Search and retrieve Snipe-IT hardware by ID, exact asset tag, exact serial, text, structured fields, custom fields, or the authenticated user's requestable catalog. Use for every read-only asset question. Returns explicit asset_tag, serial, model_name, model_number, manufacturer, status, assignment, location, dates, cost, and stable custom_fields. Do not use for writes, lifecycle actions, or deletion.

Create or update a Snipe-IT hardware asset using explicit common fields and optional custom fields. Use only for an explicit create or update request. This tool cannot delete, checkout, checkin, audit, or restore assets. Returns the normalized asset when the backend includes it.

Checkout, checkin, audit, or restore one Snipe-IT asset after deterministically resolving its ID. Human identifiers and exact user email are accepted when unambiguous. Use only when the user explicitly requests the lifecycle action. This tool never deletes an asset.

Generate a bounded printable Snipe-IT asset-label PDF for explicitly supplied asset IDs. Returns file metadata and base64 content suitable for a client to save. Do not use for ordinary asset lookup or for unbounded label generation.

List, retrieve, create, update, complete, or add/list notes for Snipe-IT asset maintenance, and list maintenance types. Use for maintenance records only. The tool cannot delete maintenance records or types; deletion is isolated in delete_resource.

Read software licences associated with one asset, resolving an exact asset tag or serial when needed. Returns product keys only when Snipe-IT and the caller's permissions expose them. This tool is read-only.

Submit or cancel the authenticated user's request for a requestable asset. Use only when the user explicitly asks to request or cancel a request. This does not approve requests, checkout assets, or delete data.

List attachment metadata or download one bounded attachment for a supported Snipe-IT parent. Download returns base64 only when the file fits max_inline_bytes; otherwise it reports metadata and content_truncated=true. This tool cannot upload or delete files.

Upload one explicitly supplied base64 attachment to a supported Snipe-IT parent. The filename is sanitized, upload size is bounded, and multipart encoding is used. This tool cannot read or delete attachments.

Read accessories, components, or consumables with normalized quantity, model, serial, manufacturer, location, company, supplier, purchase, and audit-safe extra fields. Set inventory_type to accessory, component, or consumable. Do not use for writes, assignments, or deletion.

Create or update one accessory, component, or consumable using explicit fields. Use for ordinary inventory record writes after required IDs are known. This tool cannot assign, check in, check out, or delete inventory.

Checkout or check in accessories and components, or checkout consumables, using only assignment workflows officially exposed by Snipe-IT. Accessories accept user, asset, or location targets; components require an asset; consumables require a user. This tool never deletes records.

List, search, retrieve, or identify the current authenticated Snipe-IT user. Supports exact email, username, employee number and organisation filters, including deleted-user queries. Returns explicit identity, department, location, company, manager, flags, and inventory counts. Do not use for writes or deletion.

Create, update, restore, or explicitly reset two-factor authentication for a Snipe-IT user. Use create/update/restore for requested administration; use reset_2fa only when the user explicitly asks for that high-impact security action. This tool cannot delete users.

Retrieve everything assigned to one unambiguously identified user in one call: rich assets, accessories, licences, consumables, and optional EULA/acceptance records. Assets use the same normalization as assets_search and explicitly include asset_tag, serial, model_name, model_number, manufacturer, status, and location. This tool is read-only.

List, search, or retrieve Snipe-IT companies, departments, and permission groups. Use organization_type=company, department, or group. Returns stable identity/contact fields and safe extra field entries. This tool is read-only and cannot modify memberships or delete records.

Create or update a Snipe-IT company, department, or group. Common relationship fields are explicit; group permissions can be supplied as a JSON object. Use only for requested writes. This tool cannot delete organisation records.

Read Snipe-IT categories, manufacturers, models, status labels, locations, suppliers, depreciations, predefined kits, and maintenance types. Relationship actions assets_by_model, assets_by_status, assets_at_location, and users_at_location return rich records without hiding model information. This tool is read-only.

Create or update supported Snipe-IT catalog records with explicit model, status, hierarchy, contact, depreciation, and type fields. Use for normal requested configuration writes. This tool has no delete action; all catalog deletion goes through delete_resource.

Read/search custom fields, fieldsets, db_column identifiers, validation metadata, and fieldset membership. Use resource_type=field or fieldset. Dynamic values are represented through stable named properties and extra_fields arrays. This tool is read-only.

Create/update fields and fieldsets, associate or disassociate a field, or reorder fields. Use explicit actions create_field, update_field, create_fieldset, update_fieldset, associate, disassociate, or reorder. This tool cannot delete fields or fieldsets.

List, search, or retrieve software licences with explicit product_key, seat counts, category, manufacturer, supplier, company, purchase, expiry, maintenance, and reassignment fields. Product keys appear only when permissions allow. This tool is read-only.

Create or update a Snipe-IT software licence. The public product_key input is deliberately translated to Snipe-IT's write-side serial field while reads expose product_key. Use only for explicit writes. This tool cannot delete licences or assign seats.

List, checkout, checkin, or update licence seats. Checkout accepts exactly one user or asset target; checkin removes an assignment but never deletes the licence or seat. Use mutation actions only for explicit assignment requests.

Read Snipe-IT activity, one item's history, checkout/checkin history, status summaries, depreciation reports, and assets due, overdue, or due-or-overdue for audit. Results explicitly advertise both activity fields and rich asset identity fields. This tool never audits or changes records.

Run the Snipe-IT CSV import workflow in explicit stages: list, get, upload, configure, validate, or process. Upload never processes a file; process runs only when action_name=process is explicitly requested. This tool cannot delete import files; use delete_resource after separate confirmation.

Read Snipe-IT version/system information, list backups, or download one bounded backup. Version data supports capability diagnosis. Backup content is base64 only when it fits max_inline_bytes. This tool cannot change settings or delete backups.

Test the configured Snipe-IT LDAP connection or explicitly synchronize LDAP users. action_name=test only checks connectivity; action_name=sync can materially change users and must be used only when synchronization was explicitly requested. This tool never infers sync from a test request.

Permanently or destructively remove confirmed Snipe-IT data. Use only for an explicit deletion request after the calling agent has retrieved and shown the exact target and received immediate user confirmation. For files, provide parent_id and file_id; for records, provide resource_id. This is the only MCP tool that can issue HTTP DELETE.