Oleria MCP tools

These are the default tools available in every workspace. Your AI client calls one of them to answer a question - most clients show the tool name when it does. You won’t usually need to name one directly; describing your question is enough for the right tool to be selected.

Tool	Answers questions about
`SearchAccessGraph`	Access and permissions
`SearchActivities`	Usage and activity
`SearchDetectedRisks`	Already-detected risk violations
`GetSecurityMetrics`	Pre-aggregated posture metrics
`SearchAccessGovernance`	Access reviews, lifecycle management, and workflow automation
`ListIntegrations`	Connected and available integrations

SearchDetectedRisks returns risks Oleria has already found - it doesn’t start a new scan.

See what you can ask for example questions for each tool.

Specialized tools

Some workspaces also have one or both of these tool groups enabled, independently of each other - a workspace might have the threat investigation tools without the Structured Query Language (SQL) tools, or the other way around. If neither is enabled, you’ll only see the tools above.

Tool	Answers questions about
`ListThreatCatalog`	Named threats and breach scenarios in Oleria’s threat catalog
`GetInvestigationPlaybook`	Recommended investigation steps for a threat or breach scenario
`ListDataTables`	The data tables available for advanced queries
`GetTableSchema`	The schema for a specific data table
`ValidateSqlQuery`	Whether a SQL query is valid, without running it
`ExecuteSqlQuery`	Runs a read-only SQL query against your Oleria data and returns the results

ListThreatCatalog is reference information - it doesn’t check whether you’re currently affected. GetInvestigationPlaybook returns guidance only - it doesn’t run the investigation for you. ExecuteSqlQuery only runs read (SELECT) queries - like the rest of Oleria MCP, it can’t change anything.

Metrics reference

GetSecurityMetrics returns pre-aggregated metrics across the following areas, without running a fresh query each time:

Metric area	What it covers
Inventory	Account, group, application, permission, resource, and role counts
Password hygiene	Password age distribution, compliance violations, stale passwords - by application
Multi-factor authentication (MFA) posture	Enrollment counts for users and admins
Risk posture	Risks by severity per application, service-level agreement (SLA) compliance, failed findings
Activity insights	Login activity by country, privileged user activity, unprotected access
Account hygiene	Orphaned access and entitlement accounts, dormancy distribution
Group hygiene	Abandoned, dormant, and many-owner groups; circular group memberships; nesting depth; sensitive access held by large groups
External access	Sharing method breakdown, external user analytics, data classification exposure
Entitlement utilization	Unused assignments, average utilization rate, apps per user
Non-human identity (NHI) posture	Non-human identity type, owner, dormancy, and privilege distribution, and AI agent count
Role posture	Roles with no active assignees, unassigned roles that still have resource access, role-to-account ratio per application
Resource posture and sharing	Sensitive resources with dormant access, anonymously or externally shared resources cross-referenced with account dormancy
Application and assignment posture	Applications with no accounts or with groups but no accounts, per-app assignment breakdowns by user type and single sign-on (SSO) status

Contact us

For questions, contact us at support@oleria.com.

Getting Started

Posture

Governance

Administration

Support

Specialized tools

Metrics reference

Contact us

​Specialized tools

​Metrics reference

​Contact us

Specialized tools

Metrics reference

Contact us