Run first-run onboarding: auto-detect the Mist region from the token, discover organizations and sites, run validation, and return a READY FOR USE report. Call this when the user is setting up or asks to get started. Optionally pass organization="" to choose among multiple orgs.

Report the current mode (read-only vs read-write), region, organization, and whether the token can make changes. Use when the user asks about their mode or write access.

List the Juniper Mist organizations the API token can access.

List the sites in an organization.

List access points (APs) in an organization, optionally filtered to a site.

List switches in an organization, optionally filtered to a site.

List currently connected wireless clients (org-wide or for one site).

Report access points that are currently offline (disconnected).

Generate a network health report as Markdown: device totals, online/offline counts, offline AP list, and per-site breakdown. The user can then save it as a file. Set include_clients=false to skip the (slower) org-wide client count.

Generate a full device inventory report as Markdown (every AP and switch with model, serial, MAC, site, status, and firmware version).

Firmware compliance report (Markdown): for each AP/switch model, the version most of the fleet runs and which devices are behind it. Use to find firmware drift.

Build a per-site network topology as a Mermaid diagram (plus structured nodes/edges): gateways, switches, and APs linked via switch-port LLDP neighbors. Provide a site name; set include_clients=true to add connected clients. Render the Mermaid or save it.

Locate a wireless client by MAC address or hostname: which site, AP, and SSID it is on, plus IP, band, and signal. Provide mac or hostname.

Trace a wireless client's recent connection events (association, auth, DHCP, roam, disconnect) to troubleshoot why it can't connect or roams poorly. Returns an event timeline, type counts, and highlighted failures.

List Access Assurance (NAC) clients authenticated to the network — user, client type (wired/wireless), auth type (EAP-TLS/PEAP/MAB), SSID, VLAN, matched auth rule, and status. Optional filters: mac, auth_type, type.

Troubleshoot 802.1X/MAB authentication using Access Assurance (NAC) events: returns the auth-event timeline, per-type counts, and highlighted failures (denied/rejected/errored). Focus on one identity with mac (client MAC) and/or user (username or certificate CN).

Build a self-contained HTML Access Assurance (NAC) dashboard: summary cards and bar charts for auth types, client types, status, event types, and top failing users/rules. Returns HTML the user can save as a .html file and open in a browser.

List Marvis (AI) suggested actions — Mist's prioritized view of what's wrong (offline switches/APs, non-compliant firmware, misconfigured ports, RF/DFS issues) and the recommended fix. Use for 'what's wrong with my network?'. Pass status="open" for active items only.

List organization alarms over a window with per-severity and per-type counts (device/switch/gateway offline, restarts, security, Marvis). Optional severity filter.

List wired clients (devices seen on switch ports): switch MAC, port, VLAN, IP, and vendor. Optional mac / hostname / site_id filters. Complements get_clients (wireless).

Service Level Expectations (SLE) per site — Mist's user-experience scores as percentages (e.g. ap-health, coverage, capacity, successful-connects, switch/gateway/wan health). Use to gauge experience quality by site.

Switch/device port statistics: link state, speed/duplex, PoE on/off and draw, LLDP neighbor, and traffic. Filter by switch_mac, site_id, or up (true/false).

Export a read-only backup of the org configuration as JSON (org settings, sites, networks, VPNs, templates, WLANs, NAC rules, webhooks, etc.) for the user to save to a .json file. Secrets are excluded/masked.

Set the default organization for this session by name or id. Useful when the token can access several organizations — subsequent tools then target the chosen org.

Compare the current org configuration against a saved backup file (config drift): reports added, removed, and changed objects per resource type. baseline_file is a path to a JSON file previously produced by export_org_config.