Stable Baseline MCP Policy · 222 Tools

POLICY

How to control Stable Baseline

PolicyLayer is an MCP gateway — it sits between your AI agents and Stable Baseline, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default

{
  "applySubscriptionChange": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations

{
  "autoDesignWhiteboard": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "acceptTaskDependencyReview": {
    "limits": [
      {
        "counter": "accepttaskdependencyreview_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "askAgent": {
    "limits": [
      {
        "counter": "askagent_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Stable Baseline — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON STABLE BASELINE →

Instant setup, no code required.

FULL CATALOGUE

All 222 Stable Baseline tools

FINANCIAL 6 tools

Financial applySubscriptionChange Apply a previously previewed subscription change. Same-tier seat changes update Stripe in place; cross-tier up Financial cancelSubscription Apply a previewed soft cancellation (cancel_at_period_end=true). Customer keeps full access until period end. Financial getCustomerPortalLink Mint a single-use Stripe Customer Portal URL for self-serve billing changes. return_url defaults to https://ap Financial previewSubscriptionCancellation Preview the consequences of cancelling. Returns confirmation_token plus summary {remaining_credits, prepaid_da Financial purchaseCreditPackage Apply a credit-package quote by creating a hosted Stripe Checkout session. Returns checkout_url + session_id. Financial reactivateSubscription Reactivate a subscription that was scheduled to cancel at period end (clears cancel_at_period_end). Rate limit

DESTRUCTIVE 30 tools

Destructive autoDesignWhiteboard Auto-design a complete, visually polished whiteboard from a natural-language goal using the PREMIUM multi-agen Destructive cancelAllKgInScope Emergency stop for KG ingestion: cancels queued/running build runs, queued/running rebuild batches, demotes st Destructive cancelKgBuildBatch Cancel a single KG rebuild batch. Queued runs flip to 'cancelled' immediately; running runs finish naturally. Destructive delegateToAgent Hand an organisation agent a brief (a piece of work, big or small) and get its job back. The job runs in the b Destructive deleteDatabase Move a whole database, one of its tables (pass table) or one of its dashboards (pass dashboard) to the trash. Destructive deleteDatabaseRows Move rows of a table to the trash: up to 500 by id, or every row that matches. Call getDatabase with table fir Destructive deleteDiagramInDocument Delete a diagram: removes the database record AND every reference to it in the document body — the current mar Destructive deleteDocument Delete a document. Destructive deleteFolder Delete a folder recursively, including all nested folders and documents. Destructive deleteImageInDocument Delete an image: removes the stored file, the database record, AND the image from the document body — both the Destructive deleteImprovement Delete an improvement and all associated evidence and activity. Destructive deleteImprovementCategory Delete an improvement category. Cannot delete system categories. Destructive deleteImprovementComment Delete a comment from an improvement. Only its author, or an admin of the improvement's project, workspace or Destructive deletePlan Delete a plan, all its phases, and all tasks/improvements within it. This is a destructive operation that cann Destructive deletePlanComment Delete a comment from a plan. Only its author, or an admin of the plan's project, workspace or organisation, c Destructive deletePlanPhase Delete a plan phase and all tasks/improvements within it. This is a destructive operation that cannot be undon Destructive deleteResourcePermission Delete a permission grant. Refuses if it is the LAST admin grant on the resource. Rate limit 30/min. Use when Destructive deleteTaskDependency Remove a task-dependency edge. Neither item's dates are changed. Needs the same 'write' plan permission as cre Destructive deleteTeam Delete a team. Cascades: team members and team-granted resource permissions are removed automatically. Destruc Destructive deleteVegaDataFile Delete a data file attachment from a document. Destructive deleteWhiteboard Delete a whiteboard (the host document and its canvas). Destructive getAgentRun Follow an agent job: its status (queued, running, awaiting_approval, paused, completed, failed or cancelled), Destructive previewKgScopeChange Preview the credit cost, source counts, and ETA of including or excluding KG scope rows. Returns confirmation_ Destructive previewSubscriptionChange Preview a subscription tier or seat change. Returns confirmation_token (10-min TTL) plus proration and next-in Destructive removeMember Hard-remove a member from an organisation, cascading to workspace and team memberships and resource permission Destructive removeTeamMember Remove a user from a team. Idempotent — returns removed=false if not on the team. Destructive removeWorkspaceMember Remove a member from a workspace. Caller must be a workspace owner or admin. Refuses to remove the last remain Destructive reorderDocuments MOVE documents and boards between folders, or into another project of the organisation, and reorder them: the Destructive resetDocumentInBrain Wipe + re-ingest a single document in the KG. Drops chunks/mentions/entities, clears pending lazy-extraction, Destructive revokeTeamWorkspaceAccess Revoke a team's workspace access. Idempotent — returns revoked=false if no grant exists.

EXECUTE 8 tools

Execute designDeckInWhiteboard Create or refine a slide deck INSIDE an existing whiteboard by conversing with the AI design agent. Send a bri Execute designIllustrationInWhiteboard Create or refine a standalone ILLUSTRATION INSIDE an existing whiteboard by conversing with the AI design agen Execute quoteCreditPackage Quote a credit-package purchase (first half of the human-in-the-loop ritual). Returns quote_token (10-min TTL) Execute renderDiagram Generate a diagram from its DSL/code and get the IMAGE back — WITHOUT inserting it into any document or whiteb Execute startMeetingScribe Invite the Stable Baseline Meeting Scribe bot to a LIVE meeting (Zoom, Google Meet, Microsoft Teams, or Webex) Execute startSignup Begin an agent-driven sign-up to Stable Baseline. Anonymous-callable. Returns a verification_url and a 6-chara Execute stopMeetingScribe Stop a running meeting scribe: the bot leaves the meeting and the board is finalised (tidy pass plus a summary Execute triggerKgRebuild Apply a previously previewed KG rebuild. Dispatches the build batch via kg-rebuild and returns batch_id. Rate

WRITE 93 tools

Write acceptTaskDependencyReview Per-item: apply a successor's suggested_start_date/suggested_end_date to its real dates and clear needs_depend Write addImprovementActivity Add a comment or activity entry to an improvement. Write addImprovementEvidence Add evidence to an improvement. Types: document_section, diagram_node, incident_note, feedback, free_text. Write addPlanActivity Add a comment or activity entry to a plan. People read a plan's entries on its Activity tab in the app, newest Write addTeamMember Add a user to a team as a regular member. Idempotent — returns already_member=true if already on the team. Use Write addWhiteboardElements Author shapes onto a whiteboard from high-level specs (you do NOT need the full Excalidraw element schema). Ap Write addWorkspaceMember Add an existing organisation member to a workspace with a workspace-level role. Idempotent — returns the exist Write applyKgScopeChange Apply a previously previewed KG scope change. Atomically writes kg_scope rows and dispatches a re-ingest batch Write applyTaskDependencyCascade Auto-schedule every item in a plan so all FS/SS/FF task-dependencies are respected (topological pass, duration Write approveAgentAction Approve or decline a change an agent proposed (a pending approval from askAgent, delegateToAgent or getAgentRu Write cancelInvitation Cancel a pending invitation by id. Sets status='revoked'. Server resolves the organisation_id from the invitat Write createBrandKit Create a per-org BRAND KIT so Stable Baseline outputs come out fully on-brand. Upload your branding and it is Write createDatabase Create a database, with its tables and fields in one call. Say where it lives: projectId (one project), worksp Write createDocument Create a document from CDMD markdown (standard Markdown plus SB extensions — call getCdmdLanguageGuide if unfa Write createDocumentFromUpload Step 2 of file ingest. After the file is uploaded via the PUT URL from createDocumentIngestSession, call this Write createDocumentIngestSession Step 1 of file ingest. Mint a single-use PUT upload URL for a large file (PDF, DOCX, plain text, or markdown — Write createFolder Create a folder in a project. Supports nesting via parentId. Write createImageUploadSession Create a PUT upload URL for a document image (max 10MB). Use the returned assetUrl with insertImageInDocument. Write createImprovement Create an improvement item in a project. Requires projectId and title. Auto-assigns friendly ID. Accepts every Write createImprovementCategory Create an improvement category or sub-category. Max two levels. Write createOrganisation Create a new organisation owned by the calling credential's user. Auth: the server checks that the user may cr Write createPlan Create a plan in a project. Requires projectId and title. Pass fields (for example ["id", "versionTimestamp"]) Write createPlanPhase Create a phase in a plan. Position and wbs_code are auto-computed. By default a phase's dates follow its tasks Write createProject Create a new project inside a workspace. Mirrors the UI Create Project dialog. Auth: write on workspace + cred Write createTask Create a task in a plan. Requires planId and title. Accepts every field updateTask accepts, so a task can be c Write createTaskDependency Create an FS/SS/FF scheduling edge with lag/lead between two items in the same plan (rendered as a Gantt arrow Write createTeam Create a new team inside an organisation. Caller is added as the team's lead. Subject to plan team limit. Rate Write createVegaDataUploadSession Create a PUT upload URL for a Vega/Vega-Lite data file. Use returned assetUrl in your Vega spec. Write createWhiteboard Create a whiteboard: an infinite freeform canvas. A whiteboard is a hidden document (it won't appear in listDo Write createWorkspace Create a new workspace inside the organisation. Auth: ceiling — credential must hold can_lifecycle AND user mu Write designComponent Design ONE reusable, on-brand SLIDE COMPONENT and add it to the org's component library so every future brande Write dismissTaskDependencyReview Per-item: clear needs_dependency_review without changing dates — keeps the edge, ignores the suggestion. Use w Write duplicateWhiteboardElements Copy-paste existing whiteboard elements — the MCP equivalent of selecting a group and pressing Ctrl/Cmd+D. Clo Write editDocument Edit a document: the PREFERRED tool for small targeted changes. Two patch dialects — do NOT mix them in one ca Write editWhiteboardImageRegion Mask-edit (inpaint) one region of an image element on a whiteboard. Given the target image element id and a pa Write exportDatabaseRows A table's rows as a file to download: CSV, or xlsx for Excel. Call getDatabase with table first for the field Write exportDocument Export a Stable Baseline document as a PDF or an editable Word document (docx), styled with the organisation's Write exportFromWhiteboard Export from a whiteboard: a finished design (a deck) as an editable PowerPoint (PPTX), a PDF or PNG images, or Write findAndReplaceTextInDocument Find and replace EXACT substrings in a document (NOT regex: wildcards and patterns are matched literally). Rep Write grantTeamWorkspaceAccess Grant a team read/write/admin access to a workspace. Idempotent. Team and workspace must be in the same organi Write importDatabaseRows Load a CSV, TSV or Excel file into a table: an existing table, or a new one (newTable) whose fields are made f Write insertDiagramInDocument Insert a new diagram into a document. Call listDiagramTypes to find your type, then getDiagramTypeGuide for DS Write insertImageInDocument Insert an image into a document (max 10MB). Provide imageBase64, imageBinary, or imageUrl. For large files, ca Write insertWhiteboardDiagram Insert (or re-render in place) a real DIAGRAM (BPMN, Diagrams-as-Code / any DSL: mermaid, d2, plantuml, graphv Write insertWhiteboardImage Insert a real IMAGE (photo, screenshot, logo, picture) into a whiteboard — the storage-backed equivalent of in Write inviteMember Invite a person by email to the credential's organisation. Auth: org id must match the credential AND credenti Write kg_evaluate_retrieval Check how well a set of kg_search results is backed by the knowledge graph before you answer from them. Pass t Write kg_suggest_sample_questions Suggest up to six sample questions to ask the knowledge graph: three standard ones built around the most-menti Write rebuildPlatformCatalogEmbeddings Maintenance (requires write). Refreshes the search index over every platform catalogue (MCP tools, whiteboard Write reorderFolders Batch-reorder folders within a parent (or project root) by setting sibling positions. Pass [{folderId, positio Write reorderImprovementCategories Reorder improvement categories by setting sort_order values. Write reorderPlanPhases Reorder plan phases by setting position values. WBS codes are recalculated. Write resendInvitation Resend a pending invitation: extends expires_at by 7 days and re-triggers the invitation email. Server resolve Write saveDatabaseDashboard Make a dashboard for a database, or change one, in one call that saves everything or nothing. Leave dashboard Write saveDatabaseForm Make a form on a database table, or change one, in one call. Each answer adds a row to the table (read the ans Write setDefaultBrandKit Set or clear the default BRAND KIT at a scope: 'organization', 'workspace', 'project', 'folder' or 'document'. Write setKgDocumentScope Toggle KG-scope override for a single document (on/off/inherit). Documents default to inheriting their folder/ Write setKgFolderScope Toggle KG-scope override for a folder (on/off/inherit). Folders default to inheriting their project's scope. R Write setKgProjectVisibility Set the KG visibility mode for a project: 'strict' (multi-source rows hidden unless user can read every source Write setKgWorkspaceScope Toggle whether a workspace is in the Knowledge Graph (on/off/inherit). 'on' enables the workspace as a gate fo Write setMemberActive Soft-deactivate or reactivate an organisation member. Refuses self-deactivation, last-admin/owner deactivation Write setPlanItemParent Set or clear the plan outline (WBS) nesting of a task or improvement: the indent inside one plan phase, with n Write setResourcePermissionOverride Set a single 3-state override on a permission row: null=inherit, true=allow, false=deny. Per-axis (read/write/ Write setUpAgent Make an organisation agent, or change one you own or manage, exactly as the Agents screens do (your role and y Write setUpAgentDuty Add or change a duty of an agent you own or manage (work it does on its own: on a schedule, or when something Write updateBillingEmail Update the organisation's billing email. Validates the format, saves it, and updates the email on the organisa Write updateDatabase Change a database: rename it, change its description or icon, switch inheriting access from its project, works Write updateDiagramInDocument Update a diagram's code, description, or properties. Call getDiagramTypeGuide for DSL syntax. New diagramCode Write updateFolder Update a folder: rename it, move it or reorder it. parentId moves it under another folder of its project. To m Write updateImageInDocument Update image metadata (alt, caption, nlDescription, dimensions, alignment) — metadata only; to change the pict Write updateImprovement Update an improvement, or many in one call (or a task: tasks share this row, but prefer the symmetric updateTa Write updateImprovementCategory Update an improvement category. Cannot modify system categories. Write updateImprovementComment Update a comment on an improvement. Only its author, or an admin of the improvement's project, workspace or or Write updateMemberRole Update an organisation member's role (admin or member). Owners cannot be changed via this tool. Refuses self-p Write updateOrganisation Update an organisation's name and/or description. Auth: ceiling — credential must hold can_admin_org capabilit Write updateOrgFeatureFlags Switch organisation modules on or off, one true or false a module: documents, plans, improvements, knowledge_g Write updateOrgSettings Update an organisation's settings object via deep merge. Auth: ceiling — credential must hold can_admin_org AN Write updatePlan Update a plan. versionTimestamp (optimistic locking) is the plan's updated_at in epoch milliseconds: listPlans Write updatePlanComment Update a comment on a plan. Only its author, or an admin of the plan's project, workspace or organisation, can Write updatePlanPhase Update a plan phase, or many phases in one call. Each phase has its own versionTimestamp (its updated_at in ep Write updateProfile Update a member's display name. Your own name needs no organisation_id; another member's name needs organisati Write updateProject Update a project's name, description, and/or icon. Mirrors the UI Project General Settings page. Auth: admin o Write updateResourcePermission Update the access level on an existing permission row. Override flags are NOT touched: use setResourcePermissi Write updateTask Update a task, or many tasks in one call. A task is the same kind of record as an improvement (one with is_tas Write updateTaskDependency Change the type (FS/SS/FF) or lag/lead of an existing task-dependency. Doesn't move dates directly; flags the Write updateTeam Update a team's name, description, and/or colour. At least one field required. Slug is intentionally not edita Write updateTeamWorkspaceAccess Update an existing team's workspace access level. Refuses if no grant exists — call grantTeamWorkspaceAccess f Write updateUserPreferences Update the calling user's preferences. Self-only. Rate limit 60/min. Partial: only fields supplied are updated Write updateWhiteboardScene Edit elements on a whiteboard's canvas WITHOUT dropping the rest of the scene. A board may hold many diagrams/ Write updateWorkspace Update a workspace's name. Auth: standard workspace-write ladder + user must be workspace owner or admin. Slug Write updateWorkspaceMember Change an existing workspace member's role. Caller must be a workspace owner or admin. Cannot self-demote from Write upsertResourcePermission Grant a user OR team a permission on a workspace/project/folder/document/improvement/plan, or change the one t Write writeDatabaseRows Add rows to a table or change rows, in one of two ways that never mix. Call getDatabase with table first: it g

READ 85 tools

Read askAgent Talk to an organisation agent, as a person would: each call sends one message in a conversation with it and an Read dataToTable Render tabular data as an aligned grid of labelled cells on a whiteboard, deterministically. Pass rows (an arr Read getAgentConversation Read a conversation with an organisation agent, or list your earlier ones. With conversationId: the conversati Read getCdmdLanguageGuide Get the CDMD markdown language specification. Call before createDocument if unfamiliar with syntax. Read getCreditBalance Composite credit balance for an organisation: plan_credits (recurring monthly bucket), top_up_credits (purchas Read getCreditPackages List active credit packages available for purchase (name, credits, bonus_credits, price in cents AUD). Catalog Read getCurrentPlanEntitlements Read the plan entitlements (limits + capability flags) that apply to the caller's organisation. Returns { tier Read getCurrentUser Return the calling user's identity (user_id, display_name, full_name, email, avatar_url). Use this when the us Read getDashboardImage Draw one page of a database dashboard as a picture so you can SEE it, as getDiagramImage does for a diagram: e Read getDashboardVisualGuide How to write the spec of one kind of dashboard visual: its wells (what goes where, and how many), which must b Read getDatabase Read a database's structure: its tables, each table's fields and saved views, the rule that decides who sees w Read getDatabaseGuide How to use the database tools, one topic at a time: filters and operators, totals and analytics, formulas, cha Read getDatabaseRow Read one row in full: every field including long text, linked rows (with their ids), people (with their ids) a Read getDeckReplyInWhiteboard Get the design agent's reply after calling designDeckInWhiteboard OR designIllustrationInWhiteboard: the statu Read getDiagramImage Render a diagram that ALREADY exists in a document to an IMAGE (svg/png/jpeg @1x/2x/3x) and return it — a temp Read getDiagramInDocument Get a diagram's full details including raw DSL source code. Use diagramId from DIAGRAM_OMITTED markers in getD Read getDiagramTypeGuide Get DSL writing instructions and an example for a diagram type (a renderer such as 'default', 'mermaid' or 'bp Read getDocument Read a document's content with line numbers. content.text lines are formatted NNNNN<TAB>content (cat -n style) Read getDocumentIngestJob Read the current status of an ingest job. Returns { status, stage, processedImages, totalImages, documentId, e Read getEffectivePermission Compute a user's effective permission level on a resource (taking team grants, inheritance, and 3-state overri Read getFolderHierarchy Get the folder and document tree. Pass folderId for the subtree under one folder, or projectId for the project Read getImageInDocument Get image details including a fresh link to the image that works for one hour (call again for a new one; never Read getImprovement Get full details for an improvement item including evidence, activity log, compliance context, and the checkli Read getKgScopeTree List every kg_scope row for the caller's organisation, optionally narrowed to a workspace or project subtree. Read getMeetingScribeStatus Get a meeting scribe's status after startMeetingScribe: the session state (joining, in the waiting room, live Read getMember Fetch a single organisation member by user_id, enriched with profile (email + display name). Auth: org id must Read getOrganisation Read a single organisation by id. Returns id, name, slug, description, settings (an object), created_at, membe Read getOrgSettings Read an organisation's settings JSON and the derived enabled-features map (plans, documents, improvements, com Read getPlan Get full plan details including phases, items, and activity. Every level carries its own optimistic-lock token Read getPlanHierarchy Get the complete plan hierarchy (phases, tasks, improvements) in one call. Recommended first call for plan nav Read getPlanPhase Get a plan phase by ID with full details. Returns versionTimestamp — pass it to updatePlanPhase for optimistic Read getPriceForTier Read the public catalogue entry for a single subscription tier (free, plus, pro, enterprise). Free, Plus and P Read getProject Read a single project by id. Auth via the standard project-access ladder. Returns the project's full record (i Read getProjectHierarchy Get the complete folder and document tree for a project in one call. Recommended first call for navigation. Read getSubscription Read the subscription state for an organisation. Returns tier, status, current billing period, seat count, mem Read getTask Get a task by ID with full details, evidence, activity, and the checklist array (each item: id, text, due_date Read getTeam Get a single team by ID with profile-enriched member list (display_name, email, avatar_url, role, joined_at). Read getUserPreferences Read the calling user's preferences. Self-only — no params required. Returns { notifications, grids } where no Read getWhiteboard Read a whiteboard: its metadata plus a summary of the canvas (element count, element types, and text labels on Read getWhiteboardGuide Get the Stable Baseline whiteboarding guide (Markdown): when to use stencils vs architecture icons vs code/BPM Read getWhiteboardImage Render a whiteboard to a raster IMAGE so you can SEE it and confirm your edits look right, then iterate — like Read getWorkspace Read a single workspace by id. Auth via the standard workspace-access ladder (credential org match + workspace Read kg_backlinks Linked-mentions rail: every edge whose dst matches the named entity. Read kg_get_entity Fetch a KG entity by id or name, with the entities directly connected to it. The response also carries datedFa Read kg_get_wiki_page Fetch the wiki page written for a community (a group of closely related entities in the knowledge graph), in C Read kg_list_communities List the communities the knowledge graph has found in an organisation's content (optionally for one project). Read kg_related_documents Find other sources that share entities with the given source. Read kg_scope_status Check whether Knowledge Graph is in-scope for a given target. Read kg_search FIND an artefact by its name, friendly id or uuid with artefactMetadataOnly:true. This works in every organisa Read listAgents List the organisation agents you may use (through a connection held to chosen places, only the agents whose pl Read listArchitectureIcons List and search the full Stable Baseline icon library, including 3,850 library icons. The AWS, Azure, GCP, Dev Read listAssignablePrincipals Server-side searchable, paginated list of the USERS and TEAMS that can be assigned as the owner of an improvem Read listBrandKits List an organisation's BRAND KITS (palette/fonts/logo), newest first. Use a returned id as brandKitId for a de Read listCreditPurchases List credit-purchase history for an organisation, newest first. Status, credits purchased, bonus, amount paid Read listDashboardVisualTypes List the kinds of visual a database dashboard can hold: cards and KPIs, gauges, bar, column, line, area and co Read listDatabases List the databases you can use, with their tables and row counts. A database holds tables of rows, like a work Read listDiagramTypes List supported diagram types (renderers such as default, mermaid, plantuml, bpmn and d2; 'default' is the plat Read listDocuments List AND grep documents in a project, workspace, or folder. query does a full-content search across each docum Read listDocumentVersions List version history for a document. Returns timestamps, creator, change summary, and content. HOW IT CHANGED: Read listFolders List folders in a project. Use parentId for nested folders. For full tree, use getProjectHierarchy instead. Read listImprovementCategories List improvement categories for a project. Returns tree and flat list. Read listImprovements List AND grep improvements in a project. query searches the title, friendlyId and problem statement, not just Read listInvitations List organisation invitations. Auth: org id must match the credential's organisation AND the credential must h Read listInvoices List invoices for an organisation, newest first. Returns hosted Stripe invoice URLs and PDF links. Stripe IDs Read listMembers List members of an organisation, enriched with email + display name. Auth: org id must match the credential's Read listOrganisations List organisations you have access to. Supports query filtering by name/slug. Read listPaymentMethods List saved payment methods for an organisation. Returns masked card metadata only (brand, last4, exp month/yea Read listPlanPhases List phases for a plan ordered by position. Each phase carries its own versionTimestamp, ready for updatePlanP Read listPlans List AND grep plans in a project. query searches the title, friendlyId and description, not just the title (su Read listProjects List projects in a workspace. Supports query filtering by project name. Read listResourcePermissions List explicit permission grants on a resource (workspace/project/folder/document/improvement/plan), including Read listTaskDependencies List FS/SS/FF task-dependency edges in a plan (the Gantt arrows). Scope by planId, projectId, or itemId. direc Read listTasks List AND grep tasks in a plan. query searches the title, friendlyId and description, not just the title (subst Read listTeams List teams in an organisation, with optional search filter and an includeMembers flag that returns each team's Read listWhiteboards List AND grep the whiteboards in a project (hidden whiteboard-kind documents). query searches the title and fr Read listWhiteboardStencils Search the built-in library of structural whiteboard stencils — ready-made hand-drawn graphics: flowchart/UML/ Read listWorkspaces List workspaces you have access to. Scope to one organisation with organisationId (a structural filter — use i Read pollSignupStatus Poll the status of a signup begun via startSignup. Anonymous-callable. Possible status values: pending (the us Read previewKgRebuild Preview the cost / coverage / ETA of a full KG rebuild for the org (optionally narrowed to a workspace or proj Read previewTaskDependencyCascade Dry-run of applyTaskDependencyCascade — returns the diff without writing. Empty items array means the plan is Read queryDatabaseRows Answer a question about a table's rows in one call: a count, a total or an average, or the rows themselves. Ca Read searchImprovements Ranked search over IMPROVEMENTS AND TASKS that matches by meaning as well as by wording. Returns ranked { impr Read searchInfographicTemplates Search the 276 infographic templates by meaning. Call this FIRST when building an infographic diagram so you p Read searchTools Search available tools by keyword or category. Returns matching tool names and descriptions. Read traceImage Turn a raster image into hand-drawn freedraw strokes on a whiteboard, deterministically. Pass an image (imageU

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Stable Baseline

Can an AI agent move money through the Stable Baseline MCP server? +

Yes. The Stable Baseline server exposes 6 financial tools including applySubscriptionChange, cancelSubscription, getCustomerPortalLink. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the Stable Baseline MCP server? +

Yes. The Stable Baseline server exposes 30 destructive tools including autoDesignWhiteboard, cancelAllKgInScope, cancelKgBuildBatch. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Stable Baseline? +

The Stable Baseline server has 93 write tools including acceptTaskDependencyReview, addImprovementActivity, addImprovementEvidence. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Stable Baseline.

How many tools does the Stable Baseline MCP server expose? +

222 tools across 4 categories: Destructive, Execute, Read, Write. 85 are read-only. 137 can modify, create, or delete data.

How do I enforce a policy on Stable Baseline? +

Register the Stable Baseline MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Stable Baseline

What Stable Baseline exposes to your agents

What Stable Baseline costs in tokens

The most dangerous Stable Baseline tools

How to control Stable Baseline

All 222 Stable Baseline tools

Related servers

Questions about Stable Baseline

Enforce policy on every Stable Baseline tool call.