// MCP TOOL REFERENCE

OPEN WEBUI MCP SERVER TOOLS

82 tools from the Open WebUI MCP Server MCP Server, categorised by risk level.

View the Open WebUI MCP Server policy →
// ALL 82 OPEN WEBUI MCP SERVER TOOLS
READ 35 tools
Read get_banners Get system notification banners. Read get_channel Get details for a specific channel. Read get_channel_messages Get messages from a channel with pagination. Read get_chat Get a chat's details and message history. Read get_current_user Get the currently authenticated user's profile. Read get_file Get metadata for a specific file. Read get_file_content Get the extracted text content from a file. Read get_folder Get folder details. Read get_function Get details for a specific function. Read get_group Get details for a specific group including members. Read get_knowledge_base Get details for a knowledge base including file list. Read get_model Get details for a specific model including system prompt and parameters. Read get_models_config Get default models configuration. ADMIN ONLY. Read get_note Get a specific note by ID. Read get_prompt Get a prompt template by its command. Read get_system_config Get system configuration. ADMIN ONLY. Read get_tool Get details for a specific tool. Read get_tool_servers Get tool server (MCP/OpenAPI) connections. ADMIN ONLY. Read get_user Get details for a specific user. ADMIN ONLY. Read list_channels List all team chat channels. Read list_chats List your chats. Read list_files List all uploaded files with metadata. Read list_folders List all folders for organizing chats. Read list_functions List all functions (filters and pipes). Read list_groups List all groups with their IDs, names, and member counts. Read list_knowledge_bases List all knowledge bases with their IDs, names, and descriptions. Read list_memories List all your stored memories. Read list_models List all available models including custom models. Read list_notes List all your notes. Read list_prompts List all prompt templates. Read list_tools List all available tools (MCP, OpenAPI, custom). Read list_users List all users in Open WebUI. ADMIN ONLY. Read query_memories Search memories using semantic similarity. Read search_files Search files by filename pattern. Supports wildcards like *.pdf Read export_config Export full system configuration. ADMIN ONLY.
WRITE 27 tools
Write remove_user_from_group Remove a user from a group. ADMIN ONLY. Write clone_chat Clone a shared chat to your account. Write share_chat Share a chat (make it publicly accessible). Write toggle_function Toggle a function's enabled/disabled state. Write add_memory Add a new memory to your memory store. Write add_user_to_group Add a user to a group. ADMIN ONLY. Write archive_chat Archive a chat. Write create_channel Create a new team chat channel. Write create_folder Create a new folder. Write create_group Create a new group. ADMIN ONLY. Write create_knowledge_base Create a new knowledge base for RAG. Write create_model Create a new custom model wrapper. ADMIN ONLY. Write create_note Create a new note with markdown content. Write create_prompt Create a new prompt template triggered by a command. Write post_channel_message Post a message to a channel. Optionally reply to a parent message. Write update_channel Update a channel's name or description. Write update_file_content Update the extracted text content of a file. Write update_folder Rename a folder. Write update_function Update a function's name or code. Write update_group Update a group's name or description. ADMIN ONLY. Write update_knowledge_base Update a knowledge base's name or description. Write update_memory Update an existing memory. Write update_model Update a model's name, system prompt, or parameters. Write update_note Update a note's title or content. Write update_prompt Update a prompt template. Write update_tool Update a tool's name or code. Write update_user_role Update a user's role. ADMIN ONLY. Roles: 'admin', 'user', 'pending'.
DESTRUCTIVE 17 tools
Destructive delete_all_chats Delete all your chats. WARNING: Cannot be undone! Destructive delete_all_files Delete all files. ADMIN ONLY. WARNING: Cannot be undone! Destructive delete_all_memories Delete all your memories. WARNING: Cannot be undone! Destructive delete_channel Delete a channel and all its messages. Destructive delete_channel_message Delete a message from a channel. Destructive delete_chat Delete a chat. Destructive delete_file Delete a file. Destructive delete_folder Delete a folder. Destructive delete_function Delete a function. Destructive delete_group Delete a group. ADMIN ONLY. Removes all users from the group. Destructive delete_knowledge_base Delete a knowledge base and all its files. WARNING: Cannot be undone! Destructive delete_memory Delete a specific memory. Destructive delete_model Delete a custom model. ADMIN ONLY. Destructive delete_note Delete a note. Destructive delete_prompt Delete a prompt template. Destructive delete_tool Delete a tool. Destructive delete_user Delete a user. ADMIN ONLY. WARNING: Cannot be undone!
EXECUTE 3 tools
Execute reset_memories Re-embed all memories in the vector database. Execute create_function Create a new function (filter or pipe) with Python code. Execute create_tool Create a new custom tool with Python code.

Route Open WebUI MCP Server through PolicyLayer and every one of its 82 tools is checked against your policy before it runs.

CHECK YOUR STACK →

See every tool, the dangerous ones, and the token cost across your stack.

// FAQ
How many tools does the Open WebUI MCP Server MCP server have? +

The Open WebUI MCP Server MCP server exposes 82 tools across 4 categories: Read, Write, Destructive, Execute.

How do I enforce policies on Open WebUI MCP Server tools? +

Route the Open WebUI MCP Server server through the PolicyLayer gateway. Define allow, deny, or approval rules per tool in the dashboard; they are enforced on every call before it reaches the server.

What risk categories do Open WebUI MCP Server tools fall into? +

Open WebUI MCP Server tools are categorised as Read (35), Write (27), Destructive (17), Execute (3). Each category has a recommended default policy.

Enforce policy on every Open WebUI MCP Server tool call.

Start from Open WebUI MCP Server, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.

CHECK YOUR STACK →

Free to start. No card required.

43,000+ MCP servers and 220,000+ tools scanned and risk-classified.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.