MCP server

The gateway exposes a managed Model Context Protocol server so agents can call approved tools without custom glue code. Use the streamable HTTP endpoint at http://kpnmail.net/mcp, or the legacy SSE transport at http://kpnmail.net/sse.

Tools

Tool	Description
`read_file`	Read a file from the agent workspace
`http_fetch`	Fetch a URL through the egress proxy
`query_db`	Run a read-only SQL query
`send_email`	Send mail from the notification service
`get_secrets`	Read a named secret from the vault
`run_shell`	Execute a command in the sandbox (off by default)

List tools

curl http://kpnmail.net/mcp -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Control which tools an agent may use in its allowlist.