Tools
The server exposes 80 tools over 21 resource families — one tool per operation of the v1 API. Each one dispatches in-process to the /v1 endpoint that implements the operation, so validation, filters, scope, permission and tenant isolation are exactly the REST API's: the tool is the endpoint.
How to read these pages
Every tool carries five facts:
kadu_tasks_run· destructive · scopekadu/tasks+write· permissionagent.executions.run·POST /v1/tasks/{id}/run
| Field | Meaning |
|---|---|
| read / write / destructive | The annotation the MCP client reads. A destructive tool (deletes, cancels, runs the agent, replays a webhook, rotates a secret, changes who may trigger a task) runs only after you confirm — in the client's form or through an approval link (Confirming destructive tools). destructive (depending on arguments) asks for confirmation only when the arguments make the call destructive (a webhook changing its URL). |
| scope | The resource (kadu/<resource>) and the verb the token must carry: read, write or delete (the *_delete tools). write does not delete. See Authentication. |
| permission | The console permission the role of the token's person must hold in the organization — the same one the v1 API checks (Permissions). |
METHOD /path | The /v1 endpoint the tool dispatches to, to cross-reference with the API reference. |
Common arguments
These appear across many tools and always mean the same thing.
| Argument | Type | Description |
|---|---|---|
cursor | string | Opaque cursor from meta.next_cursor of the previous page. See Pagination. |
limit | integer | Page size, 1 to 100. Default 25. |
sort_by | string | Sort field: created_at (default), updated_at or one of the filter fields. |
sort_order | asc | desc | Direction. Default desc. |
<field>_gte / <field>_lte | string | Range (ISO 8601), sent as field[gte] / field[lte]. |
idempotency_key | string | Sent as X-Idempotency-Key: repeating the write with the same key does not duplicate it (24 h). See Idempotency. |
custom_metadata | object | Free-form JSON owned by you, echoed on every read and webhook. |
The catalogue
| Family | Tools | read | write | destructive |
|---|---|---|---|---|
me — Connection identity | 1 | 1 | 0 | 0 |
organizations — Organization | 6 | 3 | 2 | 1 |
users — Users | 1 | 1 | 0 | 0 |
memberships — Memberships | 1 | 1 | 0 | 0 |
roles — Roles | 2 | 1 | 1 | 0 |
workspaces — Workspaces | 5 | 2 | 2 | 1 |
activities — Activities | 5 | 2 | 2 | 1 |
tasks — Tasks | 10 | 4 | 2 | 4 |
executions — Executions | 8 | 6 | 0 | 2 |
todos — Todos | 1 | 0 | 1 | 0 |
memories — Memories | 5 | 2 | 2 | 1 |
environments — Environments | 5 | 2 | 2 | 1 |
secrets — Secrets | 5 | 2 | 2 | 1 |
schedules — Schedules | 5 | 2 | 2 | 1 |
files — Files | 5 | 3 | 2 | 0 |
repository — Playbook | 2 | 1 | 1 | 0 |
usage — Usage and cost | 1 | 1 | 0 | 0 |
webhooks — Webhooks | 6 | 2 | 0 | 4 |
webhook_deliveries — Webhook deliveries | 3 | 2 | 0 | 1 |
operation_approvals — Approvals | 2 | 2 | 0 | 0 |
system_events — System events | 1 | 1 | 0 | 0 |
A tool you cannot run is not listed by tools/list at all. If one from this page is missing, see Authentication.