Scope and safety

Available

Campaigns, sequences and flows
Prospects, activities and notes
The unified inbox, with AI-drafted replies for you to send
LinkedIn and email account settings
Tags, blacklists, templates, merge fields
Personas and AI agents
LinkedIn posts and scheduling
Analytics and reporting
Tasks, appointments, reminders
Account-wide automations

Not available

These operations are not exposed by any tool, whatever the request says.

Area	Why
Billing — subscriptions, plans, payment methods, invoices, coupons	Money movement is never delegated to an integration
Agency and sub-account administration, licences, impersonation	Account-owner actions with cross-tenant reach
Tenant / white-label configuration	Platform configuration, not account data
Team invitations, role changes, session revocation	Membership is an account-owner action
Account deletion, trial termination, cross-account campaign moves	Irreversible and out of an integration’s remit
Reading back stored credentials — LinkedIn passwords, mailbox tokens, integration API keys	Excluded from every selection set; no tool returns them
Connecting a LinkedIn account, PIN verification, mailbox OAuth callbacks	Take passwords, PINs and OAuth codes; belong in a browser
Sending an inbox message, or deleting a message or saved reply	Drafting is available; delivery stays a human action in the app
Deleting leads, notes, personas, agents, tags, blacklist rules, placeholders or integrations	Irreversible record loss; holiday and reminder deletion are the exceptions
Pausing, resuming or archiving a campaign	Resuming restarts messaging real people — done in the web app
CRM integrations — connecting, reading, field mapping, pushing a lead	Connecting one takes a third-party credential; configure integrations in the web app

Exclusions are enforced on the server. An API key that asks for a blocked operation gets 403 FORBIDDEN regardless of how the request is phrased — the check inspects the GraphQL root field being executed, not the label on the request.

Permissions

Each tool group is tied to a section permission on your account (Campaigns, Accounts, Inbox, Reporting, Personas, Agents, Publish, Tasks, Automations). If your plan or team role does not grant a section, the server hides its tools from tools/list and refuses them on call. Pro-only sequence steps (EMAIL, QUALIFIER, GPT, FINDER, EVENT) are refused on plans without Pro features — call whoami to see what is locked.

Tools that contact real people

Each of these is marked destructive in the protocol, so your MCP client asks for confirmation before running it.

Tool	What happens
`campaign_launch`	Outreach starts sending on the campaign schedule
`campaign_delete`	Moves the campaign to DELETED so it stops appearing — reversible in the database, not from here
`flow_set on an ACTIVE campaign`	Re-evaluates every lead against the new sequence and can cancel pending actions
`campaign_send_test_email`	Sends a real email
`post_upsert with a due scheduledAt`	Publishes to LinkedIn publicly

Editing a live campaign’s sequence with flow_set re-evaluates every lead already in flight. Call flow_audit straight afterwards to see exactly what changed.

Built-in prompts

The server publishes these MCP prompts. Clients that support prompts show them as slash commands or templates.

Prompt	What it does
`launch-campaign`	Plans and launches a campaign, with a mandatory review step
`campaign-health-check`	Diagnoses an underperforming campaign and proposes fixes
`triage-inbox`	Classifies unread replies and drafts responses for approval
`weekly-report`	Cross-campaign performance summary with week-over-week movement
`clone-and-retarget`	Copies a working campaign onto a new audience

Resources

URI	Title	Description
`mcp://reference/schema`	Platform vocabulary	Every enum the API accepts — call the reference tool or read this resource.
`mcp://guide/campaign-playbook`	Campaign building playbook	Full build-a-campaign walkthrough with a worked example.
`mcp://guide/safety`	Scope and safety	What the assistant will do only after asking, and what is never available.

Get Started

Guides

Tool Reference

Available

Not available

Permissions

Tools that contact real people

Built-in prompts

Resources

​Available

​Not available

​Permissions

​Tools that contact real people

​Built-in prompts

​Resources

Available

Not available

Permissions

Tools that contact real people

Built-in prompts

Resources