Portkey Admin MCP: Risk Grade F — 150 Tools Analysed

// ALL 150 PORTKEY ADMIN TOOLS

READ 76 tools

WRITE 51 tools

Write add_workspace_member Add an existing org user to a workspace with a role. Requires a UUID user_id; use list_all_users to find it... Write create_api_key Create a Portkey API key for auth. Org keys grant broader access; workspace keys are scoped. WARNING: The k... Write create_collection Create a new prompt collection for organizing prompts by app. Use this when you need a new namespace before... Write create_config Create a config that defines routing, cache, retry, and targets for requests; use update_config to modify a... Write create_feedback Create feedback for a trace or request. Writes a new feedback record linked by trace_id, returns the create... Write create_guardrail Create a guardrail with checks and actions for request filtering. Create it first, then reference it from c... Write create_integration Create an org-level provider integration. Some backends need provider-specific fields, and the new integrat... Write create_log_export Create a log export definition with filters and requested fields. This only sets up the export and does not... Write create_mcp_integration Create an MCP integration from an external server URL. Registers the Portkey-side connection and returns th... Write create_mcp_server Create an MCP server under an existing integration. Registers the server and returns the new id and slug; u... Write create_prompt Create a new prompt template and initial version. Use this for first-time setup; use migrate_prompt for ide... Write create_prompt_label Create a prompt label for tagging prompt versions such as production, staging, or experiment. Requires eith... Write create_prompt_partial Create a reusable prompt partial for inclusion with {{> partial_name}}. Use this for shared snippets or mac... Write create_provider Create a workspace provider backed by an org integration. The provider inherits the integration key, but it... Write create_rate_limit Create a request or token throttle with conditions, group_by, type, unit, and value. conditions and group_b... Write create_usage_limit Create a cumulative budget for cost or tokens with optional alerts and weekly or monthly resets. conditions... Write create_virtual_key Store a provider API key as a virtual key. The raw key is encrypted and only returned at creation time, so ... Write create_workspace Create a workspace to isolate resources, API keys, and team members. If slug is omitted it is auto-generate... Write insert_log Insert log records for requests that bypassed the gateway. This writes request, response, and trace metadat... Write invite_user Invite a new org user and optionally provision workspace access and an API key in one call. Workspace assig... Write migrate_prompt Create or update a prompt in one idempotent step for CI/CD and prompt-as-code flows. Finds existing prompts... Write promote_prompt Copy a prompt from one environment to another and create or update the target automatically. Use this for s... Write publish_partial Publish a specific partial version as the default, unlike update_prompt_partial which creates a new draft w... Write publish_prompt Publish a specific version of a prompt as the active default, unlike promote_prompt which copies across env... Write resend_user_invite Resend the email for a pending invite that has not been accepted, unlike invite_user which creates a new in... Write update_api_key Update an API key's name, description, scopes, defaults, or limits, unlike delete_api_key which revokes it ... Write update_collection Update a collection's name or description only. This does not move prompts or change membership, so use it ... Write update_config Update a config by slug and create a new version. Only provided fields change; name and status are editable... Write update_feedback Update an existing feedback record by ID. Returns the updated status and feedback IDs, changes only value, ... Write update_guardrail Update a guardrail's name, checks, or actions, unlike create_guardrail which registers a new one or delete_... Write update_integration Update an integration's name, key, or provider-specific config. Key and config changes take effect immediat... Write update_integration_models Enable, disable, or register custom models for an integration. This changes model availability for every wo... Write update_integration_workspaces Control which workspaces can use an integration and set per-workspace limits, unlike update_integration whi... Write update_log_export Update an existing log export configuration before or between export runs. Only workspace_id, time_of_gener... Write update_mcp_integration Update an MCP integration's name, description, URL, auth, or transport. Changes apply immediately and alter... Write update_mcp_integration_capabilities Bulk enable or disable capabilities on an MCP integration. Changes take effect immediately for connected us... Write update_mcp_integration_workspaces Grant or revoke workspace access to an MCP integration in bulk. Changes take effect immediately for all use... Write update_mcp_server Update an MCP server's name or description. Changes apply immediately, but URL and auth live on the parent ... Write update_mcp_server_capabilities Enable or disable capabilities on an MCP server. Changes take effect immediately and override the integrati... Write update_mcp_server_user_access Grant or revoke individual user access to an MCP server. Changes take effect immediately and override the d... Write update_prompt Update an existing prompt and create a new archived version. Only provided fields change, and publish_promp... Write update_prompt_label Update a prompt label's name, description, or color only, unlike update_prompt_version which changes which ... Write update_prompt_partial Create a new version of a partial by updating its content or metadata. Only provided fields change, and the... Write update_prompt_version Update a specific prompt version's label assignment. This only assigns or removes a label, and null clears ... Write update_provider Update a provider's metadata, limits, or expiration. reset_usage clears accumulated usage counters immediat... Write update_rate_limit Update a rate limit's name, unit, or value by id. Conditions and group_by are immutable after creation; use... Write update_usage_limit Update a usage limit's name, credit_limit, alert_threshold, reset schedule, or reset target by id, unlike u... Write update_user Update a user's first name, last name, or organization role by id. Email and workspace roles are not editab... Write update_virtual_key Update a virtual key's name, secret, note, or limits. Rotating the key takes effect immediately, and limit ... Write update_workspace Update a workspace's name, slug, description, default flag, or metadata by id, unlike update_workspace_memb... Write update_workspace_member Update a workspace member's role by workspace_id and user_id. Only the role changes here; use list_workspac...

DESTRUCTIVE 21 tools

EXECUTE 2 tools

Execute run_prompt_completion Execute a prompt against the configured model and return the completion. This makes a billable model call, ... Execute start_log_export Start processing a previously created log export job. This is asynchronous, only queues the export, and doe...

// FAQ

How many tools does the Portkey Admin MCP server have? +

The Portkey Admin MCP server exposes 150 tools across 4 categories: Read, Write, Destructive, Execute.

How do I enforce policies on Portkey Admin tools? +

Route the Portkey Admin server through the PolicyLayer gateway. Define allow, deny, or approval rules per tool in the dashboard; they are enforced on every call before it reaches the server.

What risk categories do Portkey Admin tools fall into? +

Portkey Admin tools are categorised as Read (76), Write (51), Destructive (21), Execute (2). Each category has a recommended default policy.

PORTKEY ADMIN TOOLS

Enforce policy on every Portkey Admin tool call.