Tools
The server exposes 95 tools over 20 resource families. Each one dispatches in-process to the /v1 endpoint that already implements the operation, so filters, validation, settlement rules and workspace isolation are exactly the REST API's — the tool is the endpoint. The exceptions, finance_schemas_get (the published contract) and finance_workspaces_list (the workspaces the person can reach), answer locally. Every other tool takes workspace_id.
How to read these pages
Every tool carries four facts:
finance_payables_send_to_bank· destructive · permissionpayables.dispatch·POST /v1/payables/{id}/send-to-bank
| Field | Meaning |
|---|---|
| read / write / destructive | The annotation the MCP client reads. A destructive one runs only after the server asks the person to confirm — a client that cannot ask gets confirmation_required. See Confirming destructive tools. |
| permission | The permission the token's person must hold in the organization — the same the action requires in the dashboard. |
METHOD /path | The /v1 endpoint the tool dispatches to, to cross-reference with the API reference. The token needs the scope that endpoint requires. |
Common arguments
These appear across many tools and always mean the same thing.
| Argument | Type | Description |
|---|---|---|
limit | integer | Page size. Default 25, max 100 (10000 on the *_ids tools). |
cursor | string | The previous page's meta.next_cursor. null there means the last page. |
filters | object | The filters the listing accepts: a scalar is equality, an array is in, an object picks operators ({ "gte": …, "lt": … }). |
sort_by | enum | Sort column, among the ones the listing accepts. |
sort_order | asc | desc | Direction. Default asc. |
fields | string[] | Columns to return. Omit for the whole record; id always comes back. |
idempotency_key | string | Replay guard, sent as X-Idempotency-Key. Required on the money-moving actions. |
custom_metadata | object | Free-form JSON owned by you, echoed on every read. |
The catalogue
A tool you cannot run is not listed by tools/list at all. If one from this page is missing, see Authentication.