New Your team’s decisions, in one playbook every coding agent works from. Never answer your agent twice

Vibecontrols

672 tools. 342 can modify or destroy data without limits.

89 destructive tools with no built-in limits. Policy required.

Last updated:

342 can modify or destroy data
330 read-only
672 tools total

Community server · catalogue entry checked 18/10/2026 · full schemas captured for 589 of 672 tools

How to control Vibecontrols ↓

What Vibecontrols exposes to your agents

Read (330) Write / Execute (253) Destructive / Financial (89)

What Vibecontrols costs in tokens

66,294 tokens of tool definitions, loaded on every request
33% of a 200k context window
568 heaviest tool: vibecontrols_sandboxes_create
Critical Risk

The most dangerous Vibecontrols tools

342 of Vibecontrols's 672 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

How to control Vibecontrols

PolicyLayer is an MCP gateway — it sits between your AI agents and Vibecontrols, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default
{
  "vibecontrols_billing_credits_withdraw": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations
{
  "vibecontrols_actions_cancel_execution": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "vibecontrols_actions_create": {
    "limits": [
      {
        "counter": "vibecontrols_actions_create_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "vibecontrols_actions_executions_list": {
    "limits": [
      {
        "counter": "vibecontrols_actions_executions_list_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Vibecontrols — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON VIBECONTROLS →

Instant setup, no code required.

All 672 Vibecontrols tools

DESTRUCTIVE 87 tools
Destructive vibecontrols_actions_cancel_execution Cancel a running Vibe Action execution. Destructive vibecontrols_actions_delete Permanently delete a Vibe Action. Destructive vibecontrols_actions_unschedule Delete a scheduled job for a Vibe Action. Destructive vibecontrols_agents_delete Permanently delete a VibeControls agent. Destructive vibecontrols_agents_remove_plugin Remove a plugin from a specific agent. Destructive vibecontrols_ai_prompts_delete Delete an AI prompt. Destructive vibecontrols_audit_delete Delete an audit log entry. Destructive vibecontrols_auth_api_keys_revoke Revoke an API key by its keyId. Destructive vibecontrols_auth_apps_deactivate Deactivate an app by its id (revoke is not currently a separate mutation). Destructive vibecontrols_auth_delegations_revoke Revoke a delegation by its id. Destructive vibecontrols_auth_logout Log out and clear all stored authentication tokens. Destructive vibecontrols_auth_reset_password_get_url Build the password reset URL (browser-only flow). Returns the URL to open in a browser; this tool does not per Destructive vibecontrols_auth_sessions_revoke Revoke (sign out) a single session by id. Destructive vibecontrols_auth_sso_delete Delete SSO configuration for a tenant. Destructive vibecontrols_billing_payment_methods_remove Delete a payment method by ID. Destructive vibecontrols_billing_subscriptions_cancel Cancel a subscription with an optional reason. Destructive vibecontrols_catalogs_delete Soft-delete a catalog. Returns { deleted: boolean, catalogId: string }. Destructive vibecontrols_catalogs_remove_component Remove a component from a catalog. Returns { removed: boolean }. Destructive vibecontrols_catalogs_remove_vibe Remove a vibe from a catalog. Returns { removed: boolean }. Destructive vibecontrols_channels_connections_delete Delete a channel connection by ID. Destructive vibecontrols_channels_delete Delete a channel by ID. Destructive vibecontrols_components_delete Soft-delete a component. Returns { deleted, componentId }. Destructive vibecontrols_config_delete Delete a configuration by key and scope. Destructive vibecontrols_configuration_gitops_delete Delete a GitOps provider connection. Destructive vibecontrols_configuration_security_cancel_scan Cancel an in-flight security scan run. Destructive vibecontrols_configuration_security_revoke_exception Revoke a previously-granted security exception. Destructive vibecontrols_configuration_settings_delete_secret Delete a settings secret by key. Destructive vibecontrols_configuration_settings_reset Reset a settings category to its workspace defaults. Destructive vibecontrols_conversations_delete Delete a conversation by ID. Destructive vibecontrols_conversations_drafts_delete Delete the current actor’s draft for a conversation. Destructive vibecontrols_conversations_messages_delete Soft-delete (default) or hard-delete a message. Destructive vibecontrols_conversations_messages_unpin Remove a pinned message from its conversation. Destructive vibecontrols_conversations_participants_remove Remove a user from a conversation. Destructive vibecontrols_conversations_reactions_remove Remove the current actor’s emoji reaction from a message. Destructive vibecontrols_decks_buttons_delete Permanently delete a VibeDeck button. Destructive vibecontrols_decks_delete Permanently delete a VibeDeck. Destructive vibecontrols_devportal_api_keys_revoke Revoke an API key via revokeAPIKey(keyId: String!) (live global mutation, returns Boolean!). Destructive vibecontrols_devportal_apps_delete Delete a devportal application. Live mutation returns Boolean! (no selection set). Destructive vibecontrols_devportal_apps_webhooks_remove Remove a webhook by ID. Live mutation returns Boolean! (no selection set). Destructive vibecontrols_devportal_delegations_revoke Revoke a workspace delegation via revokeDelegation(id: ID!) (live schema, returns Boolean!; no selection set). Destructive vibecontrols_devportal_oauth_delete Delete an OAuth 2.0 client by ID. [intentionally stubbed: Mutation.deleteOAuthClient has been removed from the Destructive vibecontrols_devportal_orgs_delete Delete a developer organization. Destructive vibecontrols_files_revoke Revoke an existing file share by ID (mirrors SDK files.shareApi.revoke). [STUB] Destructive vibecontrols_files_share_revoke Revoke a previously created file share by ID. [STUB] Destructive vibecontrols_groups_delete Delete a group. Use archive=true for a soft delete (status change only). Destructive vibecontrols_groups_members_remove Remove one or more members from a group by membership ID. Destructive vibecontrols_integrations_connections_delete Delete a connection. Use keepSecret=true to retain the vault secret. Destructive vibecontrols_integrations_connections_revoke Revoke a connection — invalidates tokens and marks as REVOKED. Destructive vibecontrols_integrations_tags_remove Remove a tag assignment from a connection. Destructive vibecontrols_notes_delete Delete a note. Destructive vibecontrols_organizations_members_remove Remove a user from an organization. Returns { removed: boolean, organizationId, userId }. Destructive vibecontrols_products_content_pages_delete Delete a content page. Destructive vibecontrols_products_delete Delete a platform product. Destructive vibecontrols_products_feature_flags_delete Delete a feature flag. Destructive vibecontrols_products_shortcuts_delete Delete a keyboard shortcut. Destructive vibecontrols_rbac_roles_delete Delete a role, optionally reassigning actors to another role. Destructive vibecontrols_sandbox_delete Delete a sandbox. [STUB] Destructive vibecontrols_sandbox_templates_delete Delete a sandbox template. [STUB] Destructive vibecontrols_sandboxes_delete Delete a sandbox by ID. Destructive vibecontrols_sandboxes_tags_detach Remove a tag from a sandbox. Destructive vibecontrols_sandboxes_templates_delete Delete a sandbox template config by ID. Destructive vibecontrols_scheduler_jobs_delete Delete a scheduled job. Destructive vibecontrols_scheduler_jobs_tag_remove Remove a tag assignment from a scheduled job. Destructive vibecontrols_scheduler_templates_delete Delete a schedule template. Destructive vibecontrols_scorecards_remove_metric Soft-delete a scorecard metric. Returns { removed: boolean, metricId }. Destructive vibecontrols_security_secrets_delete Delete a secret by ID. Destructive vibecontrols_security_vaults_delete Delete a vault. Set archive=true to soft-archive instead of permanently deleting. Destructive vibecontrols_sessions_delete Permanently delete a terminal session. Distinct from terminate — this also removes the session record. Returns Destructive vibecontrols_sessions_share_link_revoke Revoke a session share link. Destructive vibecontrols_sessions_share_revoke Revoke a session share. Destructive vibecontrols_store_cart_clear Clear the cart. [STUB] Destructive vibecontrols_store_cart_remove Remove a product from the cart. [STUB] Destructive vibecontrols_store_installed_uninstall Uninstall a product. [STUB] Destructive vibecontrols_tags_delete Delete a tag by ID. [STUB] Destructive vibecontrols_tags_permissions_revoke Revoke a tag permission. [STUB] Destructive vibecontrols_targets_delete Permanently delete a VibeControls target. Destructive vibecontrols_templates_delete Soft-delete a template. Returns { deleted, templateId }. Destructive vibecontrols_tours_progress_reset Reset tour progress for the given user (defaults to the current actor). Destructive vibecontrols_tunnels_delete Soft-delete a tunnel (stops it first if active). Destructive vibecontrols_tunnels_delete_domain Permanently delete a tunnel domain record. Destructive vibecontrols_tunnels_revoke_session Revoke an active session (kills the live connection). Destructive vibecontrols_ui_session_clear Clear the current user's UI session state. Destructive vibecontrols_vibe_deck_share_links_revoke Revoke a VibeDeck share-link. Destructive vibecontrols_vibes_delete Permanently delete a vibe. Destructive vibecontrols_webhooks_delete Delete a webhook. Destructive vibecontrols_workspace_delete Delete a workspace by its ID (global layer). Destructive vibecontrols_workspace_members_remove Remove a workspace member. Live alpha: removeWorkspaceMember(id: ID!) (workspaces endpoint, membership id). Ge
EXECUTE 29 tools
Execute vibecontrols_actions_execute Execute a Vibe Action and return the execution result. Execute vibecontrols_agents_health Run health probes against all registered agents. Returns health status for each agent. Execute vibecontrols_auth_apps_authorize_url Build the OAuth authorization URL for an app (browser-only flow). Returns the URL to open in a browser; this t Execute vibecontrols_configuration_security_policy_decision Fetch the OPA policy decision for a security scan run. Execute vibecontrols_configuration_security_run_scan Trigger a security scan for a vibe at a specific stage. Execute vibecontrols_conversations_typing_start Broadcast that the current actor started typing in a conversation. Execute vibecontrols_conversations_typing_stop Broadcast that the current actor stopped typing in a conversation. Execute vibecontrols_decks_buttons_execute Execute the action associated with a VibeDeck button on a specific agent. Execute vibecontrols_integrations_auth_oauth_initiate Start an OAuth flow; returns redirectUrl + state for the client to use. Execute vibecontrols_sandbox_start Start a sandbox. [STUB] Execute vibecontrols_sandbox_stop Stop a sandbox. [STUB] Execute vibecontrols_sandboxes_start Start (resume) a stopped sandbox. Execute vibecontrols_sandboxes_stop Stop a running sandbox. Execute vibecontrols_scheduler_executions_retry Re-run a failed (or completed) scheduled-job execution. Returns the new JobExecution row created for the retry Execute vibecontrols_scheduler_jobs_execute_now Trigger a scheduled job to execute immediately (out-of-band). Execute vibecontrols_sessions_bulk_restart Restart multiple sessions at once. Execute vibecontrols_sessions_bulk_stop Stop multiple sessions at once. Execute vibecontrols_sessions_restart Restart a terminal session (stop then start). Execute vibecontrols_sessions_restart_terminal Restart the web terminal for a session. Execute vibecontrols_sessions_start Start a terminal session. Execute vibecontrols_sessions_start_target_terminal Open a web terminal against a target host (SSH/RDP/VNC/DIRECT). Returns the connection info incl. ttydUrl. Execute vibecontrols_sessions_start_terminal Start a web terminal (ttyd) for browser-based access to a session. Execute vibecontrols_sessions_stop Stop a running terminal session. Execute vibecontrols_sessions_stop_target_terminal Stop a target terminal session. Execute vibecontrols_sessions_stop_terminal Stop the ttyd web terminal for a session. Execute vibecontrols_tunnels_start Transition a tunnel to ACTIVE. Execute vibecontrols_tunnels_stop Gracefully stop a running tunnel. Execute vibecontrols_vibe_deck_share_links_execute_shared_button Execute a button on a publicly shared VibeDeck. Execute vibecontrols_webhooks_trigger Trigger a webhook with a custom JSON payload.
WRITE 224 tools
Write vibecontrols_actions_create Create a new Vibe Action. Write vibecontrols_actions_duplicate Create a copy of an existing Vibe Action. Write vibecontrols_actions_install Install a Vibe Action from the action store. Write vibecontrols_actions_schedule Create a scheduled job for a Vibe Action via the scheduler service. Write vibecontrols_actions_update Update an existing Vibe Action. Write vibecontrols_agents_create Create a new VibeControls agent. Write vibecontrols_agents_install_plugin Install a plugin on a specific agent by package name. Write vibecontrols_agents_update Update an existing VibeControls agent. Write vibecontrols_ai_events_create Record a new AI tool event. Write vibecontrols_ai_prompts_create Create a new AI prompt template. Write vibecontrols_ai_prompts_update Update an existing AI prompt. Write vibecontrols_audit_export Export audit logs in a specified format. Write vibecontrols_auth_api_keys_create Generate a new API key for an app. Returns apiKey + apiSecret — the secret is only shown once. Write vibecontrols_auth_apps_create Create an OAuth or system app. Returns the app + clientSecret (shown only once). Write vibecontrols_auth_apps_update Update an app (name, description, redirect URIs, scopes, status). Write vibecontrols_auth_complete Check if the user has completed the device code authorization in their browser. Call this after the user has o Write vibecontrols_auth_login Start the device code login flow. Returns a verification URL and user code immediately (non-blocking). The use Write vibecontrols_auth_login_with_api_key Authenticate with a pre-issued API key (headless service mode). The key is stored locally and sent as X-API-Ke Write vibecontrols_auth_login_with_client_credentials OAuth2 client_credentials grant (REST against oidcIssuer/token). Equivalent to auth_authenticate_app but uses Write vibecontrols_auth_mfa_disable Disable MFA for the current user. Write vibecontrols_auth_mfa_enroll Begin MFA enrollment. Returns the qrCode, secret, and one-time backup codes the user must save BEFORE calling Write vibecontrols_auth_profile_update Update the current user profile (any subset of fields). Write vibecontrols_auth_register_get_url Build the registration URL (browser-only flow). Returns the URL to open in a browser; this tool does not perfo Write vibecontrols_auth_select_workspace Select a workspace after login (when multiple workspaces are available). Issues a workspace-scoped token. Write vibecontrols_auth_sso_configure Save (upsert) SSO configuration for a tenant. Write vibecontrols_auth_users_update Update a user (admin). Pass any subset of mutable fields. Write vibecontrols_billing_payment_methods_add Add a payment method (card metadata only — provider handles secrets). Use the provider checkout URL elsewhere Write vibecontrols_catalogs_add_component Add a component to a catalog. Returns the membership { id, catalogId, componentId, ... }. Write vibecontrols_catalogs_add_vibe Add a vibe to a catalog. Returns the membership object. Write vibecontrols_catalogs_create Create a new catalog. Returns the created catalog. Write vibecontrols_catalogs_update Update an existing catalog. Returns the updated catalog. Write vibecontrols_channels_connections_create Create a channel connection (OAuth/API key/webhook). Write vibecontrols_channels_create Create a new channel. Write vibecontrols_channels_send Send a message via a channel. Write vibecontrols_channels_update Update a channel (name/status/priority/etc). At least one field must be provided. Returns the updated Channel. Write vibecontrols_components_create Create a new component. Returns the created component. Write vibecontrols_components_fork_git_hub_repo Fork or create a GitHub repo for component setup. Returns { isForked, repoFullName, repoUrl }. Write vibecontrols_components_publish_as_template Publish a component as a reusable template (snapshots the component). Returns the created template. Write vibecontrols_components_update Update an existing component. Returns the updated component. Write vibecontrols_config_set Set (create or update) a configuration value. Write vibecontrols_configuration_gitops_create Create a new GitOps provider connection. Write vibecontrols_configuration_gitops_update Update an existing GitOps provider connection. Write vibecontrols_configuration_security_create_exception Approve a time-bounded exception (waiver) for a security finding. Write vibecontrols_configuration_security_push_scan_run Push a complete security scan run from an agent (provider report + findings + evidence refs). Write vibecontrols_configuration_security_set_provider Configure (or update) a security provider for a vibe and stage. Write vibecontrols_configuration_security_update_finding_status Update the workflow status of a security finding (e.g. OPEN → SUPPRESSED). Write vibecontrols_configuration_security_update_repository_config Update the repository-level security policy config for a vibe. Write vibecontrols_configuration_settings_resolve_integration_token Resolve a decrypted integration token for an agent to call third-party APIs (handles OAuth refresh). Write vibecontrols_configuration_settings_set_secret Create or update a settings secret (value is encrypted at rest). Write vibecontrols_configuration_settings_update_notif_prefs Update notification toggles and digest cadence. Write vibecontrols_configuration_settings_update_preferences Update the current user UI preferences (theme, density, IDE, font, tab order, etc). Write vibecontrols_configuration_settings_update_workspace_defaults Update workspace-level default settings for agents, sessions, vibes, telemetry. Write vibecontrols_conversations_archive Archive a conversation (state → ARCHIVED). Write vibecontrols_conversations_create Create a new threaded conversation. Write vibecontrols_conversations_drafts_save Save (upsert) the current actor’s draft for a conversation. Write vibecontrols_conversations_invites_create Mint a shareable invite link/code for a conversation. Write vibecontrols_conversations_mark_as_read Mark a conversation as read up to a specific message (defaults to latest). Write vibecontrols_conversations_messages_edit Edit an existing message. Provide new content (object) and optional reason. Write vibecontrols_conversations_messages_pin Pin a message to its conversation. Write vibecontrols_conversations_messages_send Send a message to a conversation under the nested messages.send surface. Returns the created Message. Write vibecontrols_conversations_notifications_update Update notification level (ALL | MENTIONS | MUTED | NONE) for a conversation membership. Write vibecontrols_conversations_participants_add Add a user to a conversation, optionally with a specific role. Write vibecontrols_conversations_participants_update_role Change a participant’s role in a conversation. Write vibecontrols_conversations_pin Pin a conversation to the top of the actor’s list. Write vibecontrols_conversations_polls_vote Cast a vote (one or more options) on a poll attached to a message. Write vibecontrols_conversations_presence_update Update the current actor’s presence status and optional custom message. Write vibecontrols_conversations_reactions_add Add an emoji reaction to a message. Write vibecontrols_conversations_send_message Send a text message to a conversation. Optionally reply to a parent message. Write vibecontrols_conversations_settings_set Update the settings (notification level, retention, moderation, etc.) for a conversation. At least one setting Write vibecontrols_conversations_unarchive Restore an archived conversation. Write vibecontrols_conversations_update Update title and/or description of a conversation. Write vibecontrols_decks_buttons_create Create a new button in a VibeDeck. Write vibecontrols_decks_buttons_update Update an existing VibeDeck button. Write vibecontrols_decks_create Create a new VibeDeck. Write vibecontrols_decks_duplicate Create a copy of an existing VibeDeck. Write vibecontrols_decks_set_default Set a VibeDeck as the default deck. Write vibecontrols_decks_update Update an existing VibeDeck. Write vibecontrols_devportal_admin_reviews_approve Approve a pending application. Write vibecontrols_devportal_admin_reviews_reject Reject a pending application. Write vibecontrols_devportal_api_keys_create Mint a new API key via generateAPIKey(input: GenerateAPIKeyInput!) (live auth mutation). Returns the full key Write vibecontrols_devportal_apps_create Create a devportal application under the caller's default organization. The live CreateApplicationInput does N Write vibecontrols_devportal_apps_publish Publish an approved application. Note: in the legacy CLI this opened a browser; here it just calls the publish Write vibecontrols_devportal_apps_submit_review Submit an application for admin review. Write vibecontrols_devportal_apps_update Update a devportal application. Write vibecontrols_devportal_apps_versions_create Create a new version for an application. Write vibecontrols_devportal_apps_webhooks_add Add a webhook to an application. The live mutation takes applicationId as a top-level argument plus input: Cre Write vibecontrols_devportal_delegations_create Grant a workspace delegation to an application. Live impl is grantDelegation(input: GrantDelegationInput!) (re Write vibecontrols_devportal_oauth_create Register a new OAuth 2.0 client for an application. [intentionally stubbed: Mutation.createOAuthClient (and Cr Write vibecontrols_devportal_orgs_create Create a developer organization. slug is auto-derived from name (kebab-case) when not supplied. Write vibecontrols_devportal_orgs_update Update a developer organization. slug is immutable after creation — only name, description, and contact / meta Write vibecontrols_export_download Download a completed export job to a local file path. Write vibecontrols_export_entities_list List the entity types available for export in the active workspace. Write vibecontrols_export_job_check Polling tool that returns the current status/progress of an export job. Designed for AI agents to call repeate Write vibecontrols_export_jobs_cancel Cancel a running export job. Write vibecontrols_export_jobs_create Create an export job for one or more entity types. Write vibecontrols_export_jobs_delete Delete an export job. Write vibecontrols_export_jobs_get Get an export job by ID. Write vibecontrols_export_jobs_list List export jobs in the active workspace. Write vibecontrols_export_jobs_retry Retry a failed export job. Write vibecontrols_export_parts_get Get an export part (a single chunk produced by a multi-part export job). Write vibecontrols_export_templates_create Create a reusable export template. Write vibecontrols_export_templates_delete Delete an export template. Write vibecontrols_export_templates_get Get an export template by ID. Write vibecontrols_export_templates_list List export templates in the active workspace. Write vibecontrols_export_templates_update Update an existing export template. Only supplied fields are changed. Write vibecontrols_files_share Create a share for a file (mirrors SDK files.share). [STUB] Write vibecontrols_files_share_create Create a shareable link for a file with optional access controls. [STUB] Write vibecontrols_files_upload Single-shot file upload mirroring the SDK files.upload contract (s3Bucket/s3Key/size pre-resolved). For raw-by Write vibecontrols_files_upload_complete Complete an in-flight upload session previously initiated by files_upload_initiate. [STUB] Write vibecontrols_files_upload_initiate Initiate a multipart upload session. Returns presigned URL(s) the caller must PUT bytes to, plus a sessionId t Write vibecontrols_groups_create Create a new group. Write vibecontrols_groups_members_add Add a single member to a group. Write vibecontrols_groups_update Update a group. At least one mutable field must be provided. Write vibecontrols_integrations_auth_oauth_complete Complete an OAuth flow with code+state returned by the IdP. Write vibecontrols_integrations_connections_add Create a connection (provider id required; credentials stored in vault). Write vibecontrols_integrations_connections_update Update a connection (name, description, config JSON object). Write vibecontrols_integrations_providers_disable Disable an integration provider in this workspace. Write vibecontrols_integrations_providers_enable Enable an integration provider in this workspace. Write vibecontrols_integrations_tags_add Add a tag assignment to a connection. Write vibecontrols_integrations_tags_replace Replace all tag assignments on a connection. Write vibecontrols_notes_create Create a new note. Write vibecontrols_notes_pin Pin a note so it appears at the top of lists. Write vibecontrols_notes_update Update an existing note. Write vibecontrols_notifications_preferences_set Create/update a notification preference. Write vibecontrols_organizations_members_invite Send an invitation to join an organization. The invitee receives an email-style invite with the chosen role; r Write vibecontrols_organizations_members_role Update the role of an existing organization member. Returns the updated OrganizationMember. Write vibecontrols_products_content_pages_create Create a content page. Write vibecontrols_products_content_pages_update Update a content page. Write vibecontrols_products_create Create a new platform product. Write vibecontrols_products_feature_flags_create Create a feature flag. Write vibecontrols_products_feature_flags_set Set (upsert) a workspace-level override for a feature flag. Returns the persisted override record. Write vibecontrols_products_feature_flags_update Update a feature flag. Write vibecontrols_products_shortcuts_create Create a keyboard shortcut. Write vibecontrols_products_shortcuts_update Update a keyboard shortcut. Write vibecontrols_products_update Update a platform product. Write vibecontrols_rbac_policies_attach Attach an OPA policy reference to a role on the chosen gateway. Returns the attached PolicyReference. Write vibecontrols_rbac_roles_create Create a new RBAC role at the workspace or global layer. Write vibecontrols_rbac_roles_update Update an existing role. Write vibecontrols_sandbox_admin_config_set Update sandbox module config. [STUB] Write vibecontrols_sandbox_create Create a new sandbox. [STUB] Write vibecontrols_sandbox_export_check Check the status of a sandbox export. [STUB] Write vibecontrols_sandbox_export_create Create a sandbox export job. [STUB] Write vibecontrols_sandbox_export_get Get details of a sandbox export job. [STUB] Write vibecontrols_sandbox_export_get_artifact_bytes Fetch bytes of a sandbox export artifact. [STUB] Write vibecontrols_sandbox_export_list List sandbox export jobs. [STUB] Write vibecontrols_sandbox_export_workspace_list List sandbox exports in the active workspace. [STUB] Write vibecontrols_sandbox_tags_attach Attach an existing tag to a sandbox. [STUB] Write vibecontrols_sandbox_tags_create Create a tag on a sandbox. [STUB] Write vibecontrols_sandbox_tags_replace Replace the tag set on a sandbox. [STUB] Write vibecontrols_sandbox_templates_create Create a new sandbox template. [STUB] Write vibecontrols_sandbox_templates_update Update a sandbox template. [STUB] Write vibecontrols_sandboxes_create Create a sandbox from a template + container specs. Workspace context is injected from auth. Write vibecontrols_sandboxes_export_create Start an async export job of sandboxes. Workspace + context injected from auth. Write vibecontrols_sandboxes_export_get Get a sandbox export job by ID. Write vibecontrols_sandboxes_export_get_artifact_bytes Fetch raw bytes (base64) of a file artifact from a sandbox session. Context injected from auth. Write vibecontrols_sandboxes_export_list List sandbox export jobs for the workspace. Write vibecontrols_sandboxes_tags_attach Attach an existing tag to a sandbox. Write vibecontrols_sandboxes_tags_create Create a new sandbox tag definition. Write vibecontrols_sandboxes_tags_replace Replace the full set of tags on a sandbox with the provided tag IDs. Write vibecontrols_sandboxes_templates_create Create a reusable sandbox template config. Workspace context is injected from auth. Write vibecontrols_sandboxes_templates_update Update an existing sandbox template config. Workspace context is injected from auth. Write vibecontrols_sandboxes_update_config Update the workspace sandbox config. Workspace context is injected from auth. Write vibecontrols_scheduler_jobs_activate Activate a draft or disabled schedule. Write vibecontrols_scheduler_jobs_archive Archive a scheduled job (soft delete). Write vibecontrols_scheduler_jobs_create Create a scheduled job. Write vibecontrols_scheduler_jobs_disable Disable a schedule with an optional reason. Write vibecontrols_scheduler_jobs_resume Resume a paused scheduled job. Write vibecontrols_scheduler_jobs_tag_add Add a tag assignment to a scheduled job. Write vibecontrols_scheduler_jobs_tag_replace Replace all tag assignments on a scheduled job. Write vibecontrols_scheduler_jobs_update Update a scheduled job (cron expression, executor config, retry policy, etc.). At least one field must be prov Write vibecontrols_scheduler_templates_create Create a reusable schedule template in the active workspace. Write vibecontrols_scheduler_templates_create_from Instantiate a schedule from a template; optional overrides. Write vibecontrols_scheduler_templates_update Update a schedule template. Write vibecontrols_scheduler_versions_restore Restore a schedule to a prior version. Write vibecontrols_scorecards_add_metric Add a new metric to a scorecard. Returns the created metric. Write vibecontrols_scorecards_update_metric Update an existing scorecard metric. Returns the updated metric. Write vibecontrols_scorecards_upsert Create or update a scorecard for an owner. Returns the scorecard. Write vibecontrols_security_secrets_set Create a new secret in a vault. The value is encrypted server-side. Write vibecontrols_security_secrets_update Update secret metadata (name, description, status). To rotate the value, use security_secrets_rotate. Write vibecontrols_security_vaults_create Create a new vault scoped to the current workspace. Write vibecontrols_security_vaults_update Update a vault (name/description/lockAfterMinutes/status). At least one field must be provided. The workspace Write vibecontrols_sessions_bulk_terminate Forcefully terminate multiple sessions at once. Write vibecontrols_sessions_create Create a new terminal session. Write vibecontrols_sessions_export Export sessions to CSV or JSON. Write vibecontrols_sessions_send_input Send keystrokes or text to a running terminal session. Write vibecontrols_sessions_share_link_create Create a shareable link for a session. Write vibecontrols_sessions_share_update Update an existing session share (permission/expiry). Write vibecontrols_sessions_terminate Forcefully terminate a terminal session. Write vibecontrols_sessions_update Update a terminal session. At least one mutable field (name / command / workingDirectory / autoStart / ttydUrl Write vibecontrols_sessions_update_status Set the lifecycle status of a session directly (PENDING, STARTING, RUNNING, STOPPED, ERROR, TERMINATED). Retur Write vibecontrols_store_cart_add Add a product to the cart. [STUB] Write vibecontrols_store_cart_checkout Complete the cart checkout. [STUB] Write vibecontrols_tags_create Create a new tag (requires vocabularyId on alpha). [STUB] Write vibecontrols_tags_update Update an existing tag. [STUB] Write vibecontrols_targets_create Create a new VibeControls target. Write vibecontrols_targets_import Import multiple targets from a configuration. Provide hosts as a JSON array of objects with name, host, port ( Write vibecontrols_targets_install_agent Install a VibeControls agent on a remote target machine. Write vibecontrols_targets_update Update an existing VibeControls target. Write vibecontrols_templates_instantiate Create a new component from a template. Returns the new component. Write vibecontrols_templates_update Update an existing template. Returns the updated template. Write vibecontrols_tours_complete Mark a tour step as completed for the given user. The user can only complete steps for themselves — the gatewa Write vibecontrols_tunnels_add_agent_from_tunnel Zero-config agent onboarding: probe a tunnel URL + API key, register + configure the agent in one shot. Write vibecontrols_tunnels_attach_domain Attach a verified domain to a tunnel. Write vibecontrols_tunnels_create Create a tunnel in DRAFT status. Call tunnels_start to bring it up. Write vibecontrols_tunnels_issue_session Issue a short-lived session token for an agent to connect with. Token is returned exactly once. Write vibecontrols_tunnels_register_custom_domain Register a user-owned custom domain. A TXT challenge record will be returned for verification. Write vibecontrols_tunnels_update Update tunnel metadata, target host/port, basic auth, etc. Write vibecontrols_ui_session_save Save the current user's UI session state. Write vibecontrols_vibe_deck_share_links_create Create a new share-link for a VibeDeck. Write vibecontrols_vibe_deck_share_links_update Update an existing VibeDeck share-link. Write vibecontrols_vibes_archive Archive a vibe (soft-delete with archivedAt timestamp). Write vibecontrols_vibes_create Create a new vibe (project/workspace). Write vibecontrols_vibes_move Move a vibe under a different parent in the hierarchy. Pass newParentId = null (omit) to move to top-level. Re Write vibecontrols_vibes_restore Restore a previously archived vibe. Write vibecontrols_vibes_update Update an existing vibe. Write vibecontrols_vibes_update_git Update the git-related metadata on a vibe (branch / remote URL / structured status JSON). At least one field m Write vibecontrols_vibes_update_status Change the status of a vibe (ACTIVE, INACTIVE, ARCHIVED, ERROR). Write vibecontrols_webhooks_create Create a new webhook. Write vibecontrols_webhooks_update Update an existing webhook. Write vibecontrols_workspace_create Create a workspace (global layer). BOFF-8181: live alpha requires slug (auto-derived from name as kebab-case w Write vibecontrols_workspace_members_add Add a member to the active workspace. Live addWorkspaceMember(input: { userId }) (workspaces endpoint). Worksp Write vibecontrols_workspace_members_role Update a workspace member's role. Live alpha: updateWorkspaceMemberRoles(input: UpdateWorkspaceMemberRolesInpu Write vibecontrols_workspace_projects_create Create a project in the current workspace (workspace comes from the session context). Write vibecontrols_workspace_update Update a workspace (global layer). BOFF-8203: live alpha removed description from the Workspace return type; t
READ 330 tools
Read vibecontrols_actions_executions_list List action execution history with optional filters and pagination. Read vibecontrols_actions_get Get a Vibe Action by its ID. Read vibecontrols_actions_list List all Vibe Actions with optional filters and pagination. Read vibecontrols_actions_schedules_list List scheduled jobs for Vibe Actions, optionally filtered by action ID. Read vibecontrols_agents_get Get a VibeControls agent by its ID. Read vibecontrols_agents_list List all VibeControls agents with optional filters and pagination. Read vibecontrols_agents_plugins List all plugins installed on a specific agent. Read vibecontrols_agents_probe Probe the connectivity of a specific agent to check if it is reachable. Read vibecontrols_ai_events_list List AI tool events with optional filters and pagination. Read vibecontrols_ai_events_recent Get recent AI tool events for a specific agent. Read vibecontrols_ai_prompts_duplicate Duplicate an AI prompt with a new name. Read vibecontrols_ai_prompts_get Fetch a single AI prompt by ID. Read vibecontrols_ai_prompts_list List AI prompt templates with optional filters. Read vibecontrols_ai_prompts_record_usage Increment the usage counter on an AI prompt. Read vibecontrols_ai_prompts_render Render an AI prompt template with variables substituted. Read vibecontrols_analytics_overview Get consolidated analytics overview with KPIs, time series, and breakdowns for all VibeControls entities (agen Read vibecontrols_analytics_summary Get a quick KPI summary of all VibeControls entity counts (agents, sessions, vibes, actions, etc.). Lighter-we Read vibecontrols_audit_get Get an audit log entry by its ID. Read vibecontrols_audit_list List audit logs with optional filters and pagination. Read vibecontrols_audit_stats Get aggregated statistics for audit logs. Read vibecontrols_auth_api_keys_list List API keys for the current user; pass appId to scope to a specific app. Read vibecontrols_auth_api_keys_rotate Rotate an API key — invalidates the previous secret and returns a new one (shown only once). Read vibecontrols_auth_apps_get Get a single app by its id. Read vibecontrols_auth_apps_list List OAuth/system apps owned by the current user. Read vibecontrols_auth_audit_log_query Recent auth audit events for the current user. Read vibecontrols_auth_authenticate_app Machine-to-machine auth via the authenticateApp GraphQL mutation. Pass an OAuth app client_id + client_secret Read vibecontrols_auth_delegations_grant Grant a delegation to an app (consent on behalf of the calling user). Read vibecontrols_auth_delegations_list Delegations granted by/to the current user. Read vibecontrols_auth_magic_link_get_url Build the magic-link login URL (browser-only flow). Returns the URL to open in a browser; this tool does not p Read vibecontrols_auth_mfa_list List MFA methods enrolled for the current user. Read vibecontrols_auth_mfa_verify Verify MFA enrollment by submitting the code from the authenticator. Read vibecontrols_auth_profile_get Show the current authenticated user (id, email, name, role, status). Read vibecontrols_auth_refresh_token Exchange the stored refreshToken for a fresh access + refresh pair. The gql client auto-refreshes when tokens Read vibecontrols_auth_security_summary One-shot account security overview: profile, MFA methods, active sessions, recent audit log, API keys, delegat Read vibecontrols_auth_sessions_list List active sessions for the current user (browser/device sessions). Read vibecontrols_auth_sign_in Sign in with username + password (server-side credential flow, distinct from the device-code auth_login). Pers Read vibecontrols_auth_sign_up Register a new account via email/username/password and immediately sign in. Persists access + refresh tokens. Read vibecontrols_auth_sso_get Get SSO (SAML/OIDC) configuration for a tenant. Read vibecontrols_auth_sso_test Build the SSO test login URL for a tenant. Returns the URL to open in a browser; this tool does not perform an Read vibecontrols_auth_status Show current authentication status including method, token expiration, workspace info, and pending login state Read vibecontrols_auth_users_get Get a user by id. Requires admin permission. Read vibecontrols_auth_users_list List users with optional filters. Requires admin permission. Read vibecontrols_auth_workspaces List all workspaces available to the authenticated user. Read vibecontrols_billing_addons_list List addons, optionally filtered by product. Read vibecontrols_billing_credits_balance Show current credit balance on the default billing account. Read vibecontrols_billing_credits_grant Grant credits to a billing account (admin only). Read vibecontrols_billing_invoices_get Get an invoice by ID. Read vibecontrols_billing_invoices_get_pdf_url Return the invoice PDF download URL. The actual PDF must be opened in a browser by the user. Read vibecontrols_billing_invoices_list Paginated list of invoices on a billing account. Read vibecontrols_billing_payment_methods_list List payment methods on a billing account. Read vibecontrols_billing_plans_get Get a plan by ID. Read vibecontrols_billing_plans_list List available plans, optionally filtered by product. Read vibecontrols_billing_quota_list Get all quotas for a subscription. Live alpha requires BOTH billingAccountId and subscriptionId; the missing b Read vibecontrols_billing_refunds_list List pending refund records (paginated). Read vibecontrols_billing_subscriptions_get Get a subscription by ID. Live alpha requires BOTH billingAccountId and id; the missing billingAccountId was r Read vibecontrols_billing_subscriptions_list List active subscriptions on a billing account (defaults to current). Read vibecontrols_billing_subscriptions_upgrade Change the seat count on a subscription. Read vibecontrols_catalogs_dependency_graph Get the dependency graph for a catalog. Returns { nodes, edges }. Read vibecontrols_catalogs_get Get a catalog by ID. Returns the catalog object or null. Read vibecontrols_catalogs_list List service catalogs with optional filters. Returns { items, total, hasMore }. Read vibecontrols_catalogs_sbom Get the SBOM (software bill of materials) for a catalog. Returns { format, generatedAt, totalCount, components Read vibecontrols_channels_connections_list List channel connections for an organization. Read vibecontrols_channels_deliveries Recent delivery attempts for a channel. Read vibecontrols_channels_get Get a channel by its ID. Read vibecontrols_channels_list List channels with optional platform/status filters and pagination. Read vibecontrols_channels_users Users connected to this channel. Read vibecontrols_channels_webhooks_list List webhook events for a channel. Read vibecontrols_components_get Get a component by ID. Returns the component object or null. Read vibecontrols_components_list List software components. Returns { items, total, hasMore }. Read vibecontrols_config_by_scope Get all configuration values for a given scope. Read vibecontrols_config_get Get a configuration value by key and scope. Read vibecontrols_config_list List configuration key-value pairs with required filter. Read vibecontrols_configuration_ci_get_pipeline_details Get detailed information (commit, jobs) for a single CI pipeline run. Read vibecontrols_configuration_ci_get_pipeline_runs List recent CI pipeline runs from a GitOps provider, optionally filtered by branch. Read vibecontrols_configuration_ci_get_repo_stats Get cached repository statistics (stars, forks, languages, PRs, contributors, etc) for a GitOps provider. Read vibecontrols_configuration_ci_get_status Get the cached CI/CD pipeline status for a GitOps provider on an agent (recent runs + workflows + aggregate me Read vibecontrols_configuration_ci_refresh_repo_stats Force refresh of the cached repository statistics snapshot. Read vibecontrols_configuration_ci_refresh_status Force refresh of the cached CI/CD pipeline status snapshot. Read vibecontrols_configuration_gitops_get Get a single GitOps provider by ID. Read vibecontrols_configuration_gitops_list List GitOps providers (GitHub/GitLab/Bitbucket/Azure DevOps) in the current workspace. Read vibecontrols_configuration_security_all_security_scans List all security scan runs in the workspace (requires elevated permissions). Read vibecontrols_configuration_security_findings List security findings with optional filters (vibe, severity, category, status). Read vibecontrols_configuration_security_my_security_scans List security scan runs created by the current user. Read vibecontrols_configuration_security_presign_evidence Get a presigned URL for uploading a security evidence artifact (SBOM/SARIF/etc). Read vibecontrols_configuration_security_providers List configured security scanner providers in the current workspace. Read vibecontrols_configuration_security_repository_config Get the repository-level security policy config for a vibe. Read vibecontrols_configuration_security_scan Get a single security scan run including findings and evidence. Read vibecontrols_configuration_security_status Aggregated security posture for a single vibe. Read vibecontrols_configuration_settings_list_secrets List stored settings secrets (values are hidden by default). Read vibecontrols_configuration_settings_mine Get the complete settings bundle for the current user (preferences + notifications + workspace defaults + prof Read vibecontrols_configuration_settings_mine_by_category Get a single settings category as a JSON blob. Read vibecontrols_conversations_drafts_get Fetch the current actor’s draft for a conversation, if any. Read vibecontrols_conversations_get Get a single conversation by ID. Read vibecontrols_conversations_get_or_create_direct Open (or create) a 1:1 DM conversation with another user. Read vibecontrols_conversations_invites_join Redeem an invite code/link and join the conversation. Read vibecontrols_conversations_invites_validate Check whether an invite code is currently valid; returns conversation preview. Read vibecontrols_conversations_leave Leave a conversation as the current actor. Read vibecontrols_conversations_list List threaded conversations with optional type filter and cursor pagination. Read vibecontrols_conversations_mentions_list List messages that mention the current actor. Read vibecontrols_conversations_messages_check Polling substitute for the messageAdded / messageUpdated / messageDeleted subscriptions. Returns recent messag Read vibecontrols_conversations_messages_forward Forward an existing message into another conversation. Read vibecontrols_conversations_messages_get Fetch a single message by ID. Read vibecontrols_conversations_messages_hide Moderator action: hide a message with a reason. Read vibecontrols_conversations_messages_list List messages in a conversation with cursor pagination. Returns { items, pageInfo }. Read vibecontrols_conversations_messages_report Report a message for moderation review. Read vibecontrols_conversations_messages_search Full-text search across messages. Optionally scope to a conversation. Read vibecontrols_conversations_messages_unhide Moderator action: restore a previously hidden message. Read vibecontrols_conversations_messages_unread List unread messages for the current actor across all conversations. Read vibecontrols_conversations_mute Mute notifications for a conversation. Optional until (ISO timestamp). Read vibecontrols_conversations_presence_get Get presence status (online/away/etc) for a set of user IDs. Read vibecontrols_conversations_search Full-text search across conversations the actor is a member of. Read vibecontrols_conversations_settings_get Fetch the settings JSON for a conversation. Returns { id, settings }; settings is null if the conversation has Read vibecontrols_conversations_threads_get List the replies under a thread-root message. Read vibecontrols_conversations_typing_list List users currently typing in a conversation. Read vibecontrols_conversations_unmute Re-enable notifications for a conversation. Read vibecontrols_conversations_unpin Unpin a conversation from the actor’s list. Read vibecontrols_decks_buttons_list List all buttons in a VibeDeck with optional pagination. Read vibecontrols_decks_get Get a VibeDeck by its ID. Read vibecontrols_decks_list List all VibeDecks with optional filters and pagination. Read vibecontrols_devportal_admin_reviews_list List applications in the admin review queue. Live query is appReviews(applicationId, status, limit, offset) (t Read vibecontrols_devportal_api_keys_list List API keys for an application. Live query is appApiKeys(appId: ID!). Read vibecontrols_devportal_apps_analytics Get analytics for an application over a period. Read vibecontrols_devportal_apps_get Get a devportal application by ID. Read vibecontrols_devportal_apps_list List devportal applications. status is the live AppStatus enum (DRAFT|REVIEW|PUBLISHED|ARCHIVED). Read vibecontrols_devportal_apps_versions_list List versions for an application. [intentionally stubbed: Query.applicationVersions(applicationId) was removed Read vibecontrols_devportal_apps_webhooks_list List webhooks attached to an application (live global Query.webhooks(applicationId)). Read vibecontrols_devportal_delegations_list List workspace delegations issued to applications. Live impl proxies through the global Query.currentUserDeleg Read vibecontrols_devportal_oauth_list List OAuth 2.0 clients registered for a devportal application. [intentionally stubbed: Query.oauthClients(appl Read vibecontrols_devportal_orgs_get Get a developer organization by ID. Read vibecontrols_devportal_orgs_list List developer organizations the caller is a member of (uses myDeveloperOrganizations on the global-devportal Read vibecontrols_devportal_revenue Get revenue summary for an organization. [intentionally stubbed: Query.organizationRevenue (and any revenue fi Read vibecontrols_docs_compile Compile a documentation site, optionally publishing it. Read vibecontrols_docs_pages_create Create a new documentation page. Read vibecontrols_docs_pages_delete Delete a documentation page. Read vibecontrols_docs_pages_get Get a documentation page by its ID. Read vibecontrols_docs_pages_list List pages in a documentation site with optional status filter. Read vibecontrols_docs_pages_update Update an existing documentation page. Read vibecontrols_docs_publish Publish a specific docs revision. Read vibecontrols_docs_rollback Rollback a documentation site to a previous revision. Read vibecontrols_docs_sites_create Create a new documentation site. Read vibecontrols_docs_sites_delete Delete a documentation site. Read vibecontrols_docs_sites_get Get a documentation site by its vibe ID. Read vibecontrols_docs_sites_list List documentation sites with optional filtering by vibe and pagination. Read vibecontrols_docs_sites_update Update an existing documentation site. Read vibecontrols_files_browse Browse a workspace folder. Returns subfolders and paginated files. [STUB] Read vibecontrols_files_download Resolve a server-signed presigned download URL for a file. [STUB] Read vibecontrols_files_get Get a single file by ID. Returns the file record or an error if not found. [STUB] Read vibecontrols_files_list List files in a workspace, optionally scoped to a folder. [STUB] Read vibecontrols_groups_activity Audit log for a group. Read vibecontrols_groups_get Get a group by its ID. Read vibecontrols_groups_hierarchy Show all groups an entity (user/group) belongs to. Read vibecontrols_groups_list List groups with optional type/status filters and pagination. Read vibecontrols_groups_members_list List members of a group. Read vibecontrols_integrations_auth_api_key Attach an API key to an existing connection. Read vibecontrols_integrations_auth_basic Attach Basic Auth credentials to an existing connection. Read vibecontrols_integrations_auth_bearer Attach a Bearer token to an existing connection. Read vibecontrols_integrations_connections_get Get a connection by ID. Read vibecontrols_integrations_connections_link_to_channel Link an integration connection to a channel for DM/notification routing. Read vibecontrols_integrations_connections_list List provider connections (OAuth + credential). Read vibecontrols_integrations_connections_refresh_token Force a token refresh for an OAuth connection. Read vibecontrols_integrations_connections_test Health/auth probe for a connection; returns success/message/latencyMs. Read vibecontrols_integrations_integration_logs List integration audit logs with optional filters. Read vibecontrols_integrations_logs List audit logs for a specific integration connection. Read vibecontrols_integrations_providers_by_provider List all connections that belong to a given provider. Read vibecontrols_integrations_providers_catalog Browseable catalog of integration providers (paginated). Read vibecontrols_integrations_providers_get Get an integration provider by ID. Read vibecontrols_integrations_providers_get_by_key Look up an integration provider by its string key (e.g. github, slack). Read vibecontrols_integrations_providers_list List integration providers with optional category/enabled filters. Read vibecontrols_integrations_tags_list List tag assignments on a connection. Read vibecontrols_notes_get Get a note by its ID. Read vibecontrols_notes_list List notes with optional filters and pagination. Read vibecontrols_notes_search Full-text search across notes. Read vibecontrols_notes_unpin Unpin a previously pinned note. Read vibecontrols_notifications_list List the current user's notifications with optional filters. Read vibecontrols_notifications_preferences_get Show the current user's notification preferences. Read vibecontrols_notifications_read Mark a notification as read. Read vibecontrols_organizations_current Return the current organization context from the auth store. Read vibecontrols_organizations_get Fetch a single organization by ID. Returns the full organization detail (tenant, slug, status, member/workspac Read vibecontrols_organizations_invites_accept Accept a pending organization invite. Read vibecontrols_organizations_invites_decline Decline a pending organization invite. Read vibecontrols_organizations_invites_list List organization invites for the current user. Read vibecontrols_organizations_list List organizations the current user is a member of. Read vibecontrols_organizations_members_list List the members of an organization with pagination. Returns { items, total, hasMore, limit, offset }. Read vibecontrols_products_content_pages_get Get a content page by ID. Returns the page record (including content body) or an error if not found. Read vibecontrols_products_content_pages_list List content pages for a product. Read vibecontrols_products_feature_flags_evaluate Evaluate feature flags in a workspace context. Read vibecontrols_products_feature_flags_get Get a feature flag by ID. Returns the flag record or an error if not found. Read vibecontrols_products_feature_flags_list List feature flags. Read vibecontrols_products_get Get a platform product by ID. Read vibecontrols_products_list List platform products with optional search/status filters. Read vibecontrols_products_shortcuts_get Get a keyboard shortcut by ID. Returns the shortcut record or an error if not found. Read vibecontrols_products_shortcuts_list List keyboard shortcuts. Read vibecontrols_rbac_check Check whether an actor has permission for an action on a resource. Read vibecontrols_rbac_policies_detach Detach an OPA policy reference from a role on the chosen gateway. Returns { detached: boolean, roleId, policyI Read vibecontrols_rbac_policies_list List OPA policy references registered on the chosen gateway (workspace or global), optionally filtered by reso Read vibecontrols_rbac_roles_get Get a role by id from the workspace or global layer. Read vibecontrols_rbac_roles_list List RBAC roles for a workspace or global scope. Read vibecontrols_sandbox_admin_active List active sandboxes (admin). [STUB] Read vibecontrols_sandbox_admin_activity Recent activity across sandboxes (admin). [STUB] Read vibecontrols_sandbox_admin_config_get Read sandbox module config. [STUB] Read vibecontrols_sandbox_admin_list_all List all sandboxes across workspaces (admin). [STUB] Read vibecontrols_sandbox_admin_logs Sandbox fleet logs (admin). [STUB] Read vibecontrols_sandbox_admin_nodes_list List sandbox node fleet (admin). [STUB] Read vibecontrols_sandbox_admin_stats Aggregate sandbox fleet stats. [STUB] Read vibecontrols_sandbox_check Run a health check on a sandbox. [STUB] Read vibecontrols_sandbox_extend Extend a sandbox's TTL. [STUB] Read vibecontrols_sandbox_get Get a sandbox by ID. [STUB] Read vibecontrols_sandbox_list List sandboxes in the active workspace. [STUB] Read vibecontrols_sandbox_proxy_request Proxy a request into a running sandbox. [STUB] Read vibecontrols_sandbox_tags_detach Detach a tag from a sandbox. [STUB] Read vibecontrols_sandbox_tags_get Get a sandbox tag. [STUB] Read vibecontrols_sandbox_tags_list List tags on a sandbox. [STUB] Read vibecontrols_sandbox_templates_get Get a sandbox template by ID. [STUB] Read vibecontrols_sandbox_templates_list List sandbox templates. [STUB] Read vibecontrols_sandboxes_admin_get_active Admin: list all currently active sandboxes across the workspace. Read vibecontrols_sandboxes_admin_get_recent_activity Admin: list recent sandbox activity/audit entries. Read vibecontrols_sandboxes_admin_list_all Admin: list all sandboxes (including other users) with optional filters. Read vibecontrols_sandboxes_admin_list_nodes Admin: list cluster nodes available for sandbox scheduling with capacity info. Read vibecontrols_sandboxes_extend_ttl Extend a sandbox time-to-live by an additional number of seconds. Read vibecontrols_sandboxes_get Get a sandbox by ID. Read vibecontrols_sandboxes_get_config Get the sandbox provisioning config (TTL/concurrency/resource defaults) for the workspace. Read vibecontrols_sandboxes_get_logs Fetch container logs for a sandbox. Read vibecontrols_sandboxes_get_stats Get aggregate sandbox statistics for the workspace. Read vibecontrols_sandboxes_list List sandboxes in the current workspace with optional template/status filters. Read vibecontrols_sandboxes_proxy_request Proxy an HTTP request into a running sandbox container. Context injected from auth. Read vibecontrols_sandboxes_tags_available List available sandbox tags, optionally filtered by a search query. Read vibecontrols_sandboxes_tags_get Get all tag assignments for a sandbox. Read vibecontrols_sandboxes_templates_get Get a sandbox template config by ID. Read vibecontrols_sandboxes_templates_list List sandbox template configs, optionally filtered by template type. Read vibecontrols_scheduler_executions_check Polling proxy for the executionUpdated subscription — returns the current state of an execution. Read vibecontrols_scheduler_executions_get Fetch a single job execution by ID, including status, attempt number, timings, error message and result payloa Read vibecontrols_scheduler_executions_list List execution history for a scheduled job. Read vibecontrols_scheduler_jobs_check Polling proxy for the jobStatusUpdated subscription — returns the current state of a scheduled job. Read vibecontrols_scheduler_jobs_clone Clone an existing schedule. Optionally move to another workspace and supply override fields. Read vibecontrols_scheduler_jobs_get Get a scheduled job by ID. Read vibecontrols_scheduler_jobs_list List scheduled jobs in the active workspace. Read vibecontrols_scheduler_jobs_pause Pause a scheduled job. Read vibecontrols_scheduler_jobs_preview Compute upcoming execution times for a schedule definition without creating it. Read vibecontrols_scheduler_jobs_tag_list List tag assignments on a scheduled job. Read vibecontrols_scheduler_templates_get Get a schedule template by ID. Read vibecontrols_scheduler_templates_list List schedule templates in the active workspace. Read vibecontrols_scheduler_templates_list_public List public (cross-workspace) schedule templates. Read vibecontrols_scheduler_versions_history List version history for a schedule. Read vibecontrols_scorecards_get Get the scorecard for an owner entity (catalog/component/vibe). Returns the scorecard with metrics or null. Read vibecontrols_security_secrets_get Get a secret's metadata. Does NOT decrypt the value — use security_secrets_reveal for that. Read vibecontrols_security_secrets_list List secrets in a vault with optional filters and pagination. Read vibecontrols_security_secrets_reveal Decrypt and return the secret value. This action is audited server-side. Treat the result as sensitive and avo Read vibecontrols_security_secrets_rotate Replace a secret's encrypted value with a new one. Read vibecontrols_security_vaults_get Get a vault by ID. Read vibecontrols_security_vaults_list List vaults in the current workspace with optional filters and pagination. Read vibecontrols_sessions_active Get all currently active/running sessions, optionally filtered by vibe. Read vibecontrols_sessions_check_health Run health checks on all sessions. Read vibecontrols_sessions_collaborators List all collaborators for a session. Read vibecontrols_sessions_get Get a terminal session by its ID. Read vibecontrols_sessions_join Join a shared session via share id or share-link token. Read vibecontrols_sessions_kill Forcefully kill a session process (SIGKILL-equivalent). Use when terminate/stop have failed to release the und Read vibecontrols_sessions_leave Leave a shared session as a collaborator. Read vibecontrols_sessions_list List terminal sessions with optional filters and pagination. Read vibecontrols_sessions_output Get recent output from a terminal session. Read vibecontrols_sessions_release_control Release control of a shared session. Read vibecontrols_sessions_request_control Request control of a shared session (INTERACT permission). Read vibecontrols_sessions_share Share a session with another user. Read vibecontrols_sessions_share_links List all share links for a session. Read vibecontrols_sessions_shared_with_me List sessions that have been shared with the current user. Read vibecontrols_sessions_shares List all shares for a session. Read vibecontrols_store_browse Browse the marketplace. [STUB] Read vibecontrols_store_cart_list Get the current user's cart. [STUB] Read vibecontrols_store_get_product Get a product by ID. [STUB] Read vibecontrols_store_installed_list List installed products. [STUB] Read vibecontrols_store_licenses_list List product licenses. [STUB] Read vibecontrols_store_orders_get Get an order by ID. [STUB] Read vibecontrols_store_orders_list List orders. [STUB] Read vibecontrols_store_publisher_get Get the caller's publisher profile. [STUB] Read vibecontrols_store_publisher_products List products published by the caller. [STUB] Read vibecontrols_store_search Search the marketplace. [STUB] Read vibecontrols_support_kb_search Search knowledge base articles. Read vibecontrols_support_tickets_close Close a support ticket. Live alpha requires the ticket to be RESOLVED first; the tool performs the resolve ste Read vibecontrols_support_tickets_comment Add a comment to a support ticket. Read vibecontrols_support_tickets_create Open a support ticket. Read vibecontrols_support_tickets_get Get a support ticket by ID, including messages. Read vibecontrols_support_tickets_list List support tickets. Live supportTickets takes no args (workspace context from x-workspace-id); the legacy (f Read vibecontrols_tags_analytics Get analytics for a tag (assignment / usage counts). [STUB] Read vibecontrols_tags_get Get a tag by ID. [STUB] Read vibecontrols_tags_list List tags in the active workspace. [STUB] Read vibecontrols_tags_permissions_grant Grant a tag permission. [STUB] Read vibecontrols_tags_permissions_list List tag-permission grants in the workspace. [STUB] Read vibecontrols_targets_get Get a VibeControls target by its ID. Read vibecontrols_targets_list List all VibeControls targets with optional filters and pagination. Read vibecontrols_targets_scan_ssh Scan an SSH config file on the agent to discover targets. Read vibecontrols_targets_test Test the connectivity of a specific target. Read vibecontrols_templates_get Get a template by ID. Returns the template object or null. Read vibecontrols_templates_list List reusable component templates. Returns { items, total, hasMore }. Read vibecontrols_tours_list List available product tours. Read vibecontrols_tours_progress_get Get the current user's tour progress, optionally filtered by user id. Read vibecontrols_tunnels_audit Audit log entries scoped to a tunnel. Read vibecontrols_tunnels_by_slug Get a tunnel by its workspace-unique slug. Read vibecontrols_tunnels_check Poll a tunnel by ID. Use this in place of the GraphQL tunnelUpdated subscription which has no MCP equivalent — Read vibecontrols_tunnels_detach_domain Detach a domain from a tunnel. The domain record remains for re-use. Read vibecontrols_tunnels_get Get a tunnel by ID. Read vibecontrols_tunnels_get_domain Get a tunnel domain by ID. Read vibecontrols_tunnels_list List tunnels in the workspace with optional filters. Read vibecontrols_tunnels_list_domains List tunnel domains, optionally scoped to a single tunnel. Read vibecontrols_tunnels_list_sessions List sessions for a tunnel. Read vibecontrols_tunnels_probe_agent Probe an agent tunnel URL for health and identity. Read vibecontrols_tunnels_provider Get a single tunnel provider by key. Read vibecontrols_tunnels_providers List all tunnel providers. Read vibecontrols_tunnels_reserve_subdomain Reserve a managed subdomain under .vibetunnels.com. Read vibecontrols_tunnels_rotate_credentials Rotate basic-auth + provider secrets. Active sessions are revoked. Read vibecontrols_tunnels_shards List tunnel server shards (frps instances), optionally filtered by environment. Read vibecontrols_tunnels_usage Hourly usage buckets for a tunnel in a time range. Read vibecontrols_tunnels_verify_domain Force a verification check for a custom domain. Read vibecontrols_ui_session_get Get the current user's UI session state (active vibe, active session, recent items). Read vibecontrols_vibe_deck_share_links_get_shared Fetch a publicly shared VibeDeck via its token. Read vibecontrols_vibe_deck_share_links_list List share-links for a VibeDeck. Read vibecontrols_vibe_deck_share_links_validate Validate a share-link token (public). Returns access metadata. Read vibecontrols_vibes_get Get a vibe by its ID. Read vibecontrols_vibes_hierarchy Get the vibe hierarchy tree starting from an optional root vibe. Read vibecontrols_vibes_list List all vibes (projects/workspaces) with optional filters and pagination. Read vibecontrols_vibes_search Full-text search across vibes by name, description, path, or tags. Read vibecontrols_webhooks_get Get a webhook by its ID. Read vibecontrols_webhooks_list List all webhooks with optional filters. Read vibecontrols_webhooks_test Send a test delivery to a webhook to verify its endpoint. Read vibecontrols_workspace_activity Workspace activity log (audit events) for a given workspace. Read vibecontrols_workspace_current Inspect the workspace currently bound to this MCP session (workspace ID, organization ID, and whether a worksp Read vibecontrols_workspace_get Get a workspace by its ID (global layer). Read vibecontrols_workspace_invites_accept Accept a workspace invitation by invitation ID. Returns { id, status, workspaceId } of the accepted invite. Read vibecontrols_workspace_list List workspaces visible to the current actor on the workspace gateway, with optional filters and pagination. R Read vibecontrols_workspace_members_list List members of a workspace. BOFF-8203: live WorkspaceMember only exposes id / userId / role / joinedAt — emai Read vibecontrols_workspace_projects_get Get a project by its ID. Read vibecontrols_workspace_projects_list List projects, optionally filtered by workspace. Returns { items, total, hasMore }.

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Questions about Vibecontrols

Can an AI agent move money through the Vibecontrols MCP server? +

Yes. The Vibecontrols server exposes 2 financial tools including vibecontrols_billing_credits_withdraw, vibecontrols_sessions_transfer_control. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the Vibecontrols MCP server? +

Yes. The Vibecontrols server exposes 87 destructive tools including vibecontrols_actions_cancel_execution, vibecontrols_actions_delete, vibecontrols_actions_unschedule. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Vibecontrols? +

The Vibecontrols server has 224 write tools including vibecontrols_actions_create, vibecontrols_actions_duplicate, vibecontrols_actions_install. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Vibecontrols.

How many tools does the Vibecontrols MCP server expose? +

672 tools across 5 categories: Destructive, Execute, Financial, Read, Write. 330 are read-only. 342 can modify, create, or delete data.

How do I enforce a policy on Vibecontrols? +

Register the Vibecontrols MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Vibecontrols tool call.

Deterministic rules across all 672 Vibecontrols tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

Instant setup, no code required.

672 Vibecontrols tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from Vibecontrols's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.