Search company context through the Yonote index and source systems.

Resolve one company context item through Yonote or the matching source-of-truth domain.

Return the company source-of-truth map for people, projects, processes, documents, decisions, and operations.

Return a compact startup context: source-of-truth map, company memory, and relevant company search results.

Store short-term session/task memory or medium-term project/team facts in Postgres.

Search short/medium Postgres memory and optionally source-backed long-term knowledge.

Search source-backed long-term knowledge from Yonote/templates/ADR/docs without copying it into memory.

Store a compact short-term session/task summary in Postgres memory.

Delete a memory entry created by the current actor. Admins may delete any memory entry.

Publish a durable employee notification. Requires notifications:write.

List notifications visible to the current employee. Requires notifications:read.

Read one visible notification. Requires notifications:read.

Mark one visible notification as seen, read, or unread. Requires notifications:read.

Subscribe the current employee to project notifications. Requires notifications:read.

List personal and group markdown knowledge spaces visible to the current actor.

Compatibility alias for gateway_knowledge_spaces.

Get metadata, members, and document count for a personal or group knowledge space.

Compatibility alias for gateway_knowledge_member_add.

Create a group markdown knowledge space. The creator becomes admin.

Compatibility alias for gateway_knowledge_member_remove.

Set a member role in a group knowledge space. Requires space admin access.

Add or update a member in a group knowledge space. Requires space admin access.

Compatibility alias for gateway_knowledge_search.

Remove a member from a group knowledge space. Requires space admin access.

Compatibility alias for gateway_knowledge_access_audit.

Create or update a markdown document in a personal or group knowledge space.

Read a markdown document from a personal or group knowledge space.

Search accessible markdown knowledge spaces and return citations.

Soft-delete a markdown document and keep it in the space trash.

List retained versions of a markdown document.

Restore a retained document version and archive the current version first.

List soft-deleted documents in an accessible knowledge space.

Restore a soft-deleted document to its original path.

Import a server-side UTF-8 text/markdown file from an allowed ingest directory into a knowledge space.

Rebuild markdown indexes for accessible knowledge spaces.

Show current actor permissions for knowledge spaces.

Return sanitized process events from Yonote, Bitrix24, Tracker, and GitLab.

Discover repeated process candidates from sanitized process events.

Compare discovered process candidates with Yonote process/source-of-truth pages.

Build a staff-reviewed Process Rebuild Backlog from process candidates and Yonote comparison.

Classify sensitive text without returning detected source values.

Pseudonymize personal data and irreversibly redact secrets in text.

Call a read-only backend route and sanitize its result before agent delivery.

Discover projects that can be onboarded or executed by the autonomous development factory.

Resolve one Tracker issue to a factory runtime project config.

Return normalized factory runtime config; prefer work_id for queued Work Contracts.

Create a short-lived one-time HTTP upload session for a binary file.

Get a file upload session owned by the current actor.

Create a one-time HTTP download session for a completed upload.

Get a file download session owned by the current actor.

Append one hash-linked, metadata-only artifact phase to a Work Contract.

Set the Tracker lifecycle policy without transitioning the issue.

Finish execution and record evidence.

result_refs_json must be a JSON array of objects with type, uri, and optional title, for example an MR, commit, branch, or document. Call this before gateway_work_accept. Acceptance is rejected until successful completion has recorded verification evidence.

Record the independent review decision after execution evidence exists.

Record that a local agent skill started. Do not send raw prompt text or sensitive data.

Record that a local agent skill completed successfully.

Record that a local agent skill failed. Send error class, not stack traces or secrets.

Close every open skill invocation for this actor and agent session.

Return aggregated assistant skill usage stats. Requires telemetry:read.

Record actual or estimated agent token/cost usage. Requires telemetry:write.

Return approximate or actual agent usage summary. Requires telemetry:read.

Search known internal MCP route declarations.

List DB-backed GatewayMCP scope and resource grants. Requires access:read.

List versioned business access packages. Requires access:read.

Assign a complete business access package atomically. Requires access:admin.

List assigned access packages. Requires access:read.

Revoke a package and only the grants created by it. Requires access:admin.

Search redacted GatewayMCP audit metadata. Requires telemetry:read.

Summarize audit events by event, tool, system, decision, and status. Requires telemetry:read.

Explain whether a user/group subject can access one MCP resource. Requires access:read.

Grant or deny a Gateway scope through Postgres. Requires access:admin; dry_run defaults to true.

Revoke DB-backed Gateway scope grants. Requires access:admin; dry_run defaults to true.

Grant or deny one MCP resource pattern. Requires access:admin; dry_run defaults to true.

Revoke DB-backed MCP resource grants. Requires access:admin; dry_run defaults to true.

Show the current authenticated identity, effective scopes, access packages, and recent access requests.

List business access packages that an employee may request.

Request a versioned business access package for the current user. This never grants access automatically.

List access requests created by the current user.

Cancel one pending access request owned by the current user.

List employee access requests. Requires access:read.

Approve or reject one pending access request. Requires access:admin and defaults to dry-run.

Create an approval request for an agent workflow. Requires approvals:write.

Read one visible approval and its event history. Requires approvals:read.

List visible or assigned approval requests. Requires approvals:read.

Approve, reject, or request information. Requires approvals:write.

Add a clarification or comment to an approval. Requires approvals:write.

Call a private backend route through GatewayMCP with auth, scope checks, and audit.