Tool reference
The following tables list every tool currently exposed by the Akuity MCP Server.
- Endpoint identifies where the tool is available: the platform endpoint, a direct instance endpoint, or both.
- Level is the lowest guardrail level that allows the call.
Permission checks still apply to every call.
The server also advertises standard MCP tool annotations to clients. Read-only tools set readOnlyHint=true, and platform-only read tools additionally set openWorldHint=false. Read & write tools set destructiveHint=false. Full tools set destructiveHint=true. Tools that apply or delete resources, instances, clusters, or agents also set idempotentHint=true.
Early Access
Tool names, input schemas, and availability may change before general availability.
Tools that depend on Akuity Agents
Some tools read data collected by Akuity Agents and require it to be enabled for the organization, on the Argo CD instance, and on each cluster the agent collects from:
get_k8s_workload_logslist_kubernetes_imagesget_kubernetes_imageget_kubernetes_image_cve_summarylist_kubernetes_timeline_eventsget_argocd_application_eventsworks without it, but the Akuity timeline events in its response require it.
The Akuity Agents tools drive Akuity Agents itself and also require it to be enabled.
Argo CD
| Tool | Purpose | Endpoint | Level |
|---|---|---|---|
get_argocd_application | Read one application: spec, status, conditions and operation state. | Both | Read-only |
get_argocd_application_events | Kubernetes events and Akuity timeline events for an application. | Both | Read-only |
get_argocd_application_tree | Resource tree of an application with per-resource health. | Both | Read-only |
get_argocd_deployment_stats | Deployment frequency and success statistics across the fleet. | Platform | Read-only |
get_argocd_managed_resource_diff | Diff between the live and desired state of a managed resource. | Both | Read-only |
list_argocd_applications | List applications with sync and health status. | Both | Read-only |
list_argocd_instance_clusters | List the clusters connected to an Argo CD instance. | Platform | Read-only |
list_argocd_instances | List the Argo CD instances in the organization. | Platform | Read-only |
list_argocd_sync_events | Sync history across the fleet: who synced which application, when, and the outcome. | Platform | Read-only |
apply_argocd_resource | Create or update Applications, AppProjects, and ApplicationSets from a manifest. | Instance | Read & write |
refresh_argocd_application | Refresh an application so Argo CD re-reads its sources. Nothing is deployed. | Both | Read & write |
rollback_argocd_application | Roll an application back to a previous deployed revision. | Both | Read & write |
sync_argocd_application | Trigger a sync of an application. | Both | Read & write |
apply_argocd_instance | Create or reconfigure an Argo CD instance from a declarative spec: instance settings, config maps, clusters, applications, projects, and ApplicationSets. Additive only, nothing is pruned. | Platform | Full |
delete_argocd_instance | Delete an Argo CD instance. | Platform | Full |
delete_argocd_instance_cluster | Disconnect and delete a cluster from an Argo CD instance. | Platform | Full |
delete_argocd_resource | Delete an Argo CD resource: Application, AppProject, ApplicationSet, Repository, or RepoCreds. Cascading Application deletion can also remove deployed workloads. | Both | Full |
Kargo
| Tool | Purpose | Endpoint | Level |
|---|---|---|---|
get_kargo_project | Read a Kargo project and its pipeline layout. | Both | Read-only |
get_kargo_promotion_stats | Promotion frequency and success statistics across the fleet. | Platform | Read-only |
list_kargo_freight | List freight available in a project or warehouse. | Both | Read-only |
list_kargo_instance_agents | List the agents connected to a Kargo instance. | Platform | Read-only |
list_kargo_instances | List the Kargo instances in the organization. | Platform | Read-only |
list_kargo_promotion_events | Promotion history across the fleet: who promoted which freight to which stage, and the outcome. | Platform | Read-only |
list_kargo_promotions | List promotions in a project with their phase and steps. | Both | Read-only |
list_kargo_stages | List the stages of a project with current freight and health. | Both | Read-only |
apply_kargo_resource | Create or update Kargo resources such as Projects, Stages, Warehouses, and PromotionTasks from a manifest. | Instance | Read & write |
promote_kargo_freight_to_stage | Promote freight to a stage. | Both | Read & write |
apply_kargo_instance | Create or reconfigure a Kargo instance from a declarative spec: instance settings, config maps, agents, projects, stages, warehouses, promotion tasks, and RBAC. Additive only, nothing is pruned. | Platform | Full |
delete_kargo_instance | Delete a Kargo instance. | Platform | Full |
delete_kargo_instance_agent | Delete an agent from a Kargo instance. | Platform | Full |
delete_kargo_resource | Delete a Kargo resource such as a Project, Stage, Warehouse, or PromotionTask. | Both | Full |
Kubernetes
| Tool | Purpose | Endpoint | Level |
|---|---|---|---|
get_k8s_workload_logs | Fetch container logs from a workload managed by an application. | Both | Read-only |
get_kubernetes_image | Read one image's tag, digest, where it runs, and its full CVE list. | Platform | Read-only |
get_kubernetes_image_cve_summary | Get aggregate image vulnerability counts (total images, scanned images, and total CVEs) across the organization, optionally filtered by instance, clusters, or application. Use get_kubernetes_image for the vulnerabilities of a single image. | Platform | Read-only |
list_kubernetes_images | List container images running across connected clusters. | Platform | Read-only |
list_kubernetes_timeline_events | Timeline of resource changes recorded by KubeVision. | Platform | Read-only |
validate_k8s_fix | Dry-run a strategic merge patch against a resource without applying it. Requires update permission. | Both | Read-only |
restart_k8s_workload | Rollout-restart a Deployment, StatefulSet or DaemonSet. | Both | Read & write |
patch_k8s_resource | Apply a strategic merge patch to a resource managed by an application. | Both | Full |
Akuity Agents
| Tool | Purpose | Endpoint | Level |
|---|---|---|---|
get_agent_conversation | Read an Akuity agent conversation, its steps and pending approvals. | Both | Read-only |
list_agent_conversations | List Akuity agent conversations with filters. | Both | Read-only |
list_agent_tools | List the native tools available to Akuity agents. | Both | Read-only |
create_agent_conversation | Start a Deployment Advisor conversation, an On-Call Agent incident investigation, or a pre-promotion risk analysis with the Promotion Advisor. | Both | Read & write |
create_agent_message | Send a follow-up message to an Akuity agent conversation. | Both | Read & write |
set_agent_tool_approval | Approve or reject an Akuity agent tool action that is pending approval. Requires update permission on the target instance. | Both | Full |
Organization
| Tool | Purpose | Endpoint | Level |
|---|---|---|---|
get_organization_audit_logs | Query the organization audit log. | Platform | Read-only |
list_organizations | List organizations the caller belongs to in the connected Akuity region and return their names and IDs. | Platform | Read-only |