> ## Documentation Index
> Fetch the complete documentation index at: https://docs.oleria.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Oleria MCP tools

> The tools Oleria MCP exposes to your AI client, and the metrics reference for pre-aggregated posture data.

These are the default tools available in every workspace. Your AI client calls one of them to answer a question - most clients show the tool name when it does. You won't usually need to name one directly; describing your question is enough for the right tool to be selected.

| Tool | Answers questions about |
| :- | :- |
| `SearchAccessGraph` | Access and permissions |
| `SearchActivities` | Usage and activity |
| `SearchDetectedRisks` | Already-detected risk violations |
| `GetSecurityMetrics` | Pre-aggregated posture metrics |
| `SearchAccessGovernance` | Access reviews, lifecycle management, and workflow automation |
| `ListIntegrations` | Connected and available integrations |

<Note>`SearchDetectedRisks` returns risks Oleria has already found - it doesn't start a new scan.</Note>

See [what you can ask](/introduction/oleria-mcp-examples) for example questions for each tool.

## Specialized tools

Some workspaces also have one or both of these tool groups enabled, independently of each other - a workspace might have the threat investigation tools without the Structured Query Language (SQL) tools, or the other way around. If neither is enabled, you'll only see the tools above.

| Tool | Answers questions about |
| :- | :- |
| `ListThreatCatalog` | Named threats and breach scenarios in Oleria's threat catalog |
| `GetInvestigationPlaybook` | Recommended investigation steps for a threat or breach scenario |
| `ListDataTables` | The data tables available for advanced queries |
| `GetTableSchema` | The schema for a specific data table |
| `ValidateSqlQuery` | Whether a SQL query is valid, without running it |
| `ExecuteSqlQuery` | Runs a read-only SQL query against your Oleria data and returns the results |

<Note>
  `ListThreatCatalog` is reference information - it doesn't check whether you're currently affected. `GetInvestigationPlaybook` returns guidance only - it doesn't run the investigation for you. `ExecuteSqlQuery` only runs read (`SELECT`) queries - like the rest of Oleria MCP, it can't change anything.
</Note>

## Metrics reference

`GetSecurityMetrics` returns pre-aggregated metrics across the following areas, without running a fresh query each time:

| Metric area | What it covers |
| :- | :- |
| Inventory | Account, group, application, permission, resource, and role counts |
| Password hygiene | Password age distribution, compliance violations, stale passwords - by application |
| Multi-factor authentication (MFA) posture | Enrollment counts for users and admins |
| Risk posture | Risks by severity per application, service-level agreement (SLA) compliance, failed findings |
| Activity insights | Login activity by country, privileged user activity, unprotected access |
| Account hygiene | Orphaned access and entitlement accounts, dormancy distribution |
| Group hygiene | Abandoned, dormant, and many-owner groups; circular group memberships; nesting depth; sensitive access held by large groups |
| External access | Sharing method breakdown, external user analytics, data classification exposure |
| Entitlement utilization | Unused assignments, average utilization rate, apps per user |
| Non-human identity (NHI) posture | Non-human identity type, owner, dormancy, and privilege distribution, and AI agent count |
| Role posture | Roles with no active assignees, unassigned roles that still have resource access, role-to-account ratio per application |
| Resource posture and sharing | Sensitive resources with dormant access, anonymously or externally shared resources cross-referenced with account dormancy |
| Application and assignment posture | Applications with no accounts or with groups but no accounts, per-app assignment breakdowns by user type and single sign-on (SSO) status |

## Contact us

For questions, contact us at [support@oleria.com](mailto:support@oleria.com).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.