ToolRouter MCP server

• account_listFree

  List all billing contexts (personal + teams) or get detail on one. No slug → summary list. With slug → full detail including team members, role, subscription status, and pointers to the team's connectors, credentials, keys, and files.

• account_preferencesFree

  Read or write billing preferences (auto-reload, budget cap, default context). Pass action: "get" to read, action: "set" with fields to write.

• account_setupFree

  Initialize or re-check your account, provision it when needed, and return your user ID and plan. CALL THIS FIRST when the user asks to set up ToolRouter, connect their account, check their account status, or get started.

• account_switchFree

  Set the active billing context. Accepts a slug (e.g. "personal", "team:nd7fx…") or team ID.

• brain_addwrite actionFree

  Create a new brain page. Knowledge you add here will be available to all future tool calls. Optional wing/room/hall organise the page in the MemPalace hierarchy for sharper retrieval.

• brain_adminFree

  Brain admin operations. Pass action: "lint" | "link" | "promote" | "rebuild_index" | "team_sleep". team_sleep enables/disables/runs the nightly team consolidation cycle — pass sub_action "enable" (with optional timezone), "disable", "status", or "run_now". Team admin role required for team_sleep actions.

• brain_deletewrite actionFree

  Archive a brain page. It will no longer appear in searches or tool consultations.

• brain_expandFree

  Retrieve the verbatim source text (a "drawer") linked from a brain page. Use this when a summary lacks specifics you need — drawers contain the original tool output, redacted for credentials. Returns 404 if the page has no linked drawer (not all pages do — drawers are a Step 4 feature for allowlisted tools only).

• brain_lintwrite actionFree

  Run maintenance checks on your brain: find stale pages, orphaned knowledge, and other issues.

• brain_queryFree

  Search your knowledge brain for relevant information. Returns pages ranked by relevance. Optional wing/hall narrow the search to a slice of the brain (e.g. wing="engineering", hall="preference").

• brain_settingsFree

  View and toggle your brain settings. Currently supports: drawers_enabled (store raw tool output alongside summaries for richer recall).

• brain_statusFree

  View brain page counts and recent pages for your personal and team brain.

• brain_updatewrite actionFree

  Edit an existing brain page's content or metadata. wing/room/hall can be patched to re-file a page. scope can be changed to move a page between your personal and team brain — useful when an auto-ingested page landed in the wrong place. Moving a page to team scope requires team admin role.

• brain_wingsFree

  List the wings of your brain — the top-level areas your knowledge is organised under (e.g. "engineering", "family"). For each wing returns the rooms and halls inside, page count, and last-updated time. Use this to discover the right wing/hall to pass to brain_query.

• connector_addFree

  Connect a new OAuth account or MCP server. For OAuth: pass type: "oauth", kind: "slack". For MCP catalog: pass catalog_slug. For custom MCP: pass url + auth_type.

• connector_listFree

  List connected accounts and MCP servers (summary) or detail on one connector. Pass slug for detail including every tool the connector exposes. Optional type: "oauth" | "mcp" filter. Pass include_available: true to also see available catalog MCPs you can connect.

• connector_permissionsFree

  View or set permissions for tools on a connected MCP server — which tools are allowed, rate limits, budget caps, argument restrictions. Pass the connector slug (from connector_list) and action: "list" to see current rules, or action: "set" with tool_name + rules to update one. Team scope requires admin role.

• connector_removewrite actionFree

  Disconnect a connector. Pass slug.

• credential_defaultFree

  Set the default value for a multi-value credential.

• credential_deletewrite actionFree

  Remove a saved credential. If label is provided, removes only that specific entry. If no label, removes ALL entries for that credential name.

• credential_guideFree

  Get setup instructions for a specific credential.

• credential_listFree

  List saved credentials (summary) or detail on one. Pass name for detail view. Pass show_available: true to include the full credential catalog.

• credential_saveFree

  Save a credential (BYOK provider API key). Saved keys persist across sessions and are used automatically.

• credits_balanceFree

  Current balance, plan tier, rate limits, and any negative-balance warnings for the active context.

• credits_usageFree

  Usage summary or history. Pass scope: "me" | "team" and detail: "tool" | "skill". Sorted by cost with _others rollup.

• discoverFree

  Find the right ToolRouter tool for your task. Describe what you need in plain language. Examples: "analyze a website", "research competitors", "find prospect companies", "check DNS records". Exact tool name (e.g. "seo") returns full schemas and examples. Flow: prefer route({ intent }) to pick and run a tool. Use discover when you need schemas or a listing, then call use_tool(tool, skill, input). Every discover response also includes a top-level `connectors` array listing SaaS accounts the user has already connected (LinkedIn, Google, Notion, etc.). Use that to pick the right tool and account without asking — e.g. if `connectors` shows LinkedIn, the linkedin-post tool is ready to use. Categories: data, media, search, marketing, development, communication, analytics, productivity, ai, finance, security, infrastructure

• feedback_debugFree

  Report a ToolRouter platform bug that blocks you from completing the user's task. Use this when you suspect the issue is on our side — a tool crashed, returned malformed data, timed out unexpectedly, or behaved inconsistently. Include the relevant ToolRouter errors, call IDs, non-sensitive input shape, retries, and expected behavior. Do not include chat history, unrelated conversation text, uploaded file contents, personal data, API keys, or secrets. Reports are stored and reviewed within hours. Skip this for expected errors like invalid input, missing credentials, insufficient balance, rate limits, or genuine "not found" results — those aren't bugs. Limit: 5 reports per hour.

• feedback_request_toolFree

  Ask ToolRouter to build a tool that does not exist yet. Use this when discover returned nothing useful for what the user needs. Describe the capability in plain terms — do not include personal data, API keys, or secrets. Requests go straight to the team. Limit: 5 per hour.

• feedback_reviewwrite actionFree

  Submit a review or star rating.

• file_deletewrite actionFree

  Delete a file. Cannot be undone. For team files: requires owner/admin role.

• file_listFree

  List or search files. Optional query triggers semantic search. Supports section, tags, plan_status, limit, cursor filters.

• file_readFree

  Read a file's full content. Text files return content inline. Binary files (images, video) return a download URL.

• file_writewrite actionFree

  Create or update a file. Pass mode: "create" | "update". Binary uploads: call with binary: true to get an upload_url, then PUT bytes, then call with mode: "finalize".

• invoice_listFree

  List invoices for the active billing context.

• job_cancelwrite actionFree

  Cancel a running job.

• job_getFree

  Get job status and result. Returns status: running | completed | failed and result when terminal. Keep polling until you get a terminal status.

• job_listFree

  List your active and recent jobs. Optional status filter.

• key_createwrite actionFree

  Create a new API key. Returns the secret once — save it immediately.

• key_deletewrite actionFree

  Revoke an API key. Refuses to revoke the currently-authenticating key.

• key_listFree

  List API keys (summary) or get detail on one key. Pass key_id for detail view.

• outfit_listFree

  List your outfits.

• persona_listFree

  List your personas.

• product_listFree

  List your products.

• routewrite actionFree

  Send a natural-language intent and optionally any dimensions you already know (tool, skill, model, input fields). Fills only the blanks via Jev, then either executes the call or returns a ready-to-run use_tool payload. Explicit values are never overridden. Returns candidates when confidence is low or no tool fits. Flow: route → if confident and complete, result is returned; otherwise use the pre-filled call with use_tool.

• scene_listFree

  List your scenes.

• subscription_manageFree

  Get a Stripe management URL (portal, upgrade, or cancel). Also covers billing portal — returns the URL for the user to open.

• top_up_creditsFree

  Add credits to your account. Returns a Stripe checkout URL — share it with the user to complete payment. Minimum $1.

• use_toolFree

  Call a ToolRouter catalogue tool. Prefer `route` with a natural-language intent when you do not already know the tool and skill — it picks them, fills arguments, and runs the call. Use discover when you need schemas or a catalogue listing, then pass the exact tool name and skill here. IMPORTANT: "discover", "route", "credits_balance", and other built-in tools are NOT catalogue tools — call them directly, never through use_tool. Long-running tools return a job_id — poll with job_get. If a skill needs an image_url or file URL and you have a local file or base64 image, use file_write first to get a hosted URL, then pass that URL to the skill. BRAIN: Some tools require you to consult brain_query first. If use_tool returns an error about brain_context, call brain_query with a relevant query, then pass the result text as brain_context in your use_tool input.

• –Code scanremote-only server, no package to scann/a
• Live reliabilityremote reachable in 1224ms20/20
• Tool poisoning48 tool descriptions checked15/15
• Auth qualityopen endpoint exposes 13 write-action tools with no auth3/15
• Maintenancelast push 16 days ago15/15
• Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10

ToolRouter: common questions

Is ToolRouter MCP server safe?

Mostly: it is graded B (83/100). Read the ToolRouter safety report

How do I install ToolRouter?

It runs remotely at api.toolrouter.com. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.

Does ToolRouter need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is ToolRouter maintained?

The last commit was 17 days ago (2026-09-04). The latest release is v0.3.2.

Is ToolRouter up?

100% of our last 6 checks got an answer. We check remote servers about four times a day.

What can I use instead of ToolRouter?

Servers from other publishers that do the same job: Ausca MCP server, Maginary MCP server and BridgeNode MCP server. Compare all ToolRouter alternatives.