MCP Integration

13 entities and 49 agent-callable operations in mcp. Each operation is addressed as {mega_tool}/mcp/{entity}/{operation} and carries the same permission check over MCP and REST.

`confined_principal`

Operation	Mega-tool	What it does
`list`	`report_query`	List confined principals (users bound to one closed-mode MCP key) in this organization subtree: user id, policy name, key prefix, active.

`credential_restriction`

Operation	Mega-tool	What it does
`clear_for_user`	`smart_action`	Delete the USER-keyed MCP credential restriction of one user, returning them to their roles' reach.
`get`	`smart_action`	Get the USER-keyed MCP credential restriction of one user (by user_id or email): read_only, the confining organization, operation patterns and reason.
`get`	`config_manage`	Get the credential restriction of one MCP OAuth client (by OAuth client_id): the path allow-list, PRISM operation patterns, token lifetime overrides, OOB…
`set_for_user`	`smart_action`	Create or replace the USER-keyed MCP credential restriction of one user.

`custom_tool`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a custom MCP tool
`delete`	`entity_crud`	Delete a custom MCP tool
`generate`	`smart_action`	Generate a CustomTool config from a natural-language description via Claude (Bedrock-default).
`list`	`entity_crud`	List custom MCP tools
`read`	`entity_crud`	Get custom tool details
`update`	`entity_crud`	Update a custom MCP tool

`custom_tool_execution`

Operation	Mega-tool	What it does
`list`	`entity_crud`	List custom tool executions
`read`	`entity_crud`	Get custom tool execution details

`federated_tool`

Operation	Mega-tool	What it does
`list`	`entity_crud`	List federated tools
`read`	`entity_crud`	Get federated tool details

`federation_host`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a federation host
`inbound_status`	`entity_crud`	Inbound-access posture for federation hosts: whether a credential is set, when it was last used, and which trusts can actually execute.
`issue_inbound_key`	`entity_crud`	Mint or rotate a federation host's inbound credential.
`list`	`entity_crud`	List federation hosts
`read`	`entity_crud`	Get federation host details
`revoke_inbound_key`	`entity_crud`	Revoke a federation host's inbound credential immediately.
`update`	`entity_crud`	Update a federation host

`federation_trust`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a federation trust relationship
`list`	`entity_crud`	List federation trust relationships
`read`	`entity_crud`	Get federation trust details
`set_service_principal`	`entity_crud`	Bind (or clear) the least-privilege local user that inbound federated calls on a trust execute as.
`update`	`entity_crud`	Update a federation trust relationship

`mcp_api_key`

Operation	Mega-tool	What it does
`delete`	`entity_crud`	Delete an MCP API key
`list`	`entity_crud`	List MCP API keys
`read`	`entity_crud`	Get MCP API key details
`update`	`entity_crud`	Update an MCP API key

`mcp_client`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create an MCP client
`delete`	`entity_crud`	Delete an MCP client
`list`	`entity_crud`	List MCP clients
`read`	`entity_crud`	Get MCP client details
`update`	`entity_crud`	Update an MCP client

`mcp_server_profile`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create an MCP server profile
`delete`	`entity_crud`	Delete an MCP server profile
`list`	`entity_crud`	List MCP server profiles
`read`	`entity_crud`	Get MCP server profile details
`update`	`entity_crud`	Update an MCP server profile

`mcp_tool_execution`

Operation	Mega-tool	What it does
`list`	`entity_crud`	List MCP tool executions
`read`	`entity_crud`	Get MCP tool execution details

`mcp_tool_group`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create an MCP tool group
`delete`	`entity_crud`	Delete an MCP tool group
`list`	`entity_crud`	List MCP tool groups
`read`	`entity_crud`	Get MCP tool group details
`update`	`entity_crud`	Update an MCP tool group

`tool_execution`

Operation	Mega-tool	What it does
`trends`	`report_query`	Aggregate MCP tool-execution telemetry over a time window, bucketed by tool, category, or organization.

Parameter schemas and permission codenames are in the full reference — sign in — or call prism_introspect(dimension="capability_search", query="…") with your key.

In the full reference this application appears under config_manage, entity_crud, report_query, smart_action.