list_workspaces
List only companies assigned to this verified identity.
Input schema and tool call →Reference · v1
MCP reference
Connect a supported AI client or registered application to the same company context through 13 MCP tools. The platform-role tool remains restricted to internal authority.
Endpoint
https://orchesphere.ai/mcpResource: https://orchesphere.ai/mcp. Transport: POST JSON-RPC; no SSE or session ID. Supported protocol versions: 2025-06-18, 2025-03-26, 2024-11-05.
Initialize and discover tools
Obtain a token for the MCP resource, then POST JSON-RPC requests with Content-Type: application/json, Accept: application/json and Authorization: Bearer <access_token>. Use the negotiated MCP-Protocol-Version header on subsequent requests. No session ID or SSE connection is required.
json
{
"jsonrpc": "2.0",
"id": 1,
"method": "initialize",
"params": {
"protocolVersion": "2025-06-18",
"capabilities": {},
"clientInfo": {
"name": "example-client",
"version": "1.0.0"
}
}
}json
{
"jsonrpc": "2.0",
"method": "notifications/initialized"
}json
{
"jsonrpc": "2.0",
"id": 2,
"method": "tools/list",
"params": {}
}- Registered developer applications cannot request orchesphere.admin; set_platform_role remains an internal-authority MCP operation.
- Initial 401 challenge requests orchesphere.read only. Insufficient tool scope returns 403 with the required scopes in WWW-Authenticate.
- Successful tools include both content text and structuredContent; other tool errors use isError:true.
All tools
list_connections
Read permitted provider status and evidence. Registration is not proof of live access.
Input schema and tool call →list_portals
List portals assigned to this identity within the selected company.
Input schema and tool call →list_tasks
List only tasks this identity can access in the selected company.
Input schema and tool call →create_task
Save a task in an assigned portal. This records requested work; it does not execute actions in external systems.
Input schema and tool call →update_task
Update an authorized task. Contributor, reviewer and portal-administrator permissions are enforced by the server.
Input schema and tool call →list_jobs
Read saved jobs submitted by this user; company administrators can read company jobs.
Input schema and tool call →get_job
Retrieve a saved job and its result by ID.
Input schema and tool call →verify_connection
Save a durable, read-only provider identity check and return its job ID. The AWS worker continues after this chat closes. Requires a service verification grant.
Input schema and tool call →cancel_job
Cancel a saved job. Requires requester rights or a company-job cancellation grant.
Input schema and tool call →configure_connection
Register or replace this company’s provider configuration. Use an AWS credential reference, never a secret. This does not establish live provider access.
Input schema and tool call →set_service_permissions
Assign exact service rights to a company member. Exact environment grants replace the all-environments default. An empty actions array denies access. Only the designated global administrator may change grants.
Input schema and tool call →set_platform_role
Revoke an existing platform authority assignment using a platform-admin-controlled internal OAuth binding. Global authority cannot be created or transferred through the application. The last active platform administrator cannot be removed.
Input schema and tool call →