail",
      "status": "active",
      "scopeFilter": "apis:tags:public",
      "createdDate": "2026-03-28T11:09:22.000Z"
    }
  ],
  "total": 6
}

list_integration_secrets

List all secret references discovered by a specific vault integration, showing metadata only.

Parameter Description Required

Parameter	Description	Required
`organization_id`	Anypoint organization ID. When omitted, the caller’s authenticated org is used.	No
`environment_id`	Target environment ID. Required unless `environment_name` is provided.	No
`environment_name`	Human-readable environment name. Provide this or `environment_id`, not both.	No
`integration_name`	Human-readable name of the vault integration. Provide this or `integration_id`, not both.	No
`integration_id`	UUID of the vault integration. Provide this or `integration_name`, not both.	No
`offset`	Zero-based pagination offset. Default: `0`.	No
`limit`	Maximum number of items to return. Default: `10`.	No

organization_id

Anypoint organization ID. When omitted, the caller’s authenticated org is used.

environment_id

Target environment ID. Required unless environment_name is provided.

environment_name

Human-readable environment name. Provide this or environment_id, not both.

integration_name

Human-readable name of the vault integration. Provide this or integration_id, not both.

integration_id

UUID of the vault integration. Provide this or integration_name, not both.

offset

Zero-based pagination offset. Default: 0.

limit

Maximum number of items to return. Default: 10.

You must provide either integration_name or integration_id. You must also provide either environment_id or environment_name.

Example request

{
  "name": "list_integration_secrets",
  "arguments": {
    "environment_name": "Production",
    "integration_name": "My Azure Vault",
    "offset": 0,
    "limit": 10
  }
}

Example response

{
  "tool": "list_integration_secrets",
  "organizationId": "org-uuid",
  "environmentId": "env-uuid",
  "environmentName": "Production",
  "integrationId": "integration-uuid",
  "items": [
    {
      "name": "db-password",
      "type": "sharedSecret",
      "secretGroupName": "",
      "expirationDate": "2027-06-01"
    },
    {
      "name": "api-token",
      "type": "sharedSecret",
      "secretGroupName": "",
      "expirationDate": ""
    }
  ],
  "offset": 0,
  "limit": 10,
  "returned": 2,
  "total": 2,
  "has_more": false,
  "next_offset": null
}

list_llms

List LLM models registered in the Omni Platform for a given organization. Presents an interactive UI for browsing, filtering, and selecting LLMs.

Parameter Description Required

Parameter	Description	Required
`category`	Category (string or null).	No
`name`	Name (string or null).	No
`organization_id`	Organization ID (string or null).	No
`provider`	Provider (string or null).	No

category

Category (string or null).

name

Name (string or null).

organization_id

Organization ID (string or null).

provider

Provider (string or null).

Example request

{
  "name": "list_llms",
  "arguments": {
    "category": "<category>",
    "name": "<name>",
    "organization_id": "<organization_id>"
  }
}

Example response

{
  "llms": [
    {
      "assetId": "claude-opus-4-7",
      "name": "Claude Opus 4.7",
      "category": "general-purpose",
      "provider": "anthropic",
      "version": "1.0.0",
      "groupId": "68ef9520-24e9-4cf2-b2f5-620025690913"
    },
    {
      "assetId": "gpt-4-turbo",
      "name": "GPT-4 Turbo",
      "category": "general-purpose",
      "provider": "openai",
      "version": "1.0.0",
      "groupId": "68ef9520-24e9-4cf2-b2f5-620025690913"
    }
  ],
  "total": 9
}

list_mcp_servers

List MCP servers registered in the Omni Platform for a given organization. Presents an interactive UI for browsing, filtering, and selecting MCP servers.

Parameter Description Required

Parameter	Description	Required
`name`	Name (string or null).	No
`organization_id`	Organization ID (string).	Yes
`protocol`	Protocol (string or null).	No

name

Name (string or null).

organization_id

Organization ID (string).

Yes

protocol

Protocol (string or null).

Example request

{
  "name": "list_mcp_servers",
  "arguments": {
    "organization_id": "<organization_id>"
  }
}

Example response

{
  "mcpServers": [
    {
      "assetId": "orders-mcp-server",
      "name": "Orders MCP Server",
      "protocol": "streamable-http",
      "version": "1.0.0",
      "groupId": "68ef9520-24e9-4cf2-b2f5-620025690913",
      "instances": 2
    },
    {
      "assetId": "salesforce-mcp-server",
      "name": "Salesforce MCP Server",
      "protocol": "streamable-http",
      "version": "1.2.1",
      "groupId": "68ef9520-24e9-4cf2-b2f5-620025690913",
      "instances": 3
    }
  ],
  "total": 11
}

list_omni_gateway_environments

List Anypoint environments available for managed Omni Gateway creation.

Parameter Description Required

organization_id

Organization ID (string or null).

provider_id

Provider ID (string or null).

Example request

{
  "name": "list_omni_gateway_environments",
  "arguments": {
    "organization_id": "<organization_id>",
    "provider_id": "<provider_id>"
  }
}

Example response

{
  "environments": [
    { "environmentId": "e1f3b920-4c8a-11ee-be56-0242ac120002", "name": "production", "type": "production", "isProduction": true },
    { "environmentId": "e2a4c731-1f9b-4c20-9e43-7a8e22b14d09", "name": "sandbox", "type": "sandbox", "isProduction": false },
    { "environmentId": "e3d2a811-7f5c-4983-89ce-a141f9120abc", "name": "development", "type": "design", "isProduction": false }
  ]
}

list_omni_gateway_targets

List managed Omni Gateway deployment targets for an environment.

Parameter Description Required

environment_id

Environment ID (string).

Yes

organization_id

Organization ID (string or null).

provider_id

Provider ID (string or null).

Example request

{
  "name": "list_omni_gateway_targets",
  "arguments": {
    "environment_id": "<environment_id>"
  }
}

Example response

{
  "targets": [
    {
      "targetId": "fg_8c4e92a1",
      "name": "prod-omni-gateway",
      "targetType": "cloudhub2",
      "status": "running",
      "ingressDomains": ["prod-omni-gateway.us-e1.cloudhub.io"],
      "environmentId": "e1f3b920-4c8a-11ee-be56-0242ac120002"
    }
  ]
}

list_provider_gateways

List gateways for the active provider. Currently returns Flex Gateways when the active provider is MuleSoft.

Parameter Description Required

organization_id

Organization ID (string or null).

provider_id

Provider ID (string or null).

Example request

{
  "name": "list_provider_gateways",
  "arguments": {
    "organization_id": "<organization_id>",
    "provider_id": "<provider_id>"
  }
}

Example response

{
  "providerId": "p_mulesoft_default",
  "gatewayType": "flex-gateway",
  "gateways": [
    {
      "gatewayId": "fg_8c4e92a1",
      "name": "prod-omni-gateway",
      "status": "running",
      "version": "1.9.2",
      "environmentId": "e1f3b920-4c8a-11ee-be56-0242ac120002"
    },
    {
      "gatewayId": "fg_2f1a8e44",
      "name": "sandbox-flex-gateway",
      "status": "running",
      "version": "1.9.2",
      "environmentId": "e2a4c731-1f9b-4c20-9e43-7a8e22b14d09"
    }
  ]
}

list_scanner_providers

Get the list of available scanner providers (Google Vertex, Microsoft Copilot, and others).

This tool does not accept any input parameters.

Example request

{
  "name": "list_scanner_providers",
  "arguments": {}
}

Example response

{
  "providers": [
    { "providerId": "google-vertex", "name": "Google Vertex AI", "authMethods": ["service-account", "oauth2"] },
    { "providerId": "microsoft-copilot", "name": "Microsoft Copilot", "authMethods": ["oauth2"] },
    { "providerId": "aws-bedrock", "name": "AWS Bedrock", "authMethods": ["iam-role", "access-key"] }
  ]
}

Authenticate with Omni Platform. MUST be called before any other tool.

Parameter Description Required

password

Password (string or null).

username

Username (string or null).

Example request

{
  "name": "login",
  "arguments": {
    "password": "<password>",
    "username": "<username>"
  }
}

Example response

{
  "authenticated": true,
  "userId": "u-9f2a8c12",
  "username": "alice@acme.com",
  "activeOrganizationId": "68ef9520-24e9-4cf2-b2f5-620025690913",
  "expiresAt": "2026-05-08T14:32:18.412Z"
}

logout

Clear the stored authentication token.

This tool does not accept any input parameters.

Example request

{
  "name": "logout",
  "arguments": {}
}

Example response

{
  "authenticated": false
}

onboard_vault

Register a new external vault provider integration using the managed raw-value flow. Validates credentials and performs a live connectivity test before saving.

Parameter Description Required

organization_id

Anypoint organization ID. When omitted, the caller’s authenticated org is used.

environment_id

Target environment ID. Required unless environment_name is provided.

environment_name

Human-readable environment name. Provide this or environment_id, not both.

name

Display name for the integration (3-64 characters).

Yes

provider

Vault provider. One of: aws_secrets_manager, azure_key_vault, hashicorp_vault.

Yes

auth_method

Authentication method for the provider (for example, aws_static, azure_sp_secret).

Yes

vault_url

Vault endpoint URL.

Yes

raw_secrets

Raw secret credential values keyed by the auth schema’s secret-field key.

Yes

connection_config

Non-secret connection configuration keyed by the auth schema’s config-field key.

description

Human-readable description (max 512 characters).

sync_interval_minutes

How often (minutes) to re-sync. Must be between 120 and 1440. Default: 120.

Example request

{
  "name": "onboard_vault",
  "arguments": {
    "environment_name": "Production",
    "name": "My Azure Vault",
    "provider": "azure_key_vault",
    "auth_method": "azure_sp_secret",
    "vault_url": "https://my-vault.vault.azure.net",
    "raw_secrets": { "azure.spSecret.clientSecret": "" },
    "connection_config": {
      "azure.spSecret.clientId": "",
      "azure.spSecret.tenantId": ""
    },
    "sync_interval_minutes": 120
  }
}

Example response (success)

{
  "tool": "onboard_vault",
  "organizationId": "org-uuid",
  "environmentId": "env-uuid",
  "environmentName": "Production",
  "created": true,
  "integration": {
    "id": "integration-uuid",
    "name": "My Azure Vault",
    "provider": "azure_key_vault",
    "authMethod": "azure_sp_secret",
    "vaultUrl": "https://my-vault.vault.azure.net",
    "managed": true,
    "version": 1,
    "healthStatus": "healthy",
    "syncIntervalMinutes": 120
  },
  "healthCheck": {
    "status": "connected",
    "permissions": {
      "canList": true,
      "canDescribe": true,
      "canGetValue": true
    },
    "latencyMs": 245
  }
}

Example response (connection failed)

{
  "tool": "onboard_vault",
  "organizationId": "org-uuid",
  "created": false,
  "connected": false,
  "reachable": true,
  "missingPermissions": [
    "canDescribe"
  ],
  "error": "Connection test failed. Integration was NOT saved. Reason: the vault credential is reachable but lacks required permission(s): canDescribe."
}

prepare_automated_policy_creation

Open the automated-policy creation wizard with scope options and policy templates.

Parameter Description Required

organization_id

Organization ID (string or null).

Example request

{
  "name": "prepare_automated_policy_creation",
  "arguments": {
    "organization_id": "<organization_id>"
  }
}

Example response

{
  "scopeOptions": [
    { "scopeFilter": "apis:*", "label": "All APIs" },
    { "scopeFilter": "apis:tags:public", "label": "APIs tagged public" }
  ],
  "policyTemplates": [
    { "templateId": "rate-limiting", "name": "Rate Limiting", "category": "Quality of Service" },
    { "templateId": "client-id-enforcement", "name": "Client ID Enforcement", "category": "Security" },
    { "templateId": "jwt-validation", "name": "JWT Validation", "category": "Security" }
  ]
}

prepare_guardrail_creation

Open the guardrail creation wizard with scope options and guardrail rule catalog data, using the same scope, selection, and naming flow as the web app.

Parameter Description Required

organization_id

Organization ID (string or null).

Example request

{
  "name": "prepare_guardrail_creation",
  "arguments": {
    "organization_id": "<organization_id>"
  }
}

Example response

{
  "scopeOptions": [
    { "scopeFilter": "apis:*", "label": "All APIs" },
    { "scopeFilter": "apis:tags:public", "label": "APIs tagged public" }
  ],
  "rulesetCatalog": [
    { "rulesetId": "openapi-best-practices", "name": "OpenAPI Best Practices", "ruleCount": 24 },
    { "rulesetId": "pii-redaction", "name": "PII Redaction", "ruleCount": 8 },
    { "rulesetId": "owasp-api-top-10", "name": "OWASP API Top 10", "ruleCount": 10 }
  ]
}

prepare_policy_creation

Load policy options for one asset instance.

Parameter Description Required

api_instance_id

API instance ID (string or null).

asset_id

Asset ID (string or null).

environment_id

Environment ID (string or null).

organization_id

Organization ID (string).

Yes

policy_name_hint

Policy name hint (string or null).

Example request

{
  "name": "prepare_policy_creation",
  "arguments": {
    "organization_id": "<organization_id>"
  }
}

Example response

{
  "apiInstanceId": "16834521",
  "assetId": "orders-api",
  "assetVersion": "2.1.0",
  "groupId": "68ef9520-24e9-4cf2-b2f5-620025690913",
  "availablePolicies": [
    { "templateId": "rate-limiting", "assetId": "rate-limiting", "assetVersion": "1.4.0", "name": "Rate Limiting", "category": "Quality of Service" },
    { "templateId": "jwt-validation", "assetId": "jwt-validation", "assetVersion": "1.3.1", "name": "JWT Validation", "category": "Security" },
    { "templateId": "ip-allowlist", "assetId": "ip-allowlist", "assetVersion": "1.2.0", "name": "IP Allowlist", "category": "Security" }
  ]
}

provision_mcp_server

Provision a composite MCP server on Flex Gateway from selected catalog systems.

Parameter Description Required

base_path

Base path (string).

Yes

environment_id

Environment ID (string).

Yes

organization_id

Organization ID (string).

Yes

server_name

Server name (string).

Yes

servers

Servers (array).

Yes

target_id

Target ID (string).

Yes

target_name

Target name (string).

Yes

Example request

{
  "name": "provision_mcp_server",
  "arguments": {
    "organization_id": "<organization_id>",
    "environment_id": "<environment_id>",
    "server_name": "<server_name>",
    "target_id": "<target_id>",
    "target_name": "<target_name>",
    "base_path": "/<base_path>",check_guardrail_scope_targets
    "servers": [
      {}
    ]
  }
}

Example response

{
  "jobId": "job_a1b2c3d4",
  "status": "running",
  "serverName": "Orders MCP Server",
  "basePath": "/mcp/orders",
  "targetId": "fg_8c4e92a1",
  "estimatedDurationSeconds": 90
}

resume_provision_job

Resume a failed provisioning or update job from its last checkpoint. Only works on jobs with status 'failed' that have completed steps.

Parameter Description Required

job_id

Job ID (string).

Yes

organization_id

Organization ID (string or null).

Example request

{
  "name": "resume_provision_job",
  "arguments": {
    "job_id": "<job_id>",
    "organization_id": "<organization_id>"
  }
}

Example response

{
  "jobId": "job_a1b2c3d4",
  "status": "running",
  "resumedFromStep": "deploy-flex-gateway"
}

search_assets_semantic

Search portfolio assets using natural language semantic search. Use this when the user asks for assets related to a concept or use case, not just keyword matching. Examples: 'Find services for payment processing', 'Search for customer authentication services'. Returns asset names, descriptions, relevance scores, and types.

Parameter Description Required

asset_type

Asset type (string or null).

organization_id

Organization ID (string or null).

query

Query (string).

Yes

rows

Rows (integer).

Example request

{
  "name": "search_assets_semantic",
  "arguments": {
    "query": "payment processing"
  }
}

Example response

{
  "query": "payment processing",
  "results": [
    {
      "assetId": "payments-api",
      "name": "Payments API",
      "assetType": "rest-api",
      "description": "Handles credit card and ACH payment authorization and capture.",
      "relevanceScore": 0.94,
      "version": "1.4.2"
    },
    {
      "assetId": "stripe-mcp-server",
      "name": "Stripe MCP Server",
      "assetType": "mcp",
      "description": "Tools for Stripe charges, refunds, and customer management.",
      "relevanceScore": 0.87,
      "version": "0.5.0"
    }
  ],
  "total": 6
}

search_global_assets

Compatibility alias for global content search. Searches across agents, MCP servers, and APIs in one business group. You must pass exactly one business_group_id.

Parameter Description Required

business_group_id

Business group ID (string).

Yes

query

Query (string).

Yes

size

Size (integer).

Example request

{
  "name": "search_global_assets",
  "arguments": {
    "query": "payment processing",
    "business_group_id": "<business_group_id>"
  }
}

Example response

{
  "query": "payment processing",
  "businessGroupId": "68ef9520-24e9-4cf2-b2f5-620025690913",
  "results": [
    { "assetId": "payments-api", "name": "Payments API", "assetType": "rest-api", "relevanceScore": 0.94 },
    { "assetId": "stripe-mcp-server", "name": "Stripe MCP Server", "assetType": "mcp", "relevanceScore": 0.87 },
    { "assetId": "fraud-detection-agent", "name": "Fraud Detection Agent", "assetType": "agent", "relevanceScore": 0.71 }
  ],
  "total": 8
}

search_global_content

UI tool for embedded agents to search content across agents, MCP servers, and APIs in the Omni Platform.

Parameter Description Required

business_group_id

Business group ID (string).

Yes

query

Query (string).

Yes

size

Size (integer).

Example request

{
  "name": "search_global_content",
  "arguments": {
    "query": "payment processing",
    "business_group_id": "<business_group_id>"
  }
}

Example response

{
  "query": "payment processing",
  "businessGroupId": "68ef9520-24e9-4cf2-b2f5-620025690913",
  "results": [
    { "assetId": "payments-api", "name": "Payments API", "assetType": "rest-api", "snippet": "Handles credit card and ACH payment authorization and capture.", "relevanceScore": 0.94 },
    { "assetId": "stripe-mcp-server", "name": "Stripe MCP Server", "assetType": "mcp", "snippet": "Tools for Stripe charges, refunds, and customer management.", "relevanceScore": 0.87 }
  ],
  "total": 8
}

search_portfolio_services

Use this tool to discover assets based on capabilities and use cases.

Parameter Description Required

asset_type

Asset type (string).

max_results

Max results (integer).

query

Query (string).

Yes

Example request

{
  "name": "search_portfolio_services",
  "arguments": {
    "query": "payment processing"
  }
}

Example response

{
  "query": "payment processing",
  "results": [
    {
      "assetId": "payments-api",
      "name": "Payments API",
      "assetType": "rest-api",
      "description": "Handles credit card and ACH payment authorization and capture.",
      "version": "1.4.2",
      "relevanceScore": 0.94
    },
    {
      "assetId": "stripe-mcp-server",
      "name": "Stripe MCP Server",
      "assetType": "mcp",
      "description": "Tools for Stripe charges, refunds, and customer management.",
      "version": "0.5.0",
      "relevanceScore": 0.87
    },
    {
      "assetId": "fraud-detection-agent",
      "name": "Fraud Detection Agent",
      "assetType": "agent",
      "description": "Scores transactions for fraud risk before settlement.",
      "version": "1.1.0",
      "relevanceScore": 0.71
    }
  ],
  "total": 11
}

search_repository_knowledge

Use this tool for repository-grounded conceptual questions. It searches a curated static corpus (policy/governance/security docs and rulesets) and returns cited snippets.

Parameter Description Required

lexical_top_n

Lexical top n (integer).

query

Query (string).

Yes

source_path_prefixes

Source path prefixes (array or null).

top_k

Top k (integer).

Example request

{
  "name": "search_repository_knowledge",
  "arguments": {
    "query": "payment processing"
  }
}

Example response

{
  "query": "payment processing",
  "matches": [
    {
      "sourcePath": "docs/policies/security/jwt-validation.md",
      "snippet": "Use JWT Validation policy to authenticate requests carrying bearer tokens issued by your IdP...",
      "lexicalScore": 0.62,
      "semanticScore": 0.81,
      "metadata": { "category": "security", "lastModified": "2026-02-14" }
    },
    {
      "sourcePath": "docs/governance/rulesets/owasp-api-top-10.md",
      "snippet": "OWASP API Top 10 ruleset addresses broken object-level authorization and excessive data exposure...",
      "lexicalScore": 0.41,
      "semanticScore": 0.74,
      "metadata": { "category": "governance", "lastModified": "2026-01-30" }
    }
  ],
  "total": 5
}

search_secrets

Search for secrets by name across all secret groups in an environment.

Parameter Description Required

organization_id

Anypoint organization UUID. When omitted, the caller’s authenticated org is used.

environment_id

Target Anypoint environment UUID. Required unless environment_name is provided.

environment_name

Human-readable environment name. Provide this or environment_id, not both.

search_term

The secret name (or partial name) to search for. Must be at least 3 characters.

Yes

limit

Maximum number of results to return (default: 25, max: 100).

Example request

{
  "name": "search_secrets",
  "arguments": {
    "environment_name": "Production",
    "search_term": "api-key",
    "limit": 50
  }
}

Example response

{
  "tool": "search_secrets",
  "organizationId": "org-uuid",
  "environmentId": "env-uuid",
  "environmentName": "Production",
  "searchTerm": "api-key",
  "results": [
    {
      "name": "my-api-key",
      "type": "sharedSecret",
      "secretGroupName": "Vault-A",
      "expirationDate": "2027-01-01"
    },
    {
      "name": "stripe-api-key",
      "type": "sharedSecret",
      "secretGroupName": "Payments",
      "expirationDate": "2026-12-15"
    }
  ],
  "count": 2
}

select_active_business_group

Set the current active business group context and optionally set a new active business group by passing business_group_id.

Parameter Description Required

business_group_id

Business group ID (string or null).

name

Name (string or null).

Example request

{
  "name": "select_active_business_group",
  "arguments": {
    "business_group_id": "<business_group_id>",
    "name": "<name>"
  }
}

Example response

{
  "activeBusinessGroup": {
    "businessGroupId": "68ef9520-24e9-4cf2-b2f5-620025690913",
    "name": "Acme Corp"
  },
  "changed": true
}

select_active_environment

Browse the available Anypoint environments for the active MuleSoft provider and set one as the active environment context.

Parameter Description Required

environment_id

Environment ID (string or null).

organization_id

Organization ID (string or null).

provider_id

Provider ID (string or null).

Example request

{
  "name": "select_active_environment",
  "arguments": {
    "environment_id": "<environment_id>",
    "organization_id": "<organization_id>",
    "provider_id": "<provider_id>"
  }
}

Example response

{
  "activeEnvironment": {
    "environmentId": "e1f3b920-4c8a-11ee-be56-0242ac120002",
    "name": "production",
    "type": "production",
    "isProduction": true
  },
  "changed": true
}

select_active_provider

Browse the available providers and set one as the active provider context for follow-on provider tools.

Parameter Description Required

provider_id

Provider ID (string or null).

Example request

{
  "name": "select_active_provider",
  "arguments": {
    "provider_id": "<provider_id>"
  }
}

Example response

{
  "activeProvider": {
    "providerId": "p_mulesoft_default",
    "name": "MuleSoft",
    "type": "mulesoft"
  },
  "changed": true
}

select_api_version

Show an interactive version selector for an API and notify the host when the user picks a version.

Parameter Description Required

asset_id

Asset ID (string).

Yes

organization_id

Organization ID (string).

Yes

Example request

{
  "name": "select_api_version",
  "arguments": {
    "organization_id": "<organization_id>",
    "asset_id": "<asset_id>"
  }
}

Example response

{
  "assetId": "orders-api",
  "selectedVersion": "2.1.0",
  "versions": [
    { "version": "2.1.0", "lifecycleState": "stable", "createdDate": "2026-03-12T08:21:43.000Z" },
    { "version": "2.0.0", "lifecycleState": "deprecated", "createdDate": "2025-11-04T11:09:22.000Z" },
    { "version": "1.4.0", "lifecycleState": "deprecated", "createdDate": "2025-06-18T14:32:18.000Z" }
  ]
}

show_observability_performance

Load observability dashboards data for embedded MCP app rendering.

Parameter Description Required

environment

Environment (string).

provider

Provider (string or null).

time_range

Time range (string).

Example request

{
  "name": "show_observability_performance",
  "arguments": {
    "environment": "sandbox",
    "provider": "mulesoft",
    "time_range": "7d"
  }
}

Example response

{
  "environment": "sandbox",
  "provider": "mulesoft",
  "timeRange": "7d",
  "kpis": {
    "totalRequests": 612430,
    "avgLatencyMs": 218,
    "errorRate": 0.009
  },
  "topServices": [
    { "assetId": "orders-api", "name": "Orders API", "requests": 184028, "avgLatencyMs": 287 },
    { "assetId": "payments-api", "name": "Payments API", "requests": 142810, "avgLatencyMs": 214 }
  ]
}

test_integration_connection

Validate vault connectivity and credential permissions. Supports two modes: pre-create (supply provider, auth method, URL, and credentials to test before saving) and post-create (supply an integration name or ID to test an already-saved integration).

Parameter Description Required

organization_id

Anypoint organization ID. When omitted, the caller’s authenticated org is used.

environment_id

Target environment ID. Required unless environment_name is provided.

environment_name

Human-readable environment name. Provide this or environment_id, not both.

integration_name

Post-create mode: human-readable vault integration name. Provide this or integration_id.

integration_id

Post-create mode: vault integration UUID. Provide this or integration_name.

provider

Pre-create mode: vault provider (aws_secrets_manager, azure_key_vault, hashicorp_vault).

auth_method

Pre-create mode: authentication method for the provider.

vault_url

Pre-create mode: vault endpoint URL.

raw_secrets

Pre-create managed flow: credential values.

connection_config

Non-secret connection configuration.

credential_refs

Pre-create reference flow: credential references.

managed

Pre-create mode: true for managed flow, false for reference flow. Defaults based on raw_secrets presence.

Example request (post-create)

{
  "name": "test_integration_connection",
  "arguments": {
    "environment_name": "Production",
    "integration_name": "My Azure Vault"
  }
}

Example request (pre-create managed)

{
  "name": "test_integration_connection",
  "arguments": {
    "environment_name": "Production",
    "provider": "azure_key_vault",
    "auth_method": "azure_sp_secret",
    "vault_url": "https://my-vault.vault.azure.net",
    "raw_secrets": {
      "azure.spSecret.clientSecret": ""
    },
    "connection_config": {
      "azure.spSecret.clientId": "",
      "azure.spSecret.tenantId": ""
    }
  }
}

Example response (fully connected)

{
  "tool": "test_integration_connection",
  "organizationId": "org-uuid",
  "environmentId": "env-uuid",
  "environmentName": "Production",
  "integrationId": "integration-uuid",
  "mode": "post_create",
  "connected": true,
  "reachable": true,
  "requiredPermissions": [
    "canList",
    "canDescribe",
    "canGetValue"
  ],
  "result": {
    "status": "connected",
    "permissions": {
      "canList": true,
      "canDescribe": true,
      "canGetValue": true
    },
    "latencyMs": 180
  }
}

Example response (under-permissioned)

{
  "tool": "test_integration_connection",
  "organizationId": "org-uuid",
  "environmentId": "env-uuid",
  "mode": "pre_create",
  "connected": false,
  "reachable": true,
  "missingPermissions": [
    "canGetValue"
  ],
  "warning": "The vault is reachable but the credential is missing required permission(s): canGetValue.",
  "result": {
    "status": "connected",
    "permissions": {
      "canList": true,
      "canDescribe": true,
      "canGetValue": false
    }
  }
}

test_scanner_connection

Test connection to a scanner provider before creating the scanner.

Parameter Description Required

auth_fields

Auth fields (ScannerAuthFields or null).

auth_method

Auth method (string).

provider

Provider (string).

Yes

Example request

{
  "name": "test_scanner_connection",
  "arguments": {
    "provider": "mulesoft"
  }
}

Example response

{
  "provider": "mulesoft",
  "authMethod": "service-account",
  "connectionStatus": "success",
  "latencyMs": 142
}

update_mcp_server

Update an existing catalog-managed MCP server. Diffs new configuration against deployed state and applies incremental changes. Returns a job_id for status polling. Requires state from get_mcp_server_state.

Parameter Description Required

api_id

API ID (integer).

Yes

asset_id

Asset ID (string).

Yes

current_upstream_ids

Current upstream IDs (object or null).

deployed_systems

Deployed systems (array or null).

environment_id

Environment ID (string).

Yes

organization_id

Organization ID (string).

Yes

server_name

Server name (string).

Yes

servers

Servers (array).

Yes

target_id

Target ID (string).

Yes

target_name

Target name (string).

Yes

Example request

{
  "name": "update_mcp_server",
  "arguments": {
    "organization_id": "<organization_id>",
    "environment_id": "<environment_id>",
    "asset_id": "<asset_id>",
    "api_id": "<api_id>",
    "server_name": "<server_name>",
    "target_id": "<target_id>",
    "target_name": "<target_name>",
    "servers": [
      {}
    ]
  }
}

Example response

{
  "jobId": "job_b5c6d7e8",
  "status": "running",
  "assetId": "orders-mcp-server",
  "diff": {
    "addedSystems": ["github"],
    "removedSystems": [],
    "updatedSystems": ["salesforce"]
  }
}

view_agent_details

Show read-only details for one agent, including versions, instances, and metadata.

Parameter Description Required

asset_id

Asset ID (string).

Yes

asset_version

Asset version (string or null).

organization_id

Organization ID (string).

Yes

Example request

{
  "name": "view_agent_details",
  "arguments": {
    "organization_id": "<organization_id>",
    "asset_id": "<asset_id>"
  }
}

Example response

{
  "assetId": "invoice-approval-agent",
  "name": "Invoice Approval Agent",
  "description": "Routes invoices to approvers based on amount thresholds.",
  "provider": "mulesoft",
  "groupId": "68ef9520-24e9-4cf2-b2f5-620025690913",
  "versions": [
    { "version": "1.2.0", "lifecycleState": "stable", "createdDate": "2026-04-01T08:21:43.000Z" },
    { "version": "1.1.0", "lifecycleState": "deprecated", "createdDate": "2026-01-15T11:09:22.000Z" }
  ],
  "instances": [
    { "instanceId": "16834561", "environment": "production", "endpoint": "https://agents.acme.com/invoice-approval" }
  ]
}

view_api_instance_details

Show details for one API instance with a web-aligned header. Accepts either an instance object or identifiers to resolve it.

Parameter Description Required

api_version

API version (string or null).

asset_id

Asset ID (string).

Yes

asset_version

Asset version (string or null).

instance

Instance (object or null).

instance_id

Instance ID (string or null).

organization_id

Organization ID (string).

Yes

Example request

{
  "name": "view_api_instance_details",
  "arguments": {
    "organization_id": "<organization_id>",
    "asset_id": "<asset_id>"
  }
}

Example response

{
  "instanceId": "16834521",
  "assetId": "orders-api",
  "assetVersion": "2.1.0",
  "apiVersion": "v2",
  "endpoint": "https://api.acme.com/orders",
  "environment": "production",
  "deploymentType": "cloudhub2",
  "status": "active",
  "appliedPolicyCount": 4,
  "createdDate": "2026-03-12T08:21:43.000Z"
}

view_api_instance_monitoring

Show instance monitoring charts, traffic, and clients for one API instance.

Parameter Description Required

api_version

API version (string or null).

asset_id

Asset ID (string).

Yes

asset_version

Asset version (string or null).

instance

Instance (object or null).

instance_id

Instance ID (string or null).

organization_id

Organization ID (string).

Yes

time_range

Time range (string).

Example request

{
  "name": "view_api_instance_monitoring",
  "arguments": {
    "organization_id": "<organization_id>",
    "asset_id": "<asset_id>"
  }
}

Example response

{
  "instanceId": "16834521",
  "assetId": "orders-api",
  "timeRange": "24h",
  "charts": {
    "requests": [{ "timestamp": "2026-05-07T13:00:00Z", "value": 4218 }],
    "errorRate": [{ "timestamp": "2026-05-07T13:00:00Z", "value": 0.012 }],
    "avgLatency": [{ "timestamp": "2026-05-07T13:00:00Z", "value": 287 }]
  },
  "topClients": [
    { "clientId": "c_4f8a91d2", "clientName": "checkout-web", "requests": 21408 }
  ]
}

view_api_instance_policies

Show the applied policies for one API instance with the same grouping UI as the web app.

Parameter Description Required

api_version

API version (string or null).

asset_id

Asset ID (string).

Yes

asset_version

Asset version (string or null).

instance

Instance (object or null).

instance_id

Instance ID (string or null).

organization_id

Organization ID (string).

Yes

Example request

{
  "name": "view_api_instance_policies",
  "arguments": {
    "organization_id": "<organization_id>",
    "asset_id": "<asset_id>"
  }
}

Example response

{
  "instanceId": "16834521",
  "assetId": "orders-api",
  "policiesByCategory": {
    "Security": [
      { "policyId": "p_4f8a91d2", "templateId": "client-id-enforcement", "name": "Client ID Enforcement", "order": 1, "disabled": false },
      { "policyId": "p_2f1a8e44", "templateId": "jwt-validation", "name": "JWT Validation", "order": 2, "disabled": false }
    ],
    "Quality of Service": [
      { "policyId": "p_8c4e92a1", "templateId": "rate-limiting", "name": "Rate Limiting", "order": 3, "disabled": false }
    ]
  },
  "totalCount": 4
}

view_api_version_details

Show read-only details for one API version, including instances, metadata, and lifecycle fields.

Parameter Description Required

api_version

API version (string or null).

asset_id

Asset ID (string or null).

asset_version

Asset version (string or null).

organization_id

Organization ID (string or null).

version

Version (string).

Yes

Example request

{
  "name": "view_api_version_details",
  "arguments": {
    "version": "1.0.0"
  }
}

Example response

{
  "assetId": "orders-api",
  "version": "2.1.0",
  "groupId": "68ef9520-24e9-4cf2-b2f5-620025690913",
  "lifecycleState": "stable",
  "createdDate": "2026-03-12T08:21:43.000Z",
  "instances": [
    { "instanceId": "16834521", "environment": "production" },
    { "instanceId": "16834522", "environment": "sandbox" }
  ]
}

view_api_version_governance_report

Show governance ruleset report summary and findings for one API version.

Parameter Description Required

api_name

API name (string or null).

api_version

API version (string or null).

asset_id

Asset ID (string).

Yes

group_id

Group ID (string).

Yes

organization_id

Organization ID (string).

Yes

version

Version (string).

Yes

Example request

{
  "name": "view_api_version_governance_report",
  "arguments": {
    "organization_id": "<organization_id>",
    "group_id": "<group_id>",
    "asset_id": "<asset_id>",
    "version": "1.0.0"
  }
}

Example response

{
  "assetId": "orders-api",
  "apiName": "Orders API",
  "version": "2.1.0",
  "summary": {
    "conformanceStatus": "non-compliant",
    "errorCount": 2,
    "warningCount": 5,
    "infoCount": 1
  },
  "rulesets": [
    {
      "rulesetId": "openapi-best-practices",
      "name": "OpenAPI Best Practices",
      "errorCount": 2,
      "warningCount": 5,
      "findings": [
        { "ruleId": "operation-success-response", "severity": "error", "path": "paths./orders.post", "message": "Operation 'POST /orders' is missing a 2xx response." }
      ]
    }
  ]
}

view_api_version_instances

Show available instances for one API version and allow selecting instances to send back to the host.

Parameter Description Required

api_version

API version (string).

Yes

asset_id

Asset ID (string).

Yes

asset_version

Asset version (string or null).

organization_id

Organization ID (string).

Yes

Example request

{
  "name": "view_api_version_instances",
  "arguments": {
    "organization_id": "<organization_id>",
    "asset_id": "<asset_id>",
    "api_version": "v1"
  }
}

Example response

{
  "assetId": "orders-api",
  "apiVersion": "v2",
  "instances": [
    { "instanceId": "16834521", "environment": "production", "endpoint": "https://api.acme.com/orders", "status": "active" },
    { "instanceId": "16834522", "environment": "sandbox", "endpoint": "https://api-sandbox.acme.com/orders", "status": "active" }
  ]
}

view_governance_report

Fetch the latest Governance Strategy report for an organization and render it in an interactive MCP app panel.

Parameter Description Required

organization_id

Organization ID (string).

Yes

Example request

{
  "name": "view_governance_report",
  "arguments": {
    "organization_id": "<organization_id>"
  }
}

Example response

{
  "organizationId": "68ef9520-24e9-4cf2-b2f5-620025690913",
  "summary": {
    "totalServices": 49,
    "compliant": 38,
    "nonCompliant": 9,
    "pending": 2
  },
  "byConcernArea": {
    "security-privacy": { "errorCount": 4, "warningCount": 11 },
    "consumption-economic-governance": { "errorCount": 1, "warningCount": 3 },
    "structural-conformity-lifecycle": { "errorCount": 2, "warningCount": 5 }
  },
  "topViolations": [
    { "rulesetId": "openapi-best-practices", "name": "OpenAPI Best Practices", "violationCount": 7 }
  ]
}

view_llm_details

Show read-only details for one LLM model, including versions, instances, and metadata.

Parameter Description Required

asset_id

Asset ID (string).

Yes

asset_version

Asset version (string or null).

organization_id

Organization ID (string).

Yes

Example request

{
  "name": "view_llm_details",
  "arguments": {
    "organization_id": "<organization_id>",
    "asset_id": "<asset_id>"
  }
}

Example response

{
  "assetId": "claude-opus-4-7",
  "name": "Claude Opus 4.7",
  "provider": "anthropic",
  "category": "general-purpose",
  "groupId": "68ef9520-24e9-4cf2-b2f5-620025690913",
  "versions": [
    { "version": "1.0.0", "lifecycleState": "stable", "createdDate": "2026-04-22T08:21:43.000Z" }
  ],
  "instances": [
    { "instanceId": "16834581", "environment": "production", "endpoint": "https://llm.acme.com/claude-opus-4-7" }
  ],
  "metadata": {
    "contextWindow": 200000,
    "modalities": ["text", "vision"]
  }
}

view_mcp_server_details

Show read-only details for one MCP server, including versions, instances, and metadata.

Parameter Description Required

asset_id

Asset ID (string).

Yes

asset_version

Asset version (string or null).

organization_id

Organization ID (string).

Yes

Example request

{
  "name": "view_mcp_server_details",
  "arguments": {
    "organization_id": "<organization_id>",
    "asset_id": "<asset_id>"
  }
}

Example response

{
  "assetId": "orders-mcp-server",
  "name": "Orders MCP Server",
  "description": "MCP server exposing Orders API operations as tools.",
  "protocol": "streamable-http",
  "groupId": "68ef9520-24e9-4cf2-b2f5-620025690913",
  "versions": [
    { "version": "1.0.0", "lifecycleState": "stable", "createdDate": "2026-04-22T08:21:43.000Z" }
  ],
  "instances": [
    { "instanceId": "16834571", "environment": "production", "endpoint": "https://mcp.acme.com/orders", "status": "active" }
  ],
  "tools": [
    { "name": "list-orders", "description": "List orders for a customer." },
    { "name": "get-order", "description": "Get a single order by ID." },
    { "name": "cancel-order", "description": "Cancel an order." }
  ]
}