List registered tools (all protocols)

GET

/v1/tools

const url = 'http://localhost:8693/v1/tools';
const options = {method: 'GET'};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url http://localhost:8693/v1/tools

Returns all tools across all protocols. Filter by protocol using the protocol query parameter. MCP-only callers may continue using /v1/mcp/tools which is preserved as a backwards-compatible alias.

Parameters

Query Parameters

protocol

string

Filter by protocol (e.g. “mcp”, “http”, “a2a/2025-draft-01”)

Responses

200

Array of registered tools

application/json

Array

Tool registration entry for the universal tool-call layer (ADR-0022 / UTC-008). Extends ToolEntry with protocol declarations and adapter metadata. Backwards-compatible: omitting protocols defaults to ["mcp"].

object

protocols

Protocols this tool accepts. Verifier rejects calls arriving via an unlisted protocol. Supported values: “mcp”, “http”, “a2a/2025-draft-01”. Omit to default to [“mcp”].

Array<string>

description

Human-readable tool description (shown in tool listings)

string

version

Tool schema version (semver)

string

tool_id

required

Unique identifier for the tool

string

name

required

Human-readable name

string

resource_uri

RFC 8707 resource indicator. Token aud must match this.

string

required_capabilities

Capabilities the token must include

Array<string>

max_blast_radius

Maximum blast radius scope (e.g., “namespace:analytics”)

string

requires_execution

Whether execution binding checks (exec_act, inp_hash, target) are enforced

boolean

allowed_operations

Valid exec_act values (when requires_execution is true)

Array<string>

allowed_targets

Valid target URIs (when requires_execution is true)

Array<string>

Example

[
  {
    "protocols": [
      "mcp",
      "http"
    ]
  }
]

503

Tool registry not initialised

application/json

object

error

required

Error code (RFC 8693 compatible)

string

Allowed values: invalid_request unsupported_grant_type access_denied server_error not_implemented not_found method_not_allowed

error_description

Human-readable error detail

string

Example

{
  "error": "invalid_request"
}