// MCP TOOL REFERENCE

KEPLOY TOOLS

103 tools from the Keploy MCP Server, categorised by risk level.

View the Keploy policy → Token cost: 39,876 tokens →
// ALL 103 KEPLOY TOOLS
READ 53 tools
Read devloop_detect_app Resolve a Keploy app and return a playbook the AI should walk to inspect the dev's repo for V1 ("user maint... Read download_recording Download a recording — a session of captured API traffic (request/response pairs + outbound mocks) stored a... Read get_app_testing_context Fetch comprehensive context about an app's API plus the canonical test-suite authoring schema. Returns: *... Read get_auth_status Check whether the current MCP session has a valid-looking Keploy PAT attached. Returns { authenticated, aut... Read get_coverage_gaps Get API coverage and prioritized suggestions for uncovered endpoints. Read get_session_report Fetch the report for a completed run. ONE tool, THREE report kinds — the response's top-level `kind` field ... Read get_setup_instructions Return step-by-step instructions for connecting this MCP server to Cursor, Windsurf, VS Code, Claude Deskto... Read getApp GET /apps/{appId} — Get an app — Requires scope: `read`. Read getCurrentUser GET /users/me — Get current user — Requires scope: `read`. Returns the user associated with the API key. Read getGeneratedSchema GET /apps/{appId}/generated-schema — Get auto-generated OpenAPI schema — Returns the OpenAPI schema auto-ge... Read getGenerationHistoryDetails GET /apps/{appId}/generation-history/{jobId} — Get generation history details — Requires scope: `read`. Read getJob GET /jobs/{jobId} — Get a job — Requires scope: `read`. Read getLoadTestReport GET /apps/{appId}/load-tests/{runId} — Get a load test report — Requires scope: `read`. Read getMock GET /apps/{appId}/recordings/{testSetId}/mocks/{mockId} — Read one mock's canonical YAML — Returns the cano... Read getMockMapping GET /apps/{appId}/recordings/{testSetId}/test-cases/{testCaseId}/mock-mapping — Read the mocks currently li... Read getRecording GET /apps/{appId}/recordings/{testSetId} — Get recorded test cases — Returns individual recorded test cases... Read getSchemaCoverage GET /apps/{appId}/schema-coverage — Get schema coverage — Requires scope: `read`. Read getSubscription GET /company/subscription — Get company subscription — Requires scope: `read`. Read getSuiteReport GET /apps/{appId}/test-runs/{runId}/suite-reports/{reportId} — Get a suite report — Requires scope: `read`. Read getTestCase GET /apps/{appId}/recordings/{testSetId}/test-cases/{testCaseId} — Get a single test case — Returns a singl... Read getTestReport GET /apps/{appId}/test-reports/{reportId} — Get a test run report — Returns the rollup view of a single tes... Read getTestReportFull GET /apps/{appId}/test-reports/{reportId}/full — Get a fully-inflated test run report — Returns everything ... Read getTestRun GET /apps/{appId}/test-runs/{runId} — Get a test run — Requires scope: `read`. Read getTestSuite GET /apps/{appId}/test-suites/{suiteId} — Get a test suite — Requires scope: `read`. Read getUsage GET /company/usage — Get company usage — Requires scope: `read`. Read getValidationResult GET /jobs/{jobId}/validation-result — Get job validation result — Requires scope: `read`. Read link_mock Attach a mock to a test case's mock-mapping doc. Use this when the dev has authored a mock (via create_mock... Read list_branches List Keploy branches on an app. Use this BEFORE any write tool (create_test_suite, update_test_suite, sandb... Read listAPIKeys GET /api-keys — List API keys — Requires scope: `admin`. Read listApps GET /apps — List apps — Returns the tenant's apps. Use the optional `q` query parameter to name-filter (cas... Read listAppsByCluster GET /apps/by-cluster/{clusterId} — List apps in a cluster — Returns apps belonging to a specific cluster. M... Read listAppsWithRecordings GET /apps/with-recordings — List proxy apps with network recordings — Returns all k8s-proxy apps (origin.ty... Read listBranches GET /apps/{appId}/branches — List Keploy branches on an app — Returns every Keploy branch on an app, option... Read listClusters GET /clusters — List clusters — Returns all clusters for the authenticated company. Requires scope: `read`. Read listGenerationHistory GET /apps/{appId}/generation-history — List generation history — Requires scope: `read`. Returns all entrie... Read listJobs GET /jobs — List jobs — Requires scope: `read`. Read listLoadTestRuns GET /apps/{appId}/load-tests — List load test runs — Requires scope: `read`. Returns all runs (no pagination). Read listMocks GET /apps/{appId}/recordings/{testSetId}/mocks — List mocks for a recording — Returns mock reference metada... Read listRecordings GET /apps/{appId}/recordings — List recording sessions — Returns test sets (recording sessions) for an app.... Read listSuiteReports GET /apps/{appId}/test-runs/{runId}/suite-reports — List suite reports for a test run — Requires scope: `re... Read listTestCaseReports GET /apps/{appId}/test-reports/{reportId}/test-set-reports/{testSetReportId}/test-cases — List test case re... Read listTestReports GET /apps/{appId}/test-reports — List test run reports — Browse legacy /tr test runs for an app. Combine `s... Read listTestRuns GET /apps/{appId}/test-runs — List test runs — List test runs for an app. Optional `kind` query param filte... Read listTestSetReports GET /apps/{appId}/test-reports/{reportId}/test-set-reports — List test set reports within a run — Returns p... Read listTestSuites GET /apps/{appId}/test-suites — List test suites — List test suites for an app. Optional `has_sandbox_test`... Read normalizeTestRun POST /apps/{appId}/test-runs/{runId}/normalize — Normalize a test run — Requires scope: `write`. Read record_sandbox_test Record (or refresh) the sandbox test for one or more existing test suites — captures the request/response p... Read replay_sandbox_test Replay the sandbox test for one or more suites against captured mocks — re-runs the suite's steps against t... Read replay_test_suite Replay an existing test suite live against the dev's LOCAL APP (no mocks, no docker spin-up). Returns a pla... Read streamJobEvents GET /jobs/{jobId}/events — Stream job events (SSE) — Requires scope: `read`. Returns a `text/event-stream`. Read streamLoadTestEvents GET /apps/{appId}/load-tests/{runId}/events — Stream load test events (SSE) — Requires scope: `read`. Retur... Read unlink_mock Detach a mock from a test case's mock-mapping doc. Idempotent — unlinking an already-unlinked mock is a no-... Read validateTestSuite POST /apps/{appId}/test-suites/{suiteId}/validate — Validate a test suite — Run the suite against a public,...
WRITE 30 tools
Write create_branch Create a Keploy branch on an app — find-or-create on name conflict. Pass the dev's CURRENT GIT BRANCH as t... Write create_mock Author a single mock inside a test set. Use this when the dev wants to add a hand-written downstream-call r... Write create_test_suite Create a new API test suite with test steps. Each step defines an HTTP request and assertions to validate t... Write createAPIKey POST /api-keys — Create an API key — Requires scope: `admin`. The raw key is returned only once in the resp... Write createApp POST /apps — Create an app — Requires scope: `write`. Write createCIBranch POST /apps/{appId}/branches/ci — Find-or-create a CI branch — Creates a new Keploy branch (or returns the e... Write createMock POST /apps/{appId}/recordings/{testSetId}/mocks — Author one mock under a recording — Insert a single mock ... Write createTestSuite POST /apps/{appId}/test-suites — Create a test suite — Requires scope: `write`. Write devloop_begin_oauth_install Start the Path B agent-walked install for the V1 flow. Returns a playbook the AI walks with the dev to land... Write devloop_generate_resource_flow Generate one chained-CRUD API test for a single resource. Behavior depends on the app's devloop_storage_mod... Write devloop_install_repo_artifacts Generate the agent-discovery files that let dev #2 onboard via their AI agent without a human pointing at d... Write devloop_resolve_storage Resolve the storage mode for V1 ("user maintains the flow") API tests on this app. ═══════════════════════... Write devloop_set_storage_mode Persist the V1 storage mode on an app. Call this AFTER devloop_resolve_storage returned source="asked" (the... Write devloop_setup_instructions Return the V1 "user maintains the flow" install guide — covers Path A (clipboard one-liner), Path B (agent-... Write devloop_switch_to_sandbox Switch the app's V1 CI from "boot the real app + deps" mode to sandbox mode (mocks fetched by content-hash ... Write editMockMapping POST /apps/{appId}/recordings/{testSetId}/test-cases/{testCaseId}/mock-mapping — Link or unlink a mock from... Write exportRecording GET /apps/{appId}/recordings/{testSetId}/export — Export a recording bundle — Export a complete recording b... Write generate_and_wait Generate test suites from an OpenAPI spec and wait for completion. Write generateTestSuites POST /apps/{appId}/test-suites/generate — Generate test suites via AI — Requires scope: `write`. Write importRecording POST /apps/{appId}/recordings/{testSetId}/import — Import test case changes into a recording — Bulk import ... Write normalizeSuiteReport POST /apps/{appId}/test-runs/{runId}/suite-reports/{reportId}/normalize — Normalize a suite report — Requir... Write update_app_custom_variables Add or update an app-level custom variable. App-level variables are shared across ALL test suites for this ... Write update_mock Replace one mock's stored data. Accepts either the mock's UUID id or its human-readable Name as `mock_id` —... Write update_test_suite Edit an existing test suite — change one or more step bodies, assertions, headers, or remove/add steps. Ret... Write updateApp PUT /apps/{appId} — Update an app — Requires scope: `write`. Write updateMock PUT /apps/{appId}/recordings/{testSetId}/mocks/{mockId} — Replace one mock's stored data — Updates the mock... Write updateTestCase PUT /apps/{appId}/recordings/{testSetId}/test-cases/{testCaseId} — Update a test case — Update mutable fiel... Write updateTestSuite PUT /apps/{appId}/test-suites/{suiteId} — Update a test suite — Requires scope: `write`. Write upload_recording Atomic test set + cases + mocks + mappings ingest. Creates the test set row, every test case, every mock, a... Write uploadRecordingBundle POST /apps/{appId}/recordings/bundle — Atomic test set + cases + mocks + mappings ingest — Bundle ingest — ...
DESTRUCTIVE 9 tools
Destructive bulkDeleteTestSuites POST /apps/{appId}/test-suites/bulk-delete — Bulk-delete test suites — Requires scope: `write`. Destructive delete_mock Drop one mock from a test set. Idempotent — returns 200 even if the mock is already gone, so retries on a n... Destructive delete_recording Wholesale-delete a recording (test set + its cases + mocks + mapping). `branch_id` is REQUIRED — the delete... Destructive delete_test_suite Delete a test suite on a Keploy branch — synchronous, no playbook to walk. USE THIS when: * The dev's up... Destructive deleteApp DELETE /apps/{appId} — Delete an app — Requires scope: `admin`. Destructive deleteMock DELETE /apps/{appId}/recordings/{testSetId}/mocks/{mockId} — Drop one mock — Idempotent — returns 200 even ... Destructive deleteTestSuite DELETE /apps/{appId}/test-suites/{suiteId} — Delete a test suite — Requires scope: `write`. Destructive devloop_mutation_demo Prove the just-generated API test actually catches bugs by applying 3 real source-level mutations to the ha... Destructive revokeAPIKey DELETE /api-keys/{keyId} — Revoke an API key — Requires scope: `admin`.
EXECUTE 11 tools
Execute devloop_expand_coverage Expand V1 API-test coverage from the single seed flow to the remaining detected resources. Use this AFTER d... Execute devloop_record_sandbox Record mocks for V1 repo-mode API tests using the V1-native CLI command `keploy sandbox local record`. Runs... Execute devloop_scaffold_ci Scaffold the GitHub Actions workflow that runs the V1 API tests on every PR. Returns the exact YAML content... Execute devloop_schema_drift_report Report the gap between the app's OpenAPI spec and its V1 API-tests coverage. Reuses the existing schema-cov... Execute devloop_self_heal Diagnose a failing V1 API test and propose an action. Triggered when: * keploy test-gen run exited non-ze... Execute run_and_report Run test suites and return results with failures and coverage. !! DO NOT USE for local-app "tests for my c... Execute runTestSuites POST /apps/{appId}/test-suites/run — Run test suites — Run test suites against a PUBLIC target URL. DO NOT ... Execute scaffold_pipeline_workflow Generate the exact CI workflow YAML to add keploy sandbox tests to a pull-request pipeline, and tell you wh... Execute startLoadTest POST /apps/{appId}/load-tests — Start a load test — Requires scope: `write`. Execute stopJob POST /jobs/{jobId}/stop — Stop a running job — Requires scope: `write`. Execute stopLoadTest POST /apps/{appId}/load-tests/{runId}/stop — Stop a running load test — Requires scope: `write`.
// FAQ
How many tools does the Keploy MCP server have? +

The Keploy MCP server exposes 103 tools across 4 categories: Read, Write, Destructive, Execute.

How do I enforce policies on Keploy tools? +

Route the Keploy server through the PolicyLayer gateway. Define allow, deny, or approval rules per tool in the dashboard — they are enforced on every call before it reaches the server.

What risk categories do Keploy tools fall into? +

Keploy tools are categorised as Read (53), Write (30), Destructive (9), Execute (11). Each category has a recommended default policy.

Let agents act without letting them run wild.

Route your MCP servers through PolicyLayer and every tool call is checked against your policy before it runs — allow, deny, or require approval. Per-identity grants. Full audit log. Live in minutes.

SECURE YOUR MCP →

Free to start. No card required.

4,600+ MCP servers and 31,000+ tools scanned and risk-classified.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.