Stable Baseline MCP Server — 184 Tools with Risk Policies

// ALL 184 STABLE BASELINE TOOLS

READ 69 tools

Read dataToTable Render tabular data as an aligned grid of labelled cells on a whiteboard, deterministically. Pass rows (an ... Read findAndReplaceTextInDocument Find and replace text in a document. Searches for all occurrences and replaces them. Case-sensitive by defa... Read getCdmdLanguageGuide Get the CDMD markdown language specification. Call before createDocument if unfamiliar with syntax. Read getCreditBalance Composite credit balance for an organisation: plan_credits (recurring monthly bucket), top_up_credits (purc... Read getCreditPackages List active credit packages available for purchase (name, credits, bonus_credits, price in cents AUD). Cata... Read getCurrentPlanEntitlements Read the plan entitlements (limits + capability flags) that apply to the caller's organisation. Returns { t... Read getCurrentUser Return the calling user's identity (user_id, display_name, full_name, email, avatar_url). Use this when the... Read getCustomerPortalLink Mint a single-use Stripe Customer Portal URL for self-serve billing changes. return_url defaults to https:/... Read getDiagramImage Render a diagram that ALREADY exists in a document to an IMAGE (svg/png/jpeg @1x/2x/3x) and return it — a t... Read getDiagramInDocument Get a diagram's full details including raw DSL source code. Use diagramId from DIAGRAM_OMITTED markers in g... Read getDiagramTypeGuide Get DSL writing instructions for a diagram type. Call before writing diagramCode. Read getDocument Read a document's content with line numbers. Returns numbered lines for use with editDocument. Diagrams/ima... Read getDocumentIngestJob Read the current status of an ingest job. Returns { status, stage, processedImages, totalImages, documentId... Read getEffectivePermission Compute a user's effective permission level on a resource (taking team grants, inheritance, and 3-state ove... Read getFolderHierarchy Get the folder and document tree starting from a specific folder. Alias for getProjectHierarchy with folderId. Read getImageInDocument Get image details including a fresh signed URL (expires after 1 hour). Use storagePath from IMAGE_OMITTED m... Read getImprovement Get full details for an improvement item including evidence, activity log, compliance context, and the `che... Read getKgScopeTree List every kg_scope row for the caller's organisation, optionally narrowed to a workspace or project subtre... Read getMember Fetch a single organisation member by user_id, enriched with profile (email + display name). Auth: org id m... Read getOrganisation Read a single organisation by id. Returns id, name, slug, description, settings (jsonb), created_at, member... Read getOrgSettings Read an organisation's settings JSON and the derived enabled-features map (plans, documents, improvements, ... Read getPlan Get full plan details including phases, items, and activity. Returns versionTimestamp — pass it to updatePl... Read getPlanHierarchy Get the complete plan hierarchy (phases, tasks, improvements) in one call. Recommended first call for plan ... Read getPlanPhase Get a plan phase by ID with full details. Returns versionTimestamp — pass it to updatePlanPhase for optimis... Read getPriceForTier Read the public catalog entry for a single subscription tier (free, pro, enterprise). Pro/Free pricing is p... Read getProject Read a single project by id. Auth via the standard project-access ladder. Returns the full v_projects row (... Read getProjectHierarchy Get the complete folder and document tree for a project in one call. Recommended first call for navigation. Read getSubscription Read the subscription state for an organisation. Returns tier, status, current billing period, seat count, ... Read getTask Get a task by ID with full details, evidence, activity, and the `checklist` array (each item: id, text, due... Read getTeam Get a single team by ID with profile-enriched member list (display_name, email, avatar_url, role, joined_at... Read getUserPreferences Read the calling user's preferences. Self-only — no params required. Returns { notifications, grids } where... Read getWhiteboard Read a whiteboard: its metadata plus a summary of the canvas (element count, element types, and text labels... Read getWhiteboardGuide Get the Stable Baseline whiteboarding guide (Markdown): when to use stencils vs architecture icons vs code/... Read getWhiteboardImage Render a whiteboard to an IMAGE so you can SEE it and confirm your edits look right, then iterate — like ta... Read getWorkspace Read a single workspace by id. Auth via the standard workspace-access ladder (credential org match + worksp... Read kg_get_entity Fetch a KG entity by id or name, with 1-hop neighbours. Read kg_get_wiki_page Fetch a community wiki page (LLM-curated CDMD). Read kg_list_communities List Louvain communities for an org (optionally scoped by project). Read kg_scope_status Check whether Knowledge Graph is in-scope for a given target. Read kg_search Unified Knowledge Graph retrieval. PICK THE MODE THAT FITS THE QUERY: • mode='local' (default) — for SPECI... Read listArchitectureIcons SOFTWARE & CLOUD architecture icons ONLY (AWS, Azure, GCP, Docker, Kubernetes, databases, message queues, d... Read listAssignablePrincipals Server-side searchable, paginated list of USERS and TEAMS that can be assigned as the owner of an improveme... Read listCreditPurchases List credit-purchase history for an organisation, newest first. Status, credits purchased, bonus, amount pa... Read listDiagramTypes List supported diagram types. Use the returned `type` field when calling insertDiagramInDocument. Read listDocuments List documents in a project, workspace, or folder. Supports query search and date filtering. Read listDocumentVersions List version history for a document. Returns timestamps, creator, change summary, and content. Read listFolders List folders in a project. Use parentId for nested folders. For full tree, use getProjectHierarchy instead. Read listImprovementCategories List improvement categories for a project. Returns tree and flat list. Read listImprovements List improvements in a project. Supports filtering by status, type, priority, and query. Read listInvitations List organisation invitations. Auth: org id must match the credential's organisation AND the credential mus... Read listInvoices List invoices for an organisation, newest first. Returns hosted Stripe invoice URLs and PDF links. Stripe I... Read listMembers List members of an organisation, enriched with email + display name. Auth: org id must match the credential... Read listOrganisations List organisations you have access to. Supports query filtering by name/slug. Read listPaymentMethods List saved payment methods for an organisation. Returns masked card metadata only (brand, last4, exp month/... Read listPlanPhases List phases for a plan ordered by position. Read listPlans List plans in a project. Supports filtering by status, priority, and query. Read listProjects List projects in a workspace. Supports query filtering by project name. Read listResourcePermissions List explicit permission grants on a resource (workspace/project/folder/document/improvement/plan), includi... Read listTaskDependencies List FS/SS/FF task-dependency edges in a plan (the Gantt arrows). Scope by planId, projectId, or itemId. `d... Read listTasks List tasks in a plan. Supports filtering by status, priority, phaseId, and query. Read listTeams List teams in an organization, with optional search filter and an `includeMembers` flag that fans out to v_... Read listWhiteboards List the whiteboards in a project (hidden whiteboard-kind documents). Returns documentId, diagramId, title ... Read listWhiteboardStencils Search the built-in library of structural whiteboard stencils — ready-made hand-drawn graphics: flowchart/U... Read listWorkspaces List workspaces you have access to. Supports query filtering by name/slug. Read pollSignupStatus Poll the status of a signup begun via `startSignup`. Anonymous-callable. Possible status values: `pending` ... Read searchImprovements Search improvements using hybrid text + semantic search. Returns ranked results. Read searchInfographicTemplates Semantic search over the 276 AntV Infographic templates — call this FIRST when building an `infographic` di... Read searchTools Search available tools by keyword or category. Returns matching tool names and descriptions. Read traceImage Turn a raster image into hand-drawn freedraw strokes on a whiteboard, deterministically. Pass an image (ima...

WRITE 78 tools

Write addImprovementActivity Add a comment or activity entry to an improvement. Write addImprovementEvidence Add evidence to an improvement. Types: document_section, diagram_node, incident_note, feedback, free_text. Write addPlanActivity Add a comment or activity entry to a plan. Write addTeamMember Add a user to a team as a regular member. Idempotent — returns already_member=true if already on the team. ... Write addWhiteboardElements Author shapes onto a whiteboard from high-level specs (you do NOT need the full Excalidraw element schema).... Write addWorkspaceMember Add an existing organisation member to a workspace with a workspace-level role. Idempotent — returns the ex... Write applyKgScopeChange Apply a previously previewed KG scope change. Atomically writes kg_scope rows and dispatches a re-ingest ba... Write applySubscriptionChange Apply a previously previewed subscription change. Same-tier seat changes update Stripe in place; cross-tier... Write applyTaskDependencyCascade Auto-schedule every item in a plan so all FS/SS/FF task-dependencies are respected (topological pass, durat... Write createDocument Create a document from CDMD markdown. Call getCdmdLanguageGuide first if unfamiliar with syntax. Do not inc... Write createDocumentFromUpload Step 2 of file ingest. After the file is uploaded via the PUT URL from createDocumentIngestSession, call th... Write createDocumentIngestSession Step 1 of file ingest. Mint a single-use PUT upload URL for a large file (PDF, DOCX, plain text, or markdow... Write createFolder Create a folder in a project. Supports nesting via parentId. Write createImageUploadSession Create a PUT upload URL for a document image (max 10MB). Use the returned assetUrl with insertImageInDocument. Write createImprovement Create an improvement item in a project. Requires projectId and title. Auto-assigns friendly ID. Write createImprovementCategory Create an improvement category or sub-category. Max two levels. Write createOrganisation Create a new organisation owned by the calling credential's user. Auth: server-side eligibility gate via `c... Write createPlan Create a plan in a project. Requires projectId and title. Write createPlanPhase Create a phase in a plan. Position and wbs_code are auto-computed. Write createProject Create a new project inside a workspace. Mirrors the UI Create Project dialog. Auth: write on workspace + c... Write createTask Create a task in a plan. Requires planId and title. Write createTaskDependency Create an FS/SS/FF scheduling edge with lag/lead between two items in the same plan (rendered as a Gantt ar... Write createTeam Create a new team inside an organisation. Caller is added as the team's lead. Subject to plan team limit. R... Write createVegaDataUploadSession Create a PUT upload URL for a Vega/Vega-Lite data file. Use returned assetUrl in your Vega spec. Write createWhiteboard Create a whiteboard — an infinite Excalidraw canvas. A whiteboard is a hidden document (it won't appear in ... Write createWorkspace Create a new workspace inside the organisation. Auth: ceiling — credential must hold `can_lifecycle` AND us... Write editDocument Edit a document with line-based patches. Call getDocument first for line numbers and versionTimestamp. Call... Write grantTeamWorkspaceAccess Grant a team read/write/admin access to a workspace. Idempotent. Team and workspace must be in the same org... Write insertDiagramInDocument Insert a new diagram into a document. Call listDiagramTypes to find your type, then getDiagramTypeGuide for... Write insertImageInDocument Insert an image into a document (max 10MB). Provide imageBase64, imageBinary, or imageUrl. For large files,... Write insertWhiteboardDiagram Insert a real DIAGRAM (BPMN, Diagrams-as-Code / any DSL: mermaid, d2, plantuml, graphviz, …) into a whitebo... Write insertWhiteboardImage Insert a real IMAGE (photo, screenshot, logo, picture) into a whiteboard — the storage-backed equivalent of... Write inviteMember Invite a person by email to the credential's organisation. Auth: org id must match the credential AND crede... Write kg_backlinks Linked-mentions rail: every edge whose dst matches the named entity. Write kg_evaluate_retrieval Phase 5 / E3 — Provenance-aware assessor for a set of chunk_ids returned by kg_search. Returns per-chunk bu... Write kg_related_documents Find other sources that share entities with the given source. Write kg_suggest_sample_questions 3 template + 3 LLM-generated sample questions for the knowledge-graph playground. Write previewKgRebuild Preview the cost / coverage / ETA of a full KG rebuild for the org (optionally narrowed to a workspace or p... Write previewKgScopeChange Preview the credit cost, source counts, and ETA of including or excluding KG scope rows. Returns confirmati... Write previewSubscriptionChange Preview a subscription tier or seat change. Returns confirmation_token (10-min TTL) plus proration and next... Write rebuildPlatformCatalogEmbeddings Internal maintenance (requires write). Syncs gte-small (384-dim) vector embeddings for the MCP tool, whiteb... Write reorderDocuments Batch-reorder documents within a folder (or project root) by setting sibling positions. Pass [{documentId, ... Write reorderFolders Batch-reorder folders within a parent (or project root) by setting sibling positions. Pass [{folderId, posi... Write reorderImprovementCategories Reorder improvement categories by setting sort_order values. Write reorderPlanPhases Reorder plan phases by setting position values. WBS codes are recalculated. Write setKgDocumentScope Toggle KG-scope override for a single document (on/off/inherit). Documents default to inheriting their fold... Write setKgFolderScope Toggle KG-scope override for a folder (on/off/inherit). Folders default to inheriting their project's scope... Write setKgProjectVisibility Set the KG visibility mode for a project: 'strict' (multi-source rows hidden unless user can read every sou... Write setKgWorkspaceScope Toggle whether a workspace is in the Knowledge Graph (on/off/inherit). 'on' enables the workspace as a gate... Write setMemberActive Soft-deactivate or reactivate an organisation member. Refuses self-deactivation, last-admin/owner deactivat... Write setPlanItemParent Set or clear the WBS parent-child nesting of a task/improvement (outline hierarchy, no scheduling effect). ... Write setResourcePermissionOverride Set a single 3-state override on a permission row: null=inherit, true=allow, false=deny. Per-axis (read/wri... Write updateBillingEmail Update the org's billing email. Validates format, writes private.organizations.billing_email, syncs to Stri... Write updateDiagramInDocument Update a diagram's code, description, or properties. Call getDiagramTypeGuide for DSL syntax. Requires docu... Write updateFolder Update a folder (rename/move/reorder). Supports nesting changes via parentId. Write updateImageInDocument Update image metadata (alt, caption, dimensions, alignment). Requires documentVersionTimestamp from getDocu... Write updateImprovement Update an improvement (or a task — tasks share this row, but prefer the symmetric updateTask alias when wor... Write updateImprovementCategory Update an improvement category. Cannot modify system categories. Write updateImprovementComment Update a comment on an improvement. Requires the comment's updated_at as versionTimestamp. Write updateMemberRole Update an organisation member's role (admin or member). Owners cannot be changed via this tool. Refuses sel... Write updateOrganisation Update an organisation's name and/or description. Auth: ceiling — credential must hold `can_admin_org` capa... Write updateOrgFeatureFlags Toggle feature flags on settings.enabledFeatures (plans, improvements, compliance, knowledge_graph, documen... Write updateOrgSettings Update an organisation's `settings` JSONB via deep merge. Auth: ceiling — credential must hold can_admin_or... Write updatePlan Update a plan. Requires versionTimestamp from getPlan. Write updatePlanComment Update a comment on a plan. Requires the comment's updated_at as versionTimestamp. Write updatePlanPhase Update a plan phase. Requires versionTimestamp from getPlanPhase (not getPlan). Write updateProfile Update a user's profile name and/or display email. Self-updates do not require organisation_id; updates to ... Write updateProject Update a project's name, description, and/or icon. Mirrors the UI Project General Settings page. Auth: admi... Write updateResourcePermission Update the access level on an existing permission row. Override flags are NOT touched — use setResourcePerm... Write updateTask Update a task. Tasks share a row with improvements (`improvement_items` with `is_task=true`), so this is a ... Write updateTaskDependency Change the type (FS/SS/FF) or lag/lead of an existing task-dependency. Doesn't move dates directly; flags t... Write updateTeam Update a team's name, description, and/or colour. At least one field required. Slug is intentionally not ed... Write updateTeamWorkspaceAccess Update an existing team's workspace access level. Refuses if no grant exists — call grantTeamWorkspaceAcces... Write updateUserPreferences Update the calling user's preferences. Self-only. Rate limit 60/min. Partial: only fields supplied are upda... Write updateWhiteboardScene Edit elements on a whiteboard's canvas WITHOUT dropping the rest of the scene. A board may hold many diagra... Write updateWorkspace Update a workspace's name. Auth: standard workspace-write ladder + user must be workspace owner or admin. S... Write updateWorkspaceMember Change an existing workspace member's role. Caller must be a workspace owner or admin. Cannot self-demote f... Write upsertResourcePermission Insert or update a resource_permissions row for a user OR team on a workspace/project/folder/document/impro...

DESTRUCTIVE 28 tools

EXECUTE 9 tools

Execute designWhiteboard Design a complete, visually polished whiteboard from a natural-language goal using the PREMIUM multi-agent ... Execute duplicateWhiteboardElements Copy-paste existing whiteboard elements — the MCP equivalent of selecting a group and pressing Ctrl/Cmd+D. ... Execute previewTaskDependencyCascade Dry-run of `applyTaskDependencyCascade` — returns the diff without writing. Empty items array means the pla... Execute purchaseCreditPackage Apply a credit-package quote by creating a hosted Stripe Checkout session. Returns checkout_url + session_i... Execute quoteCreditPackage Quote a credit-package purchase (first half of the human-in-the-loop ritual). Returns quote_token (10-min T... Execute renderDiagram Generate a diagram from its DSL/code and get the IMAGE back — WITHOUT inserting it into any document or whi... Execute resendInvitation Resend a pending invitation: extends expires_at by 7 days and re-triggers the invitation email. Server reso... Execute startSignup Begin an agent-driven sign-up to Stable Baseline. Anonymous-callable. Returns a `verification_url` and a 6-... Execute triggerKgRebuild Apply a previously previewed KG rebuild. Dispatches the build batch via kg-rebuild and returns batch_id. Ra...

// FAQ

How many tools does the Stable Baseline MCP server have? +

The Stable Baseline MCP server exposes 184 tools across 4 categories: Read, Write, Destructive, Execute.

How do I enforce policies on Stable Baseline tools? +

Route the Stable Baseline server through the PolicyLayer gateway. Define allow, deny, or approval rules per tool in the dashboard — they are enforced on every call before it reaches the server.

What risk categories do Stable Baseline tools fall into? +

Stable Baseline tools are categorised as Read (69), Write (78), Destructive (28), Execute (9). Each category has a recommended default policy.

STABLE BASELINE TOOLS

Let agents act without letting them run wild.