64 tools from the KeyID MCP Server, categorised by risk level.
View the KeyID policy →block_registration_session Mark a signup session blocked and record why the flow could not continue. 2/5 follow_verification_link Follow a verification link directly or from an extracted message link list. get_auto_reply Fetch the current auto-reply configuration. get_file Download a stored file by key. Returns base64-encoded content. get_forwarding Fetch the current forwarding address. get_identity Fetch the current KeyID identity, address, phone, and reputation. get_message Fetch the full details for a single message. get_metrics Fetch usage metrics for the current identity. get_page Get details of an agent page by slug. get_persona Fetch the synthetic persona used for registrations. get_registration Fetch one registration record by ID. get_registration_artifacts Fetch the normalized artifacts attached to a signup session in priority order. get_registration_session Fetch one signup session, including its latest artifact summary and lease state. get_reputation Fetch the current reputation score and factor breakdown. get_secret Retrieve a decrypted vault entry by key. get_signature Fetch the current email signature. get_thread Fetch a thread and all of its messages. get_totp_code Generate the current TOTP code for a stored authenticator entry. get_verification_codes Read OTP or verification codes from a message, or from the latest matching message. get_webhook_deliveries Inspect recent webhook delivery attempts. list_contacts List saved contacts for the identity. list_crons List cron jobs that fire webhooks on a schedule. list_files List files stored for the current agent. list_messages List email or SMS messages with search and inbox filters. list_page_files List all files in an agent page. 2/5 list_pages List all pages owned by the current agent. list_registration_sessions List current and historical signup sessions for this identity. list_registrations List saved service registrations. list_secrets List vault keys without exposing secret values. list_threads List conversation threads for the current identity. list_totp_entries List registered authenticator/TOTP entries for the identity. list_webhooks List webhook subscriptions for the identity. load_browser_state Load the saved browser state for a signup session. reply_to_message Reply to a message, optionally as reply-all. web_search Search the web via Google. Returns titles, URLs, and snippets. Rate-limited to 100 searches per day. 2/5 complete_registration_session Mark a signup session complete after the browser flow succeeds. 2/5 create_cron Register a webhook URL to fire on a cron schedule. Standard 5-field cron: minute hour day month weekday. 2/5 create_or_update_persona Create a persona or update the existing one with explicit overrides. 2/5 create_page Claim a slug and create a new agent page. Slug must be 5+ chars, lowercase alphanumeric with hyphens. 2/5 create_webhook Create a webhook subscription. 2/5 provision_identity Create or reveal the email identity for this MCP session. 2/5 put_secret Create or update a vault entry. 2/5 request_phone_number Assign a phone number to the current KeyID identity. 2/5 save_browser_state Store cookies and browser session state for a signup session in the KeyID vault. 2/5 save_registration Create or update a registration record for an external service. 2/5 send_email Send an email from the current identity. 2/5 set_auto_reply Enable, disable, or edit the auto-reply responder. 2/5 set_forwarding Set or clear the forwarding address. 2/5 set_signature Set or clear the email signature. 2/5 store_file Upload or overwrite a file. Content should be base64-encoded for binary, or plain text (which will be base64-encoded automatically). 2/5 update_cron Update a cron job — change schedule, URL, or pause/resume. 2/5 update_message Update message flags such as read or starred state. 2/5 update_page Update page title, description, or published status. 2/5 upload_page_file Upload or update a file in an agent page. Content must be base64-encoded. Allowed types: HTML, CSS, JS, images, JSON, text. 3/5 upsert_contact Create a contact by email or update one by contact ID. 2/5 start_registration_session Start a signup session that correlates email, SMS, or TOTP artifacts for one service. 3/5 wait_for_message Poll until a matching inbound message arrives. 3/5 wait_for_registration_artifact Poll a signup session until an artifact arrives or the session expires, blocks, or times out. 3/5 The KeyID MCP server exposes 64 tools across 4 categories: Read, Write, Destructive, Execute.
Use Intercept, the open-source MCP proxy. Write YAML rules for each tool — rate limits, argument validation, or deny rules — then run Intercept in front of the KeyID server.
KeyID tools are categorised as Read (35), Write (20), Destructive (6), Execute (3). Each category has a recommended default policy.
Open source. One binary. Zero dependencies.
npx -y @policylayer/intercept