Find customers by name or id. Returns id, name, sector, sites, contract.

Service tickets for a customer, newest first.

Invoices for a customer with their payment state, newest first.

One joined view of a customer: contract, open tickets, overdue balance.

Needs both read grants. A caller holding only one gets a refusal rather than a half-answer, because a health summary missing its billing half reads as good news.

Open a service ticket. Internal and reversible, so it executes directly.

Prepare an invoice. It is held as a draft and is NEVER issued by this server.

An issued invoice reaches the customer and cannot be recalled, so it is the canonical irreversible action: the tool prepares, a human issues.

Everything this caller has prepared and not yet confirmed.

The identity and grants this call runs as.

Present in every deployment. When someone reports that a tool "does not work", the first question is which token they are on, and the answer should not require reading a database.