# Stable Baseline MCP server Agent View of the PolicyLayer registry record for Stable Baseline: identity, probed posture, risk grade, and all 196 tools classified. HTML page: https://policylayer.com/tools/io-stablebaseline-sb ## Facts - Server id: `https://api.stablebaseline.io/functions/v1/cloud-serve/mcp` - Homepage: https://github.com/stablebaseline/mcp - Registry record: grade F, identity unverified - Lifecycle: active - Auth posture: open - CORS policy: https://app.stablebaseline.io - Rate-limited: no - Tools: 196 (191 with introspected schema) - Tool categories present: Destructive, Execute, Read, Write - Context-window cost: 46634 tokens per request — https://policylayer.com/token-cost/io-stablebaseline-sb - Tags: io stablebaseline sb, admin, automation - Record last modified: 2026-07-16T04:09:15.061Z ## Tools (196) | Tool | Category | Risk | Record | | --- | --- | --- | --- | | `cancelAllKgInScope` | Destructive | Critical | https://policylayer.com/tools/io-stablebaseline-sb/cancelallkginscope.md | | `cancelKgBuildBatch` | Destructive | Critical | https://policylayer.com/tools/io-stablebaseline-sb/cancelkgbuildbatch.md | | `deleteDiagramInDocument` | Destructive | Critical | https://policylayer.com/tools/io-stablebaseline-sb/deletediagramindocument.md | | `deleteDocument` | Destructive | Critical | https://policylayer.com/tools/io-stablebaseline-sb/deletedocument.md | | `deleteFolder` | Destructive | Critical | https://policylayer.com/tools/io-stablebaseline-sb/deletefolder.md | | `deleteImageInDocument` | Destructive | Critical | https://policylayer.com/tools/io-stablebaseline-sb/deleteimageindocument.md | | `deleteImprovement` | Destructive | Critical | https://policylayer.com/tools/io-stablebaseline-sb/deleteimprovement.md | | `deleteImprovementCategory` | Destructive | Critical | https://policylayer.com/tools/io-stablebaseline-sb/deleteimprovementcategory.md | | `deleteImprovementComment` | Destructive | Critical | https://policylayer.com/tools/io-stablebaseline-sb/deleteimprovementcomment.md | | `deletePlan` | Destructive | Critical | https://policylayer.com/tools/io-stablebaseline-sb/deleteplan.md | | `deletePlanComment` | Destructive | Critical | https://policylayer.com/tools/io-stablebaseline-sb/deleteplancomment.md | | `deletePlanPhase` | Destructive | Critical | https://policylayer.com/tools/io-stablebaseline-sb/deleteplanphase.md | | `deleteResourcePermission` | Destructive | Critical | https://policylayer.com/tools/io-stablebaseline-sb/deleteresourcepermission.md | | `deleteTaskDependency` | Destructive | Critical | https://policylayer.com/tools/io-stablebaseline-sb/deletetaskdependency.md | | `deleteTeam` | Destructive | Critical | https://policylayer.com/tools/io-stablebaseline-sb/deleteteam.md | | `deleteVegaDataFile` | Destructive | Critical | https://policylayer.com/tools/io-stablebaseline-sb/deletevegadatafile.md | | `deleteWhiteboard` | Destructive | Critical | https://policylayer.com/tools/io-stablebaseline-sb/deletewhiteboard.md | | `removeMember` | Destructive | Critical | https://policylayer.com/tools/io-stablebaseline-sb/removemember.md | | `removeTeamMember` | Destructive | Critical | https://policylayer.com/tools/io-stablebaseline-sb/removeteammember.md | | `removeWorkspaceMember` | Destructive | Critical | https://policylayer.com/tools/io-stablebaseline-sb/removeworkspacemember.md | | `resetDocumentInBrain` | Destructive | Critical | https://policylayer.com/tools/io-stablebaseline-sb/resetdocumentinbrain.md | | `revokeTeamWorkspaceAccess` | Destructive | Critical | https://policylayer.com/tools/io-stablebaseline-sb/revoketeamworkspaceaccess.md | | `autoDesignWhiteboard` | Execute | High | https://policylayer.com/tools/io-stablebaseline-sb/autodesignwhiteboard.md | | `renderDiagram` | Execute | High | https://policylayer.com/tools/io-stablebaseline-sb/renderdiagram.md | | `startMeetingScribe` | Execute | High | https://policylayer.com/tools/io-stablebaseline-sb/startmeetingscribe.md | | `stopMeetingScribe` | Execute | High | https://policylayer.com/tools/io-stablebaseline-sb/stopmeetingscribe.md | | `triggerKgRebuild` | Execute | High | https://policylayer.com/tools/io-stablebaseline-sb/triggerkgrebuild.md | | `applySubscriptionChange` | Financial | Critical | https://policylayer.com/tools/io-stablebaseline-sb/applysubscriptionchange.md | | `cancelSubscription` | Financial | Critical | https://policylayer.com/tools/io-stablebaseline-sb/cancelsubscription.md | | `getCustomerPortalLink` | Financial | Critical | https://policylayer.com/tools/io-stablebaseline-sb/getcustomerportallink.md | | `previewSubscriptionCancellation` | Financial | Critical | https://policylayer.com/tools/io-stablebaseline-sb/previewsubscriptioncancellation.md | | `previewSubscriptionChange` | Financial | Critical | https://policylayer.com/tools/io-stablebaseline-sb/previewsubscriptionchange.md | | `purchaseCreditPackage` | Financial | Critical | https://policylayer.com/tools/io-stablebaseline-sb/purchasecreditpackage.md | | `quoteCreditPackage` | Financial | Critical | https://policylayer.com/tools/io-stablebaseline-sb/quotecreditpackage.md | | `reactivateSubscription` | Financial | Critical | https://policylayer.com/tools/io-stablebaseline-sb/reactivatesubscription.md | | `updateBillingEmail` | Financial | Critical | https://policylayer.com/tools/io-stablebaseline-sb/updatebillingemail.md | | `startSignup` | Other | Low | https://policylayer.com/tools/io-stablebaseline-sb/startsignup.md | | `exportFromWhiteboard` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/exportfromwhiteboard.md | | `getCdmdLanguageGuide` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getcdmdlanguageguide.md | | `getCreditBalance` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getcreditbalance.md | | `getCreditPackages` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getcreditpackages.md | | `getCurrentPlanEntitlements` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getcurrentplanentitlements.md | | `getCurrentUser` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getcurrentuser.md | | `getDeckReplyInWhiteboard` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getdeckreplyinwhiteboard.md | | `getDiagramImage` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getdiagramimage.md | | `getDiagramInDocument` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getdiagramindocument.md | | `getDiagramTypeGuide` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getdiagramtypeguide.md | | `getDocument` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getdocument.md | | `getDocumentIngestJob` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getdocumentingestjob.md | | `getEffectivePermission` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/geteffectivepermission.md | | `getFolderHierarchy` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getfolderhierarchy.md | | `getImageInDocument` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getimageindocument.md | | `getImprovement` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getimprovement.md | | `getKgScopeTree` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getkgscopetree.md | | `getMeetingScribeStatus` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getmeetingscribestatus.md | | `getMember` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getmember.md | | `getOrganisation` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getorganisation.md | | `getOrgSettings` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getorgsettings.md | | `getPlan` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getplan.md | | `getPlanHierarchy` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getplanhierarchy.md | | `getPlanPhase` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getplanphase.md | | `getPriceForTier` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getpricefortier.md | | `getProject` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getproject.md | | `getProjectHierarchy` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getprojecthierarchy.md | | `getSubscription` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getsubscription.md | | `getTask` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/gettask.md | | `getTeam` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getteam.md | | `getUserPreferences` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getuserpreferences.md | | `getWhiteboard` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getwhiteboard.md | | `getWhiteboardGuide` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getwhiteboardguide.md | | `getWhiteboardImage` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getwhiteboardimage.md | | `getWorkspace` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/getworkspace.md | | `kg_backlinks` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/kg-backlinks.md | | `kg_evaluate_retrieval` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/kg-evaluate-retrieval.md | | `kg_get_entity` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/kg-get-entity.md | | `kg_get_wiki_page` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/kg-get-wiki-page.md | | `kg_list_communities` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/kg-list-communities.md | | `kg_related_documents` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/kg-related-documents.md | | `kg_scope_status` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/kg-scope-status.md | | `kg_search` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/kg-search.md | | `kg_suggest_sample_questions` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/kg-suggest-sample-questions.md | | `listArchitectureIcons` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/listarchitectureicons.md | | `listAssignablePrincipals` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/listassignableprincipals.md | | `listBrandKits` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/listbrandkits.md | | `listCreditPurchases` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/listcreditpurchases.md | | `listDiagramTypes` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/listdiagramtypes.md | | `listDocuments` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/listdocuments.md | | `listDocumentVersions` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/listdocumentversions.md | | `listFolders` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/listfolders.md | | `listImprovementCategories` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/listimprovementcategories.md | | `listImprovements` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/listimprovements.md | | `listInvitations` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/listinvitations.md | | `listInvoices` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/listinvoices.md | | `listMembers` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/listmembers.md | | `listOrganisations` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/listorganisations.md | | `listPaymentMethods` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/listpaymentmethods.md | | `listPlanPhases` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/listplanphases.md | | `listPlans` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/listplans.md | | `listProjects` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/listprojects.md | | `listResourcePermissions` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/listresourcepermissions.md | | `listTaskDependencies` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/listtaskdependencies.md | | `listTasks` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/listtasks.md | | `listTeams` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/listteams.md | | `listWhiteboards` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/listwhiteboards.md | | `listWhiteboardStencils` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/listwhiteboardstencils.md | | `listWorkspaces` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/listworkspaces.md | | `pollSignupStatus` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/pollsignupstatus.md | | `previewKgRebuild` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/previewkgrebuild.md | | `previewKgScopeChange` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/previewkgscopechange.md | | `previewTaskDependencyCascade` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/previewtaskdependencycascade.md | | `searchImprovements` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/searchimprovements.md | | `searchInfographicTemplates` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/searchinfographictemplates.md | | `searchTools` | Read | Low | https://policylayer.com/tools/io-stablebaseline-sb/searchtools.md | | `acceptTaskDependencyReview` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/accepttaskdependencyreview.md | | `addImprovementActivity` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/addimprovementactivity.md | | `addImprovementEvidence` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/addimprovementevidence.md | | `addPlanActivity` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/addplanactivity.md | | `addTeamMember` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/addteammember.md | | `addWhiteboardElements` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/addwhiteboardelements.md | | `addWorkspaceMember` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/addworkspacemember.md | | `applyKgScopeChange` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/applykgscopechange.md | | `applyTaskDependencyCascade` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/applytaskdependencycascade.md | | `cancelInvitation` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/cancelinvitation.md | | `createBrandKit` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/createbrandkit.md | | `createDocument` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/createdocument.md | | `createDocumentFromUpload` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/createdocumentfromupload.md | | `createDocumentIngestSession` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/createdocumentingestsession.md | | `createFolder` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/createfolder.md | | `createImageUploadSession` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/createimageuploadsession.md | | `createImprovement` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/createimprovement.md | | `createImprovementCategory` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/createimprovementcategory.md | | `createOrganisation` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/createorganisation.md | | `createPlan` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/createplan.md | | `createPlanPhase` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/createplanphase.md | | `createProject` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/createproject.md | | `createTask` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/createtask.md | | `createTaskDependency` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/createtaskdependency.md | | `createTeam` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/createteam.md | | `createVegaDataUploadSession` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/createvegadatauploadsession.md | | `createWhiteboard` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/createwhiteboard.md | | `createWorkspace` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/createworkspace.md | | `dataToTable` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/datatotable.md | | `designComponent` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/designcomponent.md | | `designDeckInWhiteboard` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/designdeckinwhiteboard.md | | `designIllustrationInWhiteboard` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/designillustrationinwhiteboard.md | | `dismissTaskDependencyReview` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/dismisstaskdependencyreview.md | | `duplicateWhiteboardElements` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/duplicatewhiteboardelements.md | | `editDocument` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/editdocument.md | | `editWhiteboardImageRegion` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/editwhiteboardimageregion.md | | `findAndReplaceTextInDocument` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/findandreplacetextindocument.md | | `grantTeamWorkspaceAccess` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/grantteamworkspaceaccess.md | | `insertDiagramInDocument` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/insertdiagramindocument.md | | `insertImageInDocument` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/insertimageindocument.md | | `insertWhiteboardDiagram` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/insertwhiteboarddiagram.md | | `insertWhiteboardImage` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/insertwhiteboardimage.md | | `inviteMember` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/invitemember.md | | `rebuildPlatformCatalogEmbeddings` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/rebuildplatformcatalogembeddings.md | | `reorderDocuments` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/reorderdocuments.md | | `reorderFolders` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/reorderfolders.md | | `reorderImprovementCategories` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/reorderimprovementcategories.md | | `reorderPlanPhases` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/reorderplanphases.md | | `resendInvitation` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/resendinvitation.md | | `setDefaultBrandKit` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/setdefaultbrandkit.md | | `setKgDocumentScope` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/setkgdocumentscope.md | | `setKgFolderScope` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/setkgfolderscope.md | | `setKgProjectVisibility` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/setkgprojectvisibility.md | | `setKgWorkspaceScope` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/setkgworkspacescope.md | | `setMemberActive` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/setmemberactive.md | | `setPlanItemParent` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/setplanitemparent.md | | `setResourcePermissionOverride` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/setresourcepermissionoverride.md | | `traceImage` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/traceimage.md | | `updateDiagramInDocument` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/updatediagramindocument.md | | `updateFolder` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/updatefolder.md | | `updateImageInDocument` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/updateimageindocument.md | | `updateImprovement` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/updateimprovement.md | | `updateImprovementCategory` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/updateimprovementcategory.md | | `updateImprovementComment` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/updateimprovementcomment.md | | `updateMemberRole` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/updatememberrole.md | | `updateOrganisation` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/updateorganisation.md | | `updateOrgFeatureFlags` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/updateorgfeatureflags.md | | `updateOrgSettings` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/updateorgsettings.md | | `updatePlan` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/updateplan.md | | `updatePlanComment` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/updateplancomment.md | | `updatePlanPhase` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/updateplanphase.md | | `updateProfile` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/updateprofile.md | | `updateProject` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/updateproject.md | | `updateResourcePermission` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/updateresourcepermission.md | | `updateTask` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/updatetask.md | | `updateTaskDependency` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/updatetaskdependency.md | | `updateTeam` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/updateteam.md | | `updateTeamWorkspaceAccess` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/updateteamworkspaceaccess.md | | `updateUserPreferences` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/updateuserpreferences.md | | `updateWhiteboardScene` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/updatewhiteboardscene.md | | `updateWorkspace` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/updateworkspace.md | | `updateWorkspaceMember` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/updateworkspacemember.md | | `upsertResourcePermission` | Write | Medium | https://policylayer.com/tools/io-stablebaseline-sb/upsertresourcepermission.md | ## Tool descriptions - `cancelAllKgInScope` — Emergency stop for KG ingestion: cancels queued/running build runs, queued/running rebuild batches, demotes still-eager unfinished chunks. Optionally narrowed to one project. Requires can_manage_kg + (project write if project_id supplied… - `cancelKgBuildBatch` — Cancel a single KG rebuild batch. Queued runs flip to 'cancelled' immediately; running runs finish naturally. Requires can_manage_kg. Rate limit 5/min. - `deleteDiagramInDocument` — Delete a diagram: removes the database record AND every reference to it in the document body — the current marker format plus legacy forms (markers without an embedded diagramId, and old plain-text [Diagram: name] placeholders). The resp… - `deleteDocument` — Delete a document. - `deleteFolder` — Delete a folder recursively, including all nested folders and documents. - `deleteImageInDocument` — Delete an image from a document and storage. - `deleteImprovement` — Delete an improvement and all associated evidence and activity. - `deleteImprovementCategory` — Delete an improvement category. Cannot delete system categories. - `deleteImprovementComment` — Delete a comment from an improvement. - `deletePlan` — Delete a plan, all its phases, and all tasks/improvements within it. This is a destructive operation that cannot be undone. - `deletePlanComment` — Delete a comment from a plan. - `deletePlanPhase` — Delete a plan phase and all tasks/improvements within it. This is a destructive operation that cannot be undone. - `deleteResourcePermission` — Delete a resource_permissions row. Refuses if the row is the LAST admin grant on the resource. Rate limit 30/min. Use when the user asks to revoke access, remove access, take away access, unshare, or delete a permission grant on a specif… - `deleteTaskDependency` — Remove a task-dependency edge. Neither item's dates are changed. - `deleteTeam` — Delete a team. Cascades: team members and team-granted resource permissions are removed automatically. Destructive; rate limit 5/min. - `deleteVegaDataFile` — Delete a data file attachment from a document. - `deleteWhiteboard` — Delete a whiteboard (the host document and its canvas). - `removeMember` — Hard-remove a member from an organisation, cascading to workspace and team memberships and resource permissions. Refuses self-removal and last-owner removal. Stripe seat downgrade is NOT performed here — pair with a Phase 6 billing tool.… - `removeTeamMember` — Remove a user from a team. Idempotent — returns removed=false if not on the team. - `removeWorkspaceMember` — Remove a member from a workspace. Caller must be a workspace owner or admin. Refuses to remove the last remaining workspace owner. - `resetDocumentInBrain` — Wipe + re-ingest a single document in the KG. Drops chunks/mentions/entities, clears pending lazy-extraction, and enqueues a fresh extract pass. Requires can_manage_kg + document write. Rate limit 30/min. - `revokeTeamWorkspaceAccess` — Revoke a team's workspace access. Idempotent — returns revoked=false if no grant exists. - `autoDesignWhiteboard` — Auto-design a complete, visually polished whiteboard from a natural-language goal using the PREMIUM multi-agent pipeline (the same one the in-app assistant uses): it browses the stencil/icon library, composes the WHOLE board, renders it,… - `renderDiagram` — Generate a diagram from its DSL/code and get the IMAGE back — WITHOUT inserting it into any document or whiteboard. For acting as a pure diagram generator. Provide diagramType (e.g. 'mermaid', 'd2', 'plantuml', 'graphviz', 'bpmn', 'vegal… - `startMeetingScribe` — Invite the Stable Baseline Meeting Scribe bot to a LIVE meeting (Zoom, Google Meet, Microsoft Teams, or Webex) so it paints a live, editable whiteboard of the conversation as it happens: sticky notes and topic clusters, an agenda that ti… - `stopMeetingScribe` — Stop a running meeting scribe: the bot leaves the meeting and the board is finalised (tidy pass plus a summary frame). Give it the sessionId returned by startMeetingScribe. Billing stops at the current block; the user can also stop the s… - `triggerKgRebuild` — Apply a previously previewed KG rebuild. Dispatches the build batch via kg-rebuild and returns batch_id. Rate limit 5/h. - `applySubscriptionChange` — Apply a previously previewed subscription change. Same-tier seat changes update Stripe in place; cross-tier upgrades from Free return a hosted Checkout URL. Refuses target=free (use cancelSubscription) and target=enterprise (sales-led). … - `cancelSubscription` — Apply a previewed soft cancellation (cancel_at_period_end=true). Customer keeps full access until period end. Rate limit 5/h. Use only AFTER previewSubscriptionCancellation and after the user confirms — never cancel without showing the p… - `getCustomerPortalLink` — Mint a single-use Stripe Customer Portal URL for self-serve billing changes. return_url defaults to https://app.stablebaseline.io/settings/billing and must be on a stablebaseline.* host. - `previewSubscriptionCancellation` — Preview the consequences of cancelling. Returns confirmation_token plus summary {remaining_credits, prepaid_days, prepaid_value_aud, feature_loss[], at_risk_seats}. Soft cancel only. Rate limit 30/h. Use when the user asks to cancel, end… - `previewSubscriptionChange` — Preview a subscription tier or seat change. Returns confirmation_token (10-min TTL) plus proration and next-invoice math. Cross-tier upgrades from Free return requires_checkout=true; the apply step creates a hosted Stripe Checkout sessio… - `purchaseCreditPackage` — Apply a credit-package quote by creating a hosted Stripe Checkout session. Returns checkout_url + session_id. Refuses if catalogued price has drifted. Rate limit 5/h. Use only AFTER quoteCreditPackage and after the user confirms — never … - `quoteCreditPackage` — Quote a credit-package purchase (first half of the human-in-the-loop ritual). Returns quote_token (10-min TTL) plus package + total_aud. Caller must invoke purchaseCreditPackage(quote_token) within the TTL. Use when the user asks to buy … - `reactivateSubscription` — Reactivate a subscription that was scheduled to cancel at period end (clears cancel_at_period_end). Rate limit 5/h. Use when the user asks to reactivate, uncancel, restore, or keep their subscription after they previously cancelled but b… - `updateBillingEmail` — Update the org's billing email. Validates format, writes private.organizations.billing_email, syncs to Stripe customer. Rate limit 30/h. - `startSignup` — Begin an agent-driven sign-up to Stable Baseline. Anonymous-callable. Returns a verification_url and a 6-character user_code that the agent must show to the user. The user opens the URL in their browser, signs in or signs up if necessary… - `exportFromWhiteboard` — Export a design that lives in a whiteboard to an editable PowerPoint (PPTX), PDF, PNG images, or raw HTML. Give it the whiteboard documentId and the designId (the deck). kind:'deck' (default) renders the finished deck via the export work… - `getCdmdLanguageGuide` — Get the CDMD markdown language specification. Call before createDocument if unfamiliar with syntax. - `getCreditBalance` — Composite credit balance for an organisation: plan_credits (recurring monthly bucket), top_up_credits (purchased one-offs, gross), bonus_credits (admin grants), total, and period_end (next plan reset). - `getCreditPackages` — List active credit packages available for purchase (name, credits, bonus_credits, price in cents AUD). Catalog read — visible to any MCP credential. Pair with createCreditPurchaseLink (Phase 6) to start a checkout. - `getCurrentPlanEntitlements` — Read the plan entitlements (limits + capability flags) that apply to the caller's organisation. Returns { tier, display_name, limits, features }. The Enterprise row is filtered for non-admin callers by the underlying view. Read-only. - `getCurrentUser` — Return the calling user's identity (user_id, display_name, full_name, email, avatar_url). Use this when the user says 'me' / 'mine' / 'I' so you can resolve to their UUID before passing it to tools like updateImprovement(owner_id=…) or f… - `getDeckReplyInWhiteboard` — Get the design agent's reply after calling designDeckInWhiteboard OR designIllustrationInWhiteboard: the status (thinking/building/ready) and EITHER the finished result (a deck's slide count + preview, or the placed illustration) OR a cl… - `getDiagramImage` — Render a diagram that ALREADY exists in a document to an IMAGE (svg/png/jpeg @1x/2x/3x) and return it — a temporary signed URL (expires in 1 hour) plus, for png/jpeg, the image inline so you can see it. Pass the diagramId (from getDocume… - `getDiagramInDocument` — Get a diagram's full details including raw DSL source code. Use diagramId from DIAGRAM_OMITTED markers in getDocument output. Returns diagramCode, type, name, nlDescription, renderStatus/renderError, and versionTimestamp — the diagram's … - `getDiagramTypeGuide` — Get DSL writing instructions for a diagram type. Call before writing diagramCode. - `getDocument` — Read a document's content with line numbers. content.text lines are formatted NNNNNcontent (cat -n style); the number+tab prefix is DISPLAY ONLY — never part of the document — so when building editDocument anchor patches, copy only … - `getDocumentIngestJob` — Read the current status of an ingest job. Returns { status, stage, processedImages, totalImages, documentId, error?, lastHeartbeatAt }. Stages: pending → downloaded → extracted → draft_saved → images_processing → finalized → cleaned_up. … - `getEffectivePermission` — Compute a user's effective permission level on a resource (taking team grants, inheritance, and 3-state overrides into account) and the source. Asking about another user requires can_manage_perms on the org. Use when the user asks 'can X… - `getFolderHierarchy` — Get the folder and document tree starting from a specific folder. Alias for getProjectHierarchy with folderId. - `getImageInDocument` — Get image details including a fresh signed URL (expires after 1 hour). Use storagePath from IMAGE_OMITTED markers in getDocument output. - `getImprovement` — Get full details for an improvement item including evidence, activity log, compliance context, and the checklist array (each item: id, text, due_date, completed_at, plus server-stamped attribution). Returns versionTimestamp — pass it to … - `getKgScopeTree` — List every kg_scope row for the caller's organisation, optionally narrowed to a workspace or project subtree. Each row carries scope_type, scope_id, state (on|off|inherit), settings, and is augmented with scope_name + parent_id for tree … - `getMeetingScribeStatus` — Get a meeting scribe's status after startMeetingScribe: the session state (joining, in the waiting room, live in the call, paused, ending, ended, or failed), the live activity feed of what the scribe has painted, and the board it is pain… - `getMember` — Fetch a single organisation member by user_id, enriched with profile (email + display name). Auth: org id must match the credential's organisation. - `getOrganisation` — Read a single organisation by id. Returns id, name, slug, description, settings (jsonb), created_at, member_count (active members) and plan_tier (subscription_tier). The organisation must match the calling credential's organisation. Read… - `getOrgSettings` — Read an organisation's settings JSON and the derived enabled-features map (plans, documents, improvements, compliance, knowledge_graph — all booleans). The organisation must match the calling credential's organisation. Read-only. - `getPlan` — Get full plan details including phases, items, and activity. Returns versionTimestamp — pass it to updatePlan for optimistic locking. Items include percent_complete for progress tracking. - `getPlanHierarchy` — Get the complete plan hierarchy (phases, tasks, improvements) in one call. Recommended first call for plan navigation. - `getPlanPhase` — Get a plan phase by ID with full details. Returns versionTimestamp — pass it to updatePlanPhase for optimistic locking. - `getPriceForTier` — Read the public catalog entry for a single subscription tier (free, pro, enterprise). Pro/Free pricing is publicly advertised; Enterprise pricing is custom — pricing fields are nullified for non-admin callers. - `getProject` — Read a single project by id. Auth via the standard project-access ladder. Returns the full v_projects row (id, workspace_id, name, description, icon, created_by/at, updated_by/at). Read-only. - `getProjectHierarchy` — Get the complete folder and document tree for a project in one call. Recommended first call for navigation. - `getSubscription` — Read the subscription state for an organisation. Returns tier, status, current billing period, seat count, member count, cancellation flag, trial end. Stripe IDs are stripped. Pair with listPaymentMethods/listInvoices for the full billin… - `getTask` — Get a task by ID with full details, evidence, activity, and the checklist array (each item: id, text, due_date, completed_at, plus server-stamped attribution). Returns versionTimestamp; pass it to updateTask to modify. Includes percent_c… - `getTeam` — Get a single team by ID with profile-enriched member list (display_name, email, avatar_url, role, joined_at). Set includeMembers=false to skip the member fan-out and just return team metadata. Read-only. - `getUserPreferences` — Read the calling user's preferences. Self-only — no params required. Returns { notifications, grids } where notifications is the single notification-preferences row and grids is an array of per-grid view rows. Read-only. - `getWhiteboard` — Read a whiteboard: its metadata plus a summary of the canvas (element count, element types, and text labels on the board). Pass includeElements=true to also return the full Excalidraw scene ({elements, appState, files}) — needed if you i… - `getWhiteboardGuide` — Get the Stable Baseline whiteboarding guide (Markdown): when to use stencils vs architecture icons vs code/BPMN diagrams vs plain shapes vs real images vs frames/presentations, how to lay out and verify a board, and how to edit a large b… - `getWhiteboardImage` — Render a whiteboard to a raster IMAGE so you can SEE it and confirm your edits look right, then iterate — like taking a screenshot. Returns the rendered board as a viewable image attached to the result (always raster: a JPEG light varian… - `getWorkspace` — Read a single workspace by id. Auth via the standard workspace-access ladder (credential org match + workspace scope + per-resource read permission). Returns the full v_workspaces row. Read-only. - `kg_backlinks` — Linked-mentions rail: every edge whose dst matches the named entity. - `kg_evaluate_retrieval` — Phase 5 / E3 — Provenance-aware assessor for a set of chunk_ids returned by kg_search. Returns per-chunk bucket (authored-grounded | extracted-high-conf | extracted-low-conf | no-support), overall distribution, dominant_bucket, and recom… - `kg_get_entity` — Fetch a KG entity by id or name, with 1-hop neighbours. - `kg_get_wiki_page` — Fetch a community wiki page (LLM-curated CDMD). - `kg_list_communities` — List Louvain communities for an org (optionally scoped by project). - `kg_related_documents` — Find other sources that share entities with the given source. - `kg_scope_status` — Check whether Knowledge Graph is in-scope for a given target. - `kg_search` — Unified Knowledge Graph KNOWLEDGE retrieval — facts, themes and relationships from INSIDE document CONTENT. This is NOT an artefact finder: do NOT use it to locate a document / whiteboard / diagram / plan / task / improvement by its TITL… - `kg_suggest_sample_questions` — 3 template + 3 LLM-generated sample questions for the knowledge-graph playground. - `listArchitectureIcons` — SOFTWARE & CLOUD architecture icons ONLY (AWS, Azure, GCP, Docker, Kubernetes, databases, message queues, dev tools, etc.). This catalog has NO general/nature/science/people/business icons — so for any NON-technical topic (e.g. photosynt… - `listAssignablePrincipals` — Server-side searchable, paginated list of USERS and TEAMS that can be assigned as the owner of an improvement/task in a project — and the canonical source for resolving a person's user_id when @-mentioning them in a document. Returns two… - `listBrandKits` — List an organisation's BRAND KITS (palette/fonts/logo), newest first. Use a returned id as brandKitId for a design call or setDefaultBrandKit. Auth: can_admin_org. - `listCreditPurchases` — List credit-purchase history for an organisation, newest first. Status, credits purchased, bonus, amount paid in AUD cents, completion timestamp. Stripe IDs stripped. - `listDiagramTypes` — List supported diagram types. Use the returned type field when calling insertDiagramInDocument. - `listDocuments` — List AND grep documents in a project, workspace, or folder. query does a full-content search across each document's body (not just the title) and returns the matching lines — like grep across your docs. Each returned document includes co… - `listDocumentVersions` — List version history for a document. Returns timestamps, creator, change summary, and content. - `listFolders` — List folders in a project. Use parentId for nested folders. For full tree, use getProjectHierarchy instead. - `listImprovementCategories` — List improvement categories for a project. Returns tree and flat list. - `listImprovements` — List AND grep improvements in a project. query searches the title, friendlyId and problem statement, not just the title (substring by default; set isRegex:true for a regular expression, caseSensitive:true for exact case). Supports filter… - `listInvitations` — List organisation invitations. Auth: org id must match the credential's organisation AND the credential must hold the can_manage_members capability. Status defaults to 'pending'. Pass 'all' to disable filtering. - `listInvoices` — List invoices for an organisation, newest first. Returns hosted Stripe invoice URLs and PDF links. Stripe IDs are stripped. - `listMembers` — List members of an organisation, enriched with email + display name. Auth: org id must match the credential's organisation. Returns paginated list, default limit 50 / max 200. - `listOrganisations` — List organisations you have access to. Supports query filtering by name/slug. - `listPaymentMethods` — List saved payment methods for an organisation. Returns masked card metadata only (brand, last4, exp month/year, default flag). NEVER returns full card numbers, CVCs, or any Stripe IDs. - `listPlanPhases` — List phases for a plan ordered by position. - `listPlans` — List AND grep plans in a project. query searches the title, friendlyId and description, not just the title (substring by default; set isRegex:true for a regular expression, caseSensitive:true for exact case). Supports filtering by status… - `listProjects` — List projects in a workspace. Supports query filtering by project name. - `listResourcePermissions` — List explicit permission grants on a resource (workspace/project/folder/document/improvement/plan), including principal type (user|team), level (none|read|write|admin), and 3-state overrides for documents/improvements/plans. Read-only. U… - `listTaskDependencies` — List FS/SS/FF task-dependency edges in a plan (the Gantt arrows). Scope by planId, projectId, or itemId. direction: 'predecessors' | 'successors' | 'both' (default, only with itemId). - `listTasks` — List AND grep tasks in a plan. query searches the title, friendlyId and description, not just the title (substring by default; set isRegex:true for a regular expression, caseSensitive:true for exact case). Supports filtering by status, p… - `listTeams` — List teams in an organization, with optional search filter and an includeMembers flag that fans out to v_team_members in a single round-trip. Supply EITHER organizationId OR workspaceId (the workspace's parent org is resolved automatical… - `listWhiteboards` — List the whiteboards in a project (hidden whiteboard-kind documents). Returns documentId, diagramId, title and timestamps for each. - `listWhiteboardStencils` — Search the built-in library of structural whiteboard stencils — ready-made hand-drawn graphics: flowchart/UML/ER/BPMN symbols, scrum columns, org-chart nodes, gantt, lo-fi/UX wireframe widgets (buttons, forms, tables, alerts, navs), char… - `listWorkspaces` — List workspaces you have access to. Supports query filtering by name/slug. - `pollSignupStatus` — Poll the status of a signup begun via startSignup. Anonymous-callable. Possible status values: pending (user has not yet authorized — keep polling), authorized (success — response includes api_key, organization_id, user_id, user_email; t… - `previewKgRebuild` — Preview the cost / coverage / ETA of a full KG rebuild for the org (optionally narrowed to a workspace or project). Returns confirmation_token (10-min TTL). Rate limit 20/h. - `previewKgScopeChange` — Preview the credit cost, source counts, and ETA of including or excluding KG scope rows. Returns confirmation_token (10-min TTL) plus delta of newly-in-scope vs newly-out-of-scope sources. Rate limit 20/h. - `previewTaskDependencyCascade` — Dry-run of applyTaskDependencyCascade — returns the diff without writing. Empty items array means the plan is already consistent. Accepts the same pinnedItemIds and forwardOnly params. - `searchImprovements` — Locate any artefact (document / whiteboard / diagram / plan / task / improvement / compliance) by name or friendly id — AND ranked semantic search over improvements. • CROSS-ARTEFACT FINDER MODE (pass types): matches title + friendly id … - `searchInfographicTemplates` — Semantic search over the 276 AntV Infographic templates — call this FIRST when building an infographic diagram so you pick the right structure for the content. Describe the intent (e.g. 'compare two options', 'show a process timeline', '… - `searchTools` — Search available tools by keyword or category. Returns matching tool names and descriptions. - `acceptTaskDependencyReview` — Per-item: apply a successor's suggested_start_date/suggested_end_date to its real dates and clear needs_dependency_review. For a whole-plan cascade use applyTaskDependencyCascade. - `addImprovementActivity` — Add a comment or activity entry to an improvement. - `addImprovementEvidence` — Add evidence to an improvement. Types: document_section, diagram_node, incident_note, feedback, free_text. - `addPlanActivity` — Add a comment or activity entry to a plan. - `addTeamMember` — Add a user to a team as a regular member. Idempotent — returns already_member=true if already on the team. User must be an active organisation member. - `addWhiteboardElements` — Author shapes onto a whiteboard from high-level specs (you do NOT need the full Excalidraw element schema). Appends to the canvas. PLACEMENT ON AN EXISTING BOARD (critical): NEVER guess x/y onto a board that already has content — guessed… - `addWorkspaceMember` — Add an existing organisation member to a workspace with a workspace-level role. Idempotent — returns the existing membership if already a member. Caller must be a workspace owner or admin. - `applyKgScopeChange` — Apply a previously previewed KG scope change. Atomically writes kg_scope rows and dispatches a re-ingest batch (batch_id = token). Idempotent. Rate limit 5/h. - `applyTaskDependencyCascade` — Auto-schedule every item in a plan so all FS/SS/FF task-dependencies are respected (topological pass, durations preserved). Returns the before/after diff and logs a comment on every item that moves. Use forwardOnly: true to only shift it… - `cancelInvitation` — Cancel a pending invitation by id. Sets status='revoked'. Server resolves the organisation_id from the invitation row; the credential must match that org AND hold can_manage_members. Idempotent. Rate limit 30/min. Use when the user asks … - `createBrandKit` — Create a per-org BRAND KIT so Stable Baseline outputs come out fully on-brand. Upload your branding and it is auto-applied: pass a logoUrl (as little as your logo, and the vision model AUTO-EXTRACTS your palette and fonts), or an officeU… - `createDocument` — Create a document from CDMD markdown (standard Markdown plus SB extensions — call getCdmdLanguageGuide if unfamiliar). The body goes in cdmd (content is accepted as an alias). Do not include DIAGRAM/IMAGE markers — insert them after with… - `createDocumentFromUpload` — Step 2 of file ingest. After the file is uploaded via the PUT URL from createDocumentIngestSession, call this to start the async conversion. Returns { jobId, documentId } immediately — the document is created as a draft and progressively… - `createDocumentIngestSession` — Step 1 of file ingest. Mint a single-use PUT upload URL for a large file (PDF, DOCX, plain text, or markdown — up to 150 MB). Returns { sessionId, uploadUrl, expiresAt, maxBytes }. Upload the raw bytes to uploadUrl with PUT, then call cr… - `createFolder` — Create a folder in a project. Supports nesting via parentId. - `createImageUploadSession` — Create a PUT upload URL for a document image (max 10MB). Use the returned assetUrl with insertImageInDocument. - `createImprovement` — Create an improvement item in a project. Requires projectId and title. Auto-assigns friendly ID. - `createImprovementCategory` — Create an improvement category or sub-category. Max two levels. - `createOrganisation` — Create a new organisation owned by the calling credential's user. Auth: server-side eligibility gate via can_user_create_organization (free-tier users may only have one org). Per-credential rate limit 3/day. Slug auto-generated. The new … - `createPlan` — Create a plan in a project. Requires projectId and title. - `createPlanPhase` — Create a phase in a plan. Position and wbs_code are auto-computed. - `createProject` — Create a new project inside a workspace. Mirrors the UI Create Project dialog. Auth: write on workspace + credential's can_lifecycle capability. Validates name (1..200) and description (0..2000); icon defaults to '📁' if omitted. Server-… - `createTask` — Create a task in a plan. Requires planId and title. - `createTaskDependency` — Create an FS/SS/FF scheduling edge with lag/lead between two items in the same plan (rendered as a Gantt arrow). FS = Finish-to-Start, SS = Start-to-Start, FF = Finish-to-Finish. lagDays: positive = lag, negative = lead/overlap. Rejects … - `createTeam` — Create a new team inside an organisation. Caller is added as the team's lead. Subject to plan team limit. Rate limit 30/min. - `createVegaDataUploadSession` — Create a PUT upload URL for a Vega/Vega-Lite data file. Use returned assetUrl in your Vega spec. - `createWhiteboard` — Create a whiteboard — an infinite Excalidraw canvas. A whiteboard is a hidden document (it won't appear in listDocuments) that hosts a single freeform canvas, and opens in the immersive whiteboard editor in the app. Returns documentId + … - `createWorkspace` — Create a new workspace inside the organisation. Auth: ceiling — credential must hold can_lifecycle AND user must be org owner/admin. Rate limit 30/min. Slug auto-generated. Caller becomes workspace owner. Plan limits surface as WORKSPACE… - `dataToTable` — Render tabular data as an aligned grid of labelled cells on a whiteboard, deterministically. Pass rows (an array of arrays) OR data (an array of objects), with optional headers; the server lays out evenly-spaced cells so you do NOT place… - `designComponent` — Design ONE reusable, on-brand SLIDE COMPONENT and add it to the org's component library so every future branded deck (autoDesignWhiteboard designProfile:'branded-executive') can use it. This is the self-improving design loop: an agent AU… - `designDeckInWhiteboard` — Create or refine a slide deck INSIDE an existing whiteboard by conversing with the AI design agent. Send a brief for a NEW deck, a change to an EXISTING one, or an answer to the agent's question. The agent builds a polished, on-brand dec… - `designIllustrationInWhiteboard` — Create or refine a standalone ILLUSTRATION INSIDE an existing whiteboard by conversing with the AI design agent. This is the illustration sibling of designDeckInWhiteboard: same conversation, same follow-up flow, but it makes ONE on-bran… - `dismissTaskDependencyReview` — Per-item: clear needs_dependency_review without changing dates — keeps the edge, ignores the suggestion. Use when the successor should stay put despite the predecessor shifting. - `duplicateWhiteboardElements` — Copy-paste existing whiteboard elements — the MCP equivalent of selecting a group and pressing Ctrl/Cmd+D. Clones the given elements (plus their group peers + bound text/labels) with FRESH ids, offsets the copy by dx/dy, and by default g… - `editDocument` — Edit a document: the PREFERRED tool for small targeted changes. Two patch dialects — do NOT mix them in one call. (1) ANCHOR patches {oldText, newText, before?, after?} — RECOMMENDED: replace an exact snippet of existing text with new te… - `editWhiteboardImageRegion` — Mask-edit (inpaint) one region of an image element on a whiteboard. Given the target image element id and a paint MASK (a PNG where WHITE marks the area to regenerate and BLACK is kept), it regenerates only the masked region using the pr… - `findAndReplaceTextInDocument` — Find and replace EXACT substrings in a document (NOT regex: wildcards and patterns are matched literally). Replaces EVERY occurrence and returns the replacement count; best for renames and repeated phrases. For a single targeted change a… - `grantTeamWorkspaceAccess` — Grant a team read/write/admin access to a workspace. Idempotent. Team and workspace must be in the same organisation. - `insertDiagramInDocument` — Insert a new diagram into a document. Call listDiagramTypes to find your type, then getDiagramTypeGuide for DSL syntax before writing diagramCode. The diagramCode is COMPILE-CHECKED BY RENDERING at write time: broken DSL is rejected with… - `insertImageInDocument` — Insert an image into a document (max 10MB). Provide imageBase64, imageBinary, or imageUrl. For large files, call createImageUploadSession first then use the returned assetUrl. - `insertWhiteboardDiagram` — Insert (or re-render in place) a real DIAGRAM (BPMN, Diagrams-as-Code / any DSL: mermaid, d2, plantuml, graphviz, …) on a whiteboard as an editable SB diagram element. Provide documentId, diagramType (call listDiagramTypes / getDiagramTy… - `insertWhiteboardImage` — Insert a real IMAGE (photo, screenshot, logo, picture) into a whiteboard — the storage-backed equivalent of insertImageInDocument. Provide the image as imageUrl (fetched and re-hosted), imageBase64, or imageBinary; for large files call c… - `inviteMember` — Invite a person by email to the credential's organisation. Auth: org id must match the credential AND credential must hold can_manage_members. Rate limit 10/h. Returns invitation_id, expiry, and a seat-billing-impact summary. Email-exist… - `rebuildPlatformCatalogEmbeddings` — Internal maintenance (requires write). Syncs gte-small (384-dim) vector embeddings for every platform catalog (MCP tools, whiteboard stencils, architecture icons, infographic templates, whiteboard design components, and open-design skill… - `reorderDocuments` — Batch-reorder documents within a folder (or project root) by setting sibling positions. Pass [{documentId, position}, ...] where position is a non-negative integer; usually you renumber siblings sequentially as 0, 1, 2…. Position-only up… - `reorderFolders` — Batch-reorder folders within a parent (or project root) by setting sibling positions. Pass [{folderId, position}, ...] where position is a non-negative integer; usually you renumber siblings sequentially as 0, 1, 2…. To MOVE a folder to … - `reorderImprovementCategories` — Reorder improvement categories by setting sort_order values. - `reorderPlanPhases` — Reorder plan phases by setting position values. WBS codes are recalculated. - `resendInvitation` — Resend a pending invitation: extends expires_at by 7 days and re-triggers the invitation email. Server resolves the organisation_id from the invitation row. Rate limit 6/h per invitation_id. Use when the user asks to resend, re-send, or … - `setDefaultBrandKit` — Set or clear the default BRAND KIT at a scope: organization, workspace, or project. Defaults cascade most-specific-first (a per-board/document override beats project beats workspace beats organization). Pass brandKitId:null to clear. Aut… - `setKgDocumentScope` — Toggle KG-scope override for a single document (on/off/inherit). Documents default to inheriting their folder/project gate. Requires can_manage_kg + document write. Rate limit 30/min. - `setKgFolderScope` — Toggle KG-scope override for a folder (on/off/inherit). Folders default to inheriting their project's scope. Requires can_manage_kg + folder write. Rate limit 30/min. - `setKgProjectVisibility` — Set the KG visibility mode for a project: 'strict' (multi-source rows hidden unless user can read every source), 'permissive' (one source suffices), or 'open' (any org member). Controls WHO can see the project's KG rows. Requires can_man… - `setKgWorkspaceScope` — Toggle whether a workspace is in the Knowledge Graph (on/off/inherit). 'on' enables the workspace as a gate for indexing its projects; 'off' excludes everything under it; 'inherit' removes the explicit override. No re-ingest happens here… - `setMemberActive` — Soft-deactivate or reactivate an organisation member. Refuses self-deactivation, last-admin/owner deactivation, and deactivation of an owner. Rate limit 30/min. Use when the user asks to deactivate, suspend, freeze, reactivate, or unfree… - `setPlanItemParent` — Set or clear the WBS parent-child nesting of a task/improvement (outline hierarchy, no scheduling effect). Same plan and phase required. Max depth: 5. - `setResourcePermissionOverride` — Set a single 3-state override on a permission row: null=inherit, true=allow, false=deny. Per-axis (read/write/delete) and per-kind (documents/improvements/plans), matching the OverrideAccessSection UI. Rate limit 30/min. - `traceImage` — Turn a raster image into hand-drawn freedraw strokes on a whiteboard, deterministically. Pass an image (imageUrl OR imageBase64) plus a style; the server fetches and vectorises it server-side and draws the strokes, so you do NOT emit any… - `updateDiagramInDocument` — Update a diagram's code, description, or properties. Call getDiagramTypeGuide for DSL syntax. New diagramCode is COMPILE-CHECKED BY RENDERING at write time — broken DSL is rejected with the renderer's error — and a valid change is re-ren… - `updateFolder` — Update a folder (rename/move/reorder). Supports nesting changes via parentId. - `updateImageInDocument` — Update image metadata (alt, caption, dimensions, alignment). Requires the document's versionTimestamp (from getDocument or any mutating tool's response) for optimistic locking. - `updateImprovement` — Update an improvement (or a task — tasks share this row, but prefer the symmetric updateTask alias when working from getTask). Supports the full field set including checklist (tick-boxes with due dates + completion attribution) and accep… - `updateImprovementCategory` — Update an improvement category. Cannot modify system categories. - `updateImprovementComment` — Update a comment on an improvement. Requires the comment's updated_at as versionTimestamp. - `updateMemberRole` — Update an organisation member's role (admin or member). Owners cannot be changed via this tool. Refuses self-promotion. Rate limit 30/min. Use when the user asks to promote someone to admin, demote an admin to member, or change a teammat… - `updateOrganisation` — Update an organisation's name and/or description. Auth: ceiling — credential must hold can_admin_org capability AND user must be org owner/admin. Rate limit 30/min. At least one of name/description required. Returns updated row. - `updateOrgFeatureFlags` — Toggle feature flags on settings.enabledFeatures (plans, improvements, compliance, knowledge_graph, documents). Auth: can_admin_org + org admin. Rate limit 30/min. Plan-tier gated: enabling knowledge_graph requires Pro/Enterprise. - `updateOrgSettings` — Update an organisation's settings JSONB via deep merge. Auth: ceiling — credential must hold can_admin_org AND user must be org owner/admin. Rate limit 30/min. Patches that touch enabledFeatures are rejected — use updateOrgFeatureFlags i… - `updatePlan` — Update a plan. Requires versionTimestamp from getPlan. - `updatePlanComment` — Update a comment on a plan. Requires the comment's updated_at as versionTimestamp. - `updatePlanPhase` — Update a plan phase. Requires versionTimestamp from getPlanPhase (not getPlan). - `updateProfile` — Update a user's profile name and/or display email. Self-updates do not require organisation_id; updates to other users require organisation_id and the can_manage_members capability. Self login-email changes must be done via the UI (verif… - `updateProject` — Update a project's name, description, and/or icon. Mirrors the UI Project General Settings page. Auth: admin on the project (cascades from workspace owner/admin and org admin). Partial updates; at least one of name/description/icon must … - `updateResourcePermission` — Update the access level on an existing permission row. Override flags are NOT touched — use setResourcePermissionOverride for those. Refuses self-escalation. Rate limit 30/min. - `updateTask` — Update a task. Tasks share a row with improvements (improvement_items with is_task=true), so this is a thin alias over updateImprovement — every field on updateImprovement is supported, including checklist, acceptance_criteria, status tr… - `updateTaskDependency` — Change the type (FS/SS/FF) or lag/lead of an existing task-dependency. Doesn't move dates directly; flags the successor with needs_dependency_review=true and fills suggested_start_date/suggested_end_date if the change implies a different… - `updateTeam` — Update a team's name, description, and/or colour. At least one field required. Slug is intentionally not editable. Rate limit 60/min. - `updateTeamWorkspaceAccess` — Update an existing team's workspace access level. Refuses if no grant exists — call grantTeamWorkspaceAccess first. No-op when level matches. - `updateUserPreferences` — Update the calling user's preferences. Self-only. Rate limit 60/min. Partial: only fields supplied are updated. notifications upserts a single row; grids upserts per-row keyed by (user_id, project_id, grid_key, view_name). - `updateWhiteboardScene` — Edit elements on a whiteboard's canvas WITHOUT dropping the rest of the scene. A board may hold many diagrams/elements, so prefer surgical edits: mode='patch' (DEFAULT) shallow-merges each incoming object into the existing element with t… - `updateWorkspace` — Update a workspace's name. Auth: standard workspace-write ladder + user must be workspace owner or admin. Slug is intentionally not editable (URL-embedded). Rate limit 60/min. - `updateWorkspaceMember` — Change an existing workspace member's role. Caller must be a workspace owner or admin. Cannot self-demote from owner/admin to editor/viewer — transfer the role first. - `upsertResourcePermission` — Insert or update a resource_permissions row for a user OR team on a workspace/project/folder/document/improvement/plan. Refuses self-escalation. Rate limit 30/min. Use when the user asks to give access to, share with, grant access, add a… ## Related servers - UnClick (1658 tools) — https://policylayer.com/tools/io-github-malamutemayhem-unclick-mcp-server.md - Nodebench (824 tools) — https://policylayer.com/tools/io-github-homenshum-nodebench.md - Yaver (805 tools) — https://policylayer.com/tools/io-github-kivanccakmak-yaver.md - Binance MCP Server (734 tools) — https://policylayer.com/tools/nirholas-binance-mcp.md - Fortimanager (584 tools) — https://policylayer.com/tools/jmpijll-fortimanager-mcp.md - Crow (578 tools) — https://policylayer.com/tools/kh0pper-crow.md - TinyFn (572 tools) — https://policylayer.com/tools/io-tinyfn-tinyfn.md - Mcp (571 tools) — https://policylayer.com/tools/io-github-2s-io-mcp.md ## For agents This record is a snapshot. Live verdicts and the full registry: - Check every server in your MCP config at once: `npx -y policylayer stack` - Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md) - Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events` --- Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=io-stablebaseline-sb · API: https://policylayer.com/registry/api · Recommended policies for every tool: https://policylayer.com/policies/io-stablebaseline-sb