Skip to content

Coordinalo — Service Business Operations

by coordinalo.com · remote · no sign-in to list tools · v4.1.1 · published by com.coordinalo

Scheduling, availability, clients, billing and CRM for appointment-based services.

Deletes · 8Final · 6Changes · 50
CompareRegistry entry

112 tools: 8 can delete or cancel things, 6 do something that can't be undone, 50 change things and 48 only read.

Scanned Oct 21, 2026

4 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http coordinalo https://coordinalo.com/api/mcp

Findings

Matches of fixed checks, with the text they matched.

4 info

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

112 tools

Deletes or cancels 8Claude Code: deny
  • agendas_deleteDelete a public agenda permanently.No findings

    Why it is in this group

    • The name "agendas_delete" says "delete": a word for removing or ending something.
    • The description says "Cannot be undone".
    Description, as the server wrote it
    Delete a public agenda permanently. Cascades to related sessions booked through this agenda, comments, and service configs. Requires confirm: true. Cannot be undone.
  • booking_cancelCancel an existing session.No findings

    Why it is in this group

    • The name "booking_cancel" says "cancel": a word for removing or ending something.
    Description, as the server wrote it
    Cancel an existing session. By default applies the org cancellation policy: the charge is computed from the no-charge/partial/full windows and, if the policy has autoApply, registered as a penalty transaction (money-write). Set applyCancellationPolicy: false to waive the charge. Requires confirm: true.
  • cierre_eliminar_clienteDelete (reopen) a client closing.No findings

    Why it is in this group

    • The description's first verb is "delete": a word for removing or ending something.
    Description, as the server wrote it
    Delete (reopen) a client closing. Only allowed if the organizational period is not frozen. Requires confirm: true.
  • email_domain_deleteRemove the configured email sending domain from the organization.No findings

    Why it is in this group

    • The name "email_domain_delete" says "delete": a word for removing or ending something.
    Description, as the server wrote it
    Remove the configured email sending domain from the organization. This deletes it from both Resend and the database. The organization will revert to using the default Coordinalo sending address. Requires confirm: true.
  • portal_cancel_reschedule_requestCancel a pending reschedule request (SessionRequest) on behalf of the client who proposed it — the client-side withdrawal in the bilateral loop (outcome=cancelled_by_client).No findings

    Why it is in this group

    • The name "portal_cancel_reschedule_request" says "cancel": a word for removing or ending something.
    Description, as the server wrote it
    Cancel a pending reschedule request (SessionRequest) on behalf of the client who proposed it — the client-side withdrawal in the bilateral loop (outcome=cancelled_by_client). Idempotent: a request already cancelled_by_client returns wasAlreadyCancelled=true; a request in another terminal state returns a conflict. Use booking_list_requests to find pending requests; use booking_resolve_request for the org's own approve/reject.
  • portal_session_cancelCancel a client's session on behalf of the client (client-initiated cancellation: cancelledBy=client).No findings

    Why it is in this group

    • The name "portal_session_cancel" says "cancel": a word for removing or ending something.
    Description, as the server wrote it
    Cancel a client's session on behalf of the client (client-initiated cancellation: cancelledBy=client). Allowed from scheduled/pending_confirmation/confirmed; rejects past sessions. Idempotent: a session already cancelled returns alreadyCancelled=true. Distinct from the admin cancellation with cancellation-policy charges — this is the client-portal cancel flow. The org API key owner is recorded as the actor acting on behalf of the client (ADR-004 §6).
  • public_booking_cancelCancel a public booking using the bookingToken.No findings

    Why it is in this group

    • The name "public_booking_cancel" says "cancel": a word for removing or ending something.
    Description, as the server wrote it
    Cancel a public booking using the bookingToken. Only works for bookings in pending_confirmation, scheduled, or confirmed status. Optionally include a reason. Does NOT require an API key. The booking token scopes access to a single booking.
  • scheduling_cancelCancel a session through the Servicialo protocol lane.No findings

    Why it is in this group

    • The name "scheduling_cancel" says "cancel": a word for removing or ending something.
    Description, as the server wrote it
    Cancel a session through the Servicialo protocol lane. Moves the session to cancelled and emits sc_service.cancelled.v1. It REPORTS the cancellation policy tier that applies (policy_applied: none | partial | full, with the percentage) but does NOT create any charge — no penalty transaction is persisted and the client owes nothing as a result of this call. If you need the organization lane that actually applies the policy and registers the charge, use booking_cancel instead. Requires confirm: true and X-Org-Api-Key.
Can't be undone 6Claude Code: ask
  • comms_send_campaignExecute a draft or scheduled campaign.No findings

    Why it is in this group

    • The name "comms_send_campaign" says "send": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Execute a draft or scheduled campaign. Sends messages to all matching recipients asynchronously, skipping recipients with email opt-out or bounced addresses (logged as "skipped"). Campaign must be in draft or scheduled status. Returns immediately — use comms_get_campaign to track progress (sent/delivered/opened/clicked update via provider webhooks). Requires confirm: true.
  • comms_send_messageSend a single WhatsApp or email message to a specific client.No findings

    Why it is in this group

    • The name "comms_send_message" says "send": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Send a single WhatsApp or email message to a specific client. Use templateKey for predefined templates or customMessage for free text. Requires confirm: true.
  • finance_register_paymentRegister a manual payment against an existing charge (cobro).No findings

    Why it is in this group

    • The name "finance_register_payment" says "payment": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Register a manual payment against an existing charge (cobro). Updates cobro status automatically. Requires confirm: true.
  • finance_send_confirmationsSend pending confirmation digest to clients.No findings

    Why it is in this group

    • The name "finance_send_confirmations" says "send": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Send pending confirmation digest to clients. Groups all pending_confirmation charges by client and sends a single message per client via WhatsApp or email. Creates confirmation tokens and sets a grace period for auto-confirmation. Requires confirm: true.
  • members_inviteInvite a new member to the organization by email.No findings

    Why it is in this group

    • The name "members_invite" says "invite": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Invite a new member to the organization by email. Sends an invitation email. Requires confirm: true.
  • report_evidence_gatesAdoption and switching evidence for one organization, by month and week: sessions created natively in the app vs imported (count and %), date of the last bulk import, weeks since i…No findings

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    Description, as the server wrote it
    Adoption and switching evidence for one organization, by month and week: sessions created natively in the app vs imported (count and %), date of the last bulk import, weeks since it, switching level (0 no use / 1 activation / 2 adoption / 3 cutover), no-show rate split by whether a reminder was sent, reminders sent/delivered/confirmed/cancelled, outstanding balance, amount collected after a payment reminder, weekly active staff, and attributable per-org costs (WhatsApp, email, AI tokens) with shared infrastructure prorated separately. Read-only, scoped to the organization of the API key. Use it to answer "is this org actually using the product or still on its spreadsheet". Metrics that cannot be measured today (support events, churn, transfer reconciliation) come back null, never zero.
Changes things 50Claude Code: ask
  • admin_create_serviceAdd a bookable service to an organization.No findings

    Why it is in this group

    • The name "admin_create_service" says "create": a word for a change.
    Description, as the server wrote it
    Add a bookable service to an organization. Use after admin_create_organization. Auto-discoverable by default. If the org has exactly one active provider, the service is auto-assigned to them. With multiple providers, use service_assign_provider to assign manually — unassigned services block admin_toggle_discoverable. Next step: admin_set_availability to configure the provider schedule. Requires X-Org-Api-Key header.
  • admin_set_availabilityReplace the weekly availability schedule for a provider (not additive — overwrites all existing blocks).No findings

    Why it is in this group

    • The name "admin_set_availability" says "set": a word for a change.
    Description, as the server wrote it
    Replace the weekly availability schedule for a provider (not additive — overwrites all existing blocks). Get providerId from admin_list_providers first. Schedule uses day names and HH:MM times. Requires X-Org-Api-Key header.
  • admin_toggle_discoverableToggle the LIFECYCLE flags isPublic and servicialoPublished.No findings

    Why it is in this group

    • The name "admin_toggle_discoverable" says "toggle": a word for a change.
    Description, as the server wrote itContains invisible characters, shown as [U+…]
    Toggle the LIFECYCLE flags isPublic and servicialoPublished. ⚠[U+FE0F] This tool does NOT grant public discovery consent — discovery in the Servicialo registry requires Organization.discoveryConsent=true, which can ONLY be set by the human owner via PATCH /api/organizations/:slug/servicialo from the web panel (a deliberate, authenticated consent action). Without consent, the cron registry-sync and resolver-heartbeat skip the org, so calling this tool with discoverable=true on a non-consented org flips local flags but does not publish anywhere. Requires X-Org-Api-Key header.
  • agendas_createCreate a public agenda — a shareable booking page where external clients can self-book appointments.No findings

    Why it is in this group

    • The name "agendas_create" says "create": a word for a change.
    Description, as the server wrote it
    Create a public agenda — a shareable booking page where external clients can self-book appointments. Links to a specific provider and/or service. The agenda gets a public URL at /{orgSlug}/agenda/{slug}. Create this after services and availability are configured. Without a public agenda, clients can only be booked via the API or dashboard.
  • agendas_updateUpdate a public agenda’s configuration.No findings

    Why it is in this group

    • The name "agendas_update" says "update": a word for a change.
    Description, as the server wrote it
    Update a public agenda’s configuration. Partial update — only provided fields are changed. Supports modifying: title, description, visibility (isPublic/isActive), booking flow order (service_first/provider_first/auto), selection modes for service and provider (required/optional/auto/hidden), assignment strategy (manual/round_robin/least_booked/most_available/priority/random), privacy flags (showSessions, showClientNames, showProviderUtilization, showProviderList), prepayment, and provider/service linking. When a provider is assigned, their services are auto-linked to the agenda.
  • booking_createCreate a new session/appointment for a client.No findings

    Why it is in this group

    • The name "booking_create" says "create": a word for a change.
    Description, as the server wrote it
    Create a new session/appointment for a client. providerId is optional — if omitted, the system auto-assigns a provider using the agenda assignment strategy (round_robin, least_booked, etc.). When a client has a titular provider, that provider is preferred automatically. Without providerId and without publicAgendaId, the org default public agenda is used. Preconditions: (1) service must exist and be active, (2) client must exist (use client_create first). Use availability_get_slots to find valid time slots before calling this. Set retroactive: true to register past sessions (skips slot validation, sets status to completed by default). Use autoCharge: true with retroactive to auto-generate the charge. Retroactive sessions are tagged with self_declared provenance. Max 365 days in the past. Past dates are auto-detected as retroactive — the retroactive flag is optional (system infers it from scheduledAt).
  • booking_create_recurringCreate recurring sessions (e.g.No findings

    Why it is in this group

    • The name "booking_create_recurring" says "create": a word for a change.
    Description, as the server wrote it
    Create recurring sessions (e.g. weekly therapy). Generates multiple individual sessions linked by a recurrence series ID. Max 52 occurrences.
  • booking_rescheduleReschedule a session to a new time.No findings

    Why it is in this group

    • The name "booking_reschedule" says "reschedule": a word for a change.
    Description, as the server wrote it
    Reschedule a session to a new time. Cancels the original and creates a new one. Requires confirm: true.
  • booking_resolve_requestApprove or reject a pending reschedule request (SessionRequest) that a client proposed from the portal — closes the bilateral coordination loop.No findings

    Why it is in this group

    • The name "booking_resolve_request" says "resolve": a word for reading.
    • The description's first verb is "approve": a word for a change.
    Description, as the server wrote it
    Approve or reject a pending reschedule request (SessionRequest) that a client proposed from the portal — closes the bilateral coordination loop. outcome: "approved" applies the reschedule atomically (moves the session to the proposed slot in the same transaction); "rejected" requires a reason of at least 10 characters. Idempotent: a request already resolved returns a conflict with its current status. Emits the corresponding session lifecycle events.
  • booking_update_statusAdvance a session through the Servicialo lifecycle: confirm, start, complete, or mark as no-show.No findings

    Why it is in this group

    • The name "booking_update_status" says "update": a word for a change.
    Description, as the server wrote it
    Advance a session through the Servicialo lifecycle: confirm, start, complete, or mark as no-show. NOTE: the "deliver" action is NOT available via MCP (ref PDC-SEC-001) — MCP authentication cannot validate actor-as-Proveedor. Delivery must be performed via the REST endpoint PATCH /api/organizations/[orgSlug]/coordinalo/sessions/[sessionId]/deliver which enforces provider binding.
  • cierre_cerrar_orgClose the organizational period.No findings

    Why it is in this group

    • The description's first verb is "close": a word for a change.
    Description, as the server wrote it
    Close the organizational period. Requires ALL active clients with historialCompleto=true to be closed first. Freezes the period. Requires confirm: true.
  • cierre_crear_clienteCreate a client monthly closing (immutable financial snapshot).No findings

    Why it is in this group

    • The description's first verb is "create": a word for a change.
    Description, as the server wrote it
    Create a client monthly closing (immutable financial snapshot). Requires historialCompleto=true on the client. One closing per client per period. Requires confirm: true.
  • cierre_distribuir_utilidadesDistribute profits for a closed period.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Distribute profits for a closed period. Freezes the current period and all prior open periods. Requires the period to be organizationally closed first. Requires confirm: true.
  • cierre_evaluar_orgEvaluate organizational closing readiness for a period.No findings

    Why it is in this group

    • The description's first verb is "evaluate": a word for a change.
    Description, as the server wrote it
    Evaluate organizational closing readiness for a period. Returns: active clients, closed count, excluded count, pending count, completion percentage, and whether closing is possible.
  • client_createCreate a new client in the organization.No findings

    Why it is in this group

    • The name "client_create" says "create": a word for a change.
    Description, as the server wrote it
    Create a new client in the organization. If a Person with the same email exists, it will be linked (not duplicated).
  • client_updateUpdate an existing client's personal data.No findings

    Why it is in this group

    • The name "client_update" says "update": a word for a change.
    Description, as the server wrote it
    Update an existing client's personal data. Email cannot be changed via MCP.
  • comms_create_campaignCreate a new email campaign with HTML body to send to a segmented audience.No findings

    Why it is in this group

    • The name "comms_create_campaign" says "create": a word for a change.
    Description, as the server wrote it
    Create a new email campaign with HTML body to send to a segmented audience. Supports variable substitution: {nombre}, {apellido}, {nombre_completo}, {email}, {telefono}, {organizacion}. Use audienceType "predefined" with audienceId "active"/"inactive"/"new"/"withPhone"/"withoutPhone", or "adhoc" with custom filters. On send, links in the body are auto-tagged with UTMs (utm_campaign = stable slug from campaign name) and a legal footer with unsubscribe link is appended. Returns campaign ID and recipient count. Campaign starts as draft — use comms_send_campaign to execute. Requires confirm: true.
  • comms_render_messageRender a communication template as a visual image (PNG).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Render a communication template as a visual image (PNG). Available templates: session-confirmation, session-reminder, payment-reminder. Use action "preview" to get the image URL, "send" to render and send via WhatsApp with the image attached. Each template requires specific data fields (clientName, providerName, date, time, etc.).
  • comms_update_preferencesEnable or disable communication channels and features for an organization.No findings

    Why it is in this group

    • The name "comms_update_preferences" says "update": a word for a change.
    Description, as the server wrote it
    Enable or disable communication channels and features for an organization. Partial update — only provided fields are changed. Creates preferences if none exist.
  • dunning_configureUpdate dunning (payment recovery) configuration for an organization.No findings

    Why it is in this group

    • The description's first verb is "update": a word for a change.
    Description, as the server wrote it
    Update dunning (payment recovery) configuration for an organization. All fields except organizationSlug are optional — only provided fields are updated, rest stays unchanged.
  • email_domain_registerRegister a custom email sending domain for an organization via Resend.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Register a custom email sending domain for an organization via Resend. Returns DNS records that must be configured in the domain provider before verification. Replaces any previously configured domain. After adding DNS records, call email_domain_verify to check status.
  • email_domain_verifyTrigger DNS verification for the configured email domain and return updated status.No findings

    Why it is in this group

    • The description's first verb is "trigger": a word for a change.
    Description, as the server wrote it
    Trigger DNS verification for the configured email domain and return updated status. Call this after the organization has added the required DNS records. Status will be VERIFIED (ready to send), PENDING (DNS not yet propagated), or FAILED.
  • finance_create_cobroCreate a manual charge (cobro) for a client.No findings

    Why it is in this group

    • The name "finance_create_cobro" says "create": a word for a change.
    Description, as the server wrote it
    Create a manual charge (cobro) for a client. Not linked to a sale/venta. Requires confirm: true.
  • finance_create_ventaCreate a service sale (venta) for a client.No findings

    Why it is in this group

    • The name "finance_create_venta" says "create": a word for a change.
    Description, as the server wrote it
    Create a service sale (venta) for a client. Optionally auto-creates a charge (cobro) depending on org configuration. Requires confirm: true.
  • lifecycle_transitionExecute a state transition on a session.No findings

    Why it is in this group

    • The description's first verb is "execute": a word for a change.
    Description, as the server wrote it
    Execute a state transition on a session. Accepts either to_state (target state name per Servicialo spec: confirmed, in_progress, completed, verified, documented, cancelled, no_show) or action (semantic verb: confirm, start, complete, verify, document, cancel, no_show). When to_state=no_show, no_show_type is required. NOTE: to_state="delivered" / action="deliver" is NOT available via MCP (ref PDC-SEC-001) — MCP authentication cannot validate actor-as-Proveedor. Delivery must be performed via the REST endpoint PATCH /api/organizations/[orgSlug]/coordinalo/sessions/[sessionId]/deliver which enforces provider binding. Returns transition record with from, to, at, by, method fields. Requires X-Org-Api-Key.
  • org_summaryCompact organization overview (~500 tokens).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Compact organization overview (~500 tokens). Returns services, providers, schedules, active features, key counts, and an onboarding_status checklist showing what is configured vs missing (services, providers, availability, public agenda). Use as first call to orient yourself — cheaper than report_dashboard. If onboarding_status.ready is false, follow the missing steps before booking.
  • org_updateUpdate organization profile fields: name, description, logo URL, or vertical.No findings

    Why it is in this group

    • The name "org_update" says "update": a word for a change.
    Description, as the server wrote it
    Update organization profile fields: name, description, logo URL, or vertical. Only provided fields are updated.
  • portal_confirm_deliveryConfirm, on behalf of the client, that the service was delivered (writes DeliveryProof.clientConfirmed) — the client-side confirmation that closes dual-confirm verification.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Confirm, on behalf of the client, that the service was delivered (writes DeliveryProof.clientConfirmed) — the client-side confirmation that closes dual-confirm verification. Allowed once the session is completed/delivered/documented; rejected if an open dispute exists. Optionally records a 1-5 rating (only if the service captures quality). This is an OVERLAY: it does NOT change session.status (the auto-verify cron advances delivered→verified). Idempotent: alreadyConfirmed=true if already done. Triggers SC resolution.
  • portal_propose_reschedulePropose a new time for a session on behalf of the client — opens the bilateral coordination loop by creating a pending SessionRequest (it does NOT move the session; the org resolve…No findings

    Why it is in this group

    • The name "portal_propose_reschedule" says "reschedule": a word for a change.
    Description, as the server wrote it
    Propose a new time for a session on behalf of the client — opens the bilateral coordination loop by creating a pending SessionRequest (it does NOT move the session; the org resolves it with booking_resolve_request). Provide requestedScheduledAt as an ISO datetime (must be future, within ~3 months). Gated by the org's session-request flow flag and rate-limited per (client, session). The event records the session's client as the proposer. Use booking_list_requests to track pending requests.
  • portal_report_sessionReport, on behalf of the client, that the professional did not show up (reason=provider_no_show) or that the session was cancelled/not delivered (reason=cancelled).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Report, on behalf of the client, that the professional did not show up (reason=provider_no_show) or that the session was cancelled/not delivered (reason=cancelled). Creates a Dispute(OPEN) for the org to review — it does NOT change the session status. Idempotent: if an open dispute already exists for the session, returns alreadyReported=true with its disputeId. Notifies the org.
  • portal_session_confirmConfirm a client's attendance to their session, on behalf of the client (e.g.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Confirm a client's attendance to their session, on behalf of the client (e.g. the client called or messaged the org to confirm). Moves scheduled/pending_confirmation → confirmed and notifies the provider. This is the client-portal confirm flow (event role = client), distinct from the org's own admin confirm in booking_update_status. Idempotent: a session already confirmed returns alreadyConfirmed=true. The org API key owner is recorded as the actor acting on behalf of the client (ADR-004 §6).
  • provider_createCreate a new provider in the organization.No findings

    Why it is in this group

    • The name "provider_create" says "create": a word for a change.
    Description, as the server wrote it
    Create a new provider in the organization. Links or creates a Person record by email.
  • provider_updateUpdate provider data: status, commission, coverage areas, permissions.No findings

    Why it is in this group

    • The name "provider_update" says "update": a word for a change.
    Description, as the server wrote it
    Update provider data: status, commission, coverage areas, permissions.
  • public_booking_confirmConfirm a pending public booking using the confirmationToken returned by public_booking_create.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Confirm a pending public booking using the confirmationToken returned by public_booking_create. Advances the booking from pending_confirmation to scheduled. The token expires after 30 minutes. Does NOT require an API key. Rate-limited.
  • public_booking_createCreate a public booking request.No findings

    Why it is in this group

    • The name "public_booking_create" says "create": a word for a change.
    Description, as the server wrote it
    Create a public booking request. Does NOT require an API key, but DOES require: (1) requester identity — fullName plus at least email or phone, (2) submission context — channel and whether an agent assisted, (3) authorization.humanIntentConfirmed must be true. The booking is created as pending_confirmation — use public_booking_confirm with the returned confirmationToken to confirm. A bookingToken is also returned for future lifecycle management (cancel, reschedule). Rate-limited per IP+org. All requests are audited with semantic decision codes. Use public_service_list → public_availability_get_slots → public_booking_create → public_booking_confirm as the complete public booking flow.
  • public_booking_rescheduleReschedule a public booking using the bookingToken.No findings

    Why it is in this group

    • The name "public_booking_reschedule" says "reschedule": a word for a change.
    Description, as the server wrote it
    Reschedule a public booking using the bookingToken. Cancels the original and creates a new pending_confirmation booking at the new time. Returns new confirmationToken and bookingToken. Only works for bookings in pending_confirmation, scheduled, or confirmed status. Does NOT require an API key.
  • reminders_update_configUpdate reminder/notification configuration for an organization.No findings

    Why it is in this group

    • The name "reminders_update_config" says "update": a word for a change.
    Description, as the server wrote it
    Update reminder/notification configuration for an organization. Partial update — only provided sections are changed. Sections: bookingReminder {enabled, daysAfter, maxReminders, interval}, sessionReminder24h {enabled, hoursBefore, sendTime}, sessionReminder1h {enabled, hoursBefore}, paymentReminder {enabled, daysAfter, maxReminders, interval}, paymentOverdue {enabled, daysOverdue, maxReminders, interval}, notificationFollowup {enabled, daysAfter, maxFollowups, interval}, pendingConfirmation {enabled, cutoffHours, autoConfirm} (cutoffHours = hours BEFORE the appointment that an unaccepted booking expires). Returns the full configuration after update.
  • report_dashboardExecutive summary of the organization: today's sessions, monthly metrics, revenue, pending charges, and alerts.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Executive summary of the organization: today's sessions, monthly metrics, revenue, pending charges, and alerts.
  • report_deuda_realReal-time report of clients with genuine outstanding debt.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Real-time report of clients with genuine outstanding debt. Excludes temporal payment mismatches (prepaid clients whose global balance is covered). Shows: client name, debt amount, periods with debt, last payment date, and collection status (active/inactive/never_paid). Use to answer "who actually owes money" questions.
  • report_occupancyCalculate provider occupancy rates for a period.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Calculate provider occupancy rates for a period. Group by provider, day, or week.
  • report_revenueCalculate revenue for a period grouped by day, week, month, service, or provider.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Calculate revenue for a period grouped by day, week, month, service, or provider.
  • report_sc_summaryBreakdown of Servicio Coordinado (SC) events by month and resolver path (backfill, cac-native, live, compensalo).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Breakdown of Servicio Coordinado (SC) events by month and resolver path (backfill, cac-native, live, compensalo). Use to validate SC coverage and monitor live SC resolution growth. Key metric: sc_live shows SCs resolved in production (not backfill).
  • scheduling_bookBook a session (Servicialo spec).1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...ing_id. Use scheduling_confirm with the credential to finalize. Does NOT require an API ke..."

      What this check looks for
    Description, as the server wrote it
    Book a session (Servicialo spec). Returns confirmation_credential (opaque token, valid 30 min) and booking_id. Use scheduling_confirm with the credential to finalize. Does NOT require an API key — uses requester identity (fullName + email or phone). Accepts optional submission context for audit trail.
  • scheduling_confirmConfirm a booking (Servicialo spec).1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...(Servicialo spec). Dual-mode: (1) with credential — uses the confirmation token from sche..."

      What this check looks for
    Description, as the server wrote it
    Confirm a booking (Servicialo spec). Dual-mode: (1) with credential — uses the confirmation token from scheduling_book, no API key needed; (2) with booking_id — uses API key to confirm an existing session. Returns confirmed status with timestamp.
  • scheduling_rescheduleReschedule a session to a new time (Servicialo spec).No findings

    Why it is in this group

    • The name "scheduling_reschedule" says "reschedule": a word for a change.
    Description, as the server wrote it
    Reschedule a session to a new time (Servicialo spec). Cancels the original session and creates a new one at the specified datetime. Requires confirm: true and X-Org-Api-Key.
  • service_assign_providerAssign or unassign a provider to/from a service.No findings

    Why it is in this group

    • The name "service_assign_provider" says "assign": a word for a change.
    Description, as the server wrote it
    Assign or unassign a provider to/from a service. Controls which providers can deliver which services.
  • service_createCreate a new bookable service in an existing organization.No findings

    Why it is in this group

    • The name "service_create" says "create": a word for a change.
    Description, as the server wrote it
    Create a new bookable service in an existing organization. Use this for day-to-day service management (requires X-Org-Api-Key). For initial org setup, prefer admin_create_service instead. After creating, use service_assign_provider to link providers. A service without providers cannot accept bookings. Optional delivery-verification overrides per service: verificationLevel (none = silent auto-complete, legacy; default_confirm = both can confirm and silence auto-confirms after the org window; dual_confirm = the client must positively confirm, silence does NOT; documented = the provider must attach evidence) and qualityCapture (ask the client for a 1–5 rating on confirmation). Omit both to inherit the organization defaults.
  • service_updateUpdate an existing service (price, duration, status, etc.).No findings

    Why it is in this group

    • The name "service_update" says "update": a word for a change.
    Description, as the server wrote it
    Update an existing service (price, duration, status, etc.). Creates a price history entry if price changes. Delivery-verification overrides can be changed too: verificationLevel (none / default_confirm / dual_confirm / documented — see service_create for semantics) and qualityCapture (1–5 rating on confirmation). Pass null on either to reset that field and inherit the organization default again; omit to leave it unchanged.
  • session_note_upsertCreate or update the clinical note (ficha) of a session: evolution, treatmentPerformed, nextSessionPlan, type (evaluacion/tratamiento/derivacion/cierre), progressMetrics, etc.No findings

    Why it is in this group

    • The name "session_note_upsert" says "upsert": a word for a change.
    Description, as the server wrote it
    Create or update the clinical note (ficha) of a session: evolution, treatmentPerformed, nextSessionPlan, type (evaluacion/tratamiento/derivacion/cierre), progressMetrics, etc. One note per session (upsert). Sensitivity is resolved automatically (health-vertical orgs default to restricted). NOTE: unlike the provider's own UI save, this does NOT create the provider-confirmed DeliveryProof nor award practice points — those are provider-bound actions (PDC-SEC-001); use the provider portal / REST for delivery confirmation.
  • settings_updateUpdate organization settings.No findings

    Why it is in this group

    • The name "settings_update" says "update": a word for a change.
    Description, as the server wrote it
    Update organization settings. Partial update — only provided keys are changed. Pass a settings object with key-value pairs (e.g. {"policies.noShowMaxStrikes": 3, "finances.clientPaymentTiming": "BEFORE"}). ALL values are validated before ANY is written: if one key fails, nothing changes — so related keys can be sent together and either all land or none do. That matters for settings with invariants between them (the cancellation tiers, where the partial-charge window must sit closer to the appointment than the no-charge one) and for the SII tax profile, whose legally required fields must arrive in a single call the first time. Returns the full updated settings for the affected chapters. See settings_get for available keys, valid values and dependencies.
Only reads 48Claude Code: allow
  • admin_list_providersList active providers (professionals) for an organization.No findings

    Why it is in this group

    • The name "admin_list_providers" says "list": a word for reading.
    Description, as the server wrote it
    List active providers (professionals) for an organization. Use this to get providerId before calling admin_set_availability. The org owner is auto-provisioned as a provider. Requires X-Org-Api-Key header.
  • agendas_getGet complete details of a public agenda by ID.No findings

    Why it is in this group

    • The name "agendas_get" says "get": a word for reading.
    Description, as the server wrote it
    Get complete details of a public agenda by ID. Returns all configuration including booking flow (service_first, provider_first, auto), selection modes, assignment strategy, privacy settings, linked provider/service, and session count. Use before agendas_update to inspect current settings.
  • agendas_listList public agendas for an organization.No findings

    Why it is in this group

    • The name "agendas_list" says "list": a word for reading.
    Description, as the server wrote it
    List public agendas for an organization. Returns agendas with their provider, service, and session counts.
  • availability_get_provider_scheduleGet the configured weekly availability schedule for a provider (not free slots, but the base configuration).No findings

    Why it is in this group

    • The name "availability_get_provider_schedule" says "get": a word for reading.
    Description, as the server wrote it
    Get the configured weekly availability schedule for a provider (not free slots, but the base configuration). Use admin_set_availability to modify.
  • availability_get_slotsQuery available time slots within a date range.No findings

    Why it is in this group

    • The name "availability_get_slots" says "get": a word for reading.
    Description, as the server wrote it
    Query available time slots within a date range. Agenda-aware: without clientId, filters by the org default public agenda — each org decides which services to expose. With clientId, resolves the client titular provider and returns their full service catalog. Five modes: (1) orgSlug only — slots from the public agenda grouped by service, provider auto-assigned at booking; (2) orgSlug + clientId — resolves titular provider if set, falls back to agenda; (3) orgSlug + agendaId — slots for a specific agenda; (4) serviceId — slots for all providers assigned to that service; (5) providerId — slots for a specific provider. Modes 1–3 hide provider details. Use before booking_create.
  • booking_getGet complete details of a session/appointment by its ID, including client, provider, service, financial, and delivery proof information.No findings

    Why it is in this group

    • The name "booking_get" says "get": a word for reading.
    Description, as the server wrote it
    Get complete details of a session/appointment by its ID, including client, provider, service, financial, and delivery proof information.
  • booking_listList sessions for an organization with filters by provider, client, service, status, and date range.No findings

    Why it is in this group

    • The name "booking_list" says "list": a word for reading.
    Description, as the server wrote it
    List sessions for an organization with filters by provider, client, service, status, and date range. Supports cursor-based pagination.
  • booking_list_requestsList the reschedule requests (SessionRequest) of an organization — the org side of the bilateral coordination loop a client opens from the portal.No findings

    Why it is in this group

    • The name "booking_list_requests" says "list": a word for reading.
    Description, as the server wrote it
    List the reschedule requests (SessionRequest) of an organization — the org side of the bilateral coordination loop a client opens from the portal. Filter by status (pending|all|resolved, default pending), sessionId or clientId. Returns the proposed slot, current session state, and who proposed it. Cursor-paginated. Set includePendingCount: true to also get the count of pending requests (powers the sidebar badge). Read-only. Use booking_resolve_request to approve or reject one.
  • cierre_listar_clientesList client closings for an organization.No findings

    Why it is in this group

    • The description's first verb is "list": a word for reading.
    Description, as the server wrote it
    List client closings for an organization. Filter by period and/or client.
  • cierre_listar_utilidadesList retained earnings (utilidades retenidas) for an organization.No findings

    Why it is in this group

    • The description's first verb is "list": a word for reading.
    Description, as the server wrote it
    List retained earnings (utilidades retenidas) for an organization. Returns per-period records with accumulated totals: ingresos, costos, utilidadNeta, distribuido, retenido.
  • cierre_preview_clientePreview the financial snapshot for a client in a period WITHOUT creating the closing.No findings

    Why it is in this group

    • The name "cierre_preview_cliente" says "preview": a word for reading.
    Description, as the server wrote it
    Preview the financial snapshot for a client in a period WITHOUT creating the closing. Returns totals for ventas, cobros, pagos, sessions.
  • client_getGet complete details of a client including financial summary and recent sessions.No findings

    Why it is in this group

    • The name "client_get" says "get": a word for reading.
    Description, as the server wrote it
    Get complete details of a client including financial summary and recent sessions.
  • client_listList clients of an organization with search and pagination.No findings

    Why it is in this group

    • The name "client_list" says "list": a word for reading.
    Description, as the server wrote it
    List clients of an organization with search and pagination. Can filter by provider or outstanding debt.
  • comms_get_campaignGet details of a specific campaign with optional delivery logs per recipient.No findings

    Why it is in this group

    • The name "comms_get_campaign" says "get": a word for reading.
    Description, as the server wrote it
    Get details of a specific campaign with optional delivery logs per recipient.
  • comms_get_preferencesGet the communication preferences for an organization (WhatsApp, email, confirmation, reminder channels and messages).No findings

    Why it is in this group

    • The name "comms_get_preferences" says "get": a word for reading.
    Description, as the server wrote it
    Get the communication preferences for an organization (WhatsApp, email, confirmation, reminder channels and messages).
  • comms_list_audiencesList the saved audiences/segments used for campaign targeting, each with its filter definition and campaign-usage count.No findings

    Why it is in this group

    • The name "comms_list_audiences" says "list": a word for reading.
    Description, as the server wrote it
    List the saved audiences/segments used for campaign targeting, each with its filter definition and campaign-usage count. Set includeCount: true to also resolve how many clients currently match each audience, and includePredefined: true to include built-in predefined segments. Read-only — use before comms_create_campaign to pick a target audience.
  • comms_list_campaignsList communication campaigns (WhatsApp/email) for the organization.No findings

    Why it is in this group

    • The name "comms_list_campaigns" says "list": a word for reading.
    Description, as the server wrote it
    List communication campaigns (WhatsApp/email) for the organization. Filter by status.
  • delivery_confirmations_listList the delivery-confirmation ledger for an organization's sessions.No findings

    Why it is in this group

    • The name "delivery_confirmations_list" says "list": a word for reading.
    Description, as the server wrote it
    List the delivery-confirmation ledger for an organization's sessions. Each row reflects the DeliveryProof overlay: whether the provider confirmed delivery, whether the client confirmed, and whether the system auto-confirmed after the verification window (silence). Filter by state — awaiting_client (provider confirmed, client has not, not yet auto-confirmed), confirmed (client confirmed or auto-confirmed), or provider_pending (proof exists but the provider has not confirmed delivery) — or look one up by sessionId. Privacy: returns confirmation flags/timestamps and a hasEvidence boolean only, never the evidence summary content.
  • disputes_listList disputes for an organization.No findings

    Why it is in this group

    • The name "disputes_list" says "list": a word for reading.
    Description, as the server wrote it
    List disputes for an organization. Filter by status or type. Returns disputes with client and provider info.
  • dunning_get_configGet the current dunning (payment recovery) configuration for an organization.No findings

    Why it is in this group

    • The name "dunning_get_config" says "get": a word for reading.
    Description, as the server wrote it
    Get the current dunning (payment recovery) configuration for an organization. Returns whether dunning is enabled, grace period, step timings, and blocking settings.
  • email_domain_getGet the email sending domain configured for an organization and its verification status (PENDING, VERIFIED, FAILED).No findings

    Why it is in this group

    • The name "email_domain_get" says "get": a word for reading.
    Description, as the server wrote it
    Get the email sending domain configured for an organization and its verification status (PENDING, VERIFIED, FAILED). Returns null if no domain is configured. Use email_domain_register to set one up.
  • finance_agingGet accounts receivable aging report: pending charges grouped by age buckets (0-7, 7-30, 30-90, 90+ days).No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get accounts receivable aging report: pending charges grouped by age buckets (0-7, 7-30, 30-90, 90+ days). Use to answer "who owes money" or "old debts" questions.
  • finance_client_balanceGet the complete financial balance for a client: total sales, charges, payments, pending debt, and credits.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get the complete financial balance for a client: total sales, charges, payments, pending debt, and credits.
  • finance_get_cobroGet details of a specific charge (cobro) including all associated payments.No findings

    Why it is in this group

    • The name "finance_get_cobro" says "get": a word for reading.
    Description, as the server wrote it
    Get details of a specific charge (cobro) including all associated payments.
  • finance_list_cobrosList charges (cobros) for an organization.No findings

    Why it is in this group

    • The name "finance_list_cobros" says "list": a word for reading.
    Description, as the server wrote it
    List charges (cobros) for an organization. Filter by client, status, or date range. Includes summary totals.
  • finance_list_confirmationsList pending charge confirmations and their status.No findings

    Why it is in this group

    • The name "finance_list_confirmations" says "list": a word for reading.
    Description, as the server wrote it
    List pending charge confirmations and their status. Shows cobros in pending_confirmation state that await client verification. Filter by client or confirmation status (pending, confirmed, disputed, auto_confirmed).
  • finance_list_gastosList operational expenses (gastos operacionales) of an organization with their category, plus totals broken down by category type (FIJO/VARIABLE/COSTO_PRODUCTO/PROVISION).No findings

    Why it is in this group

    • The name "finance_list_gastos" says "list": a word for reading.
    Description, as the server wrote it
    List operational expenses (gastos operacionales) of an organization with their category, plus totals broken down by category type (FIJO/VARIABLE/COSTO_PRODUCTO/PROVISION). Filter by date range (dateFrom/dateTo), category id, type(s), or recurring-only. Read-only — complements finance_list_cobros/finance_list_payments (income side) to complete the financial picture.
  • finance_list_invoicesList invoices (facturas) of an organization with total, balance (saldo), status, SII status, linked-sales count and the amount already applied via payment links (with a derived pay…No findings

    Why it is in this group

    • The name "finance_list_invoices" says "list": a word for reading.
    Description, as the server wrote it
    List invoices (facturas) of an organization with total, balance (saldo), status, SII status, linked-sales count and the amount already applied via payment links (with a derived payment status: pendiente/abonada/pagada). Filter by client or status (pendiente/pagada/cancelada). Read-only.
  • finance_list_paymentsList payments received with filters.No findings

    Why it is in this group

    • The name "finance_list_payments" says "list": a word for reading.
    Description, as the server wrote it
    List payments received with filters. Includes summary by payment type.
  • finance_list_ventasList sales (ventas) for an organization.No findings

    Why it is in this group

    • The name "finance_list_ventas" says "list": a word for reading.
    Description, as the server wrote it
    List sales (ventas) for an organization. Filter by client, service, provider, or status.
  • lifecycle_get_stateGet the current lifecycle state of a session, including available transitions, state history, and SC resolution.No findings

    Why it is in this group

    • The name "lifecycle_get_state" says "get": a word for reading.
    Description, as the server wrote it
    Get the current lifecycle state of a session, including available transitions, state history, and SC resolution. Returns current_state, available_transitions, verification_deadline (when state=delivered), timestamps, duration, sc_resolution (the fundamental SC event: resolved, resolved_at, resolved_by, billing_model), and recent transition history with from/to/at/by/method fields. Requires X-Org-Api-Key. Shape per docs/protocol/sc-event-canonical-schema-2026-04-18.md §7.1.
  • lifecycle_historyGet the SCEvent stream for a session — all observed transitions reconstructed from status_history.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get the SCEvent stream for a session — all observed transitions reconstructed from status_history. Returns events[] with discriminated union by event_type (sc.scheduled, sc.confirmed, sc.completed, sc.delivered, sc.verified, sc.cancelled, etc.), plus stream_completeness ("complete" | "partial_pre_trigger") and pagination cursor. Events carry origin="reprojected_from_status_history" and canonical SCEvent shape per docs/protocol/sc-event-canonical-schema-2026-04-18.md §7.2. Filters: event_types (e.g. ["sc.delivered"]), from_sequence (cursor), limit (default 50, max 500). PII note: delivery_proof clinical fields (summary, outcome, next_steps) are returned only for admin-scoped keys. IMPORTANT: backfilled sc_resolved timestamps do NOT emit sc.resolved events in this stream (Forma B, see decisions log 2026-04-18-lifecycle-history-backfill-policy). For current resolution status, use lifecycle_get_state.sc_resolution. Requires X-Org-Api-Key.
  • members_listList members of an organization with their roles and status.No findings

    Why it is in this group

    • The name "members_list" says "list": a word for reading.
    Description, as the server wrote it
    List members of an organization with their roles and status.
  • payroll_get_summaryGet payroll summary for a period: total per provider, total cost, pending approvals.No findings

    Why it is in this group

    • The name "payroll_get_summary" says "get": a word for reading.
    Description, as the server wrote it
    Get payroll summary for a period: total per provider, total cost, pending approvals.
  • payroll_list_recordsList payroll records for an organization.No findings

    Why it is in this group

    • The name "payroll_list_records" says "list": a word for reading.
    Description, as the server wrote it
    List payroll records for an organization. Filter by period, provider, or status.
  • provider_getGet complete details of a provider including services, schedule, and session stats.No findings

    Why it is in this group

    • The name "provider_get" says "get": a word for reading.
    Description, as the server wrote it
    Get complete details of a provider including services, schedule, and session stats.
  • provider_get_statsGet detailed performance metrics for a provider over a date range: sessions, occupancy, no-show rate, revenue.No findings

    Why it is in this group

    • The name "provider_get_stats" says "get": a word for reading.
    Description, as the server wrote it
    Get detailed performance metrics for a provider over a date range: sessions, occupancy, no-show rate, revenue.
  • public_availability_get_slotsQuery available time slots for public booking.No findings

    Why it is in this group

    • The name "public_availability_get_slots" says "get": a word for reading.
    Description, as the server wrote it
    Query available time slots for public booking. Does NOT require an API key. Returns slots grouped by service from the organization's public agenda. Provider details are hidden — the system auto-assigns at booking time. Use after public_service_list to find bookable times.
  • public_booking_getGet details of a public booking using the bookingToken returned by public_booking_create.1 finding

    Why it is in this group

    • The name "public_booking_get" says "get": a word for reading.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...e an API key — the booking token is the credential. Only returns public-safe data."

      What this check looks for
    Description, as the server wrote it
    Get details of a public booking using the bookingToken returned by public_booking_create. Returns status, scheduled time, service, and requester info. Does NOT require an API key — the booking token is the credential. Only returns public-safe data.
  • public_service_listList publicly bookable services for an organization.No findings

    Why it is in this group

    • The name "public_service_list" says "list": a word for reading.
    Description, as the server wrote it
    List publicly bookable services for an organization. Does NOT require an API key. Returns only active, discoverable services with assigned providers. Use this as the first step in the public booking flow to show available services to end users or agents.
  • reminders_get_configGet the full reminder/notification configuration for an organization.No findings

    Why it is in this group

    • The name "reminders_get_config" says "get": a word for reading.
    Description, as the server wrote it
    Get the full reminder/notification configuration for an organization. Returns detailed settings for each reminder type: bookingReminder (post-booking follow-up), sessionReminder24h (24h before), sessionReminder1h (1h before), paymentReminder (payment due), paymentOverdue (overdue payment), notificationFollowup (post-session follow-up), pendingConfirmation (auto-cancel unconfirmed). Each has enabled, timing, and frequency settings. More granular than settings_get reminders chapter.
  • report_no_showsReport no-show statistics for a period.No findings

    Why it is in this group

    • The name "report_no_shows" says "show": a word for reading.
    Description, as the server wrote it
    Report no-show statistics for a period. Group by client, provider, service, or day.
  • resources_listList the bookable resources of an organization (rooms, boxes, chairs, equipment) with their type, capacity, buffer minutes, location and active state.No findings

    Why it is in this group

    • The name "resources_list" says "list": a word for reading.
    Description, as the server wrote it
    List the bookable resources of an organization (rooms, boxes, chairs, equipment) with their type, capacity, buffer minutes, location and active state. Filter by type, active state, or a name/description search. Read-only.
  • service_listList services of an organization.No findings

    Why it is in this group

    • The name "service_list" says "list": a word for reading.
    Description, as the server wrote it
    List services of an organization. Can filter by active status, discoverability, or category.
  • session_note_getRead the clinical note of a session.No findings

    Why it is in this group

    • The name "session_note_get" says "get": a word for reading.
    Description, as the server wrote it
    Read the clinical note of a session. Non-restricted notes return full content. Notes marked dataSensitivity=restricted return metadata only (type, sensitivity, timestamps, which fields are present) with the clinical text withheld — pass includeRestricted: true to retrieve the full content, which logs an audited restricted-access event and increments the access counter. Returns note: null if the session has no note.
  • settings_getGet organization settings.1 finding

    Why it is in this group

    • The name "settings_get" says "get": a word for reading.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...scalar settings (bank accounts, payment credentials, API keys, members): each panel names t..."

      What this check looks for
    Description, as the server wrote it
    Get organization settings. THIS IS THE ENTRY POINT for anything configurable: call it with no filters first to get the full map. Settings are indexed on two axes — `group` (the sections a human sees in the settings screen: profile, availability, client_fields, communication, reminders, automations, finances, delivery, cancellation, tax) and `chapter` (the onboarding-interview sequence: basics, availability, communication, finances, policies, reminders, client_data). Prefer `group`. Or pass `keys` for specific settings (comma-separated, e.g. "policies.noShowMaxStrikes,finances.clientPaymentTiming"). Covers ~88 keys including cancellation-policy tiers, granular reminder timing, dunning sequence, retention, delivery verification and the SII tax profile. The response also carries `meta` (label, type, valid options and dependencies per key) and `panels` — the configuration surfaces that are NOT scalar settings (bank accounts, payment credentials, API keys, members): each panel names the tools that cover it, or states why none does.
  • treatment_plans_getGet the full detail of a single treatment/care plan by id: diagnosis, objectives, notes, status timeline, expiration, the intake session, and all plan items (service, quantity, fre…No findings

    Why it is in this group

    • The name "treatment_plans_get" says "get": a word for reading.
    Description, as the server wrote it
    Get the full detail of a single treatment/care plan by id: diagnosis, objectives, notes, status timeline, expiration, the intake session, and all plan items (service, quantity, frequency, priority, sessions booked/completed). Read-only.
  • treatment_plans_listList treatment/care plans of an organization with client, provider, status, objectives and their items (services with quantity/frequency/priority).No findings

    Why it is in this group

    • The name "treatment_plans_list" says "list": a word for reading.
    Description, as the server wrote it
    List treatment/care plans of an organization with client, provider, status, objectives and their items (services with quantity/frequency/priority). Filter by clientId, status or proveedorId; paginated (page/limit). Read-only — plan creation/editing stays in the UI (requires clinical supervision).

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 4.1.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http coordinalo https://coordinalo.com/api/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__coordinalo__dunning_get_config",
      "mcp__coordinalo__admin_list_providers",
      "mcp__coordinalo__availability_get_slots",
      "mcp__coordinalo__availability_get_provider_schedule",
      "mcp__coordinalo__booking_get",
      "mcp__coordinalo__booking_list",
      "mcp__coordinalo__booking_list_requests",
      "mcp__coordinalo__client_list",
      "mcp__coordinalo__client_get",
      "mcp__coordinalo__service_list",
      "mcp__coordinalo__provider_get",
      "mcp__coordinalo__provider_get_stats",
      "mcp__coordinalo__finance_list_cobros",
      "mcp__coordinalo__finance_get_cobro",
      "mcp__coordinalo__finance_client_balance",
      "mcp__coordinalo__finance_list_payments",
      "mcp__coordinalo__finance_list_ventas",
      "mcp__coordinalo__finance_aging",
      "mcp__coordinalo__finance_list_confirmations",
      "mcp__coordinalo__finance_list_gastos",
      "mcp__coordinalo__finance_list_invoices",
      "mcp__coordinalo__comms_get_preferences",
      "mcp__coordinalo__comms_list_campaigns",
      "mcp__coordinalo__comms_get_campaign",
      "mcp__coordinalo__comms_list_audiences",
      "mcp__coordinalo__report_no_shows",
      "mcp__coordinalo__agendas_list",
      "mcp__coordinalo__agendas_get",
      "mcp__coordinalo__disputes_list",
      "mcp__coordinalo__delivery_confirmations_list",
      "mcp__coordinalo__members_list",
      "mcp__coordinalo__email_domain_get",
      "mcp__coordinalo__cierre_preview_cliente",
      "mcp__coordinalo__cierre_listar_clientes",
      "mcp__coordinalo__cierre_listar_utilidades",
      "mcp__coordinalo__payroll_list_records",
      "mcp__coordinalo__payroll_get_summary",
      "mcp__coordinalo__settings_get",
      "mcp__coordinalo__reminders_get_config",
      "mcp__coordinalo__session_note_get",
      "mcp__coordinalo__resources_list",
      "mcp__coordinalo__treatment_plans_list",
      "mcp__coordinalo__treatment_plans_get",
      "mcp__coordinalo__lifecycle_get_state",
      "mcp__coordinalo__lifecycle_history",
      "mcp__coordinalo__public_service_list",
      "mcp__coordinalo__public_availability_get_slots",
      "mcp__coordinalo__public_booking_get"
    ],
    "ask": [
      "mcp__coordinalo__dunning_configure",
      "mcp__coordinalo__admin_create_service",
      "mcp__coordinalo__admin_set_availability",
      "mcp__coordinalo__admin_toggle_discoverable",
      "mcp__coordinalo__booking_create",
      "mcp__coordinalo__booking_reschedule",
      "mcp__coordinalo__booking_update_status",
      "mcp__coordinalo__booking_create_recurring",
      "mcp__coordinalo__booking_resolve_request",
      "mcp__coordinalo__client_create",
      "mcp__coordinalo__client_update",
      "mcp__coordinalo__service_create",
      "mcp__coordinalo__service_update",
      "mcp__coordinalo__service_assign_provider",
      "mcp__coordinalo__provider_create",
      "mcp__coordinalo__provider_update",
      "mcp__coordinalo__finance_register_payment",
      "mcp__coordinalo__finance_create_venta",
      "mcp__coordinalo__finance_create_cobro",
      "mcp__coordinalo__finance_send_confirmations",
      "mcp__coordinalo__comms_update_preferences",
      "mcp__coordinalo__comms_send_message",
      "mcp__coordinalo__comms_render_message",
      "mcp__coordinalo__comms_create_campaign",
      "mcp__coordinalo__comms_send_campaign",
      "mcp__coordinalo__org_summary",
      "mcp__coordinalo__report_occupancy",
      "mcp__coordinalo__report_revenue",
      "mcp__coordinalo__report_sc_summary",
      "mcp__coordinalo__report_deuda_real",
      "mcp__coordinalo__report_dashboard",
      "mcp__coordinalo__report_evidence_gates",
      "mcp__coordinalo__agendas_create",
      "mcp__coordinalo__agendas_update",
      "mcp__coordinalo__members_invite",
      "mcp__coordinalo__org_update",
      "mcp__coordinalo__email_domain_register",
      "mcp__coordinalo__email_domain_verify",
      "mcp__coordinalo__cierre_crear_cliente",
      "mcp__coordinalo__cierre_evaluar_org",
      "mcp__coordinalo__cierre_cerrar_org",
      "mcp__coordinalo__cierre_distribuir_utilidades",
      "mcp__coordinalo__settings_update",
      "mcp__coordinalo__reminders_update_config",
      "mcp__coordinalo__portal_session_confirm",
      "mcp__coordinalo__portal_propose_reschedule",
      "mcp__coordinalo__portal_report_session",
      "mcp__coordinalo__portal_confirm_delivery",
      "mcp__coordinalo__session_note_upsert",
      "mcp__coordinalo__lifecycle_transition",
      "mcp__coordinalo__scheduling_confirm",
      "mcp__coordinalo__scheduling_book",
      "mcp__coordinalo__scheduling_reschedule",
      "mcp__coordinalo__public_booking_create",
      "mcp__coordinalo__public_booking_confirm",
      "mcp__coordinalo__public_booking_reschedule"
    ],
    "deny": [
      "mcp__coordinalo__booking_cancel",
      "mcp__coordinalo__agendas_delete",
      "mcp__coordinalo__email_domain_delete",
      "mcp__coordinalo__cierre_eliminar_cliente",
      "mcp__coordinalo__portal_session_cancel",
      "mcp__coordinalo__portal_cancel_reschedule_request",
      "mcp__coordinalo__scheduling_cancel",
      "mcp__coordinalo__public_booking_cancel"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as coordinalo. Review it before you use it.