Meta Council

Submit a question or decision to Meta Council. A panel of specialized AI agents will independently analyze it, then a synthesis step combines their opinions into a unified recommendation with full transparency. Starts asynchronously by default; use get_session with the returned session id.

Resolve the effective Council models, parameters, tools, and setup reasons for this account without starting a session, calling a provider, or recording usage.

List all available expert panels with their descriptions and agent counts.

List all available expert agents with their roles, domains, and specialties.

Get the full results of a previous Meta Council session, including all agent opinions and the synthesis.

Fetch a chart artifact generated by a council session or LOCUS determination. Returns the machine-readable spec (the data behind the chart) plus the stable SVG URL, or the raw SVG itself with include_svg=true. Artifact ids appear in session results as 'visualizations' / 'visualization' reference blocks. Requires authentication and enforces the artifact owner's tenant boundary.

List available multi-step workflow pipelines (composable bundles that chain several steps, each able to run on its own model/provider). Returns each workflow's slug, description, per-step model, and definition_sha — a fingerprint of that definition as loaded right now, comparable against the definition_sha reported by a run you start later.

Preview what a workflow WOULD do, without running it. Costs nothing and runs no models: returns the step execution order, each step's role/model/max_tokens and whether it pauses for a human checkpoint, the workflow's declared parameters (validated if you supply values), which required integrations your account already has credentials on file for, an upper-bound cost estimate, and definition_sha —

Run exactly ONE step of a workflow and return what it produced, so you can iterate on a single step's wording without running the steps before it. THIS SPENDS CREDITS EXACTLY LIKE A REAL STEP: the step runs on a real model through the same engine a full run uses and is billed identically -- it is not a simulation, a dry run, or a free preview. If you want to check a workflow's shape, parameters, m

Start a multi-step workflow pipeline and return its session id and definition_sha immediately by default — the fingerprint of the definition this run resolved, comparable against the one plan_workflow reported. Poll get_workflow_session for each step's model/provider and output. synthesis. Steps run on YOUR configured provider keys, so a pipeline can chain models across providers. If a step is a h

Poll a previously started workflow run for its current step-by-step status and output (useful when run_workflow timed out or is awaiting a checkpoint). Also returns that run's definition_sha — the fingerprint of the definition it resolved when it started, comparable against the one plan_workflow reported. Requires authentication.

Recommend the best expert panel for a query (semantic match with keyword fallback). Returns the top panel + confidence and the runner-up options — feed the result into run_council's panel argument. Requires authentication because the query may be sent to the configured embedding provider.

Estimate what a panel or saved workflow would cost before running it: returns a per-agent/per-step price breakdown, the total for the requested number of runs, your remaining quota and platform credit, an honest list of any models the platform could not price, and a go/no-go decision. Reserves nothing, charges nothing, starts nothing.

Full detail on one expert agent by slug (from list_agents): role, description, default model, domain, tags, and tools.

Advance a workflow past a human checkpoint — approve or reject the paused step so the pipeline continues. Use the session id from run_workflow / get_workflow_session. Requires authentication.

Continue a stalled or finished workflow run from a chosen step. This starts a NEW run that reuses the outputs the original run already recorded and only executes — and only pays for — the steps from 'from_step' onward. The original run is left untouched and the new one records which run it continues. Omit 'from_step' to resume at the first step that has no recorded output. A step whose output was

Get the authenticated user's Meta Council settings — preferred model, plan tier, which credentials are saved (not live-verified), and the registry-backed tools that require, optionally use, or do not use account credentials. Names and booleans only, never secret values. Requires authentication.

List which outside services the authenticated user has connected — ticket boards, stored connector credentials (name, kind, whether configured, and when last verified) and the connectors available to call them. Returns configured / not configured facts, names and dates ONLY, and never returns a secret value. Read this before planning a workflow that reaches an external service, so a step is not wr

Report the scopes, plan tier, expiry and remaining quota of the API key making this call, so an agent can check what it is allowed to do before attempting it rather than by being refused. Requires API-key authentication.

Replace the API key making this call with a fresh one carrying the same scopes. WARNING: this IRREVERSIBLY deactivates the current key the moment it succeeds — every other caller using that key stops working immediately, so do not call it on a shared credential. The new key is returned exactly once in the response and cannot be retrieved again. A delegated child key cannot rotate itself. Requires

Mint a short-lived child API key for a delegated subtask. The child can never exceed the calling key: requested scopes must be a subset of what the caller holds, its expiry is capped by the caller's, and it may never itself mint keys (delegation is exactly one level deep). A caller whose own scopes were never recorded explicitly cannot delegate at all until it rotates first. The child key is retur

List the authenticated user's outreach campaigns with current lead counts and recorded sent/replied workflow labels, not independently verified delivery or human-reply totals. Requires authentication.

Search the user's outreach leads — filter by a text query (company / contact / email), pipeline status, and/or campaign. Returns stable IDs, evidence, holds and exact rendered draft bytes/hash for review. Replies over 256 KiB refuse in full; narrow the query or limit. Requires authentication.

Outreach summary for the user — total leads, recorded status counts/ratios and incomplete outcome evidence. Requires authentication.

Score an anonymized adult mental-health / addiction case against LOCUS. Convenes the LOCUS Assessment Panel (psychiatrist, addiction specialist, clinical social worker, utilization reviewer, peer specialist, safety officer); each reviewer independently rates all six LOCUS dimensions, then a DETERMINISTIC engine aggregates the ratings and applies the Determination Grid and the inviolable override f

Compute a LOCUS Level of Care from dimension ratings you already have. Deterministic — no LLM, instant: composite + Determination Grid + the inviolable override floors (e.g. Risk-of-Harm=4 → minimum Level 5), applied in code. Provide EITHER the seven flat D* ratings (1-5 each; Dimension IV splits into IV-A Stress / IV-B Support) OR a per-reviewer agent_scores map. Sending both is refused (422) rat

Request fixed legacy Themis source/citation records and attach a proposed Laws & Regulations agent/source/synthesis plan whose routes are planned_not_run. Check the law uses fixed legacy provider-record retrieval, but returned records do not prove exact citation identity, relevance, authority, or corpus coverage. Generated research requires authentication, exact THEMIS_NEUTRAL_SCHEMA_VERSION=themi

Pipeline-stage breakdown for one outreach campaign — total / sent / active / won / lost workflow labels, recorded status ratio, and incomplete outcome evidence. Requires authentication.

List automation triggers (auto-reply rules, status updates, notifications) configured for an outreach campaign. Requires authentication.

List sent / received emails for an outreach campaign, newest first — subject, body preview, and reply classification. Requires authentication.

Create a new outreach campaign owned by the authenticated user. Returns the new campaign id. Reversible (campaigns can be edited/deleted in the dashboard). Requires authentication.

Add a single lead to the authenticated user's outreach book. Returns the new lead id. Provenance is stamped source="agent" server-side. Does not send any email. Requires authentication.

Assign one or more of the user's existing leads to one of the user's campaigns (both must be owned by the caller). Returns how many were assigned. Idempotent. Requires authentication.

Advance a lead through the pipeline — set its status / pipeline stage and, optionally, a recorded reply, pitch, or notes. The core pipeline-drive action. Idempotent (setting the same status twice is a no-op). Requires authentication.

Save a draft email subject and/or body onto one of the user's leads. This only stores the draft for human review — it does NOT send anything. A human sends from the dashboard. Requires authentication.

Create a reusable pitch template (subject + body templates, optional drafting prompt) owned by the user. Provenance is stamped source="agent" server-side. Returns the new pitch id. Requires authentication.

List the caller's sales deals (newest first) together with a weighted pipeline forecast (open/weighted/won totals). Optionally filter by stage or lead_id. Deals are private to the API-key owner.

Fetch one of the caller's deals by id with its full activity timeline (notes, calls, meetings, emails, tasks; newest first).

List the caller's open sales tasks (activities of type 'task' not yet done), bucketed overdue / today / upcoming and ordered most-urgent-first with per-bucket counts. Close one with complete_sales_task.

What needs attention across my business? Return the same private, counts-only review as the browser: Sales tasks, Marketing approvals, Accounting runs and Consulting work, with deterministic next actions. Legal is a governed entry point, not a verified review queue; generated Legal advice is disabled. No raw documents, amounts, contacts or private text are returned. Never sends, approves, pays or

Sales pipeline analytics for the caller: probability-weighted forecast, per-stage $ rollup, win rate (won / decided, by count and by value), average sales-cycle days over won deals, and open-deal aging with a stale count. Read-only; computed from the caller's own deals. Requires authentication.

The caller's prioritized next-best sales actions: interested leads to convert, open deals gone stale enough to need a follow-up, and overdue tasks — each with a rationale and the exact governed tool to run next (convert_lead_to_deal / log_deal_activity / complete_sales_task) plus its arguments. Read-only; ranks the caller's own CRM data (overdue > convert > follow-up). Nothing is executed or sent

Health scores for the caller's OPEN deals: each scored 0-100 on how likely it is to be slipping (healthy >= 70 / watch / at_risk), worst first, with plain-language reasons — days since last logged contact, whether it is past its own expected close date, and how its age compares to the caller's average won-deal cycle. Includes per-band counts, an average score, and the reference cycle. Read-only an

Create a sales deal owned by the caller. Provide a title, or a lead_id to inherit the lead's company/name as the title. The deal appears live on the owner's Sales board. No deletes are exposed over MCP.

Update one of the caller's deals — most commonly to ADVANCE its stage (e.g. discovery -> proposal). Moving to closed_won/closed_lost stamps the close date; reopening to an open stage clears it. Only the fields you pass change; deal_id is required.

Convert an owned outreach lead into a deal and advance the lead into the deal stage of the funnel (never downgrading an already-closed lead). Optional deal fields mirror create_deal; lead_id is required.

Log an activity on a deal (or lead) — a note/call/meeting/email, or a follow-up task with a due date. Pass deal_id and/or lead_id (each must be owned by the caller). type defaults to 'note'; for a task set type='task' and a due_date (YYYY-MM-DD). Tasks appear in list_sales_tasks.

Mark one of the caller's sales tasks/activities done (or reopen it with done=false). Stamps or clears the completion time; activity_id is required.

List the caller's invoices (newest first), optionally filtered by status (draft/sent/paid/void). Each entry includes its computed overdue flag.

Fetch one of the caller's invoices by id, including its line items.

Summarize the caller's unpaid invoices by how long they have been past due. This owner-scoped, read-only report is computed live; an invoice is overdue only when its status is sent and its due_date is before today. Balances are separated by currency, with no conversion or combined money total.

Create a draft invoice owned by the caller for a client, optionally seeded with line items and linked to an existing deal. Totals (subtotal/tax/total) are computed from the line items and tax_rate. The invoice starts in status 'draft' — call send_invoice to mark it sent.

Update a draft or sent invoice's header fields (client, terms, due date, tax rate, notes). Only the fields you pass change. Blocked once paid/void — void and re-issue instead. invoice_id is required.

Add a billable line item to a draft or sent invoice; totals are recomputed automatically. Blocked once paid/void. invoice_id is required.

Mark a draft invoice as sent (stamps issued_at). Re-sending an already-sent invoice is a harmless no-op. invoice_id is required.

Mark a draft or sent invoice as paid (stamps paid_at). Cannot be applied to a void invoice. invoice_id is required.

Void a draft or sent invoice. Cannot be applied to an already-paid invoice (issue a credit note instead). invoice_id is required. No delete tool is exposed over MCP — void is the terminal non-destructive state.

Create a draft invoice from one of the caller's deals: one line item for the deal's amount, client_name defaulted from the deal's company/title. deal_id is required.

Every new run requires one explicitly assigned entity and calendar tax_year in scope. Optional inclusive period_start/period_end must remain in that year. Unassigned source occurrences remain pending and excluded from amounts. Inspect catalog.scope_review, then resubmit with scope_assignments keyed by source document and original record number; raw receipts use record null. Bookings are caller dec

List only the caller's private Accounting-run audit metadata, newest first. Raw source text and analysis results are intentionally omitted.

Get one private Accounting run owned by the caller, including its deterministic estimates, disclaimer, engine revision, and audit timestamps. Source input stays omitted unless include_input=true is explicitly requested.

Hide one owned Accounting run from normal lists and reads. Its encrypted data and provenance are retained and restore_accounting_run reverses this action; this is not permanent erasure. Repeating delete is safe. No external service is contacted.

Restore one owned soft-deleted Accounting run to normal lists and reads, retaining its original encrypted data and provenance. Repeating restore is safe. No external service is contacted.

Preview, without writing, how one completed owned Accounting run's WRITEOff work plan would map to stable Meta Council tickets. Reports creates, updates, unchanged tickets, human-edited generated fields that will be preserved, and identity conflicts. Requires both accounting:read and tickets:read; tickets:write also satisfies the ticket-read grant. Preview before committing because tickets are not

Commit a previously previewed completed Accounting run's WRITEOff work plan to stable owner-private Meta Council tickets. The expected_plan_hash from the preview is required, retries are idempotent, stable references prevent duplicate tickets across reprocessed runs, and human edits to generated content fields are preserved. Status, assignee, hierarchy, and completion are not reset. Requires both

Preview or idempotently commit an owner-private ticket tree generated from a planning prompt or supplied structured plan. Requires tickets:write. A preview without a supplied plan invokes the planner model and additionally requires councils:run; supplied-plan preview and commit are provider-free and need only tickets:write. Preview is non-mutating and returns the normalized commit payload, an exac

Preview or idempotently commit one atomic owner-private batch of structured tickets and nested subtickets. Preview is non-mutating and returns the normalized commit payload, exact preview_token, and deterministic predicted IDs as JSON. Commit requires that exact token: combine commit_payload with mode=commit, the caller-held idempotency_key, and preview_token. It returns the same IDs plus replay s

Page through the caller's tickets on the Meta Council board. The opaque next_cursor is owner- and filter-bound; keep every filter unchanged on the next call. Immutable cursor ordering keeps a stable full-board traversal exact while returned tickets are edited or reordered. Filter by status, assignee, action_type, priority, parent_id (a ticket UUID, or 'none' for root tickets only), or free-text q

Full detail for one owned ticket: description, acceptance criteria, subticket progress, and the recent activity/comment trail. ticket_id is required. Use ticket_comments for complete bodies and older discussion pages.

Read complete discussion bodies, authors, kinds and timestamps for one owned ticket, including archived tickets. Returns a JSON page, newest first with legacy null times last. limit is 1–100 (default 50). Continue with next_cursor while has_more; reached_oldest means there are no older rows. Cursors are bound to this account/ticket and expire after 24 hours. Omit cursor for a fresh read of newer a

Discover latest owned attention reviews, including cleared, terminal, archived and unavailable work. Requires tickets:read. Filter unresolved (including withdrawn), resolved or all; independently set follow_up=due for saved follow-ups whose stored UTC instant has arrived. Due pages sort oldest first and retain their cutoff; refresh without a cursor for newly due work. Latest-review and declaration

Inspect original reviewed evidence, a separately labeled fresh assessment and immutable owner resolution history. Requires tickets:read. limit 1–50, exclusive before_revision. Current state always refers to the latest review; unavailable work is not proof of deletion or resolution.

Record or withdraw an owner resolution with a required explanation, latest review ID/revision, resolution revision and fresh assessment digest. Requires tickets:write. Use a stable idempotency key; exact retries return the original receipt, conflicts require fresh inspection. Resolution never changes tickets, queue membership, clocks, policy, reviews, follow-ups or action authority. A newer review

Read the owner-private effective attention policy, built-in defaults, applicable statuses and immutable history. Requires tickets:read. limit 1–50 (default 20); exclusive before_revision. Earlier unrecorded history is unknown. No writes or providers.

Save owner-private attention thresholds in UTC days (finite 0–3650), status overrides and optional paused_statuses. Requires tickets:write. Supply full base thresholds, sparse overrides, expected_revision and caller-stable idempotency_key. paused_statuses specifies all four timed reasons with unique status lists including done/cancelled; pauses apply prospectively from this save. Explicit empty li

Read the owner-private current attention assessment, latest review and immutable history. Requires tickets:read. History uses limit 1–50 (default 20) and exclusive before_revision; stays readable after ticket closure/archive/deletion. Evidence-changed and follow-up-due are separate states. Dates become due at start of their recorded IANA calendar day. No writes or providers.

Record an owner-private review of current attention evidence, with optional note (2000 characters) and follow_up_date plus explicit IANA follow_up_timezone, or null for both. Requires tickets:write. Supply the current evidence digest, current review revision (0 first), and caller-stable idempotency key. Exact retries return the original receipt; changed requests, revision or evidence conflict. Ret

Read the same ranked Needs attention queue as the browser and REST. Returns complete JSON with reasons, UTC clock evidence, effective owner policy thresholds and revision, approximation flags, unmet prerequisites and suggested next actions. Ordinary attention covers open active owned tickets; integration recovery also includes retained risks on terminal, archived or deleted-source work. Historical

Projects overview of the caller's board: one entry per top-level epic with recursive descendant progress (done %, counts by status, blocked, points, sub-epics, last activity), plus a triage strip of unrouted work (backlog + unassigned root tickets). Read-only, recomputed live. Use this before planning a session to see initiative health at a glance; use ticket_list/ticket_get to drill into any id i

One cross-domain rollup of the caller's own workspace: council sessions (total, last 30 days, by status, tokens), feedback ratings, tickets (open/done), deals (count by stage, open pipeline value) and invoices (count by status, outstanding total, overdue count). Read-only, recomputed live, and scoped to the caller — it never aggregates across accounts. Amounts are labelled and grouped by recorded

OPERATOR ONLY: cross-owner analytics for the META COUNCIL PLATFORM itself — every account added together, NOT the caller's workspace (use get_workspace_metrics for that). Requires both the platform:admin scope AND an ADMIN_EMAILS operator account; everyone else gets a permission error. Returns content-free aggregates only: account counts, 30-day active owners, session counts by status and token to

OPERATOR ONLY: visitor traffic for the META COUNCIL PLATFORM's own website — every visitor added together, NOT the caller's workspace (use get_workspace_metrics for that) and NOT the business rollup (use get_meta_council_platform_metrics for that). Requires both the platform:admin scope AND an ADMIN_EMAILS operator account; everyone else gets a permission error naming which of the two requirements

Read one owned feature epic's current task completion, estimates, weekly delivery flow, lead/cycle evidence, risks and throughput scenario. Includes a separate retained-history view of scope additions/removals, estimate changes and accumulated blocked task-hours, with explicit incomplete/ambiguous coverage. Scope history follows the delivery-group hierarchy, not V3 project placement; it is not a p

Daily burndown series replayed from the append-only ticket ledger: per-day scope (existing, non-cancelled), remaining, done levels plus added/completed flows, with a summary. Optionally scope to one epic's current subtree via root_id. Backfill (legacy_snapshot) rows seed state but never count as additions. days clamps to 7-180 (default 30). Optionally pass target_date to overlay a straight-line pl

Read immutable owner-private observed label assignments/removals, revision bindings and legacy limits. Retains deleted tickets. Bounded cursor pagination; no provider or ticket changes.

Report a fixed cohort holding one exact label at the UTC window start, observed daily task completions/reopens, status and point coverage. Today's labels never rewrite history. end_date is exclusive; default today UTC. Bounded cursor pagination; unknown history is disclosed.

List saved ticket views you can open: the stored filter, column, grouping and sort combinations saved by you, plus any shared with a team you belong to. Shared views appear under the active and all scopes and never once archived, because an owner's archive is their own working state. Returns the same payload the web app's saved-view list returns. Requires authentication and the tickets:read scope.

Fetch one saved ticket view's definition by id: its name, filters, columns, grouping, sort and whether it is shared. This returns the view itself, not the tickets it selects -- use execute_saved_view to run it. A view you cannot read is reported as not found rather than as forbidden, so this cannot be used to discover that someone else's view exists. Requires authentication and the tickets:read sc

Run saved ticket, attention or reviewed-work intent against live owned data. Ordinary views return matching tickets and optional group counts. Triage returns the original reader envelope in data, the view and a definition_token. For triage continuation send expected_definition_token; attention uses next_offset, reviewed work uses next_cursor with offset0. A changed definition refuses409: reload an

Browse owned saved reports in portfolio (default), project or all scopes, newest first. Project scope requires project_id. Each report supplies its immutable ID and payload hash for comparisons or replacement declarations. Continue with next_before_id while has_more; omit the cursor to refresh newest captures. Counts are stored rollups, not accuracy or approval claims. tickets:read.

Read bounded outgoing replacement chains and incoming owner declarations for one owned saved report. Absence means no replacement recorded, not approval. Continue outgoing pages with next_snapshot_id and incoming pages with next_before_relation_id. Original reports and downloads never change. tickets:read.

Verify and return the retained minimal inputs and regenerated counts of one owned project report. Reads stored inputs only; later ticket moves or deletion do not recapture the report. Legacy reports without retained inputs return a precise unavailable dependency. Requires tickets:read.

Download one owned saved report using the same JSON, CSV, accessible HTML or optional tagged PDF renderer as the browser. Returns filename, media_type, encoding, content and SHA-256; PDF content is base64. Unsupported PDF fonts or renderer dependencies return an explicit error with HTML fallback. No network delivery or share link is created. Requires tickets:read.

Record that one owned saved report replaces another, with a required reason and both fetched payload hashes. This is an immutable owner declaration, not approval, sharing or a claim of accuracy. Both reports must have no replacement recorded. Use the same key and exact payload after an uncertain response; exact retries return the original receipt even after later replacements. Conflicting keys, se

List your own portfolio (default), project or all snapshots, newest first. Project scope requires project_id: the immutable rollups of how your ticket portfolio stood at the moments you captured them. Each carries its label, schema version, stored payload, content hash, recording actor and creation time. Snapshots are owner-private and never span accounts. Returns the same payload the web app's sn

Fetch one portfolio snapshot by id: its label, schema version, the exact stored rollup payload, its content hash, who recorded it and when. The payload is served from storage and is never recomputed from live tickets, so a snapshot read today reports what was true when it was taken. A snapshot you do not own is reported as not found rather than as forbidden. Requires authentication and the tickets

Compare two of your own portfolio snapshots and return the per-dimension movement between them. snapshot_id is always the 'to' side; against is the 'from' baseline, defaulting to your newest snapshot in the same project or portfolio strictly older than it -- the 'what changed since last time' read, which is reported as not found when this is your first snapshot. Comparing an older snapshot against

Read the decision and comment thread recorded against one of your portfolio snapshots, oldest first. Each note carries the snapshot content hash it was written against plus binding_intact comparing that hash to the snapshot's hash now, so a note can be read as evidence of what was actually on the screen when it was written. Counts are over the notes actually returned, so a truncated page never rep

Save a named ticket filter, column, grouping and sort bundle so you can reopen it later or share it with a team. Saves the QUESTION, not an answer: the view is re-run against live tickets every time it is opened, so it never goes stale. The new view is private until you share it. Same endpoint the web app's save button uses. Requires authentication and the tickets:write scope.

Revise one of YOUR OWN saved views in place, keeping its id and any existing team share. Only the fields you send change; the rest are left exactly as they were, while scorecard-enrolled views require the current definition_revision; after a conflict or uncertain reply, read current state and deliberately reconcile. Sharing a view does not let its readers revise it -- only the owner may. Requires

Retire one of YOUR OWN saved views without destroying it: it drops out of the default listing and execute_saved_view refuses it, but its definition is kept and restore_saved_view brings it back unchanged. Prefer this over delete_saved_view. Idempotent -- archiving twice keeps the original archive time. Archiving is your own working state and does not hide the view from a team it is shared with. Re

Return one of YOUR OWN archived saved views to the working set with its definition intact. Idempotent -- restoring a view that is already active is a no-op rather than an error. Use list_saved_views with scope=archived to find restorable views. Requires authentication and the tickets:write scope.

Share one of YOUR OWN saved views with a single team you belong to. Members may read, list and execute it; only you may revise, re-share or delete it. Executing a shared view runs it against the READER's own tickets, so this shares the question and never the answers. Re-sharing to a different team MOVES the view rather than adding a second grant -- a view is readable by at most one team. Note: tea

Make one of YOUR OWN shared saved views private again. Idempotent. Revocation is immediate: team membership is resolved on every read and never copied into a grant, so this takes effect on each member's next request. Requires authentication and the tickets:write scope.

Permanently delete one of YOUR OWN saved views. UNRECOVERABLE -- there is no undo and the definition is not retained. archive_saved_view is the reversible retirement and is almost always what is wanted instead; use this only for a view that should actually be gone. Deleting a shared view removes it for the team too. Requires authentication and the tickets:write scope.

Capture an immutable rollup of YOUR OWN ticket portfolio, or one owned ProjectWorkspace when project_id is supplied, as it stands right now -- totals by status and priority, fixed at this moment and never recomputed. A snapshot is the durable 'here is where we were' that a later diff_portfolio_snapshots measures movement against, so capture one before a review rather than after. Snapshots cannot b

Record a decision or comment against one of YOUR OWN portfolio snapshots. Pass expected_content_hash -- the hash you saw when you read the snapshot -- and a mismatch is REFUSED rather than quietly filed against a different revision; that check is the point of this tool. Omitting it still records the note, it just does not assert which revision was on the screen. This writes down what was decided;

Finalize one immutable validation run for an exact owned ticket scenario revision. Requires the opt-in tickets:validate scope. The server derives owner and actor only from the authenticated API key. Evidence payloads are bounded opaque JSON objects; locator-looking strings are recorded but never opened, resolved, redirected, or fetched. Exact retries by the same credential actor return the origina

Author one Given/When/Then scenario on an owned ticket. This is the specification an epic must carry before it can be completed: record a passing run against it with ticket_validation_finalize, then transition the epic. The server owns revision 1 and returns current_version and current_definition_hash — pass those exact values to ticket_validation_finalize. Authoring a scenario is not evidence; it

Replace an owned scenario's content, compare-and-swapping on expected_version. Revisions are append-only: validation runs already recorded keep naming the exact version and hash they were proven against, so revising never rewrites past evidence — it does mean the epic needs a fresh passing run against the new version. A stale expected_version conflicts rather than overwriting a concurrent edit.

Explain why an owned ticket is not ready to close, using the same readiness check as the browser. Returns gated, ready, and the complete bounded blocker list with each code, reference_id and message. An unready ticket is a successful diagnostic, not a tool failure. This snapshot does not authorize completion or change tickets, scenarios, evidence or validation-attempt budgets. Requires authenticat

List an owned ticket's scenarios with their exact current revisions, including the current_version and current_definition_hash that ticket_validation_finalize requires. Read-only. Use it before recording a run to confirm which revision is current, and to see why an epic still reports required_scenario_missing.

Record that an owned ticket cannot complete until another owned ticket is done. The edge is never erased: correct a mistake with ticket_dependency_remove, which marks the edge removed and appends to a ledger rather than deleting anything. Re-adding the same prerequisite reinstates that original edge instead of creating a second one, so an edge removed and restored says so. An edge stops blocking w

Stop an owned ticket from waiting on a prerequisite. Removing the last unsatisfied edge can allow this ticket to close, so this is a gate-opening action. Nothing is deleted: the edge is retained, marked with who removed it and when, and the removal is appended to a ledger that survives everything after it. This is not a way to say the prerequisite work is finished — that remains a separate stateme

List the prerequisites an owned ticket waits on. Read-only. Each edge reports satisfied, which is true only when the prerequisite is done, plus active/removed_at/removed_by_actor. Removed edges are omitted unless include_removed is true; they never gate completion, and are readable as history.

Create a ticket on the caller's board — optionally as a subticket via parent_id. Recommend degree of difficulty with effort (trivial|small|medium|large|epic) and the kind of work with action_type (strategy|implementation|research|validation|testing|coordination). The authenticated API-key UUID is stamped by the server as creator provenance; callers cannot supply or spoof it. Session/workflow ids a

Update fields on an owned ticket — status moves (each one is auto-logged to the ticket's audit trail), reassignment, priority/effort/action_type recommendations, title/description edits, safe reparenting, opaque session/workflow links, effort points, order, and user-owned external refs. Clear flags are explicit so stdio clients never lose JSON nulls. System-owned provider, Accounting, plan, and ba

Retire an owned ticket from the working set, or restore one. Archiving is a different axis from status: the ticket keeps whatever status it had, so a done ticket stays done and a blocked one comes back still blocked — never use status 'cancelled' to mean 'archived'. An archived ticket disappears from ticket_list, the stats, the buckets, the attention queue, and outbound JIRA/Linear sync, but keeps

Add a comment to an owned ticket's activity trail. Use kind='progress' for work updates while a ticket is in progress. The authenticated API-key UUID is stamped as author; callers cannot supply or spoof it. Open the comment in plain language before any technical detail — these are read during escalations by people who were not part of the work.

Claim a ticket to work on: sets assignee to your agent name and moves it to in_progress in one step (the move is audit-logged). Refuses if another agent already has it in progress unless force=true. Follow up with ticket_comment progress updates and finish via ticket_update status='done'.

Report feedback about the META COUNCIL PLATFORM itself — a noticeable performance failure, a lacking/missing capability, a bug, or a UX/docs gap in Meta Council's tools, councils, workflows, or MCP surface. Platform feedback only: do NOT use this for anything about your own business, customers, deals, invoices, or other data Meta Council manages on your behalf — use the relevant business tool for

ADMIN ONLY: list platform-feedback reports — feedback about Meta Council itself, never a tenant's own business data — across all users for triage (requires an ADMIN_EMAILS account; everyone else gets a permission error). Filter by status, category, or severity.

ADMIN ONLY: triage a platform-feedback report — set its status and/or admin notes (requires an ADMIN_EMAILS account; everyone else gets a permission error). Get the full feedback id from list_meta_council_feedback.

List brand identities owned by the API-key account.

Get one owned brand identity with its voice, value proposition, and guidelines.

List reusable marketing audiences owned by the API-key account.

Get one owned audience definition with pain points and channels.

List owned marketing campaigns. These are separate from Sales outreach campaigns.

Get one owned marketing campaign with its brand, audience, channels, and dates.

List owned content assets and immutable revisions; content is never published by this tool.

Get one owned content revision, including its review state and exact content hashes.

List scheduled owned content between optional ISO-8601 boundaries. Scheduling is planning metadata, not publishing.

Create an owner-private brand identity. Requires marketing:agent_write.

Update fields on one owned brand identity. No delete is exposed over MCP.

Create an owner-private reusable audience definition.

Update fields on one owned audience definition. No delete is exposed over MCP.

Create an owner-private marketing campaign linked only to owned brand/audience ids.

Update one owned marketing campaign. Campaign status never publishes content.

Create a private draft content asset. There is no publish/send operation.

Edit an owned draft. Submitted/approved/rejected revisions are immutable and must be revised.

Create a new owned draft revision from a frozen submitted/approved/rejected revision.

Submit an owned draft for review, freezing that exact revision and content hash.

Approve a submitted owned revision and attest to its exact content hash. Requires marketing:approve, separate from draft authority.

Reject a submitted owned revision with optional reviewer notes. Requires marketing:approve.

List consulting clients owned by the API-key account.

Create an account-private consulting client.

Update mutable fields on an owned consulting client.

List consulting engagements owned by the API-key account.

Create an engagement for an owned consulting client.

Update mutable fields on an owned consulting engagement.

Get one owned engagement with its document revisions, milestones, and internal deliverables. Long document bodies are previewed.

Create a revision-safe proposal or SOW draft on an owned engagement.

Edit an unapproved proposal/SOW revision; approved revisions are immutable.

Idempotently initialize stable engagement milestones. Retries return the same ids and external refs.

Update an owned consulting milestone while preserving its stable ref.

Create an internal draft deliverable on an owned engagement.

Edit an internal draft deliverable; review/approval state is separate.

Submit an owned draft deliverable for internal review without publishing it.

Return an unapproved review deliverable to editable draft status.

Approve and lock one exact proposal/SOW revision. Requires the separate consulting:approve scope and never publishes or shares it.

Approve one submitted internal deliverable and record approver evidence. Requires consulting:approve and never publishes or sends it.

Create a new custom workflow template the caller owns, so a multi-step pipeline can be built in conversation instead of by hand in the browser. Saves the same definition the web builder saves. The slug is derived from the name and is returned — use it with run_workflow. Legacy workflows run in dependency order; steps ready together share one bounded parallel layer, while no depends_on keeps author

Replace an existing custom workflow template's definition. This is a full replacement, not a patch: supply name and steps as you want them to end up, because anything omitted is not carried over. Built-in templates are read-only, and only the template's owner may change it. Legacy workflows run in dependency order; steps ready together share one bounded parallel layer, while no depends_on keeps au

Delete a custom workflow template the caller owns. Built-in templates cannot be deleted. This removes the saved definition; runs already started from it are unaffected. Requires authentication and the workflows:write scope.

Save a standing watch that fires later, on its own: when a count you name crosses a line you set, do the thing you chose. Lets an agent bank a condition and stop polling for it. The watch survives the conversation that created it. Note that start_workflow spends the account's credits unattended each time it fires, so the cooldown is the only thing bounding what it costs. Requires authentication, a

List the standing watches you have saved, newest first, with what each one watches, what it does, and when it last fired. Requires authentication and the monitors:read scope.

Delete one of your standing watches, so it stops firing. Does not touch anything it already started. Requires authentication and the monitors:write scope.

List workflow checkpoints waiting on you, soonest deadline first, with which step is paused and when it runs out. Defaults to the pending ones. Requires authentication and the workflows:read scope.

Answer a waiting checkpoint by request id: approve, reject, or amend. 'amend' means send the step back to be redone with the change described in notes, so notes are required for it. Spends money: approve continues the run and amend re-runs the step, both billed. Fails with a clear error, rather than silently doing nothing, if the run is no longer waiting. Requires authentication and the workflows:

Export this workspace's own agent-action audit trail as structured events, oldest first, for loading into a SIEM. Each event carries what triggered the action, which identity authorized it, which resource was touched, the outcome, and the error state. Metadata only -- no prompt text, document content, tool arguments, or model output is ever returned. Filter by date range and event action; page for

Export this account's own data across every table the account owns, as the same JSON envelope the REST route returns. The set of tables served is derived from the same ownership reflection that decides what an account deletion removes, so a table the account can destroy is a table it can also read. Credentials never appear: columns held encrypted at rest are withheld unless recorded as the account

List the account's overarching project workspaces, separate from feature epics. Optional context_kind filters the owner's classification; unclassified includes legacy unset projects. Requires tickets:read.

Create an owner-private project with intent and goals. Persist request_id before calling; retry exact input after an uncertain response. Does not start work or create tickets.

Read project intent, current document IDs/revisions and linked feature epics. Read document bodies with project_document_get and follow ticket_get/ticket_list for execution work.

Revision-safely edit project context. Supply expected_revision from project_get and a new request_id. Stale edits conflict instead of overwriting another agent.

Link an existing owned parentless epic to this project. Exact retry reuses the link; linking an epic already belonging to another project conflicts. Does not reparent, claim or execute the ticket.

Remove one exact project-feature placement, retaining the ticket. Read binding_id from project_get first; stale bindings or document references conflict. Does not delete tickets or documents.

Save the first immutable project brief, PRD, technical specification or decision revision. Optional ticket_id scopes the document to a linked feature. reviewed is editorial metadata, never execution approval.

Read one exact owned project document revision and its bounded revision history. Omit revision for latest; use explicit revision when recording evidence.

Append an immutable document revision using expected_revision and a caller-retained request_id. Exact retry reconciles even after later edits; changed input or stale base conflicts. No provider execution or external publication.

Save immutable scope, estimates and explicit plan versions/dates for an owned delivery group. Reuse request_id on retries; a new request_id captures a new baseline. Requires tickets:write.

List saved baselines for an owned delivery group, newest first. Includes retained baselines after group deletion. Requires tickets:read.

Read frozen structural scope, estimates and captured explicit plans for an owned baseline. Older schema1 dates remain unknown. Requires tickets:read.

Compare an owned baseline with current scope, estimates and completion. Deleted/moved tickets remain visible; unknown estimates are not zero. Requires tickets:read.

Read the explicit dated plan of an owned ticket, including archived or retained deleted-ticket plans. Absent plans remain unknown. Requires tickets:read.

Explicitly replace or clear a ticket plan. Dates and working-day duration are separate from points. Pass current expected_version; reuse exact request_id on retries. Changed saves atomically record immutable revision and plan_changed history. No automatic scheduling/execution. Requires tickets:write.

Read immutable plan revisions, newest first, including retained deleted-ticket history. Continue with next_before_version. Requires tickets:read.

Read a delivery group planned/actual timeline and optional frozen-baseline variance, plus explanatory dependency risks. Unknown dates/history are not inferred. Bounded to 10,001 owned tickets (10,000 work tickets plus a root); pages of 1–500, default200. Critical path only for supported complete calendar/duration graphs; no dates move. Requires tickets:read.

Create an empty owned collection of finished runs to measure against. Membership is append-only: nothing can be removed or edited once added, so a fixture cannot be adjusted after the result is seen. Requires comparisons:write.

List your comparison sets, newest first, without their membership. Requires comparisons:read.

Read one comparison set and its membership in fixed order. Requires comparisons:read.

Append finished runs you own to a set. All or nothing: a run that is unknown, not yours, still running, or already a member refuses the whole call and leaves the set exactly as it was. Requires comparisons:write.

Report per member whether it can still be compared, and why not when it cannot. Membership is permanent, so a member that became unreadable is reported as ineligible rather than quietly dropped. Requires comparisons:read.

Re-run a member's workflow as it stands today and record the result as a new run. This calls model providers and costs money; it is priced and refused against your budget before anything starts. It does not act on the outside world a second time: connector steps are served from the baseline's recorded responses and agent steps keep only offline calculation tools. Returns the new run, not a compari

Record one durable comparison between a member run and a candidate run you own, usually one a comparison just created. Requires comparisons:write.

Read one recorded comparison back exactly as it was stored. Requires comparisons:read.

Record an accept or reject call over the comparisons you name, under the default decision rule or thresholds you state. An undecided result records nothing and is reported instead. Requires comparisons:write.

Read one recorded verdict, the comparisons it was asked over, and the rule it was decided under. Requires comparisons:read.

Start a caller-executed sales evidence draft. Returns frozen instructions for your agent to execute. No server model call, tools or sending. Reuse request_id only with identical inputs. Results are caller attestations, not verified provider usage. Requires workflows:run.

Read your retained external draft, next step or checkpoint digest after reconnect/restart. Execute only the returned next_step. Source material is untrusted data. No model invocation. Requires workflows:read.