Inspect resolved target and safe_mode without contacting ERPNext. Legacy allowlists are inactive.

Call any same-origin ERPNext HTTP route, including API v1/v2, JSON/form/multipart/binary.

Unknown methods become confirmable sensitive plans in safe_mode. dry_run never sends the
requested mutation; it saves the exact request and reports what could/could not be verified.

Call any Frappe-exposed RPC method. Unlisted methods need review, not an allowlist edit.

Prepare an exact ordered batch. Verify source count; one user confirmation covers the batch.

Bind a later JSON body pointer to an earlier response using bindings, e.g.
{"/doc": {"step": 0, "pointer": "/data"}}. Batches are not atomic and stop on error.

Prepare a complete JSON array of requests from a finalized source artifact.

Recover recent plan IDs after a lost tool response; list running/unknown receipts before retrying.

Read plan status, execution receipts and the full immutable request before confirming it.

Execute the frozen plan once. Supply actual in-scope user approval text for sensitive plans.

This records agent-attested consent, not independently verified human identity. Do not create another plan to retry an ambiguous write. Inspect its receipt and upstream state.

Read complete result/input bytes in bounded base64 chunks. Optional JSON pointer selects a subtree.

Begin a local artifact upload using byte length and SHA-256 calculated from the source.

Append one local input chunk (up to 256 KiB). Out-of-order or excess bytes are rejected.

Verify complete source length and SHA-256. Only finalized inputs can be executed/uploaded.

Create a document using native REST. safe_mode preflights; expected_lengths checks child rows.

Update native fields. In safe_mode pin modified for Frappe save conflict checks; child-table replacement is sensitive.

Prepare/delete any document allowed by ERPNext. safe_mode requires plan confirmation; no draft-only MCP gate.

Submit a frozen current document through Frappe. Sensitive: may post stock/accounting effects.

Cancel through Frappe. Sensitive; preflight cannot simulate ledger reversal or custom hooks.

List one page without a hidden limit clamp. has_more is unknown for a full page without total.

Read a complete document; large documents are returned through result artifacts.

Generate a common mapped document, then freeze any requested save. Use call_method for other mappings.

Generate and freeze a draft revision of a submitted BOM; source remains unchanged.

Generate Stock Entry using ERPNext; freeze create/submit as one confirmable dependent batch.

Freeze native naming-series controller requests as one sensitive plan; no separate whitelist.

Check ERPNext connectivity, authenticated user, and installed app versions.

Return ERPNext DocType metadata: fields, required fields, child tables, links, and docstatus support.

Preflight an existing BOM or proposed BOM payload without writing. Resolves Routing operations and checks known ERPNext manufacturing rules such as positive operation time.

Search readable ERPNext Link field candidates, such as Customer, Item, Account, Warehouse, or Supplier.

Run an allowed ERPNext report, such as General Ledger, Accounts Receivable, or Stock Balance.

Return stock quantities for an item and warehouse using ERPNext bin details.

Trace one ERPNext business flow across sales, buying, production planning, subcontracting, work orders, job cards, stock, quality inspections, delivery, and cost ledgers.

Return ERPNext accounting balance for a Customer or Supplier.