An agent can connect on its own if it already holds BORO_AI_TOKEN.Remote endpoint behind a static API key or header. The registry never sees the value; the agent fills the placeholder.
tools.schemasevery tool has an object input schema
pass
tools.annotations13 of 13 tools declare readOnlyHint or destructiveHint
pass
tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
pass
tools.token_costabout 1,690 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump
stability75 · weight 15
warn
stability.changes16 tool changes in 30 days
pass
stability.rug_pullno tool changed its meaning under the same name
dependenciesn/a · weight 15
n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package
13 tools, about 1,690 tokens to load them all · tool set cb0c02595269 · tools last changed 2026-10-11 · checked 2026-10-19 10:52 UTC
Tool changes
agent_get_conversationchangedinput schema
crm_get_leadchangeddescription, input schema
before
One lead in full — unmasked contact details, notes, events, stage history and open tasks. Scoped to this workspace: a lead id from elsewhere reads as not_found. [scope: crm:read]
after · 52% of words in common
One lead — notes, events, stage history and open tasks. Phone, e-mail and messenger ids are MASKED unless this key also holds crm:read_pii, which the workspace owner grants separately. Scoped to this workspace: a lead id from elsewhere reads as not_found. [scope: crm:read]
Which advertisement produced which conversation: ad id, creative, first-touch flag, and the lead it bound to. The per-click id is NOT returned — only whether one exists. An empty result means no ad-driven conversation has been recorded in the window, not that the tool failed. [scope: marketing:read]
agent_configread-only
How the AI agent is set up for this workspace: mode and persona, working hours, hand-over rules, follow-up cadence, trigger list, actions, voice scenarios, and the TITLES of its knowledge documents. Document text is not returned — the list answers what the agent knows about; reading one whole is a separate, narrower ask. No credential of any kind is reachable from here: an agent's instructions are not its keys. [scope: agent:read]
agent_conversationsread-only
Conversations the AI agent handled, with intent, language, message count and the deal they bound to. Contacts masked. [scope: agent:read]
agent_get_conversationread-only
One conversation with its transcript — what the customer wrote and what the agent answered. [scope: agent:read]
crm_get_leadread-only
One lead — notes, events, stage history and open tasks. Phone, e-mail and messenger ids are MASKED unless this key also holds crm:read_pii, which the workspace owner grants separately. Scoped to this workspace: a lead id from elsewhere reads as not_found. [scope: crm:read]
crm_leads_without_taskread-only
Open leads with no unfinished task against them — the follow-up leak. Sorted by idle time, longest first. Idle days are counted in Asia/Dubai. [scope: crm:read]
crm_list_leadsread-only
Leads in this workspace, newest activity first. Phone and email are MASKED here — use crm_get_lead for one record when the full contact is genuinely needed. `total` is the count before paging, so it answers 'how many leads exist'. [scope: crm:read]
crm_pipeline_overviewread-only
Every pipeline and stage with its lead count and total value. The shape of the funnel. [scope: crm:read]
dashboard_snapshotread-only
The workspace's own KPI contract as the dashboard renders it, with the time it was built. [scope: crm:read]
marketing_snapshotread-only
Advertising performance: spend, reach, clicks, cost per lead, per campaign, plus the CRM join. [scope: marketing:read]
partner_overviewread-only
This partner's own cabinet: referral code and link, the clients who registered through it, the agreed commission rate, what has accrued so far, and which client workspaces this partner currently holds a grant for. Only answers for a token bound to a partner. [scope: partner:read]
voice_callsread-only
Calls with direction, disposition and talk time. Customer numbers masked. [scope: crm:read]
whoamiread-only
Who this token is, which workspace it can read, and which scopes it carries. Call this first: it tells you which of the other tools will work.