The MCP tool directory.

Get a list of all roles that apply to an organization. This includes both environment roles and organization-specific roles, returned in priority order.

Add a single permission to an organization role. If the permission is already assigned to the role, this operation has no effect.

Remove a single permission from an organization role by its slug.

Replace all permissions on a role with the provided list.

Update an existing custom organization role. Only the fields provided in the request body will be updated.

Create a new permission in your WorkOS environment. The permission can then be assigned to environment roles and organization roles.

Delete an existing permission. System permissions cannot be deleted.

Retrieve a permission by its unique slug.

Get a list of all permissions in your WorkOS environment.

Update an existing permission. Only the fields provided in the request body will be updated.

Create a new authorization resource.

Delete an authorization resource and all its descendants.

Retrieve the details of an authorization resource by its ID.

Get a paginated list of authorization resources.

Returns all organization memberships that have a specific permission on a resource instance. This is useful for answering "Who can access this resource?".

Update an existing authorization resource.

Create a new environment role.

Get an environment role by its slug.

List all environment roles in priority order.

Add a single permission to an environment role. If the permission is already assigned to the role, this operation has no effect.

Replace all permissions on an environment role with the provided list.

Update an existing environment role.

One-time setup: Connect the user's Gmail account via OAuth so the AI can read verification emails automatically. Returns an authorization URL the user must visit. After authorizing, the AI can use read_verification_email to fetch OTP codes.

Decode a Base64 string into UTF-8 text and report invalid payloads as errors when recovering embedded credentials, tokens, or transport-encoded content.

Convert a UTF-8 string into standard Base64 when you need a portable text encoding for credentials, binary-safe transport, or embedding data in JSON/HTTP fields.

Performs a batch analysis of multiple URLs, domains, or subdomains to retrieve selected SEO, backlink, organic, and paid traffic metrics. When analyzing a domain name, you must use mode=subdomains. Using mode=domain can exclude www and other subdomains. Use doc tool first to get the real input schema.

Score up to 10 keywords in one call. Cost: 10 credits per keyword.

Get game recommendations based on a specific game using either the BoardGameGeek (BGG) ID or name directly. ID is preferred for faster responses.

Use this tool when users ask rules questions about board games (e.g., 'How does X work?', 'Can I do Y?', 'What happens when Z?'). Searches BoardGameGeek rules forums to find answers and clarifications from the community.

Search for board games on BoardGameGeek (BGG) by name or part of a name using a broad search (e.g., 'Catan', 'Ticket to Ride')