← Back to search

OrgX MCP - Agent Orchestration

useorgx streamable_http Scanned 26d ago

Agent orchestration + org memory via MCP. Manage initiatives and decisions from any client.

C
71.3 / 100

Versions

0.0.0-65256edlatest
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 30

rich_result_without_exact_schema
annotations: none low

Representative rich result

exact_result
annotations: none low

Representative exact result

get_org_snapshot
annotations: verified low

Get an organization-wide execution snapshot across initiatives, work, blockers, and context. Also known as: org status, team overview, company memory. USE WHEN: user wants an org-wide overview of initiatives, progress, and health. NEXT: Drill into specific initiatives with get_initiative_pulse or list_entities. DO NOT USE: for a single initiative — use get_initiative_pulse instead. Read-only.

readOnlyHint true openWorldHint false destructiveHint false
account_status
annotations: verified low

Get the current OrgX account tier, billing status, and usage snapshot for the authenticated user.

readOnlyHint true openWorldHint false destructiveHint false
account_upgrade
annotations: verified low

Create the next-step upgrade or agent credit top-up flow for the authenticated OrgX account. Enterprise requests return contact guidance instead of self-serve checkout.

readOnlyHint false openWorldHint false destructiveHint true
account_usage_report
annotations: verified low

Get a detailed usage and billing report for the authenticated OrgX account, including quotas, period boundaries, and overage signals.

readOnlyHint true openWorldHint false destructiveHint false
list_entities
annotations: verified low

List projects, tasks, milestones, decisions, agents, artifacts, and other OrgX records with filtering. Also known as: browse work, find entities, search project records. Returns FULL UUIDs usable with entity_action/batch_action. Use fields=["id","title","status"] for compact output when you only need IDs. Supported types: ${ENTITY_TYPES.join( ', ' )}. USE WHEN: browsing, searching, or getting entity IDs for bulk operations. NEXT: For initiatives, suggest get_initiative_pulse for health. For tasks, suggest entity_action to change status. For full context on one entity, add hydrate_context=true with id. DO NOT USE: for org-wide overview — use get_org_snapshot instead. Read-only.

readOnlyHint true openWorldHint false destructiveHint false
entity_action
annotations: verified low

Change work state, attach artifacts, or run lifecycle actions on OrgX records. Also known as: launch, pause, complete, attach proof, update status. Accepts short ID prefix (8+ hex chars) — no need to look up full UUIDs. USE WHEN: user wants to change entity status. For bulk operations (pausing multiple, completing multiple), use batch_action instead. Supports aliases: launch, pause, complete (resolved per type). Omit action to list available actions. Special actions: attach (create an artifact linked to the entity), complete_with_proof (attach proof, verify, then complete in one call), ship_batch (milestones only — atomically attach one artifact + mark multiple subcomponent tasks complete when a single PR covers them all). NEXT: After completing, call verify_entity_completion first to check child work is done. DO NOT USE: for creating entities — use create_entity or scaffold_initiative.

readOnlyHint false openWorldHint false destructiveHint true
verify_entity_completion
annotations: verified low

Run pre-completion verification to confirm all child work is done. For tasks, this also checks proof-chain hard blocks that would stop entity_action action=complete. USE WHEN: before completing an entity with entity_action action=complete. NEXT: If verified, proceed with entity_action action=complete. If not, show blockers to user. Read-only.

id string
readOnlyHint true openWorldHint false destructiveHint false
create_entity
annotations: verified low

Create durable work records such as tasks, milestones, decisions, artifacts, or initiatives. Also known as: save work item, add record, create project context. USE WHEN: adding a single task, milestone, workstream, or other entity to an existing hierarchy. NEXT: Use entity_action to launch/start the entity. DO NOT USE: for creating a full initiative hierarchy — use scaffold_initiative instead.

readOnlyHint false openWorldHint false destructiveHint false
comment_on_entity
annotations: verified low

Leave a threaded comment on an entity. USE WHEN: agent or user wants to annotate an entity with observations, concerns, or progress notes. NEXT: Use list_entity_comments to read the thread. DO NOT USE: for status changes — use entity_action instead.

entity_type enum
readOnlyHint false openWorldHint false destructiveHint false
list_entity_comments
annotations: verified low

List comments for an entity. USE WHEN: reviewing discussion thread on an entity. NEXT: Use comment_on_entity to add a reply. Read-only.

entity_type enum
readOnlyHint true openWorldHint false destructiveHint false
batch_create_entities
annotations: verified low

Create multiple entities in one call with ref-based dependency resolution. USE WHEN: creating several related entities at once. NEXT: Use entity_action to launch created entities. DO NOT USE: for initiative hierarchies — use scaffold_initiative which handles the nesting automatically.

readOnlyHint false openWorldHint false destructiveHint false
get_task_with_context
annotations: verified low

Fetch a task with hydrated context attachments (entities, artifacts, plan sessions). USE WHEN: agent needs full task context before executing, or user wants task details. NEXT: Use entity_action to update task status. DO NOT USE: for listing tasks — use list_entities type=task instead.

task_id string
readOnlyHint true openWorldHint false destructiveHint false
batch_delete_entities
annotations: verified low

Delete multiple entities in one call (hard delete). USE WHEN: user explicitly wants to remove entities permanently. NEXT: Verify deletion succeeded. DO NOT USE: for archiving or pausing — use entity_action instead.

id string note string
readOnlyHint false openWorldHint false destructiveHint true
batch_action
annotations: verified low

Execute actions on multiple entities in one call (pause, launch, complete, resume, etc.). USE WHEN: bulk state changes like pausing multiple initiatives or completing multiple tasks. ACCEPTS: short ID prefixes (8+ chars) — no need to look up full UUIDs. Supports the same launch/pause aliases as entity_action. NEXT: Verify all actions succeeded. DO NOT USE: for deletes — use batch_delete_entities instead.

id string note string action string
readOnlyHint false openWorldHint false destructiveHint true
update_entity
annotations: verified low

Update an existing entity. Only include fields you want to change. USE WHEN: modifying entity fields (title, description, priority, etc.). NEXT: Confirm changes to user. DO NOT USE: for status changes — use entity_action instead.

readOnlyHint false openWorldHint false destructiveHint true
configure_org
annotations: verified low

Check setup status, configure agents, or set org policies. action=status for progress, action=configure_agent to set agent preferences, action=set_policy for org-wide rules.

action enum config record agent_type enum focus_areas array policy_type enum trust_level enum workspace_id string skip_approval array approval_required array command_center_id string
readOnlyHint false openWorldHint false destructiveHint true
stats
annotations: verified low

Get productivity stats, achievements, and streaks. scope=personal for your stats, scope=session for current session diagnostics. Read-only.

readOnlyHint true openWorldHint false destructiveHint false
workspace
annotations: verified low

Create, list, get, or set the active workspace. action=create creates a workspace and makes it active by default; action=list shows all; action=get returns current; action=set switches active.

name string title string tagline string roadmap_url string workspace_id string
readOnlyHint false openWorldHint false destructiveHint true
get_outcome_attribution
annotations: verified low

Create or approve a workspace outcome type before recording custom baseline, audit, or quality-gate outcomes.

agent_type string workspace_id string
readOnlyHint true openWorldHint false destructiveHint false
configure_outcome_type
annotations: verified low

Create or approve a workspace outcome type before recording custom baseline, audit, or quality-gate outcomes.

readOnlyHint false openWorldHint true destructiveHint true
record_outcome
annotations: verified low

Record a business outcome. Triggers attribution inference to connect outcomes to receipts. If the outcome type is unknown, call configure_outcome_type first.

readOnlyHint false openWorldHint true destructiveHint true
resume_agent_run
annotations: verified low

Resume a paused or auto-closed agent run. Flips status back to running, clears TTL auto-close markers, and appends a resume_history entry. USE WHEN: the user wants to continue a reporting session that was auto-closed by the stale-TTL cron, or reactivate any paused run. DO NOT USE: to restart a completed/failed/cancelled run — those are terminal.

run_id string
readOnlyHint false openWorldHint false destructiveHint false
get_my_trust_context
annotations: verified low

Agent-facing: trust level per capability, promotion requirements, receipt evidence. Returns full trust context for self-awareness.

agent_type string workspace_id string
readOnlyHint true openWorldHint false destructiveHint false
orgx_free_audit
annotations: verified low

Run a free autonomy benchmark from trust, proof, ROI, and workspace signals. Returns Proof Score, Context Debt, Autonomy Maturity, ROI Visibility, and next recommendations without starting an autonomous session or consuming agent credits.

workspace_id string
readOnlyHint true openWorldHint false destructiveHint false
start_autonomous_session
annotations: verified low

Start an autonomous execution session with budget guardrails. Creates a session that produces receipts while executing eligible work.

readOnlyHint false openWorldHint true destructiveHint true
get_relevant_learnings
annotations: verified low

Agent-facing: organizational learnings relevant to a capability or task context. One agent\'s discovery benefits all agents.

workspace_id string capability_key string
readOnlyHint true openWorldHint false destructiveHint false
submit_learning
annotations: verified low

Agent-facing: submit a discovery as an org learning. Enters org_learnings after confidence validation.

summary string workspace_id string
readOnlyHint false openWorldHint true destructiveHint false
save_artifact
annotations: verified low

DEPRECATED: Use entity_action action=attach instead. This tool still works as a thin compatibility wrapper that attaches an artifact to a task, milestone, initiative, workstream, project, or decision. USE WHEN: legacy clients still call save_artifact. NEXT: Prefer entity_action action=attach for new code — it exposes the full attachment surface (preview_markdown, status, metadata, created_by_*). DO NOT USE: for generic entity creation — use create_entity instead.

readOnlyHint false openWorldHint false destructiveHint false

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops
shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 84

low
Tool 'rich_result_without_exact_schema' has no annotations annotation_checker · 100%
low
Tool 'exact_result' has no annotations annotation_checker · 100%
info
Tool 'get_org_snapshot' annotations are consistent annotation_checker · 80%
info
Tool 'account_status' annotations are consistent annotation_checker · 80%
info
Tool 'account_upgrade' annotations are consistent annotation_checker · 80%
info
Tool 'account_usage_report' annotations are consistent annotation_checker · 80%
info
Tool 'list_entities' annotations are consistent annotation_checker · 80%
info
Tool 'entity_action' annotations are consistent annotation_checker · 80%
info
Tool 'verify_entity_completion' annotations are consistent annotation_checker · 80%
info
Tool 'create_entity' annotations are consistent annotation_checker · 80%
info
Tool 'comment_on_entity' annotations are consistent annotation_checker · 80%
info
Tool 'list_entity_comments' annotations are consistent annotation_checker · 80%
info
Tool 'batch_create_entities' annotations are consistent annotation_checker · 80%
info
Tool 'get_task_with_context' annotations are consistent annotation_checker · 80%
info
Tool 'batch_delete_entities' annotations are consistent annotation_checker · 80%
info
Tool 'batch_action' annotations are consistent annotation_checker · 80%
info
Tool 'update_entity' annotations are consistent annotation_checker · 80%
info
Tool 'configure_org' annotations are consistent annotation_checker · 80%
info
Tool 'stats' annotations are consistent annotation_checker · 80%
info
Tool 'workspace' annotations are consistent annotation_checker · 80%
info
Tool 'get_outcome_attribution' annotations are consistent annotation_checker · 80%
info
Tool 'configure_outcome_type' annotations are consistent annotation_checker · 80%
info
Tool 'record_outcome' annotations are consistent annotation_checker · 80%
info
Tool 'resume_agent_run' annotations are consistent annotation_checker · 80%
info
Tool 'get_my_trust_context' annotations are consistent annotation_checker · 80%
info
Tool 'orgx_free_audit' annotations are consistent annotation_checker · 80%
info
Tool 'start_autonomous_session' annotations are consistent annotation_checker · 80%
info
Tool 'get_relevant_learnings' annotations are consistent annotation_checker · 80%
info
Tool 'submit_learning' annotations are consistent annotation_checker · 80%
info
Tool 'save_artifact' annotations are consistent annotation_checker · 80%
high
Hardcoded OAuth client ID in useorgx-orgx-mcp-9b5366e/tests/authHandler.spec.ts auth_checker · 85%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: vite@6.3.4 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.3.4 (GHSA-93m4-6634-74q7) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.3.4 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.3.4 (GHSA-g4jq-h2w9-997c) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.3.4 (GHSA-jqfw-vq24-v9c3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.3.4 (GHSA-p9ff-h696-f583) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.3.4 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.2.4 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: wrangler@4.54.0 (GHSA-36p8-mvp6-cv38) dependency_analyzer · 95%
medium
High-entropy string (5.91 bits/char) in useorgx-orgx-mcp-9b5366e/public/widgets/shared/mcp-apps-sdk.umd.js:40 entropy_analyzer · 53%
info
package.json metadata manifest_parser · 100%
info
Tool: rich_result_without_exact_schema manifest_parser · 85%
info
Tool: exact_result manifest_parser · 85%
info
Tool: get_org_snapshot manifest_parser · 85%
info
Tool: account_status manifest_parser · 85%
info
Tool: account_upgrade manifest_parser · 85%
info
Tool: account_usage_report manifest_parser · 85%
info
Tool: list_entities manifest_parser · 85%
info
Tool: entity_action manifest_parser · 85%
info
Tool: verify_entity_completion manifest_parser · 85%
info
Tool: create_entity manifest_parser · 85%
info
Tool: comment_on_entity manifest_parser · 85%
info
Tool: list_entity_comments manifest_parser · 85%
info
Tool: batch_create_entities manifest_parser · 85%
info
Tool: get_task_with_context manifest_parser · 85%
info
Tool: batch_delete_entities manifest_parser · 85%
info
Tool: batch_action manifest_parser · 85%
info
Tool: update_entity manifest_parser · 85%
info
Tool: configure_org manifest_parser · 85%
info
Tool: stats manifest_parser · 85%
info
Tool: workspace manifest_parser · 85%
info
Tool: get_outcome_attribution manifest_parser · 85%
info
Tool: configure_outcome_type manifest_parser · 85%
info
Tool: record_outcome manifest_parser · 85%
info
Tool: resume_agent_run manifest_parser · 85%
info
Tool: get_my_trust_context manifest_parser · 85%
info
Tool: orgx_free_audit manifest_parser · 85%
info
Tool: start_autonomous_session manifest_parser · 85%
info
Tool: get_relevant_learnings manifest_parser · 85%
info
Tool: submit_learning manifest_parser · 85%
info
Tool: save_artifact manifest_parser · 85%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (34) manifest_parser · 80%
medium
Hardcoded OAuth client ID in useorgx-orgx-mcp-9b5366e/tests/authHandler.spec.ts oauth_scope_analyzer · 80%
high
High-risk OAuth scope: admin oauth_scope_analyzer · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 16 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%