describe_capabilities
Return the live MCP tool surface for the calling org. Each row: name, description, kind (READ/MUTATION), category (coarse domain bucket, e.g. tasks / governance / microsoft), featureKey (plan gate), permissionKey, monthlyCap (-1 = unlimited), mcpExposed (true if reachable from MCP), planSatisfied (caller's plan grants the feature gate), and permissionSatisfied (caller's role grants the permission: true/false for org-level keys, null for project-level keys that depend on your role in a specific project). Together they let you predict a 402/403 before calling. IMPORTANT , this lists the ENTIRE catalog, not the tools you currently hold. Read availability on each row: "available" means call it directly; "loadable" means it exists and you are permitted to use it but must call load_tools with that row's category FIRST. The availableNow and loadable counts say how many of each. The distinction matters for reporting reach: availableNow is what is callable right now, whereas totalTools counts the whole catalog including rows that are gated or not yet loaded. Optional filters: kind=READ|MUTATION, mcpOnly=true, availableOnly=true. Pairs with whoami, which supplies the identity and plan context these gates resolve against. Source-of-truth is the registered tool catalog + MCP_EXPOSED_TOOLS, not training data.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| kind | No | Filter to one kind. Omit for all. | |
| mcpOnly | No | Default false. When true, only return tools reachable from MCP. | |
| availableOnly | No | Default false. When true, only return tools the caller's plan currently enables. |