Skip to content

SAGOT

by sagots.com · remote · no sign-in to list tools · v0.2.0 · published by com.sagots

AI voice agents that place and answer phone calls, with transcripts and outcomes.

Deletes · 17Final · 4Changes · 74
CompareRegistry entry

136 tools: 17 can delete or cancel things, 4 do something that can't be undone, 74 change things and 41 only read.

Scanned Oct 21, 2026

7 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http sagot https://sagots.com/mcp

Findings

Matches of fixed checks, with the text they matched.

7 info
Show 1 more finding
  • Infolines_delete

    The description mentions "credentials".

    Matched text

    description: "...lio line SAGOT first deletes the trunk, credentials and origination URL it created in your..."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

136 tools

Deletes or cancels 17Claude Code: deny
  • account_deleteSigned-in session only: delete your own SAGOT account after confirming your password.No findings

    Why it is in this group

    • The name "account_delete" says "delete": a word for removing or ending something.
    Description, as the server wrote it
    Signed-in session only: delete your own SAGOT account after confirming your password. Refused while you own a workspace (transfer ownership or delete it first) or hold a SAGOT staff role. Removes you from every workspace, revokes your sessions and API keys and anonymises your account; your email can register again.
  • artifacts_deleteSAGOT artifacts.delete.No findings

    Why it is in this group

    • The name "artifacts_delete" says "delete": a word for removing or ending something.
    Description, as the server wrote it
    SAGOT artifacts.delete. Uses the same authorization and validation as website, API and CLI.
  • assistants_clients_revokeSigned-in session only: revoke an OAuth client ID you created; assistants using it can no longer sign in or refresh tokens.No findings

    Why it is in this group

    • The name "assistants_clients_revoke" says "revoke": a word for removing or ending something.
    Description, as the server wrote it
    Signed-in session only: revoke an OAuth client ID you created; assistants using it can no longer sign in or refresh tokens.
  • assistants_revokeSigned-in session only: disconnect an AI assistant.No findings

    Why it is in this group

    • The name "assistants_revoke" says "revoke": a word for removing or ending something.
    Description, as the server wrote it
    Signed-in session only: disconnect an AI assistant. Its access and refresh tokens stop working immediately; it must ask again to reconnect.
  • calls_cancelCancel a queued or active call.No findings

    Why it is in this group

    • The name "calls_cancel" says "call": a word for a change.
    • The description's first verb is "cancel": a word for removing or ending something.
    Description, as the server wrote it
    Cancel a queued or active call. On a finished call with a scheduled automatic retry, cancels that retry instead.
  • campaigns_cancelSAGOT campaigns.cancel.No findings

    Why it is in this group

    • The name "campaigns_cancel" says "cancel": a word for removing or ending something.
    Description, as the server wrote it
    SAGOT campaigns.cancel. Uses the same authorization and validation as website, API and CLI.
  • contacts_eraseAdmins: permanently erase one person's personal data from this workspace — by contact id or by phone number (destination), including inbound callers who are not contacts.No findings

    Why it is in this group

    • The name "contacts_erase" says "erase": a word for removing or ending something.
    • The description says "permanently erase".
    Description, as the server wrote it
    Admins: permanently erase one person's personal data from this workspace — by contact id or by phone number (destination), including inbound callers who are not contacts. Removes the contact, its activity history, and every call's recording, transcript, outcome, number and linked action/handoff content. Calls keep only time, status, duration and cost. Refused while a call with them is active or one of their actions is unresolved. With doNotCall (always, if they had opted out) a one-way fingerprint of the number keeps them from being called or answered again. Use for data-subject erasure requests; download the audit first if you need to answer an access request.
  • credentials_revokeSAGOT credentials.revoke.1 finding

    Why it is in this group

    • The name "credentials_revoke" says "revoke": a word for removing or ending something.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "SAGOT credentials.revoke. Uses the same authorization and..."

      What this check looks for
    Description, as the server wrote it
    SAGOT credentials.revoke. Uses the same authorization and validation as website, API and CLI.
  • invitations_revokePlatform operators only: revoke an unused invitation.No findings

    Why it is in this group

    • The name "invitations_revoke" says "revoke": a word for removing or ending something.
    Description, as the server wrote it
    Platform operators only: revoke an unused invitation. Existing accounts are unaffected.
  • lines_deleteRemove a phone line.1 finding

    Why it is in this group

    • The name "lines_delete" says "delete": a word for removing or ending something.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...lio line SAGOT first deletes the trunk, credentials and origination URL it created in your..."

      What this check looks for
    Description, as the server wrote it
    Remove a phone line. Refused while it has active calls. For a Twilio line SAGOT first deletes the trunk, credentials and origination URL it created in your account and detaches your numbers (the numbers stay yours). Finished calls keep their history; scheduled retries on it are skipped. Another line becomes the default if needed.
  • members_removeAdmins remove a member; any member may remove themselves to leave.No findings

    Why it is in this group

    • The name "members_remove" says "remove": a word for removing or ending something.
    Description, as the server wrote it
    Admins remove a member; any member may remove themselves to leave. The owner cannot be removed. Their sessions and API keys stop working in this workspace immediately.
  • members_revokeAdmins: revoke a pending member invitation by id so its link stops working.No findings

    Why it is in this group

    • The name "members_revoke" says "revoke": a word for removing or ending something.
    Description, as the server wrote it
    Admins: revoke a pending member invitation by id so its link stops working.
  • platform_blocklist_removePlatform staff only (account session).No findings

    Why it is in this group

    • The name "platform_blocklist_remove" says "remove": a word for removing or ending something.
    Description, as the server wrote it
    Platform staff only (account session). Requires manage. Remove a number from the platform do-not-call list.
  • platform_staff_revokePlatform staff only (account session).No findings

    Why it is in this group

    • The name "platform_staff_revoke" says "revoke": a word for removing or ending something.
    Description, as the server wrote it
    Platform staff only (account session). Requires the staff scope. Remove an account's platform role. Admins cannot revoke owners or admins; the last owner and bootstrap owners cannot be removed.
  • support_revokeWorkspace admins: end active SAGOT support access immediately.No findings

    Why it is in this group

    • The name "support_revoke" says "revoke": a word for removing or ending something.
    Description, as the server wrote it
    Workspace admins: end active SAGOT support access immediately.
  • waitlist_deletePlatform operators only: permanently remove an applicant's waitlist information.No findings

    Why it is in this group

    • The name "waitlist_delete" says "delete": a word for removing or ending something.
    • The description says "permanently remove".
    Description, as the server wrote it
    Platform operators only: permanently remove an applicant's waitlist information. Does not delete their account or invitations.
  • workspaces_deleteOwner only, signed-in session: permanently delete this workspace and everything in it — agents, contacts, calls, recordings, transcripts, lines, API keys and members' access.No findings

    Why it is in this group

    • The name "workspaces_delete" says "delete": a word for removing or ending something.
    • The description says "permanently delete".
    Description, as the server wrote it
    Owner only, signed-in session: permanently delete this workspace and everything in it — agents, contacts, calls, recordings, transcripts, lines, API keys and members' access. confirmName must equal the workspace name. Refused while calls are active or a Twilio line exists (delete it first so SAGOT removes what it created in your Twilio account). Cannot be undone; backups expire within about 31 days.
Can't be undone 4Claude Code: ask
  • agents_publishPublish a validated draft for new calls.No findings

    Why it is in this group

    • The name "agents_publish" says "publish": a word for a change that another call does not undo.
    Description, as the server wrote it
    Publish a validated draft for new calls. Active calls keep their original snapshot.
  • members_inviteAdmins: invite an email to this workspace with a role, optionally limited to agentIds (viewer/editor/operator only).No findings

    Why it is in this group

    • The name "members_invite" says "invite": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Admins: invite an email to this workspace with a role, optionally limited to agentIds (viewer/editor/operator only). SAGOT emails the invitation when email is configured; the one-time link path (/join#member=…) is also returned once as a fallback. The invitee signs in or creates an account with that email. Only the owner can invite admins. Re-inviting an email replaces its earlier pending invitation.
  • members_transferOwner only, signed-in session: make another member the owner.No findings

    Why it is in this group

    • The name "members_transfer" says "transfer": a word for a change that another call does not undo.
    Description, as the server wrote it
    Owner only, signed-in session: make another member the owner. You become an admin; any agent limit on them is removed. The new owner is emailed.
  • platform_subprocessors_notifyPlatform staff only (account session).No findings

    Why it is in this group

    • The name "platform_subprocessors_notify" says "notify": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Platform staff only (account session). Requires manage. Email every workspace owner (one email per person) that SAGOT will add or replace a sub-processor on effectiveOn — at least 30 days ahead, as the Data Processing Addendum promises — with how to object. Describe what changes, its purpose and location in change. Audited.
Changes things 74Claude Code: ask
  • account_acceptTermsSigned-in session only: accept the current Terms of Service, Data Processing Addendum and Privacy Notice (version from account.me termsVersion).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Signed-in session only: accept the current Terms of Service, Data Processing Addendum and Privacy Notice (version from account.me termsVersion). Records the version and time on your account.
  • account_loginSAGOT account.login.No findings

    Why it is in this group

    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    Description, as the server wrote it
    SAGOT account.login. Uses the same authorization and validation as website, API and CLI.
  • account_logoutSAGOT account.logout.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    SAGOT account.logout. Uses the same authorization and validation as website, API and CLI.
  • account_meSAGOT account.me.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    SAGOT account.me. Uses the same authorization and validation as website, API and CLI.
  • account_mfaDisableSigned-in session only: turn two-step sign-in off with your password and a current code or recovery code.No findings

    Why it is in this group

    • The name "account_mfaDisable" says "disable": a word for a change.
    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    Description, as the server wrote it
    Signed-in session only: turn two-step sign-in off with your password and a current code or recovery code. SAGOT staff cannot use the platform console without it.
  • account_mfaEnableSigned-in session only: confirm a 6-digit code from the authenticator app to turn two-step sign-in on.No findings

    Why it is in this group

    • The name "account_mfaEnable" says "enable": a word for a change.
    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    Description, as the server wrote it
    Signed-in session only: confirm a 6-digit code from the authenticator app to turn two-step sign-in on. Returns 10 one-time recovery codes once; store them safely. Sign-in then needs a code (account.login code).
  • account_mfaRecoveryCodesSigned-in session only: replace all recovery codes after confirming a current code.No findings

    Why it is in this group

    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    Description, as the server wrote it
    Signed-in session only: replace all recovery codes after confirming a current code. Returns the 10 new codes once.
  • account_mfaSetupSigned-in session only: start turning on two-step sign-in.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Signed-in session only: start turning on two-step sign-in. Confirms your password and returns a new authenticator secret and otpauth:// URI (scan as a QR code). Nothing changes until account.mfaEnable confirms a code.
  • account_registerSAGOT account.register.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    SAGOT account.register. Uses the same authorization and validation as website, API and CLI.
  • agents_createSAGOT agents.create.No findings

    Why it is in this group

    • The name "agents_create" says "create": a word for a change.
    Description, as the server wrote it
    SAGOT agents.create. Uses the same authorization and validation as website, API and CLI.
  • agents_pauseSAGOT agents.pause.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    SAGOT agents.pause. Uses the same authorization and validation as website, API and CLI.
  • agents_retireSAGOT agents.retire.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    SAGOT agents.retire. Uses the same authorization and validation as website, API and CLI.
  • agents_rollbackPoint new calls to a previous published version.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Point new calls to a previous published version.
  • agents_saveSAGOT agents.save.No findings

    Why it is in this group

    • The name "agents_save" says "save": a word for a change.
    Description, as the server wrote it
    SAGOT agents.save. Uses the same authorization and validation as website, API and CLI.
  • artifacts_exportSAGOT artifacts.export.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    SAGOT artifacts.export. Uses the same authorization and validation as website, API and CLI.
  • assistants_authorizeSigned-in session only: allow (with a workspaceId) or deny an AI assistant's request to use SAGOT.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Signed-in session only: allow (with a workspaceId) or deny an AI assistant's request to use SAGOT. Allowing gives that assistant the listed scopes in one workspace — never admin, never more than your role — and returns redirectTo, the address to send the browser back to.
  • assistants_clients_createSigned-in session only: create an OAuth client ID and secret for an assistant that asks for them, such as Gemini Enterprise (redirect https://vertexaisearch.cloud.google.com/oauth-…No findings

    Why it is in this group

    • The name "assistants_clients_create" says "create": a word for a change.
    Description, as the server wrote it
    Signed-in session only: create an OAuth client ID and secret for an assistant that asks for them, such as Gemini Enterprise (redirect https://vertexaisearch.cloud.google.com/oauth-redirect). The secret is returned once. People who sign in through it still choose their own workspace.
  • billing_topUpAdmin only, never an assistant: start a card payment (Stripe Checkout) that adds amountCentavos (₱500–₱50,000) to the prepaid balance.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Admin only, never an assistant: start a card payment (Stripe Checkout) that adds amountCentavos (₱500–₱50,000) to the prepaid balance. Returns `checkoutUrl`; give it to the person to pay. The balance rises when Stripe confirms the payment. Fails PAYMENTS_UNAVAILABLE when this deployment takes no payments.
  • calls_approveSigned-in session only (a person, not an API key or assistant): approve a call an AI assistant asked for (status awaiting_approval).No findings

    Why it is in this group

    • The name "calls_approve" says "call": a word for a change.
    Description, as the server wrote it
    Signed-in session only (a person, not an API key or assistant): approve a call an AI assistant asked for (status awaiting_approval). Eligibility is checked again and the call is queued.
  • calls_createQueue one call with an agent to a contact.No findings

    Why it is in this group

    • The name "calls_create" says "call": a word for a change.
    Description, as the server wrote it
    Queue one call with an agent to a contact. Give `task` for what this one call must achieve (the personal starter agent follows it). During the alpha a line only calls its test numbers, unless it is a SAGOT number line in live mode. Calls on SAGOT numbers reserve their maximum cost from the prepaid balance (BALANCE_TOO_LOW, SPEND_LIMIT_REACHED, COUNTRY_NOT_SUPPORTED). When an AI assistant connected by OAuth asks for a call and the policy's assistantCallApproval is on (default), the call is created with status awaiting_approval and nothing dials until a person approves it on the website: tell them, and give them the returned approvalUrl. It is canceled if not approved within 24 hours. Then read the result with calls.get.
  • calls_declineSigned-in session only: decline a call an AI assistant asked for.No findings

    Why it is in this group

    • The name "calls_decline" says "call": a word for a change.
    Description, as the server wrote it
    Signed-in session only: decline a call an AI assistant asked for. It is canceled and its reserved budget released.
  • calls_getSAGOT calls.get.No findings

    Why it is in this group

    • The name "calls_get" says "call": a word for a change.
    Description, as the server wrote it
    SAGOT calls.get. Uses the same authorization and validation as website, API and CLI.
  • calls_listSAGOT calls.list.No findings

    Why it is in this group

    • The name "calls_list" says "call": a word for a change.
    Description, as the server wrote it
    SAGOT calls.list. Uses the same authorization and validation as website, API and CLI.
  • calls_recordingGet recording availability and authenticated audio URL.1 finding

    Why it is in this group

    • The name "calls_recording" says "call": a word for a change.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...RL. Fetch that URL with the same bearer credential to play/download Ogg audio; CLI support..."

      What this check looks for
    Description, as the server wrote it
    Get recording availability and authenticated audio URL. Fetch that URL with the same bearer credential to play/download Ogg audio; CLI supports --output file. Older unrecorded calls have no audio.
  • campaigns_pauseSAGOT campaigns.pause.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    SAGOT campaigns.pause. Uses the same authorization and validation as website, API and CLI.
  • campaigns_resumeSAGOT campaigns.resume.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    SAGOT campaigns.resume. Uses the same authorization and validation as website, API and CLI.
  • campaigns_saveSAGOT campaigns.save.No findings

    Why it is in this group

    • The name "campaigns_save" says "save": a word for a change.
    Description, as the server wrote it
    SAGOT campaigns.save. Uses the same authorization and validation as website, API and CLI.
  • campaigns_startSAGOT campaigns.start.No findings

    Why it is in this group

    • The name "campaigns_start" says "start": a word for a change.
    Description, as the server wrote it
    SAGOT campaigns.start. Uses the same authorization and validation as website, API and CLI.
  • contacts_exportExport the contact's retained evidence as a readable Markdown or structured JSON audit snapshot.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Export the contact's retained evidence as a readable Markdown or structured JSON audit snapshot. Export is logged; it does not create recordings or recover deleted content.
  • contacts_historyReview all retained calls, conversations, outcomes, actions, follow-ups and activity for one contact across agents in this workspace.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Review all retained calls, conversations, outcomes, actions, follow-ups and activity for one contact across agents in this workspace. Missing or deleted evidence is labeled.
  • contacts_importSAGOT contacts.import.No findings

    Why it is in this group

    • The name "contacts_import" says "import": a word for a change.
    Description, as the server wrote it
    SAGOT contacts.import. Uses the same authorization and validation as website, API and CLI.
  • contacts_suppressPermanently suppress this contact from new calls in this workspace.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Permanently suppress this contact from new calls in this workspace.
  • contacts_updateSAGOT contacts.update.No findings

    Why it is in this group

    • The name "contacts_update" says "update": a word for a change.
    Description, as the server wrote it
    SAGOT contacts.update. Uses the same authorization and validation as website, API and CLI.
  • credentials_createSAGOT credentials.create.1 finding

    Why it is in this group

    • The name "credentials_create" says "create": a word for a change.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "SAGOT credentials.create. Uses the same authorization and..."

      What this check looks for
    Description, as the server wrote it
    SAGOT credentials.create. Uses the same authorization and validation as website, API and CLI.
  • events_replayRetry delivery of this event with its original event ID.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Retry delivery of this event with its original event ID.
  • handoffs_updateSAGOT handoffs.update.No findings

    Why it is in this group

    • The name "handoffs_update" says "update": a word for a change.
    Description, as the server wrote it
    SAGOT handoffs.update. Uses the same authorization and validation as website, API and CLI.
  • integrations_disconnectSAGOT integrations.disconnect.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    SAGOT integrations.disconnect. Uses the same authorization and validation as website, API and CLI.
  • integrations_saveSAGOT integrations.save.No findings

    Why it is in this group

    • The name "integrations_save" says "save": a word for a change.
    Description, as the server wrote it
    SAGOT integrations.save. Uses the same authorization and validation as website, API and CLI.
  • integrations_testExercise the connector with a test payload.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Exercise the connector with a test payload. Sandbox never writes to an external product.
  • invitations_createPlatform operators only: issue an email-bound, single-use private invitation.No findings

    Why it is in this group

    • The name "invitations_create" says "create": a word for a change.
    Description, as the server wrote it
    Platform operators only: issue an email-bound, single-use private invitation. Returns the token once; share privately. Does not send email. Replaces prior unused invitations for that email.
  • lines_clearAlertClear this line's telco warning after fixing the cause (for example topping up the gateway SIM).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Clear this line's telco warning after fixing the cause (for example topping up the gateway SIM). Held automatic retries and campaigns on this line resume. An answered call also clears it.
  • lines_confirmNumberSAGOT number lines, admin only: check the code sent by lines.verifyNumber and add the number to the line's test numbers.No findings

    Why it is in this group

    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    Description, as the server wrote it
    SAGOT number lines, admin only: check the code sent by lines.verifyNumber and add the number to the line's test numbers. A wrong or expired code fails VERIFICATION_FAILED; send a new one.
  • lines_createAdd a phone line from an offered provider.1 finding

    Why it is in this group

    • The name "lines_create" says "create": a word for a change.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...SAGOT gateway app exchanges for its own credential; the code is shown only once. A `twilio..."

      What this check looks for
    Description, as the server wrote it
    Add a phone line from an offered provider. Adding never dials. The first line becomes the default for new calls and campaigns. Lines start in test mode: only the line's test numbers can be called. A `gateway` line (your own computer + phone) returns a one-time `pairing.code` (30 minutes) that the SAGOT gateway app exchanges for its own credential; the code is shown only once. A `twilio` line connects your own Twilio account: pass accountSid, apiKeySid, apiKeySecret (a Standard API key; write-only) and the numbers to attach (lines.twilioNumbers lists them). SAGOT creates an Elastic SIP Trunk, a credential list, an origination URL and attaches the numbers in your account, records every object it created and removes exactly those when the line is deleted. Twilio bills the calls to your account. A `sagot` line (SAGOT number, one per workspace) calls from SAGOT's shared numbers and is paid from the workspace's prepaid balance (billing.get shows rates); it can't receive calls. Add its test numbers with lines.verifyNumber and lines.confirmNumber.
  • lines_testCheck a line's readiness without dialing: provider offered, health, test numbers.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Check a line's readiness without dialing: provider offered, health, test numbers. Use calls.create with lineId for a real test call.
  • lines_twilioNumbersCheck a Twilio Standard API key (accountSid, apiKeySid, apiKeySecret) and list the account's voice-capable numbers and whether Twilio is reachable.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Check a Twilio Standard API key (accountSid, apiKeySid, apiKeySecret) and list the account's voice-capable numbers and whether Twilio is reachable. Changes nothing and stores nothing. Use it before lines.create with provider twilio.
  • lines_updateRename a line, make it the default, choose the published inboundAgentId that answers its callers (gateway lines; null stops answering), set testNumbers (customer gateway and Twilio…No findings

    Why it is in this group

    • The name "lines_update" says "update": a word for a change.
    Description, as the server wrote it
    Rename a line, make it the default, choose the published inboundAgentId that answers its callers (gateway lines; null stops answering), set testNumbers (customer gateway and Twilio lines), rotatePairing to issue a new pairing code and sign the paired device out, or capacity (Twilio lines: concurrent calls 1–10; phone gateways, SAGOT numbers and shared routes carry one call). The deployment also caps concurrent calls overall. On a SAGOT number line testNumbers can only remove numbers (add them with lines.verifyNumber). `carrierRate` {amountPerMinute, currency, increment minute|second} (null clears) records what your carrier charges on lines whose provider doesn't report prices (phone gateway SIM): calls then show an estimated carrier cost. Twilio lines report Twilio's actual price instead; SAGOT number lines include telecom in SAGOT's charge. `mode: "live"` (admin, not an assistant) lets a SAGOT number line call any number in a supported country once SAGOT has turned live calling on; otherwise it fails LIVE_MODE_UNAVAILABLE.
  • lines_verifyNumberSAGOT number lines, admin only (never an assistant): send a verification code to a phone number the person owns, by SMS (default) or a voice call (`channel: "call"`).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    SAGOT number lines, admin only (never an assistant): send a verification code to a phone number the person owns, by SMS (default) or a voice call (`channel: "call"`). Then call lines.confirmNumber with the code. Verified numbers can be called in test mode.
  • members_acceptSigned-in account session only: accept a member invitation issued to this account's email and join the workspace with its role.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Signed-in account session only: accept a member invitation issued to this account's email and join the workspace with its role.
  • members_updateAdmins: change a member's role and, with agentIds, limit a viewer/editor/operator to selected agents (null = all agents).No findings

    Why it is in this group

    • The name "members_update" says "update": a word for a change.
    Description, as the server wrote it
    Admins: change a member's role and, with agentIds, limit a viewer/editor/operator to selected agents (null = all agents). Takes effect on their next request, including their API keys. The owner's role cannot change; only the owner grants or removes admin.
  • platform_access_endPlatform staff only (account session).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Platform staff only (account session). End your own pending request or active support access early.
  • platform_access_requestPlatform staff only (account session).No findings

    Why it is in this group

    • The name "platform_access_request" says "request": a word for a change.
    Description, as the server wrote it
    Platform staff only (account session). Requires support. Ask a workspace's owner and admins for read-only support access for 1–72 hours, with a reason they see. Nothing is accessible until they approve.
  • platform_accounts_reactivatePlatform staff only (account session).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Platform staff only (account session). Requires manage. Allow the account to sign in again. Revoked sessions and API keys stay revoked; the person signs in again and creates new keys.
  • platform_accounts_suspendPlatform staff only (account session).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Platform staff only (account session). Requires manage. Suspend an account: its sessions and API keys stop working and sign-in is refused until reactivated. You cannot suspend yourself or a platform owner.
  • platform_blocklist_addPlatform staff only (account session).No findings

    Why it is in this group

    • The name "platform_blocklist_add" says "add": a word for a change.
    Description, as the server wrote it
    Platform staff only (account session). Requires manage. Add a number to the platform do-not-call list: no workspace can call it; queued calls to it are canceled. Customers see only that the number is on SAGOT's do-not-call list.
  • platform_calls_listPlatform staff only (account session).No findings

    Why it is in this group

    • The name "platform_calls_list" says "call": a word for a change.
    Description, as the server wrote it
    Platform staff only (account session). Call metadata across workspaces, newest first: workspace, direction, line, status, outcome, duration, charge. Numbers are masked; no transcripts or recordings.
  • platform_credits_grantPlatform staff only (account session).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Platform staff only (account session). Requires billing. Credit a workspace (centavos, PHP) with a reason the customer sees. Credits are append-only; correct one with a negative amount.
  • platform_healthPlatform staff only (account session).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Platform staff only (account session). Health of the database, worker, media (LiveKit), email outbox and paired gateway devices, with the deployment's concurrent-call ceiling and current active calls. Read-only.
  • platform_overviewPlatform staff only (account session).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Platform staff only (account session). Platform totals: accounts, workspaces (active/suspended), calls today and in 30 days, connected minutes, active calls, charges, lines with problems, pending support requests and waitlist.
  • platform_settings_updatePlatform staff only (account session).No findings

    Why it is in this group

    • The name "platform_settings_update" says "update": a word for a change.
    Description, as the server wrote it
    Platform staff only (account session). Requires manage. Turn live calling from SAGOT numbers on or off for every workspace. Off: live-mode SAGOT lines call only their verified numbers again, effective before the next dial. Audited.
  • platform_staff_grantPlatform staff only (account session).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Platform staff only (account session). Requires the staff scope. Give an existing account (by email) a platform role. Owners grant any role; admins grant support or finance. Replaces the account's earlier platform role. Takes effect on the next request.
  • platform_usagePlatform staff only (account session).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Platform staff only (account session). Usage for a month (YYYY-MM, default this month) per workspace: calls, connected minutes, charges, credits and net, with platform totals. Rates are proposed (docs/11); no payment is collected.
  • platform_workspaces_limitsPlatform staff only (account session).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Platform staff only (account session). Requires manage. Cap how many calls the workspace carries at once across all its lines (1–50, null = no workspace cap). Line capacity and the deployment ceiling still apply.
  • platform_workspaces_reactivatePlatform staff only (account session).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Platform staff only (account session). Requires manage. Lift a workspace suspension. Calls canceled during the suspension stay canceled.
  • platform_workspaces_suspendPlatform staff only (account session).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Platform staff only (account session). Requires manage. Suspend a workspace with a reason shown to its members: they can still read and export, every other action fails WORKSPACE_SUSPENDED, queued outbound calls are canceled and inbound calls are not answered.
  • policies_updateSAGOT policies.update.No findings

    Why it is in this group

    • The name "policies_update" says "update": a word for a change.
    Description, as the server wrote it
    SAGOT policies.update. Uses the same authorization and validation as website, API and CLI.
  • routes_bindDeprecated alias: add (if needed) and make default the line for this route; inboundAgentId as in lines.update.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Deprecated alias: add (if needed) and make default the line for this route; inboundAgentId as in lines.update.
  • routes_clearAlertDeprecated alias of lines.clearAlert for the workspace's default line.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Deprecated alias of lines.clearAlert for the workspace's default line.
  • support_approveWorkspace admins: approve a pending SAGOT support access request.No findings

    Why it is in this group

    • The name "support_approve" says "approve": a word for a change.
    Description, as the server wrote it
    Workspace admins: approve a pending SAGOT support access request. The staff member gets read-only access for the requested hours, starting now. Nothing can be changed by staff.
  • support_denyWorkspace admins: deny a pending SAGOT support access request.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Workspace admins: deny a pending SAGOT support access request.
  • waitlist_joinRequest alpha participation with contact consent.No findings

    Why it is in this group

    • The description's first verb is "request": a word for a change.
    Description, as the server wrote it
    Request alpha participation with contact consent. Does not create an account or send email.
  • waitlist_updatePlatform operators only: mark an applicant waiting, contacted or closed.No findings

    Why it is in this group

    • The name "waitlist_update" says "update": a word for a change.
    Description, as the server wrote it
    Platform operators only: mark an applicant waiting, contacted or closed.
  • workspaces_createSAGOT workspaces.create.No findings

    Why it is in this group

    • The name "workspaces_create" says "create": a word for a change.
    Description, as the server wrote it
    SAGOT workspaces.create. Uses the same authorization and validation as website, API and CLI.
  • workspaces_regionOwner only, signed-in session: choose where AI providers process this workspace's call audio and text — "eu" (European Union) or "us" (United States).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Owner only, signed-in session: choose where AI providers process this workspace's call audio and text — "eu" (European Union) or "us" (United States). No call starts until a region is chosen. Choosing it means accepting this statement: "I am the owner of this workspace. I have chosen this processing region myself and confirm it meets the data protection laws, contracts and customer commitments that apply to this workspace and the people it calls. SAGOT processes call audio and text in the region I choose and is not responsible for the consequences of choosing a region that does not meet those obligations." Applies to calls queued after the change.
  • workspaces_updateSAGOT workspaces.update.No findings

    Why it is in this group

    • The name "workspaces_update" says "update": a word for a change.
    Description, as the server wrote it
    SAGOT workspaces.update. Uses the same authorization and validation as website, API and CLI.
Only reads 41Claude Code: allow
  • access_infoRead public registration availability (closed alpha is the default) and whether the caller's session or credential is valid (signedIn).1 finding

    Why it is in this group

    • The description's first verb is "read": a word for reading.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...lt) and whether the caller's session or credential is valid (signedIn)."

      What this check looks for
    Description, as the server wrote it
    Read public registration availability (closed alpha is the default) and whether the caller's session or credential is valid (signedIn).
  • actions_listSAGOT actions.list.No findings

    Why it is in this group

    • The name "actions_list" says "list": a word for reading.
    Description, as the server wrote it
    SAGOT actions.list. Uses the same authorization and validation as website, API and CLI.
  • actions_reconcileQuery the owning system about an uncertain action.No findings

    Why it is in this group

    • The description's first verb is "query": a word for reading.
    Description, as the server wrote it
    Query the owning system about an uncertain action. Does not repeat the business write.
  • agents_getSAGOT agents.get.No findings

    Why it is in this group

    • The name "agents_get" says "get": a word for reading.
    Description, as the server wrote it
    SAGOT agents.get. Uses the same authorization and validation as website, API and CLI.
  • agents_listSAGOT agents.list.No findings

    Why it is in this group

    • The name "agents_list" says "list": a word for reading.
    Description, as the server wrote it
    SAGOT agents.list. Uses the same authorization and validation as website, API and CLI.
  • agents_testValidate the current draft and its integration.No findings

    Why it is in this group

    • The description's first verb is "validate": a word for reading.
    Description, as the server wrote it
    Validate the current draft and its integration. This is configuration validation, not a voice-quality score. Use a draft SIP call to hear the result.
  • assistants_clients_listSigned-in session only: OAuth client IDs you created for assistants, with their redirect addresses.No findings

    Why it is in this group

    • The name "assistants_clients_list" says "list": a word for reading.
    Description, as the server wrote it
    Signed-in session only: OAuth client IDs you created for assistants, with their redirect addresses.
  • assistants_listSigned-in session only: AI assistants connected to your account through OAuth, with workspace, scopes, when connected and last used.No findings

    Why it is in this group

    • The name "assistants_list" says "list": a word for reading.
    Description, as the server wrote it
    Signed-in session only: AI assistants connected to your account through OAuth, with workspace, scopes, when connected and last used.
  • assistants_previewCheck an OAuth authorization request from an AI assistant (Claude, ChatGPT, Gemini or any MCP client) before consent: returns the assistant's name, the address it returns to, the s…No findings

    Why it is in this group

    • The name "assistants_preview" says "preview": a word for reading.
    Description, as the server wrote it
    Check an OAuth authorization request from an AI assistant (Claude, ChatGPT, Gemini or any MCP client) before consent: returns the assistant's name, the address it returns to, the scopes requested in plain words, or the problem with the request.
  • billing_getThe workspace's prepaid balance for calls on SAGOT numbers (PHP centavos): balance (paid top-ups + SAGOT credits − charges), reserved for calls in progress, available, this month's…No findings

    Why it is in this group

    • The name "billing_get" says "get": a word for reading.
    Description, as the server wrote it
    The workspace's prepaid balance for calls on SAGOT numbers (PHP centavos): balance (paid top-ups + SAGOT credits − charges), reserved for calls in progress, available, this month's spend and the optional monthly cap (policy monthlySpendLimitCentavos, null = none), recent top-ups, the proposed rate per country and whether card top-ups are offered. Other line types are not paid from the balance.
  • campaigns_getSAGOT campaigns.get.No findings

    Why it is in this group

    • The name "campaigns_get" says "get": a word for reading.
    Description, as the server wrote it
    SAGOT campaigns.get. Uses the same authorization and validation as website, API and CLI.
  • campaigns_listSAGOT campaigns.list.No findings

    Why it is in this group

    • The name "campaigns_list" says "list": a word for reading.
    Description, as the server wrote it
    SAGOT campaigns.list. Uses the same authorization and validation as website, API and CLI.
  • campaigns_previewInspect eligible contacts, exclusion reasons and the maximum reserved cost without dialing.No findings

    Why it is in this group

    • The name "campaigns_preview" says "preview": a word for reading.
    Description, as the server wrote it
    Inspect eligible contacts, exclusion reasons and the maximum reserved cost without dialing.
  • contacts_listSAGOT contacts.list.No findings

    Why it is in this group

    • The name "contacts_list" says "list": a word for reading.
    Description, as the server wrote it
    SAGOT contacts.list. Uses the same authorization and validation as website, API and CLI.
  • credentials_listSAGOT credentials.list.1 finding

    Why it is in this group

    • The name "credentials_list" says "list": a word for reading.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "SAGOT credentials.list. Uses the same authorization and v..."

      What this check looks for
    Description, as the server wrote it
    SAGOT credentials.list. Uses the same authorization and validation as website, API and CLI.
  • events_listSAGOT events.list.No findings

    Why it is in this group

    • The name "events_list" says "list": a word for reading.
    Description, as the server wrote it
    SAGOT events.list. Uses the same authorization and validation as website, API and CLI.
  • handoffs_listSAGOT handoffs.list.No findings

    Why it is in this group

    • The name "handoffs_list" says "list": a word for reading.
    Description, as the server wrote it
    SAGOT handoffs.list. Uses the same authorization and validation as website, API and CLI.
  • integrations_getSAGOT integrations.get.No findings

    Why it is in this group

    • The name "integrations_get" says "get": a word for reading.
    Description, as the server wrote it
    SAGOT integrations.get. Uses the same authorization and validation as website, API and CLI.
  • integrations_listSAGOT integrations.list.No findings

    Why it is in this group

    • The name "integrations_list" says "list": a word for reading.
    Description, as the server wrote it
    SAGOT integrations.list. Uses the same authorization and validation as website, API and CLI.
  • invitations_listPlatform operators only: list invitation states without tokens, newest first.No findings

    Why it is in this group

    • The name "invitations_list" says "list": a word for reading.
    Description, as the server wrote it
    Platform operators only: list invitation states without tokens, newest first.
  • lines_getRead one phone line with its live health and warning.No findings

    Why it is in this group

    • The name "lines_get" says "get": a word for reading.
    Description, as the server wrote it
    Read one phone line with its live health and warning.
  • lines_listList this workspace's phone lines (provider, default, mode, test numbers, ring window, live health, inbound answering, telco warning) and the providers this deployment offers.No findings

    Why it is in this group

    • The name "lines_list" says "list": a word for reading.
    Description, as the server wrote it
    List this workspace's phone lines (provider, default, mode, test numbers, ring window, live health, inbound answering, telco warning) and the providers this deployment offers. Secrets are never returned.
  • members_listList the people in this workspace with their roles (viewer, editor, operator, admin, owner).No findings

    Why it is in this group

    • The name "members_list" says "list": a word for reading.
    Description, as the server wrote it
    List the people in this workspace with their roles (viewer, editor, operator, admin, owner). Admins also see invitations and their status; tokens are never shown.
  • members_previewPublic: show what a member invitation link grants (workspace, inviter, role, invited email, status) before accepting.No findings

    Why it is in this group

    • The name "members_preview" says "preview": a word for reading.
    Description, as the server wrote it
    Public: show what a member invitation link grants (workspace, inviter, role, invited email, status) before accepting.
  • platform_access_listPlatform staff only (account session).No findings

    Why it is in this group

    • The name "platform_access_list" says "list": a word for reading.
    Description, as the server wrote it
    Platform staff only (account session). Your support access requests and grants with status (pending, active, denied, expired, ended — withdrawn or revoked) and expiry.
  • platform_accounts_getPlatform staff only (account session).No findings

    Why it is in this group

    • The name "platform_accounts_get" says "get": a word for reading.
    Description, as the server wrote it
    Platform staff only (account session). One account: workspaces with roles, platform role, active sessions and API keys count, suspension.
  • platform_accounts_listPlatform staff only (account session).No findings

    Why it is in this group

    • The name "platform_accounts_list" says "list": a word for reading.
    Description, as the server wrote it
    Platform staff only (account session). Every account with email, name, created time, workspaces, platform role and suspension. Search by email or name.
  • platform_audit_listPlatform staff only (account session).No findings

    Why it is in this group

    • The name "platform_audit_list" says "list": a word for reading.
    Description, as the server wrote it
    Platform staff only (account session). Append-only log of platform actions and staff reads under support access, newest first; filter by actorId, targetId or operation.
  • platform_blocklist_listPlatform staff only (account session).No findings

    Why it is in this group

    • The name "platform_blocklist_list" says "list": a word for reading.
    Description, as the server wrote it
    Platform staff only (account session). SAGOT's platform do-not-call list.
  • platform_credits_listPlatform staff only (account session).No findings

    Why it is in this group

    • The name "platform_credits_list" says "list": a word for reading.
    Description, as the server wrote it
    Platform staff only (account session). Credits granted, newest first; filter by workspaceId.
  • platform_lines_listPlatform staff only (account session).No findings

    Why it is in this group

    • The name "platform_lines_list" says "list": a word for reading.
    Description, as the server wrote it
    Platform staff only (account session). Phone lines across workspaces with provider, mode, capacity, live health, telco warning and active calls. problems=true lists only lines that are unhealthy or have a warning. Never returns secrets.
  • platform_settings_getPlatform staff only (account session).No findings

    Why it is in this group

    • The name "platform_settings_get" says "get": a word for reading.
    Description, as the server wrote it
    Platform staff only (account session). Platform switches: managedLiveCalling (SAGOT number lines in live mode may call any number in a supported country) and whether payments and SAGOT numbers are configured on this deployment.
  • platform_staff_listPlatform staff only (account session).No findings

    Why it is in this group

    • The name "platform_staff_list" says "list": a word for reading.
    Description, as the server wrote it
    Platform staff only (account session). People with a platform role (owner, admin, support, finance). Bootstrap owners come from the server configuration and cannot be revoked here.
  • platform_workspaces_getPlatform staff only (account session).No findings

    Why it is in this group

    • The name "platform_workspaces_get" says "get": a word for reading.
    Description, as the server wrote it
    Platform staff only (account session). One workspace: owner, members and roles, lines with health, agents, 30-day usage, calling policy summary, suspension, limits, credits and recent platform actions. No transcripts, recordings or contact details.
  • platform_workspaces_listPlatform staff only (account session).No findings

    Why it is in this group

    • The name "platform_workspaces_list" says "list": a word for reading.
    Description, as the server wrote it
    Platform staff only (account session). Every workspace with owner, members, lines, 30-day calls and charges, status and limits. Search by workspace name or owner email. No customer content.
  • policies_getSAGOT policies.get.No findings

    Why it is in this group

    • The name "policies_get" says "get": a word for reading.
    Description, as the server wrote it
    SAGOT policies.get. Uses the same authorization and validation as website, API and CLI.
  • routes_listDeprecated alias of lines.list: offered routes with health and the workspace's default line as `bound`.No findings

    Why it is in this group

    • The name "routes_list" says "list": a word for reading.
    Description, as the server wrote it
    Deprecated alias of lines.list: offered routes with health and the workspace's default line as `bound`.
  • support_listWorkspace admins: SAGOT support access requests and grants for this workspace, with what staff read while access was active.No findings

    Why it is in this group

    • The name "support_list" says "list": a word for reading.
    Description, as the server wrote it
    Workspace admins: SAGOT support access requests and grants for this workspace, with what staff read while access was active.
  • usage_getSAGOT charges, reservations and credits for the workspace (PHP centavos, by line and per call in `ledger`), plus phone carrier costs (phase 44): `carrierCosts` totals per currency,…No findings

    Why it is in this group

    • The name "usage_get" says "get": a word for reading.
    Description, as the server wrote it
    SAGOT charges, reservations and credits for the workspace (PHP centavos, by line and per call in `ledger`), plus phone carrier costs (phase 44): `carrierCosts` totals per currency, `carrierPendingCalls` still waiting for the provider's price, per line `carrierCosts` and `carrierCostTracking` (provider = Twilio's actual price, line_rate = your rate on the line, included = in SAGOT's charge, not_tracked), and per call `carrierCost`. Carrier costs are billed by your carrier, not SAGOT.
  • waitlist_listPlatform operators only: review the alpha queue, oldest first, with status and pagination.No findings

    Why it is in this group

    • The name "waitlist_list" says "list": a word for reading.
    Description, as the server wrote it
    Platform operators only: review the alpha queue, oldest first, with status and pagination.
  • workspaces_listSAGOT workspaces.list.No findings

    Why it is in this group

    • The name "workspaces_list" says "list": a word for reading.
    Description, as the server wrote it
    SAGOT workspaces.list. Uses the same authorization and validation as website, API and CLI.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.2.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http sagot https://sagots.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__sagot__access_info",
      "mcp__sagot__waitlist_list",
      "mcp__sagot__invitations_list",
      "mcp__sagot__assistants_preview",
      "mcp__sagot__assistants_list",
      "mcp__sagot__assistants_clients_list",
      "mcp__sagot__workspaces_list",
      "mcp__sagot__members_list",
      "mcp__sagot__members_preview",
      "mcp__sagot__credentials_list",
      "mcp__sagot__agents_list",
      "mcp__sagot__agents_get",
      "mcp__sagot__agents_test",
      "mcp__sagot__integrations_list",
      "mcp__sagot__integrations_get",
      "mcp__sagot__contacts_list",
      "mcp__sagot__campaigns_list",
      "mcp__sagot__campaigns_get",
      "mcp__sagot__campaigns_preview",
      "mcp__sagot__actions_list",
      "mcp__sagot__actions_reconcile",
      "mcp__sagot__handoffs_list",
      "mcp__sagot__events_list",
      "mcp__sagot__policies_get",
      "mcp__sagot__usage_get",
      "mcp__sagot__billing_get",
      "mcp__sagot__routes_list",
      "mcp__sagot__lines_list",
      "mcp__sagot__lines_get",
      "mcp__sagot__platform_staff_list",
      "mcp__sagot__platform_audit_list",
      "mcp__sagot__platform_workspaces_list",
      "mcp__sagot__platform_workspaces_get",
      "mcp__sagot__platform_accounts_list",
      "mcp__sagot__platform_accounts_get",
      "mcp__sagot__platform_lines_list",
      "mcp__sagot__platform_blocklist_list",
      "mcp__sagot__platform_credits_list",
      "mcp__sagot__platform_settings_get",
      "mcp__sagot__platform_access_list",
      "mcp__sagot__support_list"
    ],
    "ask": [
      "mcp__sagot__waitlist_join",
      "mcp__sagot__waitlist_update",
      "mcp__sagot__invitations_create",
      "mcp__sagot__account_register",
      "mcp__sagot__account_login",
      "mcp__sagot__account_me",
      "mcp__sagot__account_logout",
      "mcp__sagot__account_acceptTerms",
      "mcp__sagot__account_mfaSetup",
      "mcp__sagot__account_mfaEnable",
      "mcp__sagot__account_mfaDisable",
      "mcp__sagot__account_mfaRecoveryCodes",
      "mcp__sagot__assistants_authorize",
      "mcp__sagot__assistants_clients_create",
      "mcp__sagot__workspaces_create",
      "mcp__sagot__workspaces_update",
      "mcp__sagot__workspaces_region",
      "mcp__sagot__members_invite",
      "mcp__sagot__members_update",
      "mcp__sagot__members_transfer",
      "mcp__sagot__members_accept",
      "mcp__sagot__credentials_create",
      "mcp__sagot__agents_create",
      "mcp__sagot__agents_save",
      "mcp__sagot__agents_publish",
      "mcp__sagot__agents_pause",
      "mcp__sagot__agents_rollback",
      "mcp__sagot__agents_retire",
      "mcp__sagot__integrations_save",
      "mcp__sagot__integrations_test",
      "mcp__sagot__integrations_disconnect",
      "mcp__sagot__contacts_import",
      "mcp__sagot__contacts_history",
      "mcp__sagot__contacts_export",
      "mcp__sagot__contacts_update",
      "mcp__sagot__contacts_suppress",
      "mcp__sagot__campaigns_save",
      "mcp__sagot__campaigns_start",
      "mcp__sagot__campaigns_pause",
      "mcp__sagot__campaigns_resume",
      "mcp__sagot__calls_create",
      "mcp__sagot__calls_list",
      "mcp__sagot__calls_get",
      "mcp__sagot__calls_recording",
      "mcp__sagot__calls_approve",
      "mcp__sagot__calls_decline",
      "mcp__sagot__handoffs_update",
      "mcp__sagot__events_replay",
      "mcp__sagot__policies_update",
      "mcp__sagot__billing_topUp",
      "mcp__sagot__routes_bind",
      "mcp__sagot__routes_clearAlert",
      "mcp__sagot__lines_create",
      "mcp__sagot__lines_twilioNumbers",
      "mcp__sagot__lines_update",
      "mcp__sagot__lines_verifyNumber",
      "mcp__sagot__lines_confirmNumber",
      "mcp__sagot__lines_test",
      "mcp__sagot__lines_clearAlert",
      "mcp__sagot__artifacts_export",
      "mcp__sagot__platform_overview",
      "mcp__sagot__platform_health",
      "mcp__sagot__platform_staff_grant",
      "mcp__sagot__platform_workspaces_suspend",
      "mcp__sagot__platform_workspaces_reactivate",
      "mcp__sagot__platform_workspaces_limits",
      "mcp__sagot__platform_accounts_suspend",
      "mcp__sagot__platform_accounts_reactivate",
      "mcp__sagot__platform_calls_list",
      "mcp__sagot__platform_blocklist_add",
      "mcp__sagot__platform_usage",
      "mcp__sagot__platform_credits_grant",
      "mcp__sagot__platform_settings_update",
      "mcp__sagot__platform_access_request",
      "mcp__sagot__platform_access_end",
      "mcp__sagot__platform_subprocessors_notify",
      "mcp__sagot__support_approve",
      "mcp__sagot__support_deny"
    ],
    "deny": [
      "mcp__sagot__waitlist_delete",
      "mcp__sagot__invitations_revoke",
      "mcp__sagot__account_delete",
      "mcp__sagot__assistants_revoke",
      "mcp__sagot__assistants_clients_revoke",
      "mcp__sagot__workspaces_delete",
      "mcp__sagot__members_remove",
      "mcp__sagot__members_revoke",
      "mcp__sagot__credentials_revoke",
      "mcp__sagot__contacts_erase",
      "mcp__sagot__campaigns_cancel",
      "mcp__sagot__calls_cancel",
      "mcp__sagot__lines_delete",
      "mcp__sagot__artifacts_delete",
      "mcp__sagot__platform_staff_revoke",
      "mcp__sagot__platform_blocklist_remove",
      "mcp__sagot__support_revoke"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as sagot. Review it before you use it.