# Portkey Admin MCP server

Agent View of the PolicyLayer registry record for Portkey Admin: identity, probed posture, risk grade, and all 156 tools classified. HTML page: https://policylayer.com/tools/codeswhat-portkey-admin-mcp

## Facts

- Server id: `codeswhat/portkey-admin-mcp`
- Homepage: https://github.com/CodesWhat/portkey-admin-mcp
- Registry record: grade F, identity unverified
- Lifecycle: active
- Rate-limited: no
- Tools: 156
- Tool categories present: Destructive, Execute, Read, Write
- Tags: codeswhat portkey admin mcp, admin, automation
- Record last modified: 2026-07-22T22:47:47.599Z

## Tools (156)

| Tool | Category | Risk | Record |
| --- | --- | --- | --- |
| `cancel_log_export` | Destructive | Critical | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/cancel-log-export.md |
| `delete_api_key` | Destructive | Critical | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/delete-api-key.md |
| `delete_collection` | Destructive | Critical | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/delete-collection.md |
| `delete_config` | Destructive | Critical | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/delete-config.md |
| `delete_guardrail` | Destructive | Critical | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/delete-guardrail.md |
| `delete_integration` | Destructive | Critical | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/delete-integration.md |
| `delete_integration_model` | Destructive | Critical | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/delete-integration-model.md |
| `delete_mcp_integration` | Destructive | Critical | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/delete-mcp-integration.md |
| `delete_mcp_server` | Destructive | Critical | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/delete-mcp-server.md |
| `delete_prompt` | Destructive | Critical | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/delete-prompt.md |
| `delete_prompt_label` | Destructive | Critical | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/delete-prompt-label.md |
| `delete_prompt_partial` | Destructive | Critical | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/delete-prompt-partial.md |
| `delete_provider` | Destructive | Critical | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/delete-provider.md |
| `delete_rate_limit` | Destructive | Critical | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/delete-rate-limit.md |
| `delete_secret_reference` | Destructive | Critical | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/delete-secret-reference.md |
| `delete_usage_limit` | Destructive | Critical | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/delete-usage-limit.md |
| `delete_user` | Destructive | Critical | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/delete-user.md |
| `delete_user_invite` | Destructive | Critical | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/delete-user-invite.md |
| `delete_virtual_key` | Destructive | Critical | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/delete-virtual-key.md |
| `delete_workspace` | Destructive | Critical | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/delete-workspace.md |
| `remove_workspace_member` | Destructive | Critical | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/remove-workspace-member.md |
| `run_prompt_completion` | Execute | High | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/run-prompt-completion.md |
| `start_log_export` | Execute | High | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/start-log-export.md |
| `test_mcp_server` | Execute | High | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/test-mcp-server.md |
| `download_log_export` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/download-log-export.md |
| `get_analytics_group_metadata` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-analytics-group-metadata.md |
| `get_analytics_group_models` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-analytics-group-models.md |
| `get_analytics_group_users` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-analytics-group-users.md |
| `get_api_key` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-api-key.md |
| `get_cache_hit_latency` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-cache-hit-latency.md |
| `get_cache_hit_rate` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-cache-hit-rate.md |
| `get_collection` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-collection.md |
| `get_config` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-config.md |
| `get_cost_analytics` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-cost-analytics.md |
| `get_error_analytics` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-error-analytics.md |
| `get_error_rate_analytics` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-error-rate-analytics.md |
| `get_error_stacks_analytics` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-error-stacks-analytics.md |
| `get_error_status_codes_analytics` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-error-status-codes-analytics.md |
| `get_feedback_analytics` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-feedback-analytics.md |
| `get_feedback_models_analytics` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-feedback-models-analytics.md |
| `get_feedback_scores_analytics` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-feedback-scores-analytics.md |
| `get_feedback_weighted_analytics` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-feedback-weighted-analytics.md |
| `get_guardrail` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-guardrail.md |
| `get_integration` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-integration.md |
| `get_latency_analytics` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-latency-analytics.md |
| `get_log_export` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-log-export.md |
| `get_mcp_integration` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-mcp-integration.md |
| `get_mcp_integration_metadata` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-mcp-integration-metadata.md |
| `get_mcp_server` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-mcp-server.md |
| `get_prompt` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-prompt.md |
| `get_prompt_label` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-prompt-label.md |
| `get_prompt_partial` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-prompt-partial.md |
| `get_prompt_version` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-prompt-version.md |
| `get_provider` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-provider.md |
| `get_rate_limit` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-rate-limit.md |
| `get_request_analytics` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-request-analytics.md |
| `get_rescued_requests_analytics` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-rescued-requests-analytics.md |
| `get_secret_reference` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-secret-reference.md |
| `get_token_analytics` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-token-analytics.md |
| `get_usage_limit` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-usage-limit.md |
| `get_user` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-user.md |
| `get_user_invite` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-user-invite.md |
| `get_user_requests_analytics` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-user-requests-analytics.md |
| `get_user_stats` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-user-stats.md |
| `get_users_analytics` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-users-analytics.md |
| `get_virtual_key` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-virtual-key.md |
| `get_workspace` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-workspace.md |
| `get_workspace_member` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/get-workspace-member.md |
| `list_all_users` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-all-users.md |
| `list_api_keys` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-api-keys.md |
| `list_audit_logs` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-audit-logs.md |
| `list_collections` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-collections.md |
| `list_config_versions` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-config-versions.md |
| `list_configs` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-configs.md |
| `list_guardrails` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-guardrails.md |
| `list_integration_models` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-integration-models.md |
| `list_integration_workspaces` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-integration-workspaces.md |
| `list_integrations` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-integrations.md |
| `list_log_exports` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-log-exports.md |
| `list_mcp_integration_capabilities` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-mcp-integration-capabilities.md |
| `list_mcp_integration_workspaces` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-mcp-integration-workspaces.md |
| `list_mcp_integrations` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-mcp-integrations.md |
| `list_mcp_server_capabilities` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-mcp-server-capabilities.md |
| `list_mcp_server_user_access` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-mcp-server-user-access.md |
| `list_mcp_servers` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-mcp-servers.md |
| `list_partial_versions` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-partial-versions.md |
| `list_prompt_labels` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-prompt-labels.md |
| `list_prompt_partials` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-prompt-partials.md |
| `list_prompt_versions` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-prompt-versions.md |
| `list_prompts` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-prompts.md |
| `list_providers` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-providers.md |
| `list_rate_limits` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-rate-limits.md |
| `list_secret_references` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-secret-references.md |
| `list_usage_limit_entities` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-usage-limit-entities.md |
| `list_usage_limits` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-usage-limits.md |
| `list_user_invites` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-user-invites.md |
| `list_virtual_keys` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-virtual-keys.md |
| `list_workspace_members` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-workspace-members.md |
| `list_workspaces` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/list-workspaces.md |
| `render_prompt` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/render-prompt.md |
| `validate_completion_metadata` | Read | Low | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/validate-completion-metadata.md |
| `add_workspace_member` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/add-workspace-member.md |
| `create_api_key` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/create-api-key.md |
| `create_collection` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/create-collection.md |
| `create_config` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/create-config.md |
| `create_feedback` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/create-feedback.md |
| `create_guardrail` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/create-guardrail.md |
| `create_integration` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/create-integration.md |
| `create_log_export` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/create-log-export.md |
| `create_mcp_integration` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/create-mcp-integration.md |
| `create_mcp_server` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/create-mcp-server.md |
| `create_prompt` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/create-prompt.md |
| `create_prompt_label` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/create-prompt-label.md |
| `create_prompt_partial` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/create-prompt-partial.md |
| `create_provider` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/create-provider.md |
| `create_rate_limit` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/create-rate-limit.md |
| `create_secret_reference` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/create-secret-reference.md |
| `create_usage_limit` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/create-usage-limit.md |
| `create_virtual_key` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/create-virtual-key.md |
| `create_workspace` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/create-workspace.md |
| `insert_log` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/insert-log.md |
| `invite_user` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/invite-user.md |
| `migrate_prompt` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/migrate-prompt.md |
| `promote_prompt` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/promote-prompt.md |
| `publish_partial` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/publish-partial.md |
| `publish_prompt` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/publish-prompt.md |
| `resend_user_invite` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/resend-user-invite.md |
| `reset_usage_limit_entity` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/reset-usage-limit-entity.md |
| `rotate_api_key` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/rotate-api-key.md |
| `update_api_key` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/update-api-key.md |
| `update_collection` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/update-collection.md |
| `update_config` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/update-config.md |
| `update_feedback` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/update-feedback.md |
| `update_guardrail` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/update-guardrail.md |
| `update_integration` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/update-integration.md |
| `update_integration_models` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/update-integration-models.md |
| `update_integration_workspaces` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/update-integration-workspaces.md |
| `update_log_export` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/update-log-export.md |
| `update_mcp_integration` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/update-mcp-integration.md |
| `update_mcp_integration_capabilities` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/update-mcp-integration-capabilities.md |
| `update_mcp_integration_workspaces` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/update-mcp-integration-workspaces.md |
| `update_mcp_server` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/update-mcp-server.md |
| `update_mcp_server_capabilities` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/update-mcp-server-capabilities.md |
| `update_mcp_server_user_access` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/update-mcp-server-user-access.md |
| `update_prompt` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/update-prompt.md |
| `update_prompt_label` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/update-prompt-label.md |
| `update_prompt_partial` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/update-prompt-partial.md |
| `update_prompt_version` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/update-prompt-version.md |
| `update_provider` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/update-provider.md |
| `update_rate_limit` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/update-rate-limit.md |
| `update_secret_reference` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/update-secret-reference.md |
| `update_usage_limit` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/update-usage-limit.md |
| `update_user` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/update-user.md |
| `update_virtual_key` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/update-virtual-key.md |
| `update_workspace` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/update-workspace.md |
| `update_workspace_member` | Write | Medium | https://policylayer.com/tools/codeswhat-portkey-admin-mcp/update-workspace-member.md |

## Tool descriptions

- `cancel_log_export` — Cancel a pending or running log export job, unlike start_log_export which queues one or delete_integration which removes the source. This permanently stops that export, takes effect immediately, and does not roll back already-processed r…
- `delete_api_key` — Delete an API key by UUID. This cannot be undone, revokes access immediately, and can break active sessions using the key. Returns success after revocation.
- `delete_collection` — Delete a prompt collection by ID. This cannot be undone; prompts stay in the workspace but lose their collection grouping, so reassign them first if organization matters.
- `delete_config` — Delete a config by slug. This is permanent, removes all versions, and breaks anything still pointing at that slug; check list_config_versions first.
- `delete_guardrail` — Delete a guardrail by id or slug. This is irreversible and removes the check from any configs that reference it, so review dependent configs first.
- `delete_integration` — Delete an integration by slug. This is irreversible and stops the org-level connection, which will break dependent virtual keys, providers, and workspace access.
- `delete_integration_model` — Delete a custom model from an integration. Built-in models should be disabled instead, because deletion only applies to custom entries. Returns success after the custom model is removed.
- `delete_mcp_integration` — Delete an MCP integration and all servers beneath it. This is irreversible, removes connected access immediately, and should only be used after confirming nothing depends on the integration.
- `delete_mcp_server` — Delete an MCP server instance. This is irreversible, removes connected users
- `delete_prompt` — Delete a prompt and all its versions by id. This cannot be undone, immediately breaks callers using the slug, and should only be used after checking list_prompt_versions or confirming you do not need an audit trail.
- `delete_prompt_label` — Delete a prompt label by ID. This cannot be undone; versions carrying the label lose it, and any workflow resolving by that label will need a replacement.
- `delete_prompt_partial` — Delete a prompt partial by ID. This cannot be undone, and prompts that reference it with {{> name}} will fail to render until you replace the reference.
- `delete_provider` — Delete a workspace provider by slug. This is irreversible and will break prompts, configs, and virtual keys that reference it; use delete_integration for the org source instead. Returns success after the provider is removed.
- `delete_rate_limit` — Delete a rate limit by id. This is permanent and removes throttling immediately; review dependent configs and virtual keys before deleting.
- `delete_secret_reference` — Permanently delete a Secret Reference. This is irreversible and integrations or virtual keys using it can fail to resolve credentials immediately; confirm dependencies before deletion.
- `delete_usage_limit` — Delete a usage limit by id. This is permanent, removes the budget immediately, and clears tracked usage state; check list_usage_limit_entities first if you need impact.
- `delete_user` — Delete a user from the org by id. This is permanent, removes org and workspace memberships, revokes API keys, and ends active sessions; use delete_user_invite for pending invites instead.
- `delete_user_invite` — Delete a pending invite and revoke its invite link. This does not affect existing users; use delete_user for full user removal.
- `delete_virtual_key` — Delete a virtual key by slug. This is irreversible and will break prompts and configs that reference the slug, so confirm no active dependencies first. Returns success after removal.
- `delete_workspace` — Delete a workspace by id. This is permanent and removes the workspace, its members, configs, API keys, and resources.
- `remove_workspace_member` — Remove a user from a workspace and revoke workspace access. This does not delete the user from the organization; use delete_user for full removal.
- `run_prompt_completion` — Execute a prompt against the configured model and return the completion. This makes a billable model call, so use render_prompt first when you want to check the template and validate_completion_metadata when billing fields are uncertain.
- `start_log_export` — Start processing a previously created log export job. This is asynchronous, only queues the export, and does not return rows or a download file; use get_log_export to poll progress and download_log_export after the job completes.
- `test_mcp_server` — Test connectivity to an MCP server. Sends a live check and returns success, response time, HTTP status, and any error; use this before changing configuration or when diagnosing reachability.
- `download_log_export` — Get a signed URL for downloading a completed log export. The export must already be finished; use get_log_export to confirm readiness and start_log_export if it has not run yet.
- `get_analytics_group_metadata` — Get a paginated metadata breakdown with total_groups, group_count, and a metadata_groups array grouped by the required metadata_key. Use this for custom breakdowns like per-environment or per-feature analysis; pass metadata_key in additi…
- `get_analytics_group_models` — Get a paginated per-model breakdown with total_groups, group_count, and a models array containing request count, cost, and token usage. Use this to compare model cost, popularity, and efficiency; use get_token_analytics or get_cost_analy…
- `get_analytics_group_users` — Get a paginated per-user breakdown with total_groups, group_count, and a users array containing request count, cost, and token usage. Use this for billing, audits, or top-consumer analysis; use get_users_analytics for aggregate active an…
- `get_api_key` — Fetch one API key by UUID without revealing the secret. Use this to inspect scopes, defaults, limits, expiration, and reset state before changing access.
- `get_cache_hit_latency` — Get cache-hit-only latency time-series data with summary.total_latency, summary.avg_latency, and per-bucket total/avg latency. Use this to evaluate cached-response speed; use get_latency_analytics for all requests.
- `get_cache_hit_rate` — Get cache-effectiveness time-series data with summary.hit_rate, summary.total_hits, summary.total_misses, and per-bucket hits/misses/rate. Use this to measure cache effectiveness; use get_cache_hit_latency for speed rather than hit/miss …
- `get_collection` — Fetch one collection by id or slug and return its name, slug, workspace, and timestamps. Use list_collections when browsing and get_collection when you already know the target.
- `get_config` — Get one config by slug and return its routing, cache, retry, and target settings. Requires a known slug; use list_configs to discover one before editing.
- `get_cost_analytics` — Get cost time-series data with summary.total_cost, summary.average_cost_per_request, and per-bucket total/avg cost. Use this for spend analysis and spike detection; use get_token_analytics when you need token volume instead of monetary c…
- `get_error_analytics` — Get error-count time-series data with summary.total_errors and per-bucket counts. Use this for high-level error trends; use get_error_rate_analytics for percentages, or get_error_status_codes_analytics and get_error_stacks_analytics for …
- `get_error_rate_analytics` — Get error-rate time-series data with summary.error_rate_percent and per-bucket percentages of total requests. Use this for reliability and SLA trends; use get_error_analytics for absolute error counts instead.
- `get_error_stacks_analytics` — Get stacked error-series data grouped by HTTP status code over time, with summary and per-code series. Use this to see which error classes dominate; use get_error_status_codes_analytics for distinct-code distribution instead.
- `get_error_status_codes_analytics` — Get HTTP error-code distribution time-series data with summary and per-code series. Use this to see which codes occur most often; use get_error_stacks_analytics for stacked or cumulative breakdowns.
- `get_feedback_analytics` — Get feedback-submission time-series data with summary totals and per-bucket counts. Use this as the top-level feedback trend view; use get_feedback_models_analytics, get_feedback_scores_analytics, or get_feedback_weighted_analytics for b…
- `get_feedback_models_analytics` — Get feedback time-series data grouped by model, with per-model counts over time. Use this to compare feedback volume and satisfaction across models; use get_feedback_analytics for the overall total instead.
- `get_feedback_scores_analytics` — Get raw feedback-score distribution time-series data with per-score buckets. Use this to understand sentiment mix; use get_feedback_weighted_analytics for calibrated scores with weighting.
- `get_feedback_weighted_analytics` — Get weighted feedback-score time-series data using the weight recorded at feedback creation. Use this for calibrated quality metrics; use get_feedback_scores_analytics for the raw unweighted distribution.
- `get_guardrail` — Fetch one guardrail by id or slug with its full checks and actions; use list_guardrails to discover ids first. Use before update_guardrail or delete_guardrail when you need the exact enforcement policy, and returns the full check and act…
- `get_integration` — Fetch one integration by slug, including masked key, workspace access, allowed models, and configuration metadata. Use this before editing provider-specific settings or auditing access.
- `get_latency_analytics` — Get latency time-series data with summary.avg_latency_ms, summary.p50_latency_ms, summary.p90_latency_ms, summary.p99_latency_ms, and per-bucket latency percentiles in ms. Use this to spot slowdowns and regressions; use get_cache_hit_lat…
- `get_log_export` — Fetch one log export job by export_id and return its status, filters, requested fields, and file metadata. Use this when you already know the target; use list_log_exports for a workspace-wide overview.
- `get_mcp_integration` — Retrieve one MCP integration by id or slug. Returns the full Portkey-side config, including auth type, transport, and masked configuration keys; use get_mcp_integration_metadata for the server
- `get_mcp_integration_metadata` — Retrieve the external MCP server
- `get_mcp_server` — Retrieve one MCP server by id or slug. Returns server details including the parent integration, status, and created time; use get_mcp_server when you need the server record rather than the integration config.
- `get_prompt` — Fetch a prompt
- `get_prompt_label` — Fetch one label
- `get_prompt_partial` — Fetch a partial
- `get_prompt_version` — Retrieve a specific prompt version by its version UUID. Use list_prompt_versions to find the id first; returns the template, parameters, and model config for that version.
- `get_provider` — Fetch one provider by slug, including limits, rate settings, expiration, and reset status. Use this to check consumption or audit configuration before updating.
- `get_rate_limit` — Get one rate limit by id and return its full conditions and grouping definition. Use list_rate_limits to discover ids or compare policies first.
- `get_request_analytics` — Get request-volume time-series data with summary.total_requests, summary.successful_requests, summary.failed_requests, and per-bucket total/success/failed counts. Use this for traffic and reliability trends; use get_error_analytics when …
- `get_rescued_requests_analytics` — Get rescued-request time-series data showing requests recovered by retry or fallback handling. Use this only when your configs include resilience features, and use it to measure how often recovery logic saved requests.
- `get_secret_reference` — Retrieve one Secret Reference by UUID or slug. Portkey masks sensitive authentication fields for non-system users; the tool returns metadata and the masked auth configuration, not the resolved external secret value.
- `get_token_analytics` — Get token-usage time-series data with summary.total_tokens, summary.prompt_tokens, summary.completion_tokens, and per-bucket total/prompt/completion counts. Use this for consumption trends; use get_cost_analytics when you need spend inst…
- `get_usage_limit` — Get one usage limit by id and return its full budget, threshold, grouping, and reset details. Use list_usage_limits to discover ids or compare policies first.
- `get_user` — Get one accepted user by id and return their profile, role, and timestamps. Use list_all_users to find the id if you only have a name or email, and get_user_invite for pending invitations.
- `get_user_invite` — Get one invitation by invite id and return its email, role, status, and expiry. Use this for pending invites only; use get_user for accepted users.
- `get_user_requests_analytics` — Get per-user request-count time-series data with counts grouped by user. Use this to find heavy users and traffic concentration; use get_users_analytics for aggregate active and new user trends instead.
- `get_user_stats` — Return per-user request and cost analytics for a required time range. This is usage-by-user, not population metrics; use get_users_analytics for active-user or cohort trends.
- `get_users_analytics` — Get user-growth time-series data with summary.total_active_users, summary.total_new_users, and per-bucket active/new user counts. Use this for growth and adoption trends; use get_user_requests_analytics for per-user traffic or get_analyt…
- `get_virtual_key` — Fetch one virtual key by slug, including metadata, a masked secret, limits, status, and model config. Use this before updating or to inspect the current configuration.
- `get_workspace` — Get one workspace by id and return its full details, including defaults and the complete member list. Use this when you need membership detail; use list_workspaces for an overview.
- `get_workspace_member` — Get one workspace member by workspace_id and user_id. Use this when you already know both IDs; use list_workspace_members to browse the full roster.
- `list_all_users` — List accepted org users with id, name, email, role, and timestamps. Use this to find a user_id before get_user, update_user, delete_user, or add_workspace_member; use list_user_invites for pending invitations.
- `list_api_keys` — List Portkey API keys for auditing access, scopes, defaults, limits, and expiration. Use this for API keys only; use list_virtual_keys for provider keys. Returns total plus id, type, status, workspace/user scope, limits, defaults, alert …
- `list_audit_logs` — List audit log events for a Portkey workspace or organization. Returns paginated action-level records with actor, resource, metadata, and timestamps for compliance or incident review; use this instead of analytics when you need individua…
- `list_collections` — List prompt collections in the workspace, optionally filtering by name or workspace. Returns ids, names, slugs, and timestamps so you can choose a collection_id before create_prompt, get_collection, or list_prompts.
- `list_config_versions` — List every version of a config with version number, config payload, creator, and timestamp. Use this to audit history or compare revisions before update_config or delete_config.
- `list_configs` — List configs in the org with id, slug, name, status, workspace, and timestamps. Use this summary view to find a slug; use get_config for the full routing, cache, retry, and target settings before updating or deleting.
- `list_guardrails` — List guardrails in the org with id, slug, status, ownership, and optional workspace/org filters. Use this to find IDs and slugs before get_guardrail, update_guardrail, or delete_guardrail.
- `list_integration_models` — List models enabled on an integration. Use this to verify model availability before creating prompts or configs. Returns total plus model ids, display names, enabled state, and custom-model markers.
- `list_integration_workspaces` — List workspaces that can use an integration, with their limits. Use this to audit access or confirm per-workspace cost and rate settings. Returns total plus workspace ids, names, enabled state, usage limits, and rate limits.
- `list_integrations` — List org-level AI provider connections with optional workspace or type filters. Use this to find integration slugs before model or workspace updates. Returns total plus id, name, slug, provider, status, description, workspace counts, and…
- `list_log_exports` — List log export jobs in a workspace with status, filters, and timestamps. Use this to find an export_id before calling get_log_export, start_log_export, cancel_log_export, or download_log_export.
- `list_mcp_integration_capabilities` — List capabilities exposed by the external MCP server for an integration. Returns total plus enabled-state entries so you can decide what to toggle; use before update_mcp_integration_capabilities when you need to compare the current surface.
- `list_mcp_integration_workspaces` — List which workspaces can access an MCP integration. Returns the global access mode plus per-workspace enablement for audit or permission review; use before update_mcp_integration_workspaces.
- `list_mcp_integrations` — List MCP integrations in the organization. Returns paginated integration records plus total and has_more for discovering integration IDs; use get_mcp_integration for one integration
- `list_mcp_server_capabilities` — List capabilities exposed by an MCP server instance. Returns total plus the current tool, resource, and prompt surface; use this instead of the integration-level capability list when you need server-specific exposure.
- `list_mcp_server_user_access` — List per-user access for an MCP server. Returns the default access mode, override flags, and connection status so you can audit who can use it; use before update_mcp_server_user_access.
- `list_mcp_servers` — List MCP servers in the organization. Returns paginated server records plus total for discovering server IDs; use get_mcp_server for one server
- `list_partial_versions` — List all versions for one partial, including version numbers, descriptions, status, and timestamps. Use this when you need history or want to choose a version_id before publish_partial.
- `list_prompt_labels` — List labels across the workspace or organisation, with optional search and scope filters. Returns ids, names, colors, status, and timestamps so you can choose a label_id before get_prompt_label or update_prompt_version.
- `list_prompt_partials` — List partials across collections, with optional collection filtering. Returns ids, slugs, names, collections, and status so you can choose a prompt_partial_id before get_prompt_partial, update_prompt_partial, delete_prompt_partial, or pu…
- `list_prompt_versions` — List all versions of one prompt, including version number, description, status, label, and a short template preview. Use this for history or to choose a version_id before publish_prompt or update_prompt_version.
- `list_prompts` — List prompts across the workspace, with optional collection, workspace, or search filters. Returns a paginated summary with id, name, slug, model, and status so you can choose a prompt_id before get_prompt, update_prompt, or render_prompt.
- `list_providers` — List workspace-scoped provider instances and their limits or status. Use this to find provider slugs for workspace-level updates; use list_integrations for the org-level source connection. Returns total plus provider name, slug, integrat…
- `list_rate_limits` — List rate limits in the org with id, type, unit, value, status, scope, conditions, and grouping. Use this to find an existing policy before get_rate_limit, update_rate_limit, or delete_rate_limit.
- `list_secret_references` — List Secret References without returning authentication configuration or resolved secret values. Filter by manager type, tags, or name and use a returned UUID or slug with get_secret_reference.
- `list_usage_limit_entities` — List the entities currently tracked against a usage limit, including current usage. Use this to see who is near or over budget before reset_usage_limit_entity or delete_usage_limit.
- `list_usage_limits` — List usage limits in the org with id, type, credit_limit, status, reset schedule, scope, conditions, and grouping. Use this before get_usage_limit, update_usage_limit, or delete_usage_limit.
- `list_user_invites` — List pending and sent invitations with id, email, role, status, and expiry. Use this to check invite state; use list_all_users for users who already accepted.
- `list_virtual_keys` — List provider API keys stored as virtual keys in your Portkey org. Use this to find slugs before wiring prompts/configs or auditing limits. Returns total plus name, slug, status, usage limits, rate limits, reset state, and model config.
- `list_workspace_members` — List every member in a workspace with organization role, workspace role, status, and timestamps. Use this to find a user_id before get_workspace_member, update_workspace_member, or remove_workspace_member.
- `list_workspaces` — List workspaces with id, name, slug, default settings, and timestamps. Use this to find a workspace_id before get_workspace, update_workspace, add_workspace_member, or remove_workspace_member.
- `render_prompt` — Render a prompt by substituting variables and returning the final messages without calling the model. Use this to verify template output before a completion; run_prompt_completion is the tool that actually invokes the model.
- `validate_completion_metadata` — Preflight billing metadata before run_prompt_completion. Validates required fields and values without making changes, so you can catch attribution errors before paying for the call.
- `add_workspace_member` — Add an existing org user to a workspace with a role. Requires a UUID user_id; use list_all_users to find it, and invite_user first if the person is not yet in the org.
- `create_api_key` — Create a Portkey API key for auth. Org keys grant broader access; workspace keys are scoped. WARNING: The key secret is returned ONCE in the tool result and will be visible in MCP transcripts and LLM context — store it securely immediate…
- `create_collection` — Create a new prompt collection for organizing prompts by app. Use this when you need a new namespace before create_prompt; returns the collection id and slug, and does not move any prompts.
- `create_config` — Create a config that defines routing, cache, retry, and targets for requests; use update_config to modify an existing one and list_config_versions for history. At least one setting is required, new configs become active immediately once …
- `create_feedback` — Create feedback for a trace or request. Writes a new feedback record linked by trace_id, returns the created feedback IDs and status, and takes effect immediately; use update_feedback when correcting an existing record.
- `create_guardrail` — Create a guardrail with checks and actions for request filtering. Create it first, then reference it from configs; the new version becomes the policy anchor for downstream use.
- `create_integration` — Create an org-level provider integration that stores an AI provider
- `create_log_export` — Create a log export definition with filters and requested fields. This only sets up the export and does not start processing; call start_log_export next, then use get_log_export or download_log_export to inspect or retrieve the finished …
- `create_mcp_integration` — Create an MCP integration from an external server URL. Registers the Portkey-side connection and returns the new id and slug; if auth_type is headers, custom_headers are required, and you usually follow with create_mcp_server and capabil…
- `create_mcp_server` — Create an MCP server under an existing integration. Registers the server and returns the new id and slug; use list_mcp_integrations first to find the parent integration, then capabilities or access tools to configure it.
- `create_prompt` — Create a new prompt template and initial version. Use this for first-time setup; use migrate_prompt for idempotent CI/CD flows. Accepts plain text or structured chat messages, creates a new version immediately, and returns the prompt id,…
- `create_prompt_label` — Create a prompt label for tagging prompt versions such as production, staging, or experiment. Requires either organisation_id or workspace_id to set scope, returns the new label id, and does not assign it to any versions yet.
- `create_prompt_partial` — Create a reusable prompt partial for inclusion with {{> partial_name}}. Use this for shared snippets or macros; returns the partial id, slug, and version id, and the new version stays inactive until published.
- `create_provider` — Create a workspace provider backed by an org integration. The provider inherits the integration key, but its limits and expiration are enforced independently for that workspace. Returns the new provider id and slug.
- `create_rate_limit` — Create a request or token throttle with conditions, group_by, type, unit, and value. conditions and group_by are required; use usage limits when you need a cumulative budget instead.
- `create_secret_reference` — Create a reference to a secret stored in AWS Secrets Manager, Azure Key Vault, or HashiCorp Vault. Authentication credentials are sent to Portkey and exposed to this MCP transcript; use short-lived or workload identity modes when possibl…
- `create_usage_limit` — Create a cumulative budget for cost or tokens with optional alerts and weekly or monthly resets. conditions and group_by are required; use rate limits when you need request throttling.
- `create_virtual_key` — Store a provider API key as a virtual key. The raw key is encrypted and only returned at creation time, so save the returned slug and use it in prompts/configs. Optional usage and rate limits apply immediately, and the tool returns the n…
- `create_workspace` — Create a workspace to isolate resources, API keys, and team members. If slug is omitted it is auto-generated from the name; returns the new workspace id, name, and slug.
- `insert_log` — Insert log records for requests that bypassed the gateway. This writes request, response, and trace metadata into Portkey immediately, and the call will fail if request_provider does not match a configured integration. Use the span field…
- `invite_user` — Invite a new org user and optionally provision workspace access and an API key in one call. Workspace assignments apply only after acceptance; use add_workspace_member or update_workspace_member later for follow-up changes.
- `migrate_prompt` — Create or update a prompt in one idempotent step for CI/CD and prompt-as-code flows, unlike create_prompt which always makes a new prompt. Looks up the prompt by name within collection_id: if missing it creates the prompt, if found with …
- `promote_prompt` — Copy a prompt from one environment to another and create or update the target automatically. Use this for staged releases when you want the target prompt synchronized without manual edits, and it returns both source and target version ids.
- `publish_partial` — Publish a specific partial version as the default, unlike update_prompt_partial which creates a new draft without activating it. Use after list_partial_versions to pick a version_id; this immediately changes what {{> partial_name}} resol…
- `publish_prompt` — Publish a specific version of a prompt as the active default, unlike promote_prompt which copies across environments or update_prompt which creates a new draft. This immediately routes all callers using the slug to that version and there…
- `resend_user_invite` — Resend the email for a pending invite that has not been accepted, unlike invite_user which creates a new invite. This sends a fresh email without modifying the invite record, expiry, or role; use get_user_invite first if you are unsure w…
- `reset_usage_limit_entity` — Reset tracked usage for one entity under a usage limit. This changes accumulated usage for that entity only; use list_usage_limit_entities to confirm the target first.
- `rotate_api_key` — Rotate an API key without changing its identity or scopes. The new secret is returned once and exposed to this MCP transcript, while the previous secret remains valid until key_transition_expires_at. Store the new key securely, update ca…
- `update_api_key` — Update an API key
- `update_collection` — Update a collection
- `update_config` — Update a config by slug; every call creates a new config version rather than overwriting, so earlier versions stay recoverable via list_config_versions. Only provided fields change: name, status, and all routing/cache/retry settings (cac…
- `update_feedback` — Update an existing feedback record by ID. Returns the updated status and feedback IDs, changes only value, weight, and metadata, and leaves the trace linkage immutable; use create_feedback only for a new record.
- `update_guardrail` — Update a guardrail
- `update_integration` — Update an org-level integration
- `update_integration_models` — Enable, disable, or register custom models for an integration. This changes model availability for every workspace using it, so confirm the downstream impact first. Returns success and the number of models updated.
- `update_integration_workspaces` — Control which workspaces can use an integration and set per-workspace limits, unlike update_integration which edits the org-level connection. Call list_integration_workspaces first to review current state; access changes and new limits a…
- `update_log_export` — Update an existing log export configuration before or between export runs. Only workspace_id, time_of_generation_max, and requested_fields can change after creation, so use get_log_export to review the current job and start_log_export af…
- `update_mcp_integration` — Update an MCP integration
- `update_mcp_integration_capabilities` — Bulk enable or disable capabilities (tools, prompts, resources) on an MCP integration. A reversible toggle, not a deletion: only the capabilities named in the array change state, the change hides or exposes them immediately for connected…
- `update_mcp_integration_workspaces` — Grant or revoke workspace access to an MCP integration in bulk. Reversible: only the workspaces listed change, access applies or is removed immediately for all users in those workspaces, and re-running with enabled flipped undoes a chang…
- `update_mcp_server` — Update an MCP server
- `update_mcp_server_capabilities` — Enable or disable capabilities on an MCP server. Changes take effect immediately and override the integration-level settings for this server; use list_mcp_server_capabilities first to inspect the current surface.
- `update_mcp_server_user_access` — Grant or revoke individual user access to an MCP server. Changes take effect immediately and override the default access setting for the selected users; use list_mcp_server_user_access first if you need the current state.
- `update_prompt` — Update an existing prompt and create a new archived version. Only provided fields change, and publish_prompt is what makes the new version active. For multi-message chat prompts pass messages (preferred) or a JSON-encoded array as string.
- `update_prompt_label` — Update a prompt label
- `update_prompt_partial` — Create a new version of a partial by updating its content or metadata. Only provided fields change, and the new version stays inactive until publish_partial makes it current.
- `update_prompt_version` — Update a specific prompt version
- `update_provider` — Update a provider
- `update_rate_limit` — Update a rate limit
- `update_secret_reference` — Update at least one selected field on a Secret Reference. auth_config is merged into the existing manager-specific configuration. allowed_workspaces replaces all workspace mappings and sets allow_all_workspaces=false; allow_all_workspace…
- `update_usage_limit` — Update a usage limit
- `update_user` — Update a user
- `update_virtual_key` — Update a virtual key
- `update_workspace` — Update a workspace
- `update_workspace_member` — Update a workspace member

## Related servers

- UnClick (1658 tools) — https://policylayer.com/tools/io-github-malamutemayhem-unclick-mcp-server.md
- Nodebench (824 tools) — https://policylayer.com/tools/io-github-homenshum-nodebench.md
- Yaver (812 tools) — https://policylayer.com/tools/io-github-kivanccakmak-yaver.md
- Binance MCP Server (734 tools) — https://policylayer.com/tools/nirholas-binance-mcp.md
- Crow (587 tools) — https://policylayer.com/tools/kh0pper-crow.md
- Fortimanager (584 tools) — https://policylayer.com/tools/jmpijll-fortimanager-mcp.md
- TinyFn (572 tools) — https://policylayer.com/tools/io-tinyfn-tinyfn.md
- Mcp (571 tools) — https://policylayer.com/tools/io-github-2s-io-mcp.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=codeswhat-portkey-admin-mcp · API: https://policylayer.com/registry/api · Recommended policies for every tool: https://policylayer.com/policies/codeswhat-portkey-admin-mcp