Stable Baseline

Delete a permission grant. Refuses if it is the LAST admin grant on the resource. Rate limit 30/min. Use when the user asks to revoke access, remove access, take away access, unshare, or delete a permission grant on a specific resource. Works for a grant on a database or one of its tables too; to take someone off a single row, use upsertResourcePermission with level none.

Remove a task-dependency edge. Neither item's dates are changed. Needs the same 'write' plan permission as createTaskDependency, so an actor that can draw an edge can also undo it — the edge is fully recreatable from (predecessor, successor, type, lag).

Delete a team. Cascades: team members and team-granted resource permissions are removed automatically. Destructive; rate limit 5/min.

Delete a data file attachment from a document.

Delete a whiteboard (the host document and its canvas).

Design ONE reusable, on-brand SLIDE COMPONENT and add it to the org's component library so every future branded deck (autoDesignWhiteboard designProfile:'branded-executive') can use it. This is the self-improving design loop: an agent AUTHORS the component as a declarative template (a gradient/shadow/curve SVG skin + a native editable PPTX shape + reflowing bound-text slots), RENDERS it, a vision critic COMPARES the render to your brief and lists gaps, and it FIXES + re-renders until polished — then validates and stores it. Use it to grow the deck component catalogue beyond the built-ins (e.g. a 'kpi.delta' stat with an up/down arrow, a 'quote.card', a 'logo.strip'). Browse-first: if a component with this `key` already exists it is reused (pass force:true to redesign). Provide example `sampleSlots` so it can lay out real content, and a `projectId` for the small preview board it builds. Returns the stored component, the per-round critique trail, and the preview board id. It uses a few AI calls + renders (no flat credit charge); the new component is then free to reuse forever.

Create or refine a slide deck INSIDE an existing whiteboard by conversing with the AI design agent. Send a brief for a NEW deck, a change to an EXISTING one, or an answer to the agent's question. The agent builds a polished, on-brand deck and places it on the board; if the brief is ambiguous it asks ONE clarifying question (answer with the same sessionId). Returns immediately; poll getDeckReplyInWhiteboard for the result. Use for building or editing slide decks / presentations. WHITEBOARD IS REQUIRED: a deck always lives inside a whiteboard, so documentId (the whiteboard's id) is required. If you do NOT already have a whiteboard id, ASK THE USER which whiteboard they want the deck designed in — do NOT create a whiteboard automatically. Only call createWhiteboard first if the user explicitly asks for a brand-new board; otherwise use the id of the whiteboard they name. FIRST vs FOLLOW-UP: the first call (from nothing) builds; a follow-up call (an answer, a change, or a new instruction) passes the sessionId (or the deckId) plus the new message. kind:'deck' (default) is the premium on-brand HTML deck; kind:'express' builds the native, deterministic branded-executive deck directly on the whiteboard (faster, lower fidelity, one-shot, not conversational). COST + APPROVAL: a build costs 52 credits per 30 slides (1 to 30 slides is 52, 31 to 60 is 104, and so on, with the second and later blocks charged once the deck is built and never charged twice for the same block), an edit costs a flat 36, and a clarifying question is FREE. It can also generate imagery for the deck where the design calls for it. ADVANCED DECK BUILDING (optional, OFF by default): set advancedDeckBuilding:true to build the deck over several rounds of redraft and review by a panel of design, brand, accessibility and copy reviewers instead of one composer pass. It usually raises design quality, but it is not a guarantee. It is much slower and it costs more: a standard build takes roughly 2 to 8 minutes, advanced deck building takes roughly 15 to 20 minutes, and it adds 61 credits per depth level on top of the turn fee (advancedDeckBuildingDepth is 1 to 3, default 3, so +183 credits, making a 52-credit build cost 235). Only turn it on when the user asks for the highest quality and accepts the wait and the cost. Call FIRST without confirm: it returns the exact cost, the workspace balance and a single-use quoteToken, and charges nothing. Show the cost to the user, and only if they agree call again with the same arguments plus confirm:true and that quoteToken (it works once, for 10 minutes; a changed request gets a fresh quote and nothing is charged). The fee is auto-refunded if a turn produces no change or fails. Returns sessionId (the conversation), deckId (the deck), status, turnType, started, awaitingUser, needsConfirmation, insufficientCredits, on a quote also quote (cost and balance), quoteToken and howToConfirm, slideCount (the target the conversation now carries) and slideCountClamped (always false; nothing reduces a slide count), advancedDeckBuilding (whether advanced deck building is on for this conversation), advancedDeckBuildingStatus, and assistantMessage. Export the finished deck with exportFromWhiteboard.

Create or refine a standalone ILLUSTRATION INSIDE an existing whiteboard by conversing with the AI design agent. This is the illustration sibling of designDeckInWhiteboard: same conversation, same follow-up flow, but it makes ONE on-brand illustration placed on the board (not a slide deck). Send a brief for a NEW illustration, a change to an existing one, or an answer to the agent's question. The agent generates the illustration, places it on the board, and if the brief is ambiguous it asks ONE clarifying question (answer with the same sessionId). Returns immediately; poll getDeckReplyInWhiteboard for the result. Use it when the user wants a picture they can talk about and refine turn by turn (e.g. 'draw a friendly robot onboarding a new team', then 'make it warmer', 'add a second robot'). For a quick one-shot illustration with no follow-up, use generateIllustrationInWhiteboard instead. WHITEBOARD IS REQUIRED: an illustration always lives inside a whiteboard, so documentId (the whiteboard's id) is required. If you do NOT already have a whiteboard id, ASK THE USER which whiteboard they want the illustration designed in — do NOT create a whiteboard automatically. Only call createWhiteboard first if the user explicitly asks for a brand-new board; otherwise use the id of the whiteboard they name. FIRST vs FOLLOW-UP: the first call (from nothing) builds; a follow-up call (an answer, a change, or a new instruction) passes the sessionId (or the deckId) plus the new message. COST + APPROVAL: a build costs 52 credits per 30 slides (1 to 30 slides is 52, 31 to 60 is 104, and so on, with the second and later blocks charged once the deck is built and never charged twice for the same block), an edit costs a flat 36, and a clarifying question is FREE. Call FIRST without confirm: it returns the exact cost, the workspace balance and a single-use quoteToken, and charges nothing. Show the cost to the user, and only if they agree call again with the same arguments plus confirm:true and that quoteToken (it works once, for 10 minutes; a changed request gets a fresh quote and nothing is charged). The fee is auto-refunded if a turn produces no change or fails. Returns sessionId (the conversation), deckId (the illustration's id), status, turnType, started, awaitingUser, needsConfirmation, insufficientCredits, on a quote also quote (cost and balance), quoteToken and howToConfirm, and assistantMessage.

Per-item: clear `needs_dependency_review` without changing dates — keeps the edge, ignores the suggestion. Use when the successor should stay put despite the predecessor shifting.

Copy-paste existing whiteboard elements — the MCP equivalent of selecting a group and pressing Ctrl/Cmd+D. Clones the given elements (plus their group peers + bound text/labels) with FRESH ids, offsets the copy by dx/dy, and by default groups it into ONE new unit so it moves together. Use it to build something once (a labelled stencil frame, a kanban card, a UML class) then stamp out consistent repeats fast — then retext/recolour each copy by its new id (via the returned idMap) with updateWhiteboardScene. Pass `groupId` to copy a whole group as a unit (e.g. a placed stencil's groupId from its placement result) and/or `ids` for specific elements. Internal references (group membership, bound text containerId, arrow start/end bindings) are remapped within the copied set; a binding to an element you did NOT copy is dropped. Returns { duplicated, idMap (old id → new id), groupId (the copy's new unit group), elementCount }. Render with getWhiteboardImage afterwards to verify.

Edit a document: the PREFERRED tool for small targeted changes. Two patch dialects — do NOT mix them in one call. (1) ANCHOR patches {oldText, newText, before?, after?} — RECOMMENDED: replace an exact snippet of existing text with new text. oldText must match the document byte-for-byte AND be unique; if it occurs more than once, either expand oldText until it is unique, or add `before`/`after` (the EXACT text immediately before/after the match) to disambiguate. A no-match returns nearby context; an ambiguous match returns the occurrence count. Anchors do NOT drift, so you don't need fresh line numbers and they survive concurrent edits. Use newText:"" to delete. (2) LINE patches {startLine, endLine, replacement} — 1-based and INCLUSIVE: call getDocument first for line numbers; replace line 5 with {startLine:5,endLine:5}; INSERT before line N (deleting nothing) with {startLine:N,endLine:N-1}; append to an L-line document with {startLine:L+1,endLine:L}. Line numbers are ABSOLUTE and GO STALE after ANY edit — re-call getDocument before further line patches; out-of-range patches are rejected with the current line count. versionTimestamp from getDocument (or from any mutating tool's response — they all return the fresh token) is required for optimistic locking, EXCEPT when dryRun:true. If your token is stale, the error tells you who changed the document, when, and the currentVersionTimestamp — anchor patches survive concurrent edits, so retrying with that token is usually safe. Set dryRun:true to apply the patches and get the resulting text back WITHOUT saving (verify before committing — kills retry loops). IMPORTANT: getDocument displays lines as `NNNNN<TAB>content`; that prefix is display-only — oldText/before/after must contain only the content AFTER the tab. Do not edit or delete DIAGRAM/IMAGE marker lines (rejected with guidance) — use dedicated diagram/image tools. To @-mention a person, insert `<!-- REFERENCE: {"type":"user","id":"<user_uuid>","label":"Name"} -->`; look up the user_id via listAssignablePrincipals. Mentioned users are notified automatically.

Mask-edit (inpaint) one region of an image element on a whiteboard. Given the target image element id and a paint MASK (a PNG where WHITE marks the area to regenerate and BLACK is kept), it regenerates only the masked region using the prompt and replaces the image IN PLACE (same position + size). This is mainly used by the in-app image-board mask editor for boards designed with designProfile:'image'. It is available to every organisation; the small flat credit charge is the only gate (refunded automatically if the edit fails on our side).

A table's rows as a file to download: CSV, or xlsx for Excel. Made in the background from the rows matching where or view that the caller may see; returns an id. Call again with just id for its progress, then a link that works for 10 minutes. Excel cuts text longer than 32,767 characters in a cell; CSV keeps it whole. getDatabaseGuide topic finding_rows.

Export a Stable Baseline document as a PDF or an editable Word document (docx), styled with the organisation's brand, or with an export template when templateId is given. Give it the documentId (a UUID, or a friendly id such as DOC-123) and the format: 'pdf' (default) or 'docx'. The file is made in the background: if that takes longer than one tool call can wait, this returns status 'exporting' with a jobId; wait about 30 seconds, then call this tool AGAIN with the SAME arguments to collect it. Nothing is exported twice while one export is running, so calling again is cheap and safe. When it is ready the answer carries a download link in 'url', available for 1 hour. Inside an organisation agent's job the file is kept with the job instead, and the answer carries its fileId for the next tool to use. PDF and Word export depend on the organisation's plan; when the plan does not include them, the answer says so. A whiteboard is exported with exportFromWhiteboard, not this tool.

Export from a whiteboard: a finished design (a deck) as an editable PowerPoint (PPTX), a PDF or PNG images, or the whiteboard canvas itself as a PowerPoint. LARGE EXPORTS FINISH IN THE BACKGROUND: if the export takes longer than one tool call can wait, this returns status:'exporting' with a jobId instead of the file. Wait about 30 seconds and call this tool AGAIN with the SAME arguments to collect it, and repeat until status is 'completed' and 'url' is present. Nothing is re-exported while a job is already running, so polling is cheap and safe. Download links are available for 1 hour. kind:'deck' (default) needs the whiteboard documentId and the designId (the deck), and renders the finished deck: 'pptx' = native, fully editable PowerPoint (real shapes and text, not screenshots); 'pdf' = vector, one page per slide; 'png' = one image per slide. kind:'canvas' needs only the whiteboard documentId and exports the board as PowerPoint ('pptx' only): every frame on the board becomes a slide, in the board's slide order, and a board with no frames becomes one slide. HTML is not an available format, so do not ask for it. Small deck exports come back as base64 in data (pptx/pdf); anything larger, and every png export, comes back as download links. Inside an organisation agent's job the export is kept with the job as a file instead, and the answer carries its fileId for the next tool to use. A design that is still generating, failed, or archived returns a clear message.

Find and replace EXACT substrings in a document (NOT regex: wildcards and patterns are matched literally). Replaces EVERY occurrence and returns the replacement count; best for renames and repeated phrases. For a single targeted change at a known location, prefer editDocument (anchor patches). Case-sensitive by default. Diagrams/images are automatically protected — only document text is affected. Returns document.versionTimestamp (the fresh optimistic-lock token) like every other mutating tool, so you can chain straight into editDocument or the diagram tools. Pass versionTimestamp to opt into optimistic locking (optional here — whole-document find/replace is position-independent). Note: when the `replace` value contains a `<!-- REFERENCE: {...} -->` marker (e.g. inserting a user mention), it round-trips losslessly through the editor and triggers notifications if it adds a new user mention.

Follow an agent job: its status (`queued`, `running`, `awaiting_approval`, `paused`, `completed`, `failed` or `cancelled`), `progress` (steps done, tool calls, the current tool, the budget), the approval level it runs at (`approvalMode`), the pause reason, its steps (paged with `stepsOffset` and `stepsLimit`), its pending approvals, and once it finished its answer, provenance and `receipt`. While it works the result says when to look again (`pollAfterSeconds`). A job in plan mode also returns `plan`: its status (`pending`, `approved`, `executing`, `completed`, `declined`, `expired`, `conflict`, `superseded`), counts by kind, tool fees, `digest`, `approvalId`, `expiresAt`, how many steps ran, and its steps with their previews (paged with `planStepsOffset` and `planStepsLimit`). Someone who did not start the job sees its metadata, and its content only for the items they can read themselves. `undo` says whether you may undo the job now (`available`, and `reason` when not: `not_finished`, `already_undone`, `undo_in_progress`, `nothing_to_undo`, `irreversible_only`, `forbidden`...), `undoRunId` for an undo that waits or runs and `undoneByRunId` once undone; start one with delegateToAgent `undoRunId`. An undo job's own view carries `undoOfRunId`, and its plan's `undo` lists what was skipped and what cannot be undone.

Get the CDMD markdown language specification. Call before createDocument if unfamiliar with syntax.

Composite credit balance for an organisation: plan_credits (recurring monthly bucket), top_up_credits (purchased one-offs, gross), bonus_credits (admin grants), total, and period_end (next plan reset).

List active credit packages available for purchase (name, credits, bonus_credits, price in cents AUD). Catalogue read, visible to any MCP credential. To buy one, call quoteCreditPackage and then purchaseCreditPackage.

Read the plan entitlements (limits + capability flags) that apply to the caller's organisation. Returns { tier, display_name, limits, features }. The Enterprise row is filtered for non-admin callers by the underlying view. Read-only.

Return the calling user's identity (user_id, display_name, full_name, email, avatar_url). Use this when the user says 'me' / 'mine' / 'I' so you can resolve to their UUID before passing it to tools like updateImprovement(owner_id=…) or filtering by owner. Read-only.

Mint a single-use Stripe Customer Portal URL for self-serve billing changes. return_url defaults to https://app.stablebaseline.io/settings/billing and must be on a stablebaseline.* host.

Draw one page of a database dashboard as a picture so you can SEE it, as getDiagramImage does for a diagram: every visual at its place on the whole page, however tall, with the numbers as you would see them when the page opens. Call it after every saveDatabaseDashboard and keep changing and looking until the layout and the visuals look right. page is the page's index (1 is the first, as getDatabase lists them), its name or its id; the first page when left out. The answer names the page (its index, of how many) and lists its visuals with their place and state: one with no numbers to draw (nothing matches, not set up, no access) is drawn as the page draws it and named. The page is drawn as a desktop shows it, 1280 pixels wide; one too tall for one picture is drawn smaller, never cut. Returns the picture, and a link to it that works for one hour. format pdf makes a file to give someone instead: a download link, or in an agent's job a file of the job.

How to write the spec of one kind of dashboard visual: its wells (what goes where, and how many), which must be filled, the summaries a value can use, its settings with their usual values, and a worked example to copy. Pass type from listDashboardVisualTypes. Use the spec in saveDatabaseDashboard, then look at it with getDashboardImage.

Read a database's structure: its tables, each table's fields and saved views, the rule that decides who sees which rows, and your access. A table's fields are keyed by their exact names, each with its type and details; choices lists the options of its choice and status fields, by name. Use those names as they are in queryDatabaseRows (where, select, sort, groupBy, summaries), writeDatabaseRows and updateDatabase. databaseId takes the id, the friendly id (such as DB-12) or the exact name. Pass table to see one table only, with every choice listed. changes lists who changed what and when: tables, fields, sharing, deleted and imported rows. usage tells how much of each limit it uses and how much of that is in the trash. getDatabaseGuide topic fields_and_types. Lists its dashboards too. table with profile: field facts and ready visuals for saveDatabaseDashboard. dashboard reads one; visual adds one visual's numbers. form reads one form: its questions, who may answer and its link.

How to use the database tools, one topic at a time: filters and operators, totals and analytics, formulas, changing or deleting every row that matches, joins, copying, field types and type changes, tables and views, importing, limits, worked examples and refusals. With no topic it lists the topics and their sections; pass topic (and section) for one, and detail "full" for more of it.

Read one row in full: every field including long text, linked rows (with their ids), people (with their ids) and attachments, plus who created and last changed it, its version, and who it is shared with when you manage it. Pass field, and offset for the next part, to read one very long value in parts. history lists the row's changes: who changed which values and when. getDatabaseGuide topic overview.

Get the design agent's reply after calling designDeckInWhiteboard OR designIllustrationInWhiteboard: the status (thinking/building/ready) and EITHER the finished result (a deck's slide count + preview, or the placed illustration) OR a clarifying question to answer (call the SAME tool you started with, passing the sessionId + your answer). Poll until ready or a question appears. Give it the whiteboard documentId and the deckId (both returned by the tool you called). It returns the build status ('generating' while working, 'ready' when finished, 'failed' if it failed) plus, once ready, the slide count and a thumbnail image URL. IMPORTANT for the conversation: if the agent asked a CLARIFYING QUESTION instead of doing the work, this returns awaitingUser:true with pendingQuestion (and assistantMessage) — relay that question to the user, then call the SAME design tool again with the same sessionId and the user's answer as message to continue. It also returns the full conversation (history + status + pending question). While a turn is running it additionally returns live build state: stage, percent, feed (the agent's real per-step lines), slideTarget (the count it is building to), slides (the finished slides so far, each with a fetchable image url), partialHtml (the deck so far), and, when advanced deck building is on, advancedDeckBuildingProgress (the round-by-round reviewer scores; also emitted as the deprecated `jury` field for one release). Every one of those is optional and absent when there is nothing to report. A standard turn usually takes about 2 to 8 minutes, so poll every 15 to 30 seconds until it is 'ready' or awaitingUser is true; a turn running with advanced deck building takes roughly 15 to 20 minutes, so keep polling for that long before treating it as stuck. When ready, the deck or illustration has already been placed on the whiteboard; a deck can also be exported with exportFromWhiteboard. If a turn failed or produced no change, the user was not charged.

Render a diagram that ALREADY exists in a document to an IMAGE (svg/png/jpeg @1x/2x/3x) and return it — a temporary imageUrl available for 1 hour plus, for png/jpeg, the image inline so you can see it, and title/url citing the document the diagram lives in. Pass the diagramId (from getDocument's DIAGRAM markers or getDiagramInDocument). Reuses the diagram's cached server render when available (pixel-identical to the editor), otherwise renders from the diagram's source on the fly. Read-only: nothing in the document or the diagram is changed; the image is a temporary artefact that expires after 1 hour. Use renderDiagram instead to generate from raw DSL without an existing diagram.

Get a diagram's full details including raw DSL source code. Use diagramId from DIAGRAM_OMITTED markers in getDocument output. Returns diagramCode, type, name, nlDescription, renderStatus/renderError, and versionTimestamp — the diagram's optimistic-lock token for updateDiagramInDocument (every diagram write also returns it fresh).

Get DSL writing instructions and an example for a diagram type (a renderer such as 'default', 'mermaid' or 'bpmn'). Also accepts a diagram family slug or name from supportedDiagrams (e.g. 'bpmn-process'), which resolves to that family's default renderer (see resolvedFrom). supportedDiagrams lists the families the type draws, each with its defaultRenderer. Call before writing diagramCode.

Read a document's content with line numbers. content.text lines are formatted `NNNNN<TAB>content` (cat -n style); the number+tab prefix is DISPLAY ONLY — never part of the document — so when building editDocument anchor patches, copy only the text AFTER the tab. Reads paginate by lines (offset/limit, default 200): use content.totalLines and content.nextOffset to page. document.versionTimestamp is the optimistic-lock token that every mutating document tool accepts (as versionTimestamp; the older documentVersionTimestamp name also works) — and every mutating tool returns a fresh token, so you rarely need to re-read just to keep editing. Diagrams/images appear as OMITTED markers with metadata (type, diagramId, renderStatus, nlDescription) — use getDiagramInDocument(diagramId) for full DSL code, or pass includeDiagramDsl:true to inline each diagram's DSL and versionTimestamp directly into its DIAGRAM_OMITTED marker (saves a getDiagramInDocument call when you intend to read or edit diagrams).

Read the current status of an ingest job. Returns { status, stage, processedImages, totalImages, documentId, error?, lastHeartbeatAt }. Stages: pending → downloaded → extracted → draft_saved → images_processing → finalized → cleaned_up. Status: queued, running, succeeded, failed, cancelled. The associated document_id is populated immediately and progressively filled in as images are processed.

Compute a user's effective permission level on a resource (taking team grants, inheritance, and 3-state overrides into account) and the source. Asking about another user requires can_manage_perms on the org. Use when the user asks 'can X access this', 'what level of access does X have', 'why can X see this', or to debug an unexpected permission outcome. Works for a database, one of its tables (db_table, with database_id) and a single row (db_row, with database_id and table_id) too.

Get the folder and document tree. Pass folderId for the subtree under one folder, or projectId for the project's ENTIRE folder tree from the root (no need to reassemble listFolders' flat list by parentId). Alias for getProjectHierarchy.

Get image details including a fresh link to the image that works for one hour (call again for a new one; never save the link into content). Use storagePath from IMAGE_OMITTED markers in getDocument output.

Get full details for an improvement item including evidence, activity log, compliance context, and the `checklist` array (each item: id, text, due_date, completed_at, plus server-stamped attribution). Returns versionTimestamp: pass it to updateImprovement for optimistic locking. (For tasks specifically, use getTask + updateTask which are symmetric aliases.) Also returns the work hierarchy: parentItem (the item this one belongs to, such as its epic or story: { id, friendlyId, title, type, status, isTask }, or null), children (the items that belong to it, in status order then by id, at most 200: each with ownerId, ownerTeamId and percentComplete) and childProgress { total, done, closed } over every child (closed counts done, rejected and deferred). Set a parent with parentItemId on updateImprovement or updateTask. Also returns linkedRecords: the database rows it links, each { linkId, databaseId, tableId, rowId, state, label, title, autoId, tableName, databaseName, href } read for you. state ok gives the row's title and a link to it; no_access means you cannot read that row, so no title is given; removed means the row, its table or its database was deleted. Change them with linkedRecords on updateImprovement or updateTask.

List every kg_scope row for the caller's organisation, optionally narrowed to a workspace or project subtree. Each row carries scope_type, scope_id, state (on|off|inherit), settings, and is augmented with scope_name + parent_id for tree rendering. Databases and tables switched on or off in the brain follow as rows of scope_type database (parent: its project, workspace or organisation) and table (parent: its database; settings are its field choices by field number; counts, reason and build tell whether it is in use and how far its name keys are built). Only databases and tables the person can read are listed. Capped at 500 rows.

Get a meeting scribe's status after startMeetingScribe: the session state (joining, in the waiting room, live in the call, paused, ending, ended, or failed), the live activity feed of what the scribe has painted, and the board it is painting. Give it the sessionId returned by startMeetingScribe. Poll every 15 to 30 seconds while the meeting runs. When the meeting ends the board holds the finished 'meeting map' (topics, decisions, actions, and a summary).

Fetch a single organisation member by user_id, enriched with profile (email + display name). Auth: org id must match the credential's organisation.

Read an organisation's settings JSON and the derived enabled-features map (plans, documents, improvements, compliance, knowledge_graph: all booleans). Also `ai`: the kind of work the assistant and the organisation's agents run on (everyday or thinking) and whether each runs on the organisation's own AI, on Stable Baseline's AI, or is stopped until an owner or admin fixes it (Organisation settings, AI). The organisation must match the calling credential's organisation. Read-only.

Read a single organisation by id. Returns id, name, slug, description, settings (an object), created_at, member_count (active members) and plan_tier (subscription_tier). The organisation must match the calling credential's organisation. Read-only.

Get full plan details including phases, items, and activity. Every level carries its own optimistic-lock token, so one call supplies them all: the top-level versionTimestamp is the plan's (for updatePlan), phases[].versionTimestamp each phase's (for updatePlanPhase) and items[].versionTimestamp each task's or improvement's (for updateTask / updateImprovement, including their bulk `items` form). Items include percent_complete for progress tracking.

Get the complete plan hierarchy (phases, tasks, improvements) in one call. Recommended first call for plan navigation.

Get a plan phase by ID with full details. Returns versionTimestamp — pass it to updatePlanPhase for optimistic locking.

Read the public catalogue entry for a single subscription tier (free, plus, pro, enterprise). Free, Plus and Pro prices are publicly advertised. Enterprise is priced per customer with sales, so its monthly_price_cents is always null here, for every caller: describe the plan from its limits and features, and point the user to sales for a price. `available` is false for a plan that cannot be bought yet.

Read a single project by id. Auth via the standard project-access ladder. Returns the project's full record (id, workspace_id, name, description, icon, created_by/at, updated_by/at). Read-only.

Get the complete folder and document tree for a project in one call. Recommended first call for navigation.

Read the subscription state for an organisation. Returns tier, status, current billing period, seat count, member count, cancellation flag, trial end. Stripe IDs are stripped. Pair with listPaymentMethods/listInvoices for the full billing dashboard. Use when the user asks 'what plan am I on', 'how many seats do I have', 'when does my subscription renew', or to check current billing status.