Read-only runtime metadata. Use when validating configured base URLs, OpenAPI source URLs, and persistence wiring. Do not use for API execution. Risk: low.

Read-only scope resolver. Use when you need the effective app/tenant/user scope and storage locations. Do not use for mutation. Risk: low.

Read-only OpenAPI discovery. Use to search operationId/method/path/tag metadata before invocation. Do not use as an execution tool. Risk: low.

Read-only tenant discovery. Use to list tenant ids and optionally discover scoped users from Postgres and Vault token paths. Do not use for mutation. Risk: low.

Read-only tenant/user scope validation. Use to confirm token and config readiness before operational API calls. Risk: medium.

Mutating tenant/user baseline config initializer. Use to write recommended non-secret defaults for a scope. Risk: high.

Read-only tenant/user policy reader. Use to inspect effective policy guardrails for a scope. Risk: medium.

Mutating tenant/user policy writer. Use to update scoped policy guardrails for API execution. Risk: high.

Read-only planning helper. Use to choose safe tool order, discover likely operations, and retrieve tool usage schema details. Do not use for direct mutations. Risk: low.

Read-only token metadata listing. Use to inspect user-scoped token entries and active token selection. Do not use to rotate/update secrets. Risk: medium.

Mutating token create/update. Use to add or rotate JumpCloud user tokens in Vault. Do not use for read-only workflows. Risk: high.

Mutating token selection. Use to change active token for a user. Do not use to create tokens. Risk: medium.

Mutating token deletion. Use when removing obsolete user tokens from Vault. Destructive. Risk: high.

Read-only Postgres config listing. Use to enumerate app/user scoped non-secret configuration values. Do not store secrets in config. Risk: low.

Read-only Postgres config getter. Use to fetch one user-scoped configuration key. Risk: low.

Mutating Postgres config setter. Use for non-secret runtime configuration. Do not store token values. Risk: medium.

Mutating Postgres config delete. Use to remove obsolete non-secret settings. Destructive. Risk: high.

Read-only health and credential check against JumpCloud using current user's active token. Use before large workflows. Risk: low.

OpenAPI operation invoker. Use operationId+pathParams for high-fidelity execution with full API coverage. Mutating calls require admin key if configured. Risk: variable.

Generic JumpCloud request executor. Use for explicit domain/method/path calls with full endpoint coverage. Mutations require admin key if configured. Risk: variable.