MCP tools

Tools run with the same permissions as the PAT you configured. Prefer get_project_context before mutating a project.

Discovery (default)

tools/list returns discovery tools plus first-class web research so clients do not load every JSON schema into context:

Tool	Use
search_tools	No args: compact catalog by domain. query / domain: keyword search. name: full description + inputSchema for one tool. includeSchemas: true attaches schemas to at most 8 search hits.
invoke_tool	{ "name": "<inner tool>", "arguments": { ... } }. Runs a domain tool.
web_search	Search-engine results (query, optional maxResults). Hosted MCP / in-app only.
web_get	GET-only public page as readable text (url, optional offset / maxChars). Hosted MCP / in-app only.

Hosted MCP still accepts tools/call with the inner name (unlisted). To advertise every domain tool instead, pass ?toolMode=all, header X-Kataflax-Tool-Mode: all, or set KATAFLAX_MCP_TOOL_MODE=all on stdio.

The in-app assistant uses the same deferred catalog (coding companion still lists its native git/workspace tools plus web_search / web_get).

Resources

Read these as MCP resources (kataflax://reference/...):

Resource	Contents
field-types	Database field types and system fields
rule-types	Access rule types
auth	Project (end-user) auth: _users, register / forgot-password, verify vs verify-email
dashboard-widget-types	Dashboard widgets and layout grid
git-deploy-modes	auto, auto_branch, manual

Prompts

Name	Use
create_crud_backend	Schemas, fields, endpoints, rules check, optional seed rows
enable_project_auth	Toggle project auth, built-in register / forgot-password, access rules
create_analytics_dashboard	Dashboards (WidgetQuery in dataSet.query)
deploy_backend_app	Hosting app + secrets
deploy_from_vesken_repo	Link git and deploy_from_git
navigate_git_repository	Tree, blob, commits

Tool groups

Inner names below are what search_tools / invoke_tool use (or tools/list when toolMode=all).

Core

list_organizations, list_projects, create_project, get_project, get_project_context, toggle_project_auth, list_service_tokens, create_service_token, delete_service_token

Database

A project has any number of databases. list_databases, create_database, rename_database, delete_database manage them; the tools below (and toggle_project_auth, which switches end-user auth of one database) take a required databaseId.

list_databases, create_database, rename_database, delete_database, list_schemas, create_schema, create_schema_with_fields, update_schema, delete_schema, list_fields, add_field, update_field, delete_field, list_endpoints, toggle_endpoint, list_rules, create_rule, delete_rule, list_rows, create_row, update_row, delete_row, list_kallax_webhooks, create_kallax_webhook, delete_kallax_webhook, ping_kallax_webhook

add_field / create_schema_with_fields / update_field accept optional referencedCollection when fieldType is reference.

Dashboards

list_dashboards, create_dashboard, add_widget, delete_dashboard, run_query

Hosting

list_hosting_apps, create_hosting_app, list_deployments, list_secrets, upsert_secret, delete_secret, import_secrets, delete_hosting_app, update_hosting_git_source, deploy_from_git

Git

list_git_repos, create_git_repo, get_git_repo, delete_git_repo, branches/tags/commits/tree/blob/diff, merge requests and comments

Project management

Nested PM: projects, work items, cycles, modules, views, intake, stickies, pages, webhooks, exports, analytics. MCP is a subset of the REST API.

Build orchestration

begin_build_plan, get_build_plan, cancel_build_plan. Create a Lenast Epic + child tasks and lock the in-app session. spawn_task_agent is in-app assistant only (nested worker with an isolated context).

Workspace (coding companion)

list_dir, read_file (alias read_workspace_file), grep_search, file_search, edit_file (alias propose_file_change), delete_file, propose_file_changes (batch apply). Edits commit immediately to the conversation work branch and return metadata only. Pass commitMessage on each edit/delete (and each propose_file_changes file): a short subject about what changed, not the file path. The server sanitizes it and falls back to Create/Update/Delete $path when it is missing.

Legacy leftover review: get_workspace_pending, accept_pending_changes, reject_pending_changes.

Web

web_search, web_get. Public GET-only research (no file downloads, no POST/PUT/PATCH). Implemented on the in-app assistant and hosted /mcp. Stdio MCP (HttpToolsBackend) returns an error for these tools.

DNS is console/admin SDK only. Not in this registry.