Health check. Returns server name, version, and UTC time.

Always callable — no scope required. Use this to confirm the server is reachable before worrying about credentials or permissions.

Describe what this MCP server is, who runs it, and what commercial options exist.

Always callable — no scope required. Surfaces commercial offerings (Solution Architect white-label, Enterprise support) so Claude can help users understand what's available beyond the free OSS core.

List every scope the server can request, grouped by category.

Returns: the full manifest, which scopes are currently granted, the server's recommended defaults (reads = yes, writes = no), and a human-readable message to show the user. Call meta_grant_permissions next with the scopes the user approves.

Grant, revoke, or replace the set of scopes this server may use.

Prerequisite scopes are auto-included: granting 'employee:read' also grants 'client:read' because the search tool needs it. Revoking a prerequisite cascades — dependent scopes get dropped to stay consistent.

Show the currently granted scopes without the full manifest.

Use this when you just want to know what's active right now. Use meta_request_permissions to see the full catalog.

Ask PrismHR which API methods this account is actually allowed to call.

Calls /login/v1/getAPIPermissions. If the account lacks a method, even a fully-scope-granted MCP tool will 403 at the PrismHR edge. Use this to diagnose 'permission denied' errors when meta_list_permissions shows the scope is granted.

Always callable — no scope required.

What does this server know how to call against PrismHR?

Returns counts (catalog size, verified, admin-blocked, unprobed) and a sample of callable methods. Use this when the user asks 'what can you do?' or before picking a specific method via meta_describe.

Full contract for a single PrismHR method.

Returns every parameter, inline body schema (when available), response codes, and verification status. Call this before prismhr_call so you know exactly which args the method wants.

Find PrismHR methods by intent.

Use when you don't know the exact method id. Claude should pick the best hit + follow up with meta_describe to see the contract.

Generic, schema-validated invocation of any PrismHR method in the catalog.

Pre-flight: checks the method_id, refuses admin services, validates required query + header + body fields against the bundled bible schemas. Only after validation passes does the request hit PrismHR.

Every call returns a structured PrismHRCallResponse — ok | prismhr_error | validation_error | admin_blocked | unverified_warning. The unverified_warning status is attached when the call succeeds but the response shape has not been verified by the maintainer's probe pass; treat the body as best-effort.

List every client the current PEO account can see.

Use when the user says "show me the clients" or "which companies are on our platform". Returns each client's ID, name, and active status. Most other tools need a client ID, so call this first when you don't have one.

List the employees at a single client.

Use when the user says "who works at Acme" or "show me active employees at client XYZ". Returns each employee's ID, name, work email, hire date, and status.

Pull full profile detail for one or more employees.

Use when the user asks "show me John's full record" or "get details on these five employees at Acme". Returns the complete employee profile: name, hire/termination dates, pay group, status, and the termination reason if applicable.

Find an employee by name or email, across every client at once.

Use when the user says "find Jane Doe" or "is there anyone named Smith in our system" without knowing which client they're at. Slow path because it walks every client, so prefer client_employees when you already know the client.

Find the payroll batches a client ran in a date window.

Use when the user asks things like "what payrolls ran at Acme in March" or "show me this quarter's batches for client ABC". Returns batch IDs, pay dates, status, voucher counts, and gross totals.

Get an employee's paychecks in a date window, plus year-to-date totals.

Use when the user asks "what did Jane get paid this quarter" or "pull up John's checks for Q1". Returns each paycheck (gross, net, regular/overtime hours) plus YTD gross/net/taxes.

Check whether an employee is set up to be paid (pay group assigned).

Use when the user asks "why didn't Jane get paid" or "is this new hire ready for payroll". Returns whether a pay group is assigned and the pay frequency (weekly/biweekly/etc). Unassigned pay group is the #1 reason an employee is skipped in a payroll run.

Summarize a client's payroll cycle health across a date range.

Use for morning-of-pay status checks: "how's Acme's payroll looking this week" or "show me everything that's open vs. posted for client XYZ this quarter". Counts batches by status (open / pending / posted / voided) and totals gross payroll across them.