New Your team’s decisions, in one playbook every coding agent works from. Never answer your agent twice

Genesis

252 tools. 110 can modify or destroy data without limits.

27 destructive tools with no built-in limits. Policy required.

Last updated:

110 can modify or destroy data
142 read-only
252 tools total

Community server · catalogue entry checked 14/10/2026 · full schemas captured for 231 of 252 tools

How to control Genesis ↓

What Genesis exposes to your agents

Read (142) Write / Execute (83) Destructive / Financial (27)

What Genesis costs in tokens

40,388 tokens of tool definitions, loaded on every request
20% of a 200k context window
581 heaviest tool: dials_createMessagingCampaign
Critical Risk

The most dangerous Genesis tools

110 of Genesis's 252 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

How to control Genesis

PolicyLayer is an MCP gateway — it sits between your AI agents and Genesis, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "beacons_revokeBridgeDevice": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "beacons_issueBridgeDeviceChallenge": {
    "limits": [
      {
        "counter": "beacons_issuebridgedevicechallenge_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "beacons_acknowledgeBridgeDeviceRevocation": {
    "limits": [
      {
        "counter": "beacons_acknowledgebridgedevicerevocation_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Genesis — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON GENESIS →

Instant setup, no code required.

All 252 Genesis tools

DESTRUCTIVE 27 tools
Destructive beacons_revokeBridgeDevice Revoke bridge device (DELETE /v1/beacons/bridge/devices/{id}) [service status: unverified] Destructive dials_deleteNumber Release an owned number at its carrier through DELETE (DELETE /v1/dials/numbers/{number_id}) [service status: Destructive fleets_cancelTask Cancel an organization task (POST /v1/fleets/tasks/{task_id}/cancel) [service status: unverified] Destructive fleets_deleteConnection Disconnect the organization Foundry key (DELETE /v1/fleets/connection) [service status: unverified] Destructive flocks_revokeNode Revoke an org-owned node binding immediately (DELETE /v1/flocks/byom/nodes/{id}) [service status: not_deployed Destructive flocks_rotateNodeCredential Prepare a fixed-scope key, persist it, then commit; cancel an uncertain prepare before retrying (POST /v1/floc Destructive hives_cancel_deployment Cancel a pending deployment and stop its runtime work (POST /v1/hives/projects/{project_id}/deployments/{deplo Destructive hives_delete_bucket Delete a storage bucket (DELETE /v1/hives/projects/{project_id}/storage/buckets/{bucket_id}) [service status: Destructive hives_delete_cron Delete a cron job (DELETE /v1/hives/projects/{project_id}/cron/{cron_id}) [service status: down] Destructive hives_delete_deployment Delete an inactive deployment (DELETE /v1/hives/projects/{project_id}/deployments/{deployment_id}) [service st Destructive hives_delete_dlq_native_queue hives_delete_dlq_native_queue (DELETE /v1/hives/projects/{project_id}/queues/{queue_id}/dlq/{message_id}) [ser Destructive hives_delete_function Unregister an owned function before removing metadata (DELETE /v1/hives/projects/{project_id}/functions/{funct Destructive hives_delete_native_queue hives_delete_native_queue (DELETE /v1/hives/projects/{project_id}/queues/{queue_id}) [service status: down] Destructive hives_delete_native_topic hives_delete_native_topic (DELETE /v1/hives/projects/{project_id}/topics/{topic_id}) [service status: down] Destructive hives_delete_object Delete an object from a bucket (DELETE /v1/hives/projects/{project_id}/storage/buckets/{bucket_id}/objects/{ke Destructive hives_delete_object_by_key hives_delete_object_by_key (DELETE /v1/hives/projects/{project_id}/storage/buckets/{bucket_id}/objects) [servi Destructive hives_delete_secret Delete a secret (DELETE /v1/hives/projects/{project_id}/secrets/{secret_id}) [service status: down] Destructive hives_delete_volume Delete a detached volume and its data (DELETE /v1/hives/projects/{project_id}/volumes/{volume_id}) [service st Destructive hives_detach_context_project hives_detach_context_project (DELETE /v1/hives/context/project) [service status: down] Destructive hives_marketplace_uninstall Persist uninstall intent before stopping every retained workload. (DELETE /v1/hives/projects/{project_id}/mark Destructive hives_purge_dlq_native_queue hives_purge_dlq_native_queue (DELETE /v1/hives/projects/{project_id}/queues/{queue_id}/dlq) [service status: d Destructive hives_purge_native_queue hives_purge_native_queue (POST /v1/hives/projects/{project_id}/queues/{queue_id}/purge) [service status: down] Destructive hives_remove_native_queue_consumer hives_remove_native_queue_consumer (DELETE /v1/hives/projects/{project_id}/queues/{queue_id}/consumer) [servic Destructive hives_unsubscribe_native_topic hives_unsubscribe_native_topic (DELETE /v1/hives/projects/{project_id}/topics/{topic_id}/subscriptions/{subscr Destructive iam_revokeApiKey Revoke API key (DELETE /v1/iam/api-keys/{key_id}) [service status: not_deployed] Destructive relays_deleteRecord Delete a record (DELETE /v1/relays/zones/{zone}/records/{recordId}) [service status: unverified] Destructive runner_cancelJob Request cancellation of a Runner job (POST /v1/runner/jobs/{jobId}/cancel) [service status: not_deployed]
EXECUTE 12 tools
Execute dials_deployWorkflow Save a normalized workflow and enabled routing descriptor (POST /v1/dials/workflows/deploy) [service status: u Execute fleets_launchAgent Launch a persistent Henry agent (POST /v1/fleets/agents) [service status: unverified] Execute fleets_startInstance Start already admitted Henry compute (POST /v1/fleets/instances/{instance_id}/start) [service status: unverifi Execute fleets_stopAgent Stop a persistent Henry agent (POST /v1/fleets/agents/{agent_id}/stop) [service status: unverified] Execute fleets_stopInstance Stop admitted Henry compute and retain its data (POST /v1/fleets/instances/{instance_id}/stop) [service status Execute henry_commandRun Pause, resume, cancel or send follow-up input (POST /v1/henry/runs/{run_id}/command) [service status: not_depl Execute hives_invoke_deployment Invoke a real running owned deployment and return the raw guest HTTP response (POST /v1/hives/projects/{projec Execute hives_invoke_function Complete a real function invocation and return the raw guest HTTP response (POST /v1/hives/projects/{project_i Execute hives_marketplace_reconcile Explicitly finish an existing durable operation; this never starts a build. (POST /v1/hives/projects/{project_ Execute hives_stop_deployment Stop an active deployment after runtime acknowledgment (POST /v1/hives/projects/{project_id}/deployments/{depl Execute hives_trigger_cron Manually trigger a cron job (POST /v1/hives/projects/{project_id}/cron/{cron_id}/trigger) [service status: dow Execute runner_startJob Start a bounded Runner task with an idempotency key (POST /v1/runner/jobs) [service status: not_deployed]
WRITE 71 tools
Write beacons_issueBridgeDeviceChallenge Issue a five-minute device proof challenge (POST /v1/beacons/bridge/device-challenges) [service status: unveri Write beacons_provisionBridgeFleet Create or reuse first-fleet metadata in the verified Beacons selection (POST /v1/beacons/bridge/fleets/provisi Write beacons_updateBridgeDevice Update bridge device (name, nicknames) (PATCH /v1/beacons/bridge/devices/{id}) [service status: unverified] Write blinds_ownerAttach Original human owner enrollment: attach (POST /v1/blinds/owner-enrollment/attach) [service status: not_deploye Write dials_assignCampaignNumber Save pending association of an owned number with an owned campaign (POST /v1/dials/messaging/campaigns/{campai Write dials_assignNumber Assign an owned number (POST /v1/dials/numbers/assign) [service status: unverified] Write dials_createAgent Save an unassigned AgentProfile by scoped normalized name (POST /v1/dials/agents) [service status: unverified] Write dials_createHumanProfile Save an unassigned HumanProfile by scoped normalized name (POST /v1/dials/human-profiles) [service status: unv Write dials_createMessageTemplate Save a scoped message template by normalized name (POST /v1/dials/message-templates) [service status: unverifi Write dials_createMessagingBrand Save pending messaging brand configuration (POST /v1/dials/messaging/brands) [service status: unverified] Write dials_createMessagingCampaign Save a pending campaign for a verified owned brand (POST /v1/dials/messaging/campaigns) [service status: unver Write dials_createOutboundCall Queue an approved outbound call with an idempotency key (POST /v1/dials/calls/outbound) [service status: unver Write dials_createOutboundMessage Queue an explicitly approved outbound message (POST /v1/dials/messages/outbound) [service status: unverified] Write dials_createRoutingRule Create an enabled owned-number inbound policy with durable UUID idempotency (POST /v1/dials/routing/rules) [se Write dials_createVoiceProfile Save an unassigned VoiceProfile by scoped normalized name (POST /v1/dials/voice-profiles) [service status: unv Write dials_disableRoutingRule Disable an owned managed inbound policy while retaining its record (DELETE /v1/dials/routing/rules/{rule_id}) Write dials_registerEmergencyAddress Register and bind the dispatchable emergency address for an owned number (POST /v1/dials/numbers/e911) [servic Write dials_updateNumberCallerName Update the caller name of an owned number (PUT /v1/dials/numbers/cnam) [service status: unverified] Write fleets_commandAgent Send input to a persistent Henry agent (POST /v1/fleets/agents/{agent_id}/command) [service status: unverified Write fleets_setConnection Encrypt an organization-owned Foundry key with Genesis KMS (PUT /v1/fleets/connection) [service status: unveri Write fleets_submitTask Dispatch an agent task (POST /v1/fleets/tasks) [service status: unverified] Write flocks_activateNode Activate the exact saved LifeID node reservation idempotently (POST /v1/flocks/nodes/{id}/activate) [service s Write flocks_createJoinToken Create an org-scoped single-use join token (admin required) (POST /v1/flocks/byom/tokens) [service status: not Write flocks_renameNode Update an org-owned node nickname (PATCH /v1/flocks/byom/nodes/{id}) [service status: not_deployed] Write foundry_createChatCompletion Create a chat completion (POST /v1/foundry/chat/completions) Write foundry_createEmbedding Create embeddings (POST /v1/foundry/embeddings) Write foundry_createNativeCreditCheckout Create the server-configured TEST credit checkout (POST /v1/foundry/billing/checkout/credits) Write henry_createRun Execute a Henry task through Foundry (POST /v1/henry/runs) [service status: not_deployed] Write henry_putCredential Validate and encrypt an organization Foundry key in Genesis KMS (PUT /v1/henry/credential) [service status: no Write hives_add_domain Add a custom domain to a project (POST /v1/hives/projects/{project_id}/domains) [service status: down] Write hives_bulk_upsert_secrets Bulk create or update secrets (PUT /v1/hives/projects/{project_id}/secrets/bulk) [service status: down] Write hives_configure_native_queue hives_configure_native_queue (PATCH /v1/hives/projects/{project_id}/queues/{queue_id}) [service status: down] Write hives_configure_native_queue_consumer hives_configure_native_queue_consumer (PUT /v1/hives/projects/{project_id}/queues/{queue_id}/consumer) [servic Write hives_create_bucket Create a new storage bucket (POST /v1/hives/projects/{project_id}/storage/buckets) [service status: down] Write hives_create_cron Create a new cron job (POST /v1/hives/projects/{project_id}/cron) [service status: down] Write hives_create_deployment Create a new deployment (POST /v1/hives/projects/{project_id}/deployments) [service status: down] Write hives_create_function Create a new function (POST /v1/hives/projects/{project_id}/functions) [service status: down] Write hives_create_native_queue hives_create_native_queue (POST /v1/hives/projects/{project_id}/queues) [service status: down] Write hives_create_native_topic hives_create_native_topic (POST /v1/hives/projects/{project_id}/topics) [service status: down] Write hives_create_project Create a new project (POST /v1/hives/projects) [service status: down] Write hives_create_secret Create a new secret (POST /v1/hives/projects/{project_id}/secrets) [service status: down] Write hives_create_volume Create bounded local persistent storage (POST /v1/hives/projects/{project_id}/volumes) [service status: down] Write hives_generate_presigned_url Generate a presigned URL for object access (POST /v1/hives/projects/{project_id}/storage/buckets/{bucket_id}/p Write hives_marketplace_install Install a real package. A 202 acknowledges the durable operation, not readiness. (POST /v1/hives/projects/{pro Write hives_marketplace_publish Publish a verified selected-project artifact; never fetch an arbitrary URL. (POST /v1/hives/projects/{project_ Write hives_marketplace_update Update through a real successor deployment while retaining the old runtime. (POST /v1/hives/projects/{project_ Write hives_promote_deployment Promote a deployment to production (POST /v1/hives/projects/{project_id}/deployments/{deployment_id}/promote) Write hives_publish_native_topic hives_publish_native_topic (POST /v1/hives/projects/{project_id}/topics/{topic_id}/messages) [service status: Write hives_reconcile Explicit recovery observes provider generations. It never replays an unknown PUT payload or marks an uncertain Write hives_resume_cron Resume a cron job (POST /v1/hives/projects/{project_id}/cron/{cron_id}/resume) [service status: down] Write hives_resume_native_queue hives_resume_native_queue (POST /v1/hives/projects/{project_id}/queues/{queue_id}/resume) [service status: dow Write hives_select_runtime hives_select_runtime (GET /v1/hives/runtimes/select) [service status: down] Write hives_send_native_queue hives_send_native_queue (POST /v1/hives/projects/{project_id}/queues/{queue_id}/messages) [service status: dow Write hives_set_context_project hives_set_context_project (POST /v1/hives/context/project) [service status: down] Write hives_set_cors_config Set CORS rules for a bucket (PUT /v1/hives/projects/{project_id}/storage/buckets/{bucket_id}/cors) [service st Write hives_update_cron Update a cron job (PATCH /v1/hives/projects/{project_id}/cron/{cron_id}) [service status: down] Write hives_update_function Update an owned function and encrypted overrides (PUT /v1/hives/projects/{project_id}/functions/{function_id}) Write hives_update_project Update a project (PATCH /v1/hives/projects/{project_id}) [service status: down] Write hives_update_project_environment Encrypt and persist a flat map; acknowledge updated names without values. (PUT /v1/hives/projects/{project_id} Write hives_update_project_settings hives_update_project_settings (PATCH /v1/hives/projects/{project_id}/settings) [service status: down] Write hives_update_secret Update a secret's value (creates a new version) (PUT /v1/hives/projects/{project_id}/secrets/{secret_id}) [ser Write hives_upload_deployment Upload a real WASM artifact and deploy it (POST /v1/hives/projects/{project_id}/deployments/upload) [service s Write hives_upload_object Upload an object to a bucket via a server-side proxy. (PUT /v1/hives/projects/{project_id}/storage/buckets/{bu Write hives_upload_object_by_key hives_upload_object_by_key (PUT /v1/hives/projects/{project_id}/storage/buckets/{bucket_id}/objects) [service Write iam_createOrgApiKey Create organization API key (POST /v1/iam/organizations/{org_id}/api-keys) [service status: not_deployed] Write minds_createMind Create one capped Sandbox Mind; retain the same operation key after uncertainty (POST /v1/minds/services) [ser Write minds_insertEpisodicMemory Persist an episodic event in an explicit ready Mind; never automatically replay (POST /v1/minds/memory/episodi Write relays_createRecord Create one record, or up to 100 with {records:[...]} (POST /v1/relays/zones/{zone}/records) [service status: u Write relays_createZone Create a DNS zone (POST /v1/relays/zones) [service status: unverified] Write relays_updateRecord Update a record (PATCH /v1/relays/zones/{zone}/records/{recordId}) [service status: unverified] Write silos_createProject Create project metadata without allocating a database (POST /v1/silos/projects) [service status: not_deployed]
READ 142 tools
Read beacons_acknowledgeBridgeDeviceRevocation Acknowledge an applied transport teardown action (POST /v1/beacons/bridge/devices/{id}/revocations/{version}/a Read beacons_enrollBridgeDevice Admit a device using its signed one-time challenge (POST /v1/beacons/bridge/device-enrollments) [service statu Read beacons_listBridgeDeviceRevocations Poll durable teardown commands for the enrolled device owner (GET /v1/beacons/bridge/devices/{id}/revocations) Read beacons_listBridgeDevices List bridge devices (GET /v1/beacons/bridge/devices) [service status: unverified] Read blinds_ownerP256Ensure Original human owner enrollment: p256-ensure (POST /v1/blinds/owner-enrollment/p256-ensure) [service status: n Read blinds_ownerReserve Original human owner enrollment: reserve (POST /v1/blinds/owner-enrollment/reserve) [service status: not_deplo Read blinds_ownerSign Original human owner enrollment: sign (POST /v1/blinds/owner-enrollment/sign) [service status: not_deployed] Read dials_getConsoleSummary Read authoritative scoped Dials resource counts (GET /v1/dials/console/summary) [service status: unverified] Read dials_getOperatingSurface Read the scoped Dials operating surface (GET /v1/dials/console/operating-surface) [service status: unverified] Read dials_listAgents List saved agents in the selected scope (GET /v1/dials/agents) [service status: unverified] Read dials_listCalls List real call lifecycle and carrier outcomes (GET /v1/dials/calls) [service status: unverified] Read dials_listHumanProfiles List saved humans in the selected scope (GET /v1/dials/human-profiles) [service status: unverified] Read dials_listMessages List scoped saved messages and actual delivery state (GET /v1/dials/messages) [service status: unverified] Read dials_listMessageTemplates List scoped saved message templates (GET /v1/dials/message-templates) [service status: unverified] Read dials_listMessagingBrands List scoped messaging brand configuration (GET /v1/dials/messaging/brands) [service status: unverified] Read dials_listMessagingCampaigns List scoped messaging campaign configuration (GET /v1/dials/messaging/campaigns) [service status: unverified] Read dials_listNumberDrift List scoped inventory drift (GET /v1/dials/numbers/drift) [service status: unverified] Read dials_listNumberReconciliations List scoped carrier reconciliation receipts (GET /v1/dials/numbers/reconciliations) [service status: unverifie Read dials_listNumbers List numbers in the authorized scope (GET /v1/dials/numbers) [service status: unverified] Read dials_listRoutingRules List managed inbound policies in the verified scope (GET /v1/dials/routing/rules) [service status: unverified] Read dials_listVoiceProfiles List saved voiceProfiles in the selected scope (GET /v1/dials/voice-profiles) [service status: unverified] Read dials_listWorkflows List scoped saved workflow routing descriptors (GET /v1/dials/workflows) [service status: unverified] Read dials_provisionNumber Provision a carrier number with an idempotency key (POST /v1/dials/numbers/provision) [service status: unverif Read dials_reconcileNumberInventory Reconcile owned inventory against configured carriers (POST /v1/dials/numbers/reconcile) [service status: unve Read dials_recoverOutboundCall Read an existing outbound admission receipt without originating a call (POST /v1/dials/calls/outbound/recover) Read dials_releaseNumber Release an owned number (POST /v1/dials/numbers/release) [service status: unverified] Read dials_searchNumbers Search real carrier number inventory (GET /v1/dials/numbers/search) [service status: unverified] Read dials_validateOutboundCall Validate consent and outbound call prerequisites (POST /v1/dials/calls/outbound/validate) [service status: unv Read fleets_getAgent Read one persistent Henry agent (GET /v1/fleets/agents/{agent_id}) [service status: unverified] Read fleets_getConnection Read the organization Foundry connection (GET /v1/fleets/connection) [service status: unverified] Read fleets_getInstance Read one admitted Henry instance (GET /v1/fleets/instances/{instance_id}) [service status: unverified] Read fleets_getTask Read an organization task (GET /v1/fleets/tasks/{task_id}) [service status: unverified] Read fleets_getTaskReceipt Read an execution receipt (GET /v1/fleets/tasks/{task_id}/receipt) [service status: unverified] Read fleets_listAgents List persistent Henry agents (GET /v1/fleets/agents) [service status: unverified] Read fleets_listInstances Read admitted Henry instance status in the verified organization (GET /v1/fleets/instances) [service status: u Read fleets_listTasks List organization tasks (GET /v1/fleets/tasks) [service status: unverified] Read fleets_recoverAgent Recover a persistent Henry agent (POST /v1/fleets/agents/{agent_id}/recover) [service status: unverified] Read flocks_enrollNode Exchange a join token under verified LifeID org identity (POST /v1/flocks/byom/enroll) [service status: not_de Read flocks_exchangeJoinToken Exchange a one-time Console join for a node-only LifeID credential; persist it before activation (POST /v1/flo Read flocks_getEnrollmentReadiness Read server-owned enrollment availability for the verified org (GET /v1/flocks/byom/readiness) [service status Read flocks_heartbeatNode Record presence using LifeID auth plus the node-specific binding (POST /v1/flocks/byom/nodes/{id}/heartbeat) [ Read flocks_listNodes List customer hardware belonging to the verified org (GET /v1/flocks/byom/nodes) [service status: not_deployed Read foundry_ensureBillingProfile Ensure the current organization’s TEST billing profile (POST /v1/foundry/billing/profile/ensure) Read foundry_getRegistryModel Get a registry model (GET /v1/foundry/registry/models/{canonical_model_id}) Read foundry_listApiKeys List tenant API keys (GET /v1/foundry/keys) Read foundry_listModels List executable models (GET /v1/foundry/models) Read foundry_listRegistryModels List registry models (GET /v1/foundry/registry/models) Read foundry_readBillingProfile Read the current organization’s native Sandbox billing profile (GET /v1/foundry/billing/profile) Read foundry_readNativeCreditBalance Read the current organization’s paid-credit balance (GET /v1/foundry/billing/credits/balance) Read genesis_call Call any Genesis API operation by id (find ids with genesis_search_tools). arguments = path params + query par Read genesis_search_tools Search all 348 Genesis API operations (Foundry, Hives, Relays, IAM...) by keyword. Returns operation ids and i Read henry_decideApproval Approve or reject a specific public HTTPS read (POST /v1/henry/runs/{run_id}/approvals/{approval_id}) [service Read henry_getConfig Read credential status and the real Foundry model catalog (GET /v1/henry/config) [service status: not_deployed Read henry_getRun Read live activity, approvals, messages and signed receipts (GET /v1/henry/runs/{run_id}) [service status: not Read henry_listRuns List runs belonging to the signed organization (GET /v1/henry/runs) [service status: not_deployed] Read hives_ack_native_queue hives_ack_native_queue (POST /v1/hives/projects/{project_id}/queues/{queue_id}/messages/{message_id}/ack) [ser Read hives_consumers_native_queue hives_consumers_native_queue (GET /v1/hives/projects/{project_id}/queues/{queue_id}/consumers) [service status Read hives_dead_letters_native_queue hives_dead_letters_native_queue (GET /v1/hives/projects/{project_id}/queues/{queue_id}/dlq) [service status: d Read hives_dlq_stats_native_queue hives_dlq_stats_native_queue (GET /v1/hives/projects/{project_id}/queues/{queue_id}/dlq/stats) [service status Read hives_download_object_by_key hives_download_object_by_key (GET /v1/hives/projects/{project_id}/storage/buckets/{bucket_id}/objects/download Read hives_get_bucket Get a specific bucket (GET /v1/hives/projects/{project_id}/storage/buckets/{bucket_id}) [service status: down] Read hives_get_context_project hives_get_context_project (GET /v1/hives/context/project) [service status: down] Read hives_get_cors_config Get CORS rules for a bucket (GET /v1/hives/projects/{project_id}/storage/buckets/{bucket_id}/cors) [service st Read hives_get_cron Get a specific cron job (GET /v1/hives/projects/{project_id}/cron/{cron_id}) [service status: down] Read hives_get_cron_runs Get run history for a cron job (GET /v1/hives/projects/{project_id}/cron/{cron_id}/runs) [service status: down Read hives_get_dashboard_metrics Get dashboard metrics for retained completed API invocations. (GET /v1/hives/projects/{project_id}/metrics/das Read hives_get_deployment Get a specific deployment (GET /v1/hives/projects/{project_id}/deployments/{deployment_id}) [service status: d Read hives_get_deployment_metrics Get deployment metrics (GET /v1/hives/projects/{project_id}/deployments/{deployment_id}/metrics) [service stat Read hives_get_error_metrics Get error rate metrics (GET /v1/hives/projects/{project_id}/metrics/errors) [service status: down] Read hives_get_function Get a specific function (GET /v1/hives/projects/{project_id}/functions/{function_id}) [service status: down] Read hives_get_function_invocations_series Get function invocations time series (GET /v1/hives/projects/{project_id}/functions/{function_id}/metrics/invo Read hives_get_function_metrics Get function metrics (GET /v1/hives/projects/{project_id}/functions/{function_id}/metrics) [service status: do Read hives_get_latency_metrics Get response time metrics (GET /v1/hives/projects/{project_id}/metrics/latency) [service status: down] Read hives_get_native_queue_consumer hives_get_native_queue_consumer (GET /v1/hives/projects/{project_id}/queues/{queue_id}/consumer) [service stat Read hives_get_project Get a project by ID (GET /v1/hives/projects/{project_id}) [service status: down] Read hives_get_project_activity List activity for an authenticated org's project (GET /v1/hives/projects/{project_id}/activity) [service statu Read hives_get_project_metrics Get project metrics overview (GET /v1/hives/projects/{project_id}/metrics) [service status: down] Read hives_get_project_settings hives_get_project_settings (GET /v1/hives/projects/{project_id}/settings) [service status: down] Read hives_get_realtime_metrics Get real-time metrics for dashboard (GET /v1/hives/projects/{project_id}/metrics/realtime) [service status: do Read hives_get_request_metrics Get request metrics time series (GET /v1/hives/projects/{project_id}/metrics/requests) [service status: down] Read hives_get_resource_usage Get measured API invocation metadata and real owned resource counts (GET /v1/hives/projects/{project_id}/metri Read hives_get_runtime hives_get_runtime (GET /v1/hives/runtimes/{name}) [service status: down] Read hives_get_secret Get a secret's metadata (not its value) (GET /v1/hives/projects/{project_id}/secrets/{secret_id}) [service sta Read hives_get_volume Read persisted volume state and measured usage (GET /v1/hives/projects/{project_id}/volumes/{volume_id}) [serv Read hives_inspect_native_queue hives_inspect_native_queue (GET /v1/hives/projects/{project_id}/queues/{queue_id}) [service status: down] Read hives_inspect_native_topic hives_inspect_native_topic (GET /v1/hives/projects/{project_id}/topics/{topic_id}) [service status: down] Read hives_list_buckets List all storage buckets for a project (GET /v1/hives/projects/{project_id}/storage/buckets) [service status: Read hives_list_crons List all cron jobs for a project (GET /v1/hives/projects/{project_id}/cron) [service status: down] Read hives_list_deployments List all deployments for a project (GET /v1/hives/projects/{project_id}/deployments) [service status: down] Read hives_list_domains List all domains for a project (GET /v1/hives/projects/{project_id}/domains) [service status: down] Read hives_list_functions List all functions for a project (GET /v1/hives/projects/{project_id}/functions) [service status: down] Read hives_list_native_queue hives_list_native_queue (GET /v1/hives/projects/{project_id}/queues) [service status: down] Read hives_list_native_topic hives_list_native_topic (GET /v1/hives/projects/{project_id}/topics) [service status: down] Read hives_list_objects List objects in a bucket (GET /v1/hives/projects/{project_id}/storage/buckets/{bucket_id}/objects) [service st Read hives_list_project_environment List persisted environment names, including retained legacy entries. No stored value is selected and no KMS op Read hives_list_project_runtimes Read compiled serving metadata after verified owned project lookup (GET /v1/hives/projects/{project_id}/runtim Read hives_list_projects List all projects for the authenticated tenant (GET /v1/hives/projects) [service status: down] Read hives_list_regions List deployment regions available for project creation. (GET /v1/hives/regions) [service status: down] Read hives_list_runtimes hives_list_runtimes (GET /v1/hives/runtimes) [service status: down] Read hives_list_secrets List all secrets for a project (names and metadata only, not values) (GET /v1/hives/projects/{project_id}/secr Read hives_list_volumes List persisted local volumes (GET /v1/hives/projects/{project_id}/volumes) [service status: down] Read hives_marketplace_categories Return existing categories with visibility-scoped actual counts. (GET /v1/hives/projects/{project_id}/marketpl Read hives_marketplace_featured Return only persisted featured packages backed by real artifacts. (GET /v1/hives/projects/{project_id}/marketp Read hives_marketplace_get_installation Read a persisted installation after an interrupted operation. (GET /v1/hives/projects/{project_id}/marketplace Read hives_marketplace_get_package Read the selected package and its actual immutable versions. (GET /v1/hives/projects/{project_id}/marketplace/ Read hives_marketplace_installed List selected-project installations, preserving unresolved state. (GET /v1/hives/projects/{project_id}/marketp Read hives_marketplace_list_packages Search the persisted visible catalog. (GET /v1/hives/projects/{project_id}/marketplace/packages) [service stat Read hives_marketplace_list_versions Read every eligible version using bounded pages. (GET /v1/hives/projects/{project_id}/marketplace/packages/{sl Read hives_mount_volume Attach or reconnect the exact existing attachment (POST /v1/hives/projects/{project_id}/volumes/{volume_id}/mo Read hives_nack_native_queue hives_nack_native_queue (POST /v1/hives/projects/{project_id}/queues/{queue_id}/messages/{message_id}/nack) [s Read hives_pause_cron Pause a cron job (POST /v1/hives/projects/{project_id}/cron/{cron_id}/pause) [service status: down] Read hives_pause_native_queue hives_pause_native_queue (POST /v1/hives/projects/{project_id}/queues/{queue_id}/pause) [service status: down] Read hives_query_deployment_logs Query logs for a project (GET /v1/hives/projects/{project_id}/deployments/{deployment_id}/logs) [service statu Read hives_query_logs Query logs for a project (GET /v1/hives/projects/{project_id}/logs) [service status: down] Read hives_receive_native_queue hives_receive_native_queue (POST /v1/hives/projects/{project_id}/queues/{queue_id}/messages/receive) [service Read hives_replay_native_queue hives_replay_native_queue (POST /v1/hives/projects/{project_id}/queues/{queue_id}/dlq/replay) [service status: Read hives_reveal_project_environment Reveal one owned environment value through Genesis KMS with org/project AAD. Successful reveals require a pers Read hives_reveal_secret Explicitly reveal a secret value (sensitive output, audit logged) (GET /v1/hives/projects/{project_id}/secrets Read hives_rollback_deployment Roll back to the selected deployment in this project (POST /v1/hives/projects/{project_id}/deployments/{deploy Read hives_stats_native_queue hives_stats_native_queue (GET /v1/hives/projects/{project_id}/queues/{queue_id}/stats) [service status: down] Read hives_subscribe_native_topic hives_subscribe_native_topic (POST /v1/hives/projects/{project_id}/topics/{topic_id}/subscriptions) [service s Read hives_subscriptions_native_topic hives_subscriptions_native_topic (GET /v1/hives/projects/{project_id}/topics/{topic_id}/subscriptions) [servic Read hives_unmount_volume Detach a volume without a request body (POST /v1/hives/projects/{project_id}/volumes/{volume_id}/unmount) [ser Read iam_listOrgApiKeys List organization API keys (GET /v1/iam/organizations/{org_id}/api-keys) [service status: not_deployed] Read iam_runnerSelfExecutionGrant Request scoped Runner self-execution permission (POST /v1/iam/runner/self-execution-grant) [service status: no Read minds_getEpisodicMemory Read a persisted memory by storage UUID in an explicit ready Mind (GET /v1/minds/memory/episodic/{storage_id}) Read minds_getMind Read one Mind owned by the verified organization and project (GET /v1/minds/services/{mind_id}) [service statu Read minds_listMinds List owned Minds and the verified creation-context fingerprint (GET /v1/minds/services) [service status: not_d Read minds_searchMemory Search actual episodic memory in an explicit ready Mind (POST /v1/minds/search) [service status: not_deployed] Read relays_enroll Explicitly activate an empty Relays account; read status after an unconfirmed result (POST /v1/relays/genesis/ Read relays_getDnssec Read owned DNSSEC status; unavailable public key details return 503 (GET /v1/relays/zones/{zone}/dnssec) [serv Read relays_getEnrollment Read enrollment for the current verified human Genesis selection (GET /v1/relays/genesis/enrollment) [service Read relays_getZone Get zone details (GET /v1/relays/zones/{zone}) [service status: unverified] Read relays_listRecords List records in a zone (GET /v1/relays/zones/{zone}/records) [service status: unverified] Read relays_listZones List DNS zones for the tenant (GET /v1/relays/zones) [service status: unverified] Read runner_getCatalog Get authorized Runner workspaces and execution routes (GET /v1/runner/catalog) [service status: not_deployed] Read runner_getJob Read an authoritative Runner job snapshot (GET /v1/runner/jobs/{jobId}) [service status: not_deployed] Read runner_getJobEvents Read an ordered page of Runner job events (GET /v1/runner/jobs/{jobId}/events) [service status: not_deployed] Read runner_getJobResult Retrieve the verified provider result for a completed Runner task (GET /v1/runner/jobs/{jobId}/result) [servic Read runner_listJobs List the newest 100 Runner jobs for the verified principal (GET /v1/runner/jobs) [service status: not_deployed Read silos_getProject Open an owned project and its persisted database metadata (GET /v1/silos/projects/{project_id}) [service statu Read silos_listProjects List persisted projects in the verified organization (GET /v1/silos/projects) [service status: not_deployed]

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Questions about Genesis

Can an AI agent delete data through the Genesis MCP server? +

Yes. The Genesis server exposes 27 destructive tools including beacons_revokeBridgeDevice, dials_deleteNumber, fleets_cancelTask. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Genesis? +

The Genesis server has 71 write tools including beacons_issueBridgeDeviceChallenge, beacons_provisionBridgeFleet, beacons_updateBridgeDevice. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Genesis.

How many tools does the Genesis MCP server expose? +

252 tools across 4 categories: Destructive, Execute, Read, Write. 142 are read-only. 110 can modify, create, or delete data.

How do I enforce a policy on Genesis? +

Register the Genesis MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Genesis tool call.

Deterministic rules across all 252 Genesis tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

Instant setup, no code required.

252 Genesis tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from Genesis's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.