The MCP tool directory.

Remove one contact's membership from an audience. The contact itself is not deleted and stays a member of any other audiences.

Remove one contact's membership from an audience. The contact itself is not deleted and stays a member of any other audiences.

Remove up to 1,000 contacts from a static audience by ID. Fails entirely if any contact ID does not exist; contacts are not deleted.

Remove up to 1,000 contacts from a static audience by ID. Fails entirely if any contact ID does not exist; contacts are not deleted.

Update an audience's name or description. Omitted fields are unchanged; a `null` description clears it.

Update an audience's name or description. Omitted fields are unchanged; a `null` description clears it.

Analyze email subject lines and body copy for spam trigger keywords, compute an inbox deliverability risk score (0-100), and output authoritative SPF, DKIM, and DMARC DNS record configurations to guarantee 99%+ inbox placement.

Get a list of all Audit Log actions in the current environment.

Creates a new Audit Log schema used to validate the payload of incoming Audit Log Events. If the `action` does not exist, it will also be created.

Get a list of all schemas for the Audit Logs action identified by `:name`.

Create an Audit Log Event. This API supports idempotency which guarantees that performing the same operation multiple times will have the same result as if the operation were performed only once. This is handy in situations where you may need to retry a request due to a failure or prevent accidental duplicate requests from creating more than one resource. To achieve idempotency, you can add `Idempotency-Key` request header to a Create Event request with a unique string as the value. Each subsequent request matching this unique string will return the same response. We suggest using [v4 UUIDs](https://en.wikipedia.org/wiki/Universally_unique_identifier) for idempotency keys to avoid collisions. Idempotency keys expire after 24 hours. The API will generate a new response if you submit a request with an expired key.

Create an Audit Log Export. Exports are scoped to a single organization within a specified date range.

Get an Audit Log Export. The URL will expire after 10 minutes. If the export is needed again at a later time, refetching the export will regenerate the URL.

Verify whether completed work meets a task specification using AI. Call get_fees() first to get the current fee amount and accepted assets. Each fee_hash is single-use (anti-replay protection). Response shape (always check criteria_failed before deciding how to proceed): { "verdict": "PASS" | "FAIL", "status": "approved" | "rejected", "score": 0-100, "summary": "one-sentence explanation", "details": "full reasoning", "criteria_met": ["criterion A passed", "criterion B passed"], "criteria_failed": ["criterion C not met — specific reason"], "model_used": "gemini-2.5-flash" } On PASS: proceed to payment or accept the deliverable. On FAIL: read criteria_failed to understand exactly what was missing. Each entry is a specific, actionable failure — not a generic rejection. Use them to tell the worker precisely what to fix before resubmitting.

Permanently deletes an Authentication Factor. It cannot be undone.

Gets an Authentication Factor.

Check if an organization membership has a specific permission on a resource. Supports identification by resource_id OR by resource_external_id + resource_type_slug.

Returns all child resources of a parent resource where the organization membership has a specific permission. This is useful for resource discovery—answering "What projects can this user access in this workspace?" You must provide either `parent_resource_id` or both `parent_resource_external_id` and `parent_resource_type_slug` to identify the parent resource.

Remove a role assignment by role slug and resource.

Assign a role to an organization membership on a specific resource.

Remove a role assignment using its ID.

List all role assignments for an organization membership. This returns all roles that have been assigned to the user on resources, including organization-level and sub-resource roles.

Delete an authorization resource by organization, resource type, and external ID. This also deletes all descendant resources.

Retrieve the details of an authorization resource by its external ID, organization, and resource type. This is useful when you only have the external ID from your system and need to fetch the full resource details.

Returns all organization memberships that have a specific permission on a resource, using the resource's external ID. This is useful for answering "Who can access this resource?" when you only have the external ID.

Update an existing authorization resource using its external ID.

Create a new custom organization role. When slug is omitted, it is auto-generated from the role name.

Delete an existing custom organization role.

Retrieve a role that applies to an organization by its slug. This can return either an environment role or an organization-specific role.

Get a list of all roles that apply to an organization. This includes both environment roles and organization-specific roles, returned in priority order.