Skip to content

CorpusIQ

by corpusiq.io · remote · no sign-in to list tools · v1.0.0 · published by io.corpusiq

Authenticated, user-scoped MCP connectors for 30+ business systems.

Deletes · 10Final · 1Changes · 55

121 tools: 10 can delete or cancel things, 1 do something that can't be undone, 55 change things and 55 only read.

Scanned Oct 21, 2026

18 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http multi-source https://mcp2.corpusiq.io/mcp

Findings

Matches of fixed checks, with the text they matched.

13 warn5 info
  • The server marks "select_runbook" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "select_runbook" says "select": a word for a change.

    What this check looks for
  • The server marks "run_runbook" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "run_runbook" says "run": a word for a change.

    What this check looks for
  • The server marks "invoke_skill" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "invoke_skill" says "invoke": a word for a change.

    What this check looks for
  • The server marks "truth_sources_remove" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "truth_sources_remove" says "remove": a word for removing or ending something.

    What this check looks for
  • The server marks "metric_spec_remove" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "metric_spec_remove" says "remove": a word for removing or ending something.

    What this check looks for
  • The server marks "postscript_connector" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "post" and "sms": it sends a message, which cannot be taken back.

    What this check looks for
Show 12 more findings
  • The server marks "posthog_connector" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "post": a word for a change.

    What this check looks for
  • The server marks "close_connector" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "close_connector" says "close": a word for a change.

    What this check looks for
  • The input schema at properties.action.description names a tool "to" that this server does not list.

    Matched text

    inputSchema.properties.action.description: "...orce user. This is typically the first tool called to establish"

    What this check looks for
  • The server marks "callrail_connector" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "call": a word for a change.

    What this check looks for
  • The server marks "posthog_dashboard" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "run": a word for a change.

    What this check looks for
  • The server marks "featured_seo_audit" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "run": a word for a change.

    What this check looks for
  • The server marks "featured_sales_call_prep_brief" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "featured_sales_call_prep_brief" says "call": a word for a change.

    What this check looks for
  • The description mentions "credential".

    Matched text

    description: "...ount. Returns a browser URL to open the credential setup form. Use when the user says conn..."

    What this check looks for
  • The description mentions "credentials".

    Matched text

    description: "Check whether GunBroker credentials are configured for the current user. Re..."

    What this check looks for
  • The description mentions "credentials".

    Matched text

    description: "Remove stored GunBroker credentials and disconnect the account. Use when th..."

    What this check looks for
  • The description mentions "credentials".

    Matched text

    description: "...search pricing, or survey inventory. No credentials required. When tool output supplies an..."

    What this check looks for
  • The description mentions "credential".

    Matched text

    description: "...kspace, or repeatedly failing auth. For credential-based connectors, this clears the saved..."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

121 tools

Deletes or cancels 10Claude Code: deny
  • add_my_youtube_brand_channelRegister a YouTube Brand Account channel for the authenticated user.No findings

    Why it is in this group

    • The name "add_my_youtube_brand_channel" says "add": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Register a YouTube Brand Account channel for the authenticated user. Resolves the brand's channel_id from the @handle, persists the registration, and immediately surfaces the brand in list_my_youtube_channels with source='user-registered'. When set_as_primary=true (or when no prior brand is registered), per-channel my_youtube_* tools default to this brand when no channel_id is supplied. Use after get_youtube_channel(handle='@Brand') confirms the channel exists. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
  • canonical_pending_cancelCancel a pending canonical write when the user says no or changes their mind.No findings

    Why it is in this group

    • The name "canonical_pending_cancel" says "cancel": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Cancel a pending canonical write when the user says no or changes their mind. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • canonical_pending_commitCommit a pending canonical fact or decision write after the user explicitly confirmed yes.No findings

    Why it is in this group

    • The name "canonical_pending_commit" says "commit": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Commit a pending canonical fact or decision write after the user explicitly confirmed yes. Requires pending_write_id from canonical_facts_set or canonical_decisions_add. Do not call unless the user has just confirmed the exact pending write. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
  • disconnect_gunbroker_connectionRemove stored GunBroker credentials and disconnect the account.1 finding

    Why it is in this group

    • The description's first verb is "remove": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "Remove stored GunBroker credentials and disconnect the account. Use when th..."

      What this check looks for
    Description, as the server wrote it
    Remove stored GunBroker credentials and disconnect the account. Use when the user says disconnect GunBroker, remove GunBroker, or reset GunBroker. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • logout_allLog out of ALL connected data sources at once.No findings

    Why it is in this group

    • The description's first verb is "log": a word for reading.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Log out of ALL connected data sources at once. Deletes all stored OAuth tokens for the current user and returns re-authentication links for each disconnected connector. Use this to fully reset your session or switch accounts across all services.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • metric_spec_removePrepare to delete a metric spec by key.1 finding

    Why it is in this group

    • The name "metric_spec_remove" says "remove": a word for removing or ending something.
    • The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "metric_spec_remove" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "metric_spec_remove" says "remove": a word for removing or ending something.

      What this check looks for
    Description, as the server wrote it
    Prepare to delete a metric spec by key. IMPORTANT: this tool does not delete immediately. It returns a pending_write_id; the user must explicitly confirm via canonical_pending_commit before the spec is removed. Use only after summarizing which spec is being removed (key + label) and getting an explicit yes. Mirrors the canonical_facts pending-write pattern — never silently delete a canonical definition. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • remove_my_youtube_brand_channelDrop a registered YouTube Brand Account channel from the user's registrations.No findings

    Why it is in this group

    • The name "remove_my_youtube_brand_channel" says "remove": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Drop a registered YouTube Brand Account channel from the user's registrations. If the removed brand was the primary, primary status falls back to the oldest remaining registered brand. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • reset_connector_tokenReset connector auth state for the current user.1 finding

    Why it is in this group

    • The name "reset_connector_token" says "reset": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...kspace, or repeatedly failing auth. For credential-based connectors, this clears the saved..."

      What this check looks for
    Description, as the server wrote it
    Reset connector auth state for the current user. Use when tokens are stale, missing scopes, tied to the wrong account/workspace, or repeatedly failing auth. For credential-based connectors, this clears the saved credentials so the user can re-enter them. Input: connector_id (required). Supported values: google_workspace, microsoft, dropbox, shopify, shopline, quickbooks, hubspot, slack, ebay, facebook_marketing, tiktok, klaviyo, calendly, activecampaign, odoo, constantcontact, airtable, gohighlevel, monday, semrush, ahrefs, posthog, stripe, gunbroker.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • set_my_primary_youtube_channelChange which already-registered Brand Account is the user's primary.No findings

    Why it is in this group

    • The name "set_my_primary_youtube_channel" says "set": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Change which already-registered Brand Account is the user's primary. The primary brand is the default target for per-channel my_youtube_* tools when no channel_id is supplied. At most one primary per user; setting a new primary unsets the previous one. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • truth_sources_removePrepare to remove a Source-of-Truth Manifest entry.1 finding

    Why it is in this group

    • The name "truth_sources_remove" says "remove": a word for removing or ending something.
    • The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "truth_sources_remove" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "truth_sources_remove" says "remove": a word for removing or ending something.

      What this check looks for
    Description, as the server wrote it
    Prepare to remove a Source-of-Truth Manifest entry. IMPORTANT: This tool does not delete immediately. It returns a pending_write_id that the user must explicitly confirm. On user confirmation, call canonical_pending_commit. Use when the user says the document moved, was deleted, or is no longer authoritative. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
Can't be undone 1Claude Code: ask
  • postscript_connectorPostScript SMS marketing: subscribers, keywords, and shop analytics for Shopify merchants.1 finding

    Why it is in this group

    • The description's first verb is "post" and "sms": it sends a message, which cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "postscript_connector" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "post" and "sms": it sends a message, which cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    PostScript SMS marketing: subscribers, keywords, and shop analytics for Shopify merchants. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
Changes things 55Claude Code: ask
  • activecampaign_connectorActiveCampaign email marketing and CRM: contacts, lists, campaigns, automations, deals, and tags.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    ActiveCampaign email marketing and CRM: contacts, lists, campaigns, automations, deals, and tags. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • ahrefs_connectorAhrefs SEO platform: domain rating, backlink analysis, organic keywords, referring domains, competitor research, top pages by traffic, and keyword research.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Ahrefs SEO platform: domain rating, backlink analysis, organic keywords, referring domains, competitor research, top pages by traffic, and keyword research. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • airtable_connectorAirtable bases, tables, and records: browse, search, and retrieve structured data from Airtable databases.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Airtable bases, tables, and records: browse, search, and retrieve structured data from Airtable databases. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • amazon_seller_connectorAmazon Seller Central data: orders, inventory, sales metrics, and seller account performance.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Amazon Seller Central data: orders, inventory, sales metrics, and seller account performance. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • ask_corpusiqAnswer a business question through CorpusIQ's deterministic server-side runbook executor.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Answer a business question through CorpusIQ's deterministic server-side runbook executor. In router_first mode, CorpusIQ selects and pins the best matching runbook before validating connectors and executing its fixed read-only tool allowlist. In required_runbook mode, the caller pins an explicit runbook id. Returns the answer, source evidence, warnings, and a verifiable execution receipt; unsupported runbooks and missing prerequisites fail closed. Use this for supported executive financial-health or financial snapshot workflows even when the user names QuickBooks or another single service. Use raw connector tools for simple lookups that are not executive workflows. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • axonaut_connectorAxonaut French all-in-one business management (CRM + invoicing + accounting): companies (third parties), quotations, invoices, opportunities (CRM pipeline), expenses, payments, sup…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Axonaut French all-in-one business management (CRM + invoicing + accounting): companies (third parties), quotations, invoices, opportunities (CRM pipeline), expenses, payments, suppliers, products, contracts, employees, and custom fields. Read-only via personal userApiKey (Path A). Cross-connector join keys: email, siret (French business registration number), company_name, invoice_id, currency — enabling Axonaut invoices ↔ Stripe charges (EUR revenue reconciliation) and Axonaut companies ↔ QuickBooks / HubSpot matching. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • bing_webmaster_connectorBing Webmaster Tools (Microsoft) organic-search data for a verified site: rank & traffic stats (impressions/clicks over time), top search queries with positions, per-URL index & tr…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Bing Webmaster Tools (Microsoft) organic-search data for a verified site: rank & traffic stats (impressions/clicks over time), top search queries with positions, per-URL index & traffic detail, crawl statistics (crawled pages, in-index, errors, status codes), and inbound link counts. Use for Bing SEO reporting, organic-search visibility, keyword/query analysis, crawl health, and backlink volume. Auth: OAuth 2.0. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • calendar_connectorCalendar events across Google Calendar and Outlook: list upcoming meetings, search events, check availability.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Calendar events across Google Calendar and Outlook: list upcoming meetings, search events, check availability. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • calendly_connectorCalendly scheduling data: scheduled events, event types, invitee lists, and user availability.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Calendly scheduling data: scheduled events, event types, invitee lists, and user availability. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • callrail_connectorCallRail call-tracking read access via the CorpusIQ breadth tier (sourced through Nango, not a first-party connector).1 finding

    Why it is in this group

    • The description's first verb is "call": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "callrail_connector" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "call": a word for a change.

      What this check looks for
    Description, as the server wrote it
    CallRail call-tracking read access via the CorpusIQ breadth tier (sourced through Nango, not a first-party connector). Read-only: list accounts, companies, tracking numbers, and calls (with source, duration, and caller data). Call-attribution, phone-lead, and which-campaign-drove-calls questions. Writes are not exposed (default-deny). When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • canonical_decisions_addPrepare a write to the canonical decisions log.No findings

    Why it is in this group

    • The name "canonical_decisions_add" says "add": a word for a change.
    Description, as the server wrote it
    Prepare a write to the canonical decisions log. IMPORTANT: this tool does not save immediately. Use when the user wants to log a decision or when you ask 'Log to canonical decisions?'. It returns a pending_write_id. Commit only after the user explicitly says yes by calling canonical_pending_commit. Never silently log decisions. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • canonical_facts_setPrepare a write to a declared canonical fact.No findings

    Why it is in this group

    • The name "canonical_facts_set" says "set": a word for a change.
    Description, as the server wrote it
    Prepare a write to a declared canonical fact. IMPORTANT: this tool does not save immediately. Call it only after proposing the exact fact to the user; it returns a pending_write_id. After the user explicitly answers yes in the same conversation, call canonical_pending_commit with that pending_write_id. Never silently save inferred or guessed facts. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • chart_renderRender numeric data as a deterministic CorpusIQ PNG plus a complete text summary.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Render numeric data as a deterministic CorpusIQ PNG plus a complete text summary. Use when the user asks to visualize, chart, compare, or recap values already present in the conversation. Values remain explicitly unverified unless a live connector result supplied a chart_provenance token and every plotted value is mapped to its exact source_path (and secondary_source_path when applicable). A missing, expired, wrong-user, or mismatched receipt safely downgrades the chart to unverified model-provided data. Receipts last 15 minutes and work across replicas for the same authenticated user and tenant. For verified live GA4 data use dashboard_render instead. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • close_connectorClose CRM sales platform: leads, opportunities (pipeline deals), activities (calls/emails/notes/meetings), full-text search, and organization users (sales reps).1 finding

    Why it is in this group

    • The name "close_connector" says "close": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "close_connector" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "close_connector" says "close": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Close CRM sales platform: leads, opportunities (pipeline deals), activities (calls/emails/notes/meetings), full-text search, and organization users (sales reps). Use for sales pipeline reporting, lead/contact lookup, rep-level activity attribution, and sales-funnel analytics. Auth: OAuth 2.0. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • connect_gunbrokerConnect your GunBroker seller account.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...ount. Returns a browser URL to open the credential setup form. Use when the user says conn..."

      What this check looks for
    Description, as the server wrote it
    Connect your GunBroker seller account. Returns a browser URL to open the credential setup form. Use when the user says connect GunBroker, set up GunBroker, or link my GunBroker account. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • constantcontact_connectorConstant Contact email marketing: contacts, email campaigns, lists, and engagement metrics.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Constant Contact email marketing: contacts, email campaigns, lists, and engagement metrics. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • crm_connectorCustomer relationship management across HubSpot and LeadConnector: contacts, deals, pipelines, companies, and sales opportunities.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Customer relationship management across HubSpot and LeadConnector: contacts, deals, pipelines, companies, and sales opportunities. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • cross_source_ads_connectorCross-source analysis correlating Google Ads spend with GA4 web traffic and revenue.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Cross-source analysis correlating Google Ads spend with GA4 web traffic and revenue. Use when comparing ad spend to sessions, conversions, or ROAS across platforms. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • cross_source_email_connectorCross-source analysis correlating Klaviyo email activity with web traffic, ecommerce revenue, and ad spend.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Cross-source analysis correlating Klaviyo email activity with web traffic, ecommerce revenue, and ad spend. Use for channel attribution, email-driven revenue, and unified marketing analytics. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • disable_connectorHide a connector's tools from the active tool list for the current user.No findings

    Why it is in this group

    • The name "disable_connector" says "disable": a word for a change.
    Description, as the server wrote it
    Hide a connector's tools from the active tool list for the current user. Use when the user says they don't use a service or wants to pause a connector, such as 'disable Shopify' or 'hide TikTok'. The connector remains configured and can be restored with enable_connector. Disabled connectors still appear in get_connector_status marked Paused.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • drive_connectorFile storage across Google Drive, OneDrive, and Dropbox: list, search, and read user-uploaded documents, spreadsheets, PDFs, and other files.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    File storage across Google Drive, OneDrive, and Dropbox: list, search, and read user-uploaded documents, spreadsheets, PDFs, and other files. ONLY use this when the user explicitly asks about FILES, DOCUMENTS, or DRIVE contents (e.g. 'find my Q3 contract', 'list files in /Reports'). Do NOT use this to hunt for cached JSON or reports that might contain answers about other services (Shopify, GunBroker, QuickBooks, etc.) — call the corresponding service connector directly instead. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • ebay_connectoreBay seller data: orders, transactions, seller standards, customer service metrics, traffic reports, and funds summary.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    eBay seller data: orders, transactions, seller standards, customer service metrics, traffic reports, and funds summary. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • email_connectorEmail messages across Gmail and Outlook: read, search, and list emails from any connected inbox.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Email messages across Gmail and Outlook: read, search, and list emails from any connected inbox. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • enable_connectorRe-show a previously hidden connector's tools for the current user.No findings

    Why it is in this group

    • The name "enable_connector" says "enable": a word for a change.
    Description, as the server wrote it
    Re-show a previously hidden connector's tools for the current user. Use when the user wants to restore a paused connector, such as 'enable Shopify' or 'show TikTok again'. If the connector still needs authentication, get_connector_status will show the connect link.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • ga4_connectorWeb and app analytics: traffic, sessions, users, conversions, real-time visitors, page performance, acquisition sources, and revenue from GA4 properties.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Web and app analytics: traffic, sessions, users, conversions, real-time visitors, page performance, acquisition sources, and revenue from GA4 properties. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • github_release_quality_dashboardRender the native GitHub release-quality dashboard from the same validated forecast and quality facts used for text and structured output.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Render the native GitHub release-quality dashboard from the same validated forecast and quality facts used for text and structured output. Read-only. Returns explicit evidence completeness metadata. Partial or insufficient evidence yields no fabricated forecast, value, or score. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • google_ads_connectorGoogle Ads performance: campaigns, ad groups, keywords, search terms, geographic and device breakdowns, quality scores, impression share, and spend metrics.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Google Ads performance: campaigns, ad groups, keywords, search terms, geographic and device breakdowns, quality scores, impression share, and spend metrics. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • invoke_skillFetch a named CorpusIQ Skill runbook by id.1 finding

    Why it is in this group

    • The name "invoke_skill" says "invoke": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "invoke_skill" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "invoke_skill" says "invoke": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Fetch a named CorpusIQ Skill runbook by id. IMPORTANT: this returns a PLAYBOOK (a step-by-step runbook), NOT the final answer. The response carries `status: runbook_returned`, `next_step: execute_runbook`, and `skill_body` with the ordered steps to execute. After receiving the runbook you MUST call the connector tools/actions it references to gather data, then synthesize a response for the user honoring any presentation rules in the runbook. Never present the raw runbook text to the user as the answer. The user's CorpusIQ identity is forwarded automatically; no separate authentication is required. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • klaviyo_connectorEmail and SMS marketing automation: campaigns, flows, abandoned cart, list growth, subscriber health, conversion metrics, and revenue attribution.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Email and SMS marketing automation: campaigns, flows, abandoned cart, list growth, subscriber health, conversion metrics, and revenue attribution. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • linkedin_ads_connectorLinkedIn Marketing API (Ads): sponsored ad accounts, campaigns, creatives, and daily performance analytics (impressions, clicks, costInLocalCurrency, conversions).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    LinkedIn Marketing API (Ads): sponsored ad accounts, campaigns, creatives, and daily performance analytics (impressions, clicks, costInLocalCurrency, conversions). Use for B2B paid-social reporting, LinkedIn campaign performance, and account-level ad spend. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • mailchimp_connectorMailchimp email marketing: campaigns, lists, subscribers, open rates, click rates, and audience growth.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Mailchimp email marketing: campaigns, lists, subscribers, open rates, click rates, and audience growth. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • meta_ads_connectorFacebook and Instagram advertising: campaigns, ad sets, ads, account-level spend, impressions, clicks, CPM, CPC, CTR, ROAS, and audience insights.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Facebook and Instagram advertising: campaigns, ad sets, ads, account-level spend, impressions, clicks, CPM, CPC, CTR, ROAS, and audience insights. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • metric_spec_drift_reportWalk every metric spec for this user that has a non-empty cross_source_checks list, resolve each one and its comparison, and return ONLY the specs where the two values disagree bey…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Walk every metric spec for this user that has a non-empty cross_source_checks list, resolve each one and its comparison, and return ONLY the specs where the two values disagree beyond tolerance_percent. The 'what's silently disagreeing in my numbers' dashboard. Returns an empty list when everything is within tolerance — that's the green signal, not an error. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • metric_spec_setPrepare to save a new metric spec or a new version of an existing one.No findings

    Why it is in this group

    • The name "metric_spec_set" says "set": a word for a change.
    Description, as the server wrote it
    Prepare to save a new metric spec or a new version of an existing one. IMPORTANT: this tool does not save immediately. It returns a pending_write_id; the user must explicitly confirm via canonical_pending_commit before the write lands. Use only after proposing the exact spec (key + expression + expected_unit) and getting an explicit yes. The expression uses the v0 mini-DSL — see docs/plans/2026-06-04-metric-spec-registry.md §4 for the grammar. Soft validation (§13.Q2): a spec whose expression fails to parse is still saved, but the resolver will emit validation_warnings every time it tries to resolve. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • monday_connectorMonday.com project and work management data: workspaces, boards, groups, columns, items, rows, pulses, owners, statuses, dates, blockers, and column values.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Monday.com project and work management data: workspaces, boards, groups, columns, items, rows, pulses, owners, statuses, dates, blockers, and column values. Use for Monday.com board data and project/task status questions. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • notion_connectorNotion workspace: read pages, databases, blocks, and users.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Notion workspace: read pages, databases, blocks, and users. Search across the workspace, query databases, and traverse page block trees. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • odoo_connectorOdoo ERP/CRM data: partners (contacts and companies), sale orders, CRM leads and opportunities, customer/vendor invoices, products, on-hand inventory, stock transfers, accounting j…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Odoo ERP/CRM data: partners (contacts and companies), sale orders, CRM leads and opportunities, customer/vendor invoices, products, on-hand inventory, stock transfers, accounting journals, payments, taxes, employees, projects, and project tasks. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • podium_connectorPodium read access via the CorpusIQ breadth tier (sourced through Nango, not a first-party connector).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Podium read access via the CorpusIQ breadth tier (sourced through Nango, not a first-party connector). Read-only: locations, organizations, reviews, feedback, messaging conversations, and contacts. Reputation-management, online-review, and customer-messaging questions. Writes are not exposed (default-deny). When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • posthog_connectorPostHog product analytics: account/project info, raw events, person records, event definitions, HogQL queries, and funnel conversion analysis.1 finding

    Why it is in this group

    • The description's first verb is "post": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "posthog_connector" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "post": a word for a change.

      What this check looks for
    Description, as the server wrote it
    PostHog product analytics: account/project info, raw events, person records, event definitions, HogQL queries, and funnel conversion analysis. Read-only via Personal API key (Path A). When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • posthog_dashboardRun strict server-authored PostHog queries and return a verified PNG dashboard for events, exact unique actors, daily trend, and top event types with complete reconciliation and re…1 finding

    Why it is in this group

    • The description's first verb is "run": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "posthog_dashboard" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "run": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Run strict server-authored PostHog queries and return a verified PNG dashboard for events, exact unique actors, daily trend, and top event types with complete reconciliation and receipts. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • quickbooks_connectorFinancial accounting: profit & loss, invoices, balance sheet, accounts receivable/payable, payments, expenses, vendors, customers, and financial reports.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Financial accounting: profit & loss, invoices, balance sheet, accounts receivable/payable, payments, expenses, vendors, customers, and financial reports. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • run_runbookRun a specific CorpusIQ runbook by id.1 finding

    Why it is in this group

    • The name "run_runbook" says "run": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "run_runbook" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "run_runbook" says "run": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Run a specific CorpusIQ runbook by id. By default this returns the playbook (`skill_body`) for client-side execution. Set execution_mode=server_side for the bounded executive-snapshot pilot; unsupported runbooks fail closed. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • salesforce_connectorSalesforce CRM read access via the CorpusIQ breadth tier (sourced through Arcade, not a first-party connector).1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The input schema at properties.action.description names a tool "to" that this server does not list.

      Matched text

      inputSchema.properties.action.description: "...orce user. This is typically the first tool called to establish"

      What this check looks for
    Description, as the server wrote it
    Salesforce CRM read access via the CorpusIQ breadth tier (sourced through Arcade, not a first-party connector). Read-only: search opportunities, leads, contacts; pull pre-joined account 360s; inspect a single opportunity; list tasks; resolve the current user. Pipeline, forecast, deals-at-risk, account-history questions. Writes are intentionally not exposed (default-deny). When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • select_runbookUse this FIRST for broad executive/business questions such as 'How healthy is my business?', 'How are we doing?', 'What should I focus on?', or 'Give me an executive summary'.1 finding

    Why it is in this group

    • The name "select_runbook" says "select": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "select_runbook" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "select_runbook" says "select": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Use this FIRST for broad executive/business questions such as 'How healthy is my business?', 'How are we doing?', 'What should I focus on?', or 'Give me an executive summary'. Selects the best CorpusIQ runbook and returns the next step. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • semrush_connectorSemrush SEO platform: domain overview, organic and paid keywords, competitor analysis, backlinks, and keyword research.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Semrush SEO platform: domain overview, organic and paid keywords, competitor analysis, backlinks, and keyword research. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • shopline_connectorSHOPLINE ecommerce data: store profile, orders, refunds, products, inventory, locations, customers, returns, fulfillment orders, and discount-code price rules.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    SHOPLINE ecommerce data: store profile, orders, refunds, products, inventory, locations, customers, returns, fulfillment orders, and discount-code price rules. Read-only first-party connector using merchant-scoped OAuth. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • slack_connectorSlack workspace data: channels, messages, threads, files, and workspace analytics.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Slack workspace data: channels, messages, threads, files, and workspace analytics. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • stripe_connectorStripe payments platform: account profile, charges, customers, payouts, balance transactions, refunds, disputes, and balance.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Stripe payments platform: account profile, charges, customers, payouts, balance transactions, refunds, disputes, and balance. Read-only via restricted API key (Path A). Phase 2A adds the reconciliation block: payouts, balance transactions, refunds, disputes, and balance — the primitives needed for QuickBooks-style payout reconciliation and Shopify-style settlement gap analysis. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • tiktok_connectorTikTok account and video analytics: profile stats, video performance, engagement metrics (views, likes, shares, comments).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    TikTok account and video analytics: profile stats, video performance, engagement metrics (views, likes, shares, comments). When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • truth_sources_registerPrepare to register a new Source-of-Truth Manifest entry that points at a user-maintained authoritative document.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Prepare to register a new Source-of-Truth Manifest entry that points at a user-maintained authoritative document. IMPORTANT: This tool does not save immediately. It returns a pending_write_id that the user must explicitly confirm before the entry is committed (same pattern as canonical_facts_set). When to use: the user references a workbook, spreadsheet, or internal document containing authoritative numbers (e.g. 'I keep my unit economics in a Google Sheet', 'pricing is in this PDF'). Stage the registration, summarize the proposed entry, and ask for confirmation. On yes, call canonical_pending_commit with the pending_write_id. Inputs: key (short stable identifier like 'unit_economics_workbook'), label (human-readable name), location ('drive://<file_id>', 'onedrive://<item_id>', 'dropbox://<path>', 'sharepoint://<id>', or 'url://<https>'), answers (list of canonical questions this source authoritatively answers, e.g. ['nCAC', 'LTV', 'Meta spend by month']), retrieval_tool (the existing MCP tool name the AI uses to fetch the document, e.g. 'get_file_content' for Google Drive), refresh_cadence (optional free text, e.g. 'weekly'), notes (optional free text caveats). When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
Only reads 55Claude Code: allow
  • ahrefs_dashboardFetch live Ahrefs domain overview, top organic keywords, and top pages and return a source-verified, non-authoritative estimate dashboard with explicit top-N coverage and integrity…No findings

    Why it is in this group

    • The description's first verb is "fetch": a word for reading.
    Description, as the server wrote it
    Fetch live Ahrefs domain overview, top organic keywords, and top pages and return a source-verified, non-authoritative estimate dashboard with explicit top-N coverage and integrity receipts. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • axonaut_dashboardFetch live Axonaut invoices, payments, opportunities, and account data and return an evidence-backed CorpusIQ PNG dashboard plus complete accessible text, structured business facts…No findings

    Why it is in this group

    • The description's first verb is "fetch": a word for reading.
    Description, as the server wrote it
    Fetch live Axonaut invoices, payments, opportunities, and account data and return an evidence-backed CorpusIQ PNG dashboard plus complete accessible text, structured business facts, reconciliation status, and an integrity receipt. Calculations are date-bounded and currency-safe. Inputs: optional start_date and end_date (default 30daysAgo/today; maximum 366 days). When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • bing_webmaster_dashboardFetch Bing-reported impressions, clicks, and top queries for an exact verified site, then return an authoritative PNG dashboard with daily reconciliation, explicit top-query covera…No findings

    Why it is in this group

    • The description's first verb is "fetch": a word for reading.
    Description, as the server wrote it
    Fetch Bing-reported impressions, clicks, and top queries for an exact verified site, then return an authoritative PNG dashboard with daily reconciliation, explicit top-query coverage, and integrity receipts. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • canonical_context_getRead the user's declared CorpusIQ canonical facts, recent decisions, and declared metric specs.No findings

    Why it is in this group

    • The name "canonical_context_get" says "get": a word for reading.
    Description, as the server wrote it
    Read the user's declared CorpusIQ canonical facts, recent decisions, and declared metric specs. Use at the start of business, product, pricing, company, positioning, board, investor, factual, OR KPI/metric questions when stable user-approved truth may matter. This is read-only and returns only content the user deliberately saved. If declared metric specs are returned, prefer calling metric_spec_resolve(key=...) over computing the same KPI from raw connector tool calls. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • canonical_decisions_listList recent canonical decisions for this user.No findings

    Why it is in this group

    • The name "canonical_decisions_list" says "list": a word for reading.
    Description, as the server wrote it
    List recent canonical decisions for this user. Read-only. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • canonical_facts_getGet one declared canonical business fact by key.No findings

    Why it is in this group

    • The name "canonical_facts_get" says "get": a word for reading.
    Description, as the server wrote it
    Get one declared canonical business fact by key. Read-only. Use when the user asks for a stored fact such as pricing, connector count, tagline, team detail, certification, or product fact. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • canonical_facts_listList declared canonical business facts, optionally filtered by category.No findings

    Why it is in this group

    • The name "canonical_facts_list" says "list": a word for reading.
    Description, as the server wrote it
    List declared canonical business facts, optionally filtered by category. Read-only. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • dashboard_renderFetch live Google Analytics 4 data and return an evidence-backed CorpusIQ PNG recap plus accessible text, structured values, reconciliation status, and an integrity receipt.No findings

    Why it is in this group

    • The description's first verb is "fetch": a word for reading.
    Description, as the server wrote it
    Fetch live Google Analytics 4 data and return an evidence-backed CorpusIQ PNG recap plus accessible text, structured values, reconciliation status, and an integrity receipt. The undimensioned current-period query remains the verified canonical KPI independently of daily/channel breakdown reconciliation. eventCount requires exact agreement; sessions distinguish matched, within-tolerance, bounded dimensional variance disclosed, and unverified breakdown states. Channel shares are calculated and labeled against the channel-breakdown total. Inputs: property_id (required), start_date/end_date (default 30daysAgo/today), metric (sessions or eventCount), and optional event_name for eventCount. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • find_gunbroker_ffl_by_zipFind Federal Firearms Licensee (FFL) dealers near a buyer ZIP code.No findings

    Why it is in this group

    • The name "find_gunbroker_ffl_by_zip" says "find": a word for reading.
    Description, as the server wrote it
    Find Federal Firearms Licensee (FFL) dealers near a buyer ZIP code. Useful for directing buyers to a local transfer dealer. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_connector_statusReturn a pre-formatted Markdown dashboard showing every configured connector's status.No findings

    Why it is in this group

    • The name "get_connector_status" says "get": a word for reading.
    Description, as the server wrote it
    Return a pre-formatted Markdown dashboard showing every configured connector's status. IMPORTANT: The output is a complete, ready-to-display Markdown table — show it to the user exactly as returned, do NOT summarize or paraphrase. Each row includes connector name, provider, connection status (with emoji indicators), and a clickable link to authenticate if needed. After displaying the table, offer to help the user connect any unauthorized services and mention they can say 'refresh status' after authenticating.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_gunbroker_account_summaryFetch the authenticated user GunBroker account profile, seller ratings, and account standing.No findings

    Why it is in this group

    • The name "get_gunbroker_account_summary" says "get": a word for reading.
    Description, as the server wrote it
    Fetch the authenticated user GunBroker account profile, seller ratings, and account standing. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_gunbroker_billing_summaryFetch recent GunBroker billing and fee records for the authenticated seller - listing fees, final value fees, and account charges.No findings

    Why it is in this group

    • The name "get_gunbroker_billing_summary" says "get": a word for reading.
    Description, as the server wrote it
    Fetch recent GunBroker billing and fee records for the authenticated seller - listing fees, final value fees, and account charges. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_gunbroker_connection_statusCheck whether GunBroker credentials are configured for the current user.1 finding

    Why it is in this group

    • The name "get_gunbroker_connection_status" says "get": a word for reading.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "Check whether GunBroker credentials are configured for the current user. Re..."

      What this check looks for
    Description, as the server wrote it
    Check whether GunBroker credentials are configured for the current user. Returns connection state, username, and whether a valid AccessToken is cached. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_gunbroker_inventory_summaryReturn aggregate counts for the authenticated seller active GunBroker listings.No findings

    Why it is in this group

    • The name "get_gunbroker_inventory_summary" says "get": a word for reading.
    Description, as the server wrote it
    Return aggregate counts for the authenticated seller active GunBroker listings. Includes exact intersection counts such as listings ending within the requested window that also have watchers. It scans paginated ItemsSelling results server-side and returns compact totals instead of raw listing pages. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_gunbroker_itemFetch full listing details for a single GunBroker item by ID - price, bids, watchers, seller, condition, and description.No findings

    Why it is in this group

    • The name "get_gunbroker_item" says "get": a word for reading.
    Description, as the server wrote it
    Fetch full listing details for a single GunBroker item by ID - price, bids, watchers, seller, condition, and description. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_gunbroker_orderFetch full details for a single GunBroker order - buyer, item, payment, shipping, and FFL transfer details.No findings

    Why it is in this group

    • The name "get_gunbroker_order" says "get": a word for reading.
    Description, as the server wrote it
    Fetch full details for a single GunBroker order - buyer, item, payment, shipping, and FFL transfer details. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_my_usage_statsReturn personalized user statistics and a usage summary for the current user, showing the value they have received from CorpusIQ: total tool calls, skill invocations, single-source…No findings

    Why it is in this group

    • The name "get_my_usage_stats" says "get": a word for reading.
    Description, as the server wrote it
    Return personalized user statistics and a usage summary for the current user, showing the value they have received from CorpusIQ: total tool calls, skill invocations, single-source vs multi-source questions answered, plus their top connectors, top tools, and top skills. Use when the user asks for user stats, usage statistics, 'what have I used?', 'show me my activity', 'how much have I used CorpusIQ?', or wants a recap of their CorpusIQ activity.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_my_youtube_analyticsGet analytics for the authenticated user's YouTube channel.No findings

    Why it is in this group

    • The name "get_my_youtube_analytics" says "get": a word for reading.
    Description, as the server wrote it
    Get analytics for the authenticated user's YouTube channel. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_my_youtube_channelGet the authenticated user's own YouTube channel details (title, subscriber count, video count, views).No findings

    Why it is in this group

    • The name "get_my_youtube_channel" says "get": a word for reading.
    Description, as the server wrote it
    Get the authenticated user's own YouTube channel details (title, subscriber count, video count, views). For Brand Account channels, ALWAYS pass channel_id explicitly — calling without channel_id only returns the OAuth identity's personal channel; YouTube does not resolve Brand Accounts via mine=true. Workflow for brands: get_youtube_channel(handle='@Brand') to resolve the id, then call this with channel_id set. Returns an explicit error envelope if the response is sparse/incomplete instead of zero-filled stats. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_my_youtube_geographyGet geographic viewer breakdown for the authenticated user's channel or a specific video.No findings

    Why it is in this group

    • The name "get_my_youtube_geography" says "get": a word for reading.
    Description, as the server wrote it
    Get geographic viewer breakdown for the authenticated user's channel or a specific video. For Brand Accounts, pass channel_id explicitly — channel==MINE does not resolve to Brand channels. Returns an explicit error envelope (not zero rows) when the Analytics API responds with no schema, which is the silent-fail signature. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_my_youtube_video_analyticsGet detailed analytics for a specific video owned by the authenticated user.No findings

    Why it is in this group

    • The name "get_my_youtube_video_analytics" says "get": a word for reading.
    Description, as the server wrote it
    Get detailed analytics for a specific video owned by the authenticated user. For Brand Account videos, pass channel_id explicitly — channel==MINE does not resolve to Brand channels. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_my_youtube_videosList the authenticated user's own uploaded YouTube videos.No findings

    Why it is in this group

    • The name "get_my_youtube_videos" says "get": a word for reading.
    Description, as the server wrote it
    List the authenticated user's own uploaded YouTube videos. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_user_statisticsAlias for get_my_usage_stats.No findings

    Why it is in this group

    • The name "get_user_statistics" says "get": a word for reading.
    Description, as the server wrote it
    Alias for get_my_usage_stats. Return personalized user statistics and a usage summary for the current user: total tool calls, skill invocations, question counts, top connectors, top tools, top skills, and token-savings estimates when available.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_youtube_channelLook up a YouTube channel by ID, @handle, or legacy username.No findings

    Why it is in this group

    • The name "get_youtube_channel" says "get": a word for reading.
    Description, as the server wrote it
    Look up a YouTube channel by ID, @handle, or legacy username. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_youtube_channel_videosGet recent videos from a YouTube channel.No findings

    Why it is in this group

    • The name "get_youtube_channel_videos" says "get": a word for reading.
    Description, as the server wrote it
    Get recent videos from a YouTube channel. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_youtube_commentsGet top-level comments on a YouTube video.No findings

    Why it is in this group

    • The name "get_youtube_comments" says "get": a word for reading.
    Description, as the server wrote it
    Get top-level comments on a YouTube video. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_youtube_transcriptGet the transcript (captions) for a YouTube video.No findings

    Why it is in this group

    • The name "get_youtube_transcript" says "get": a word for reading.
    Description, as the server wrote it
    Get the transcript (captions) for a YouTube video. Returns timestamped segments and full text. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_youtube_videoGet detailed information about one or more YouTube videos including title, description, view/like/comment counts, duration, tags, and thumbnails.No findings

    Why it is in this group

    • The name "get_youtube_video" says "get": a word for reading.
    Description, as the server wrote it
    Get detailed information about one or more YouTube videos including title, description, view/like/comment counts, duration, tags, and thumbnails. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • github_connectorRead-only GitHub delivery assessment, release forecasting, quality trends, scalar quality metrics, and a native PNG dashboard with explicit evidence completeness.No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read-only GitHub delivery assessment, release forecasting, quality trends, scalar quality metrics, and a native PNG dashboard with explicit evidence completeness. Auth: GitHub App user-to-server OAuth. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_gunbroker_categoriesList GunBroker item categories or subcategories.No findings

    Why it is in this group

    • The name "list_gunbroker_categories" says "list": a word for reading.
    Description, as the server wrote it
    List GunBroker item categories or subcategories. Use to discover valid category IDs for filtering search results. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_gunbroker_feedbackList feedback received by the authenticated GunBroker seller within the last N days - rating, comment, and buyer.No findings

    Why it is in this group

    • The name "list_gunbroker_feedback" says "list": a word for reading.
    Description, as the server wrote it
    List feedback received by the authenticated GunBroker seller within the last N days - rating, comment, and buyer. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_gunbroker_fraud_claimsList open fraud or dispute claims associated with the authenticated GunBroker seller account.No findings

    Why it is in this group

    • The name "list_gunbroker_fraud_claims" says "list": a word for reading.
    Description, as the server wrote it
    List open fraud or dispute claims associated with the authenticated GunBroker seller account. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_gunbroker_items_scheduledList GunBroker listings the authenticated seller has scheduled but not yet launched.No findings

    Why it is in this group

    • The name "list_gunbroker_items_scheduled" says "list": a word for reading.
    Description, as the server wrote it
    List GunBroker listings the authenticated seller has scheduled but not yet launched. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_gunbroker_items_sellingList the authenticated seller currently active GunBroker listings - title, current price, bid count, watchers, and end date.No findings

    Why it is in this group

    • The name "list_gunbroker_items_selling" says "list": a word for reading.
    Description, as the server wrote it
    List the authenticated seller currently active GunBroker listings - title, current price, bid count, watchers, and end date. Supports watcher/bid filters plus ending-window filtering across multiple pages. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_gunbroker_items_soldList items the authenticated GunBroker seller sold within the last N days.No findings

    Why it is in this group

    • The name "list_gunbroker_items_sold" says "list": a word for reading.
    Description, as the server wrote it
    List items the authenticated GunBroker seller sold within the last N days. Use to calculate revenue, AOV, and sell-through by category. The GunBroker API only supports fixed windows (24h, 48h, 7, 14, 30, 60, 90 days); ``days`` is rounded up to the nearest supported window and capped at 90. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_gunbroker_items_unsoldList the authenticated seller's expired (unsold) GunBroker listings within the last N days.No findings

    Why it is in this group

    • The name "list_gunbroker_items_unsold" says "list": a word for reading.
    Description, as the server wrote it
    List the authenticated seller's expired (unsold) GunBroker listings within the last N days. Each item includes WatchersCount, so use this to answer 'did any recently ended listings have watchers?'. The GunBroker API only supports fixed windows (24h, 48h, 7, 14, 30, 60, 90 days); ``days`` is rounded up to the nearest supported window and capped at 90. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_gunbroker_ordersList GunBroker orders for the authenticated seller within the last N days - buyer info, item, amount, and fulfillment status.No findings

    Why it is in this group

    • The name "list_gunbroker_orders" says "list": a word for reading.
    Description, as the server wrote it
    List GunBroker orders for the authenticated seller within the last N days - buyer info, item, amount, and fulfillment status. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_gunbroker_watched_itemsList GunBroker listings the authenticated user is watching.No findings

    Why it is in this group

    • The name "list_gunbroker_watched_items" says "list": a word for reading.
    Description, as the server wrote it
    List GunBroker listings the authenticated user is watching. Useful for tracking competitor pricing or buying leads. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_my_youtube_channelsList YouTube channels the authenticated user owns or manages.No findings

    Why it is in this group

    • The name "list_my_youtube_channels" says "list": a word for reading.
    Description, as the server wrote it
    List YouTube channels the authenticated user owns or manages. Enumeration is incomplete by YouTube API design — non-CMS Brand Accounts are NOT returned. If an expected Brand Account is missing, use get_youtube_channel(handle='@Brand') to resolve its channel_id, then pass channel_id to other 'my_youtube_*' tools. Response includes brand_account_note explaining the gap. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_runbooksBrowse a compact list of CorpusIQ runbooks/skills.No findings

    Why it is in this group

    • The name "list_runbooks" says "list": a word for reading.
    Description, as the server wrote it
    Browse a compact list of CorpusIQ runbooks/skills. Do not use this to choose a runbook for a user's broad question; call select_runbook first so the canonical semantic router can choose without sending the full catalog to the model. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_skillsBrowse a compact list of CorpusIQ Skills (cross-source runbooks).No findings

    Why it is in this group

    • The name "list_skills" says "list": a word for reading.
    Description, as the server wrote it
    Browse a compact list of CorpusIQ Skills (cross-source runbooks). Do not use this to discover the best skill for a broad user question; call select_runbook first so Haiku can classify without sending the full skills catalog to the model. Use list_skills only when the user explicitly asks to browse available skills. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • mailchimp_dashboardFetch complete date-bounded Mailchimp campaign reports for one instance_id and return a verified PNG dashboard for sends, unique opens/clicks, unsubscribes, trend, and campaign bre…No findings

    Why it is in this group

    • The description's first verb is "fetch": a word for reading.
    Description, as the server wrote it
    Fetch complete date-bounded Mailchimp campaign reports for one instance_id and return a verified PNG dashboard for sends, unique opens/clicks, unsubscribes, trend, and campaign breakdown. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • metric_spec_getFetch one metric spec by key — returns the full declaration including the expression DSL text, variables dict, cross_source_checks list, and metadata.No findings

    Why it is in this group

    • The name "metric_spec_get" says "get": a word for reading.
    Description, as the server wrote it
    Fetch one metric spec by key — returns the full declaration including the expression DSL text, variables dict, cross_source_checks list, and metadata. Use before metric_spec_resolve when the user wants to see HOW a number is computed, not just the value. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • metric_spec_listList the user's declared metric specs (live computations such as MRR, AOV, monthly_active_customers).No findings

    Why it is in this group

    • The name "metric_spec_list" says "list": a word for reading.
    Description, as the server wrote it
    List the user's declared metric specs (live computations such as MRR, AOV, monthly_active_customers). Each entry includes the spec key, label, expected_unit, expression text, and version. Use this BEFORE computing any KPI from raw connector data — if a spec exists for the question, call metric_spec_resolve to get the canonical value instead of rolling your own aggregate. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • metric_spec_resolveCompute a metric spec NOW.No findings

    Why it is in this group

    • The name "metric_spec_resolve" says "resolve": a word for reading.
    Description, as the server wrote it
    Compute a metric spec NOW. Returns the live value, the spec version that produced it, the source-call ledger (which connector tools were dispatched and how many rows each returned — NO row data is persisted), any drift detected against cross_source_checks, validation warnings, and the provenance footer string the renderer should append below the value. This is the hot path — call it whenever the user asks 'what is our <metric>?' and a spec exists for it. Result is NEVER cached; each call fires fresh dispatch. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • quickbooks_dashboardFetch request-local QuickBooks Profit and Loss, Balance Sheet, historical AR/AP aging, and company reports, then return a verified PNG dashboard with reconciled facts, accessible t…No findings

    Why it is in this group

    • The description's first verb is "fetch": a word for reading.
    Description, as the server wrote it
    Fetch request-local QuickBooks Profit and Loss, Balance Sheet, historical AR/AP aging, and company reports, then return a verified PNG dashboard with reconciled facts, accessible text, and integrity receipts. Inputs: optional start_date and end_date. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • resolve_connectorDiscover how to answer the user's data question.No findings

    Why it is in this group

    • The name "resolve_connector" says "resolve": a word for reading.
    Description, as the server wrote it
    Discover how to answer the user's data question. ALWAYS call this FIRST for any data-related request. For broad questions — business health, performance, growth, financial pulse, recap, 'how are we doing', 'what should I focus on', or any cross-source question — the response returns a CorpusIQ Skill in `skill.skill_body`: a pre-built runbook you should execute step-by-step, honoring any presentation rules it specifies. For narrow single-source questions, the response returns 2-4 ready-to-call tool schemas. The `supporting_actions` list is available as helpers when a skill is attached — do not call them ahead of the runbook. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • search_console_connectorSEO and search performance: clicks, impressions, CTR, position, sitemaps, URL inspection, and indexed page status from Google Search Console.No findings

    Why it is in this group

    • The name "search_console_connector" says "search": a word for reading.
    Description, as the server wrote it
    SEO and search performance: clicks, impressions, CTR, position, sitemaps, URL inspection, and indexed page status from Google Search Console. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • search_gunbroker_itemsSearch GunBroker marketplace listings by keyword, category, price range, or condition.1 finding

    Why it is in this group

    • The name "search_gunbroker_items" says "search": a word for reading.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...search pricing, or survey inventory. No credentials required. When tool output supplies an..."

      What this check looks for
    Description, as the server wrote it
    Search GunBroker marketplace listings by keyword, category, price range, or condition. Use to find comps, research pricing, or survey inventory. No credentials required. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • search_youtubeSearch YouTube for videos by query.No findings

    Why it is in this group

    • The name "search_youtube" says "search": a word for reading.
    Description, as the server wrote it
    Search YouTube for videos by query. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • semrush_dashboardFetch live Semrush domain, history, backlink, and competitor reports and return a source-verified, non-authoritative estimate dashboard with explicit top-N coverage and integrity r…No findings

    Why it is in this group

    • The description's first verb is "fetch": a word for reading.
    Description, as the server wrote it
    Fetch live Semrush domain, history, backlink, and competitor reports and return a source-verified, non-authoritative estimate dashboard with explicit top-N coverage and integrity receipts. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • shopify_dashboardFetch complete date-bounded Shopify orders and shop metadata, then return a verified PNG dashboard for booked order value, order count, AOV, trend, and status breakdown with reconc…No findings

    Why it is in this group

    • The description's first verb is "fetch": a word for reading.
    Description, as the server wrote it
    Fetch complete date-bounded Shopify orders and shop metadata, then return a verified PNG dashboard for booked order value, order count, AOV, trend, and status breakdown with reconciliation and receipts. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • stripe_dashboardFetch complete date-bounded Stripe balance transactions and account metadata, then return a verified PNG dashboard with integer minor-unit facts, currency exponent, reconciliation,…No findings

    Why it is in this group

    • The description's first verb is "fetch": a word for reading.
    Description, as the server wrote it
    Fetch complete date-bounded Stripe balance transactions and account metadata, then return a verified PNG dashboard with integer minor-unit facts, currency exponent, reconciliation, accessible text, and an integrity receipt. Inputs: optional start_date and end_date. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • truth_sources_listList the user's registered Source-of-Truth Manifest entries.No findings

    Why it is in this group

    • The name "truth_sources_list" says "list": a word for reading.
    Description, as the server wrote it
    List the user's registered Source-of-Truth Manifest entries. These are pointers to user-maintained authoritative documents (KPI workbooks, pricing sheets, contracts, customer masters) that the user has declared to be authoritative for specific questions. CRITICAL: Call this tool FIRST, before any analysis of unit economics, vendor cost, marketing efficiency, attribution, or financial performance. If a relevant manifest entry exists, use the referenced tool in 'retrieval_tool' to fetch the document and treat its numbers as authoritative — do not compute parallel values from raw connector data. Returns: list of entries with key, label, location, answers, retrieval_tool, refresh_cadence, last_seen_updated. Read-only. Use at session start when the user asks any business-numbers question. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • web_fetch_connectorGrounded public-web retrieval: fetch any public web page and return its cleaned text, title, and description, each cited to the source URL and timestamped.No findings

    Why it is in this group

    • The name "web_fetch_connector" says "fetch": a word for reading.
    Description, as the server wrote it
    Grounded public-web retrieval: fetch any public web page and return its cleaned text, title, and description, each cited to the source URL and timestamped. CorpusIQ retrieves the real page content BEFORE the model reasons over it, so answers about a competitor's website, pricing page, about/careers page, or any public URL are based on fetched text — never guessed. A field the page did not contain is returned as 'unavailable'; the tool never fabricates a value. When the user asks for a visual, trend, comparison, or recap, call chart_render with the numeric values returned by this connector. If the connector result includes a verified chart_provenance token, the same authenticated user may pass it as provenance_token within 15 minutes, on any replica, and map every value to its exact source_path so chart_render preserves verified provenance. Without a valid connector receipt, chart_render labels values as unverified_model_data. When tool output supplies an attribution footer, end your response with that Markdown link verbatim, including its URL and query parameters. Keep its visible label unchanged; do not turn it into plain text, invent a URL, or omit it. Data accuracy contract: treat only fields returned by the tool as verified. Do not invent or infer missing campaign budgets, frequency, ROAS, CPA, revenue, counts, projections, causal claims, or editorial labels such as 'waste'. Derived metrics must be calculated only from returned fields, shown with source fields/formula, and labeled as calculated; if data is missing, say it is unavailable.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http multi-source https://mcp2.corpusiq.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__multi-source__get_connector_status",
      "mcp__multi-source__resolve_connector",
      "mcp__multi-source__list_runbooks",
      "mcp__multi-source__list_skills",
      "mcp__multi-source__canonical_context_get",
      "mcp__multi-source__canonical_facts_get",
      "mcp__multi-source__canonical_facts_list",
      "mcp__multi-source__canonical_decisions_list",
      "mcp__multi-source__truth_sources_list",
      "mcp__multi-source__metric_spec_list",
      "mcp__multi-source__metric_spec_get",
      "mcp__multi-source__metric_spec_resolve",
      "mcp__multi-source__get_my_youtube_analytics",
      "mcp__multi-source__get_my_youtube_videos",
      "mcp__multi-source__search_youtube",
      "mcp__multi-source__get_youtube_video",
      "mcp__multi-source__get_youtube_transcript",
      "mcp__multi-source__get_youtube_channel",
      "mcp__multi-source__get_youtube_channel_videos",
      "mcp__multi-source__get_youtube_comments",
      "mcp__multi-source__get_my_youtube_channel",
      "mcp__multi-source__list_my_youtube_channels",
      "mcp__multi-source__get_my_youtube_video_analytics",
      "mcp__multi-source__get_my_youtube_geography",
      "mcp__multi-source__search_console_connector",
      "mcp__multi-source__get_gunbroker_connection_status",
      "mcp__multi-source__search_gunbroker_items",
      "mcp__multi-source__get_gunbroker_item",
      "mcp__multi-source__list_gunbroker_categories",
      "mcp__multi-source__find_gunbroker_ffl_by_zip",
      "mcp__multi-source__list_gunbroker_items_sold",
      "mcp__multi-source__list_gunbroker_items_selling",
      "mcp__multi-source__get_gunbroker_inventory_summary",
      "mcp__multi-source__list_gunbroker_items_unsold",
      "mcp__multi-source__list_gunbroker_items_scheduled",
      "mcp__multi-source__list_gunbroker_watched_items",
      "mcp__multi-source__list_gunbroker_orders",
      "mcp__multi-source__get_gunbroker_order",
      "mcp__multi-source__list_gunbroker_feedback",
      "mcp__multi-source__list_gunbroker_fraud_claims",
      "mcp__multi-source__get_gunbroker_account_summary",
      "mcp__multi-source__get_gunbroker_billing_summary",
      "mcp__multi-source__web_fetch_connector",
      "mcp__multi-source__github_connector",
      "mcp__multi-source__dashboard_render",
      "mcp__multi-source__quickbooks_dashboard",
      "mcp__multi-source__stripe_dashboard",
      "mcp__multi-source__axonaut_dashboard",
      "mcp__multi-source__mailchimp_dashboard",
      "mcp__multi-source__shopify_dashboard",
      "mcp__multi-source__semrush_dashboard",
      "mcp__multi-source__ahrefs_dashboard",
      "mcp__multi-source__bing_webmaster_dashboard",
      "mcp__multi-source__get_my_usage_stats",
      "mcp__multi-source__get_user_statistics"
    ],
    "ask": [
      "mcp__multi-source__ask_corpusiq",
      "mcp__multi-source__select_runbook",
      "mcp__multi-source__run_runbook",
      "mcp__multi-source__invoke_skill",
      "mcp__multi-source__cross_source_ads_connector",
      "mcp__multi-source__cross_source_email_connector",
      "mcp__multi-source__canonical_facts_set",
      "mcp__multi-source__canonical_decisions_add",
      "mcp__multi-source__truth_sources_register",
      "mcp__multi-source__metric_spec_set",
      "mcp__multi-source__metric_spec_drift_report",
      "mcp__multi-source__ga4_connector",
      "mcp__multi-source__quickbooks_connector",
      "mcp__multi-source__meta_ads_connector",
      "mcp__multi-source__google_ads_connector",
      "mcp__multi-source__slack_connector",
      "mcp__multi-source__tiktok_connector",
      "mcp__multi-source__ebay_connector",
      "mcp__multi-source__klaviyo_connector",
      "mcp__multi-source__mailchimp_connector",
      "mcp__multi-source__constantcontact_connector",
      "mcp__multi-source__activecampaign_connector",
      "mcp__multi-source__odoo_connector",
      "mcp__multi-source__amazon_seller_connector",
      "mcp__multi-source__airtable_connector",
      "mcp__multi-source__calendly_connector",
      "mcp__multi-source__monday_connector",
      "mcp__multi-source__postscript_connector",
      "mcp__multi-source__connect_gunbroker",
      "mcp__multi-source__semrush_connector",
      "mcp__multi-source__ahrefs_connector",
      "mcp__multi-source__posthog_connector",
      "mcp__multi-source__stripe_connector",
      "mcp__multi-source__axonaut_connector",
      "mcp__multi-source__notion_connector",
      "mcp__multi-source__linkedin_ads_connector",
      "mcp__multi-source__close_connector",
      "mcp__multi-source__salesforce_connector",
      "mcp__multi-source__bing_webmaster_connector",
      "mcp__multi-source__callrail_connector",
      "mcp__multi-source__podium_connector",
      "mcp__multi-source__shopline_connector",
      "mcp__multi-source__email_connector",
      "mcp__multi-source__calendar_connector",
      "mcp__multi-source__drive_connector",
      "mcp__multi-source__crm_connector",
      "mcp__multi-source__chart_render",
      "mcp__multi-source__posthog_dashboard",
      "mcp__multi-source__github_release_quality_dashboard",
      "mcp__multi-source__featured_seo_audit",
      "mcp__multi-source__featured_competitive_intelligence_brief",
      "mcp__multi-source__featured_cash_recovery_engine",
      "mcp__multi-source__featured_sales_call_prep_brief",
      "mcp__multi-source__featured_executive_summary_writer",
      "mcp__multi-source__disable_connector",
      "mcp__multi-source__enable_connector"
    ],
    "deny": [
      "mcp__multi-source__canonical_pending_commit",
      "mcp__multi-source__canonical_pending_cancel",
      "mcp__multi-source__truth_sources_remove",
      "mcp__multi-source__metric_spec_remove",
      "mcp__multi-source__add_my_youtube_brand_channel",
      "mcp__multi-source__remove_my_youtube_brand_channel",
      "mcp__multi-source__set_my_primary_youtube_channel",
      "mcp__multi-source__disconnect_gunbroker_connection",
      "mcp__multi-source__reset_connector_token",
      "mcp__multi-source__logout_all"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as multi-source. Review it before you use it.