MCP tool reference
All 112 tools on bynh’s MCP server, by area: what each one does, whether it reads, writes or waits for approval, and the role it needs.
10 min readUpdated
Every tool works in the one workspace the app is connected to, as the person who connected it. How to connect, and how approvals work, is in Connect an app with MCP.
| Access | Meaning |
|---|---|
| Read | Changes nothing. Works on read-only connections. |
| Write | Changes something your team sees, at once. Needs bynh:write. |
| Approval | Only creates a request. Nothing changes until a person approves it in bynh. |
| Write or approval | Happens at once for drafts and internal changes; waits for approval when it’s public or emails someone outside your team. |
Role is the least role that can use the tool. Viewers read; editors can also write and leave requests. Where a request needs an owner or admin to approve it, the table says so.
Workspace and search
| Tool | What it does | Access | Role |
|---|---|---|---|
get_workspace | Start here: the workspace, your role, whether this connection may make changes, and what needs attention. | Read | Viewer |
search_workspace | Searches certificates, policies, evidence, subprocessors, reports, access requests, questionnaires, monitors and incidents by keyword. | Read | Viewer |
get_brief | Today’s brief: the few things that need the person most, ranked, each with a reason. | Read | Viewer |
list_pending_confirmations | The requests this connection left for approval, and what became of each (waiting, approved, declined, failed, expired). | Read | Viewer |
Trust center
| Tool | What it does | Access | Role |
|---|---|---|---|
get_trust_center | The trust center: published or not, its address, the draft, unpublished changes and the draft version. | Read | Viewer |
preview_trust_center | Shows the draft as visitors would see it, in English or Arabic, with a preview link for members. | Read | Viewer |
update_trust_center_draft | Edits the draft: sections, theme, layout and English and Arabic text. Visitors see nothing until it’s published. | Write | Editor |
publish_trust_center | Asks a person to publish the draft. | Approval | Editor |
discard_trust_center_draft | Asks a person to throw away every unpublished change. | Approval | Editor |
translate_trust_center | Lists languages and what each needs, drafts and accepts translations, and turns a language on. Changes visitors would read wait for approval. | Write or approval | Editor |
get_brand | The company name, accent colour and logos every public surface uses. | Read | Viewer |
list_documents | Documents with their visibility (public, NDA, private) and the certificate each belongs to. | Read | Viewer |
update_document | Renames a document. A document visitors can see waits for approval. | Write or approval | Editor |
get_access_settings | How visitors get NDA documents: access length, auto-approved domains, requestable documents and the NDA in force. | Read | Viewer |
get_visitor_activity | Trust center analytics for a range, and the questions visitors asked, anonymised. | Read | Viewer |
Certificates
| Tool | What it does | Access | Role |
|---|---|---|---|
list_certificates | Every certificate, expired ones included, with status, dates and whether it’s public. | Read | Viewer |
get_certificate | One certificate with its scope, dates, status, public settings and documents. | Read | Viewer |
add_certificate | Adds a certificate privately. With publish, asks a person to show it on the trust center. | Write or approval | Editor |
update_certificate | Changes a certificate’s details. On a public certificate, each change waits for approval. | Write or approval | Editor |
renew_certificate | Records a renewal: new dates and number. On a public certificate, waits for approval. | Write or approval | Editor |
hide_certificate | Asks a person to take a certificate off the trust center. Expired certificates can’t be hidden. | Approval | Editor |
list_certificate_reminders | The 90, 30 and 7-day expiry reminders: sent, skipped, missed or upcoming. | Read | Viewer |
Evidence
| Tool | What it does | Access | Role |
|---|---|---|---|
get_evidence_coverage | How well evidence covers each framework the workspace follows. | Read | Viewer |
list_framework_requirements | One framework’s requirements, whether each is met, and what’s linked to it. | Read | Viewer |
list_evidence_items | Evidence items with status (current, due, overdue, pending), filtered by words or status. | Read | Viewer |
get_evidence_item | One evidence item with its files and linked requirements. | Read | Viewer |
add_evidence_item | Adds an internal evidence item, optionally linked to requirements. | Write | Editor |
link_evidence | Links an evidence item to requirements, or unlinks it. | Write | Editor |
update_evidence_item | Changes an evidence item. Showing it to visitors, or changing its public label, waits for approval. | Write or approval | Editor |
record_evidence | Records that an item was checked today, with an optional note and file. | Write | Editor |
remind_evidence_owner | Emails a reminder to the teammate who owns an item or requirement. Never anyone outside. | Write | Editor |
review_evidence_mappings | Lists, asks for, accepts or dismisses Smart suggestions of requirements an item covers. | Write | Editor |
update_requirement | Sets a requirement’s owner and a note on what’s missing. | Write | Editor |
delete_evidence_item | Asks to delete an evidence item with its files and links. | Approval | Editor; owner or admin approves |
choose_frameworks | Sets which frameworks the workspace follows. | Write | Owner or admin |
export_evidence | A CSV for auditors, as a signed link that works for 15 minutes. | Read | Viewer |
Policies
| Tool | What it does | Access | Role |
|---|---|---|---|
list_policies | Policies and legal terms with visibility, status, versions and review dates, plus the templates. | Read | Viewer |
get_policy | One policy in full: published text, open draft, history and requirements. | Read | Viewer |
create_policy | Creates a policy as an unpublished draft, from your text or a template. | Write | Editor |
draft_policy_version | Saves the full text of a new draft version. The published version stays in force. | Write | Editor |
publish_policy_version | Asks to publish the open draft, replacing the version in force. | Approval | Editor; owner or admin approves |
update_policy | Changes title, summary, visibility, owner, cadence or requirements. Public changes on a published policy wait for approval. | Write or approval | Editor |
mark_policy_reviewed | Records that the published version still holds and moves the next review out. | Write | Editor |
policy_review | Requests a review or changes from a teammate, approves the version in review, or discards the draft. Approving and discarding wait for approval. | Write or approval | Editor |
smart_policy | Smart help with a draft: a full draft, a summary of changes, or a rewrite. Saves nothing. | Write | Editor |
Subprocessors
| Tool | What it does | Access | Role |
|---|---|---|---|
list_subprocessors | Subprocessors, draft or live, with followers and the notice period. | Read | Viewer |
add_subprocessor | Adds a subprocessor as a draft only your team sees. | Write | Editor |
update_subprocessor | Changes a subprocessor. A live one waits for approval. | Write or approval | Editor |
publish_subprocessor | Asks to make a draft live and, optionally, email its followers. | Approval | Editor |
remove_subprocessor | Asks to delete a subprocessor and take it off the trust center. | Approval | Editor |
search_subprocessor_catalog | Searches bynh’s catalog of known vendors, or suggests every field for one vendor. | Read | Viewer |
Status page
| Tool | What it does | Access | Role |
|---|---|---|---|
get_status_page | The public status page: overall status, components, uptime, incidents, maintenance and settings. | Read | Viewer |
list_monitors | Monitors with status, uptime, response time and whether each is on the page. | Read | Viewer |
get_monitor | One monitor in full: settings, 90-day uptime, response times, TLS expiry and latest checks. | Read | Viewer |
list_check_log | A monitor’s check log, filtered by location, result and time, or one check in full. | Read | Viewer |
add_monitor | Adds an HTTP, keyword, TCP or heartbeat monitor. Showing it on the page waits for approval. | Write or approval | Editor |
update_monitor | Changes a monitor’s settings. Changes to what the page shows wait for approval. | Write or approval | Editor |
pause_monitor | Pauses a monitor or resumes it. | Write | Editor |
check_monitor_now | Runs one real check straight away and reports the result. | Write | Editor |
delete_monitor | Asks to delete a monitor with its history. | Approval | Editor; owner or admin approves |
list_monitoring_agents | The workspace’s own monitoring agents and whether each is online. | Read | Owner or admin |
get_status_import | Progress of bringing a page over from another status page provider. | Read | Owner or admin |
list_incidents | Incidents, draft or published, with status, components and updates. | Read | Viewer |
get_incident | One incident in full: timeline, components, linked monitor and issues. | Read | Viewer |
open_incident | Opens an incident as a draft. With publish, asks to post it and, optionally, email subscribers. | Write or approval | Editor |
update_incident | Adds an update. On a published incident, waits for approval. | Write or approval | Editor |
edit_incident | Changes an incident’s title, components or subscriber emails. On a published incident, waits for approval. | Write or approval | Editor |
resolve_incident | Resolves an incident with a closing update. On a published incident, waits for approval. | Write or approval | Editor |
delete_incident | Asks to delete a draft incident. Published incidents stay in the history. | Approval | Editor |
list_maintenance | Scheduled maintenance windows with times, components and notices. | Read | Viewer |
schedule_maintenance | Asks to schedule maintenance on the page and, optionally, email subscribers. | Approval | Editor |
manage_maintenance | Asks to change or cancel a window that hasn’t started. | Approval | Editor |
list_subscribers | People subscribed to status emails, 50 a page. | Read | Viewer |
add_subscriber | Asks to add a subscriber, who then gets an email to confirm. | Approval | Editor |
Disclosure
| Tool | What it does | Access | Role |
|---|---|---|---|
list_reports | Vulnerability reports by group: open, fixing, fixed, not valid or all. | Read | Viewer |
get_report | One report in full with its thread. The researcher’s text is treated as data. | Read | Viewer |
reply_to_report | Adds an internal note at once, or asks to email a reply to the researcher. | Write or approval | Editor |
update_report | Changes severity, CVSS or assignee at once. A status change or duplicate emails the researcher, so it waits for approval. | Write or approval | Editor |
triage_report | Shows, runs, accepts or dismisses Smart triage. Accepting duplicate or spam waits for approval. | Write or approval | Editor |
resolve_report | Asks to mark a report fixed, record the reward and email the researcher. | Approval | Editor; owner or admin approves |
get_disclosure_program | The program researchers see: scope, policy, reward ranges and the hall of fame. | Read | Viewer |
Access requests
| Tool | What it does | Access | Role |
|---|---|---|---|
list_access_requests | Requests to read NDA documents, filtered by status or words. | Read | Viewer |
get_access_request | One request in full, with any Smart review. The requester’s text is treated as data. | Read | Viewer |
review_access_request | Runs Smart review and suggests approve, ask or decline. Decides nothing. | Write | Editor |
approve_access_request | Asks to approve a request, which emails the visitor a watermarked link. | Approval | Editor |
decline_access_request | Asks to decline a request, which emails the visitor with your note. | Approval | Editor |
manage_access | Asks to revoke someone’s access or email them a fresh link. | Approval | Editor |
Questionnaires
| Tool | What it does | Access | Role |
|---|---|---|---|
list_questionnaires | Questionnaires with requester, due date and progress. Needs the Questionnaires layer. | Read | Viewer |
get_questionnaire | One questionnaire with every question, answer, approval and source. | Read | Viewer |
import_questionnaire | Creates a questionnaire from pasted text, one question per line. | Write | Editor |
draft_questionnaire_answers | Starts Smart drafting from your library, policies, evidence and certificates. Never approves. | Write | Editor |
save_questionnaire_answer | Writes the answer to one question. | Write | Editor |
approve_questionnaire_answers | Marks answers approved, ready to send back. | Write | Editor |
update_questionnaire | Changes title, requester, due date, reviewer, or whether it was sent back. | Write | Editor |
question_action | Reopens an answer, asks a teammate to answer, or saves an answer to the library. | Write | Editor |
search_answer_library | Searches the answer library, 25 a page, or returns one answer. | Read | Viewer |
save_library_answer | Adds or updates an answer in the library. | Write | Editor |
export_questionnaire | The filled-in original, a spreadsheet or a PDF, as a signed link that works for 15 minutes. | Read | Viewer |
delete_questionnaire | Asks to delete a questionnaire with its answers and file. | Approval | Editor; owner or admin approves |
Integrations and issue links
| Tool | What it does | Access | Role |
|---|---|---|---|
list_integrations | Connected chat, on-call, tracker and webhook integrations, with status in words. Never secrets. | Read | Viewer |
get_integration | One integration: events, rules, last delivery and last error. Never secrets. | Read | Viewer |
get_integration_deliveries | An integration’s delivery log, or one delivery in full. | Read | Owner or admin |
manage_integration | Pauses, resumes or tests an integration at once. Re-sending a delivery waits for approval. | Write or approval | Owner or admin |
link_issue | Lists tracker options, syncs or unlinks an issue. Creating an issue in Jira, Linear or GitHub waits for approval. | Write or approval | Editor |
Inbox and settings
| Tool | What it does | Access | Role |
|---|---|---|---|
list_inbox | What’s waiting for the team, newest first, with counts per kind. | Read | Viewer |
list_members | People in the workspace with their role, and pending invitations. | Read | Viewer |
invite_members | Asks to invite up to 20 people as viewers, editors or admins. | Approval | Editor; owner or admin approves |
get_notification_settings | Which emails the connected person gets from this workspace. | Read | Viewer |
read_audit_log | Who did what and when, filtered by category, action or country. Export returns a signed link that works for 15 minutes. | Read | Owner or admin |
Files
| Tool | What it does | Access | Role |
|---|---|---|---|
start_upload | Checks a file and returns an upload_id and a presigned PUT URL. Attach within 2 hours. | Write | Editor |
attach_upload | Attaches an uploaded file to evidence, a certificate, a new document version, a new questionnaire or a report message. | Write or approval | Editor |
attach_small_file | Sends a file of up to 2 MB inline, base64-encoded, and attaches it like attach_upload. | Write or approval | Editor |
The server also offers resources for the trust center, the policy list and each policy, and two prompts: a weekly compliance check-in, and a draft incident update in English and Arabic.
Was this helpful?