Name: brainkb
Author: org.brainkb

Tools observed via MCP handshake

brainkb_login — Authenticate to BrainKB with the user's credentials and cache the JWT for THIS session only (isolated per caller). The password/token are never echoed.
brainkb_globus_login — Start an OAuth login (Globus / ORCID / GitHub) for THIS session — use this instead of brainkb_login when the user signs in with Globus rather than a pas
brainkb_finish_login — Complete an OAuth login started with brainkb_globus_login by exchanging the one-time code shown in the browser for a session token. The code is single-use
brainkb_logout — Forget the cached token for this session.
brainkb_whoami — Report the current caller's auth state (email, authenticated, and when the cached session expires). When signed in it also returns base_url — the backend
brainkb_create_token — Generate a Personal Access Token (PAT) for browser-free auth. Requires you to be logged in already (brainkb_login or brainkb_globus_login). The token is
brainkb_list_tokens — List your Personal Access Tokens (metadata only — the secret is never shown): id, name, prefix, created/last-used/expiry, and whether each is active/rev
brainkb_revoke_token — Revoke one of your Personal Access Tokens by id (see brainkb_list_tokens). Takes effect immediately — the next call using that token fails.
brainkb_use_token — Use a Personal Access Token (brainkb_pat_...) for THIS session — an alternative to setting BRAINKB_TOKEN in the config. Validates the token, then caches
brainkb_list_spaces — List spaces the user can see (their own/member spaces + public ones), each annotated with THIS caller's permission so you know what they may do: - you
brainkb_create_space — Create a workspace/space. The caller becomes owner. slug: lowercase/hyphen id, **globally unique** — if it's already taken the call returns 409 (pick an
brainkb_set_space_visibility — Set a space 'public' (anyone, even anonymous, can read) or 'private' (members only). Owner only.
brainkb_add_space_member — Add/update a space member. role: 'owner' | 'editor' | 'viewer'. Owner only.
brainkb_add_space_graph — Register a named graph and bind it to a space, so ingest/read on that graph are governed by the space's membership and visibility. Owner/editor only. Th
brainkb_ingest_text — Ingest raw RDF text (Turtle / N-Triples / JSON-LD, auto-detected) into a named graph. Returns a job_id; ingestion runs in the background — poll with bra
brainkb_list_uploads — List RDF files YOU have staged with POST /upload but not yet ingested. Shows each upload_id, its size, sha256 and when it expires. Only your own upload
brainkb_upload_status — State of one of your staged/submitted uploads. `state` is `staged` (waiting for brainkb_ingest_upload), `submitting` (the server is streaming it to the
brainkb_discard_upload — Delete one of your staged uploads without ingesting it.
brainkb_ingest_upload — Ingest a file you staged with `POST /upload` into a named graph. This is the route for a large local file: your HTTP client streams the bytes straight
brainkb_ingest_files — Ingest local RDF files (ttl/nt/nq/rdf/owl/jsonld/json) into a named graph. Returns a job_id; runs in the background — poll with brainkb_job_status.
brainkb_list_jobs — List the user's ingest jobs (newest first) with status and progress.
brainkb_job_status — Detailed status of one ingest job: status, progress %, current file/stage, per-file failures, and (when complete) a summary.
brainkb_recover_job — Attempt to recover a stuck/errored ingest job (marks it recoverable/errored).
brainkb_search — Full-text search over the knowledge graphs, access-filtered by space visibility. Pass `space` to scope to one workspace, omit for a full search. Anonymo
brainkb_read_space — Read all RDF (JSON-LD) in a space's graphs. Public spaces are readable by anyone; private spaces require membership.
brainkb_list_registered_graphs — List registered named graphs visible to the caller (private-space graphs the caller can't access are hidden).
brainkb_sparql — Run an arbitrary SPARQL query. Requires an Admin/SuperAdmin role (the sparql_admin capability) — for ordinary questions prefer brainkb_search, brainkb_r
brainkb_provenance_job — PROV-O provenance bundle (JSON-LD) for one ingest job.
brainkb_provenance_graph — PROV-O ingestion/activity history (JSON-LD) for a named graph.
brainkb_delta — The exact triples a job added (its delta), as JSON-LD.
brainkb_delta_history — A named graph's change history: one entry per ingest delta (job, triple count, timestamp), newest first.
brainkb_delta_compare — Compare two jobs' deltas: A-only / B-only / shared triple counts + triples.
brainkb_capabilities — (Admin only) Show a user's roles, effective capabilities, and delegated grants. Useful to check why someone can/can't create team spaces, ingest, etc.
brainkb_grant_capability — (Admin only) Delegate a capability to a user — e.g. 'create_team_space' or 'manage_team_space' so a Curator/Lab Member can create/manage team spaces. Gr
brainkb_revoke_capability — (Admin only) Revoke a previously granted capability from a user.
brainkb_list_capabilities — (Admin only) Catalog of all KG capabilities, which are delegatable ('grantable'), which are admin-only, and a description of each. Use this to see the a
brainkb_role_capabilities — (Admin only) List the capabilities granted to a role/group (e.g. 'uk_collaborator', 'Lab Member').
brainkb_grant_role_capability — (Admin only) Grant a capability to a whole role/group so EVERY member gets it — e.g. give a custom group 'uk_collaborator' the 'ingest' or 'create_priva
brainkb_revoke_role_capability — (Admin only) Revoke a capability from a role/group.
brainkb_list_access_rules — List a space's fine-grained access rules (member/manager of the space).
brainkb_add_access_rule — (Space manager) Restrict a space action to a subject. action: 'read' | 'write' | 'manage'. subject_type: 'global_role' (e.g. 'Admin','Lab Member') | 'me
brainkb_remove_access_rule — (Space manager) Delete a fine-grained access rule by its id (see brainkb_list_access_rules).
brainkb_list_users — (Admin) List users (profiles) — filter by `q` (name/email/orcid) or `role`. Shows profile_id, email, roles, providers, ban status.
brainkb_available_roles — (Admin) List the available roles/groups (Admin, Lab Member, Curator, …).
brainkb_create_role — (Admin) Create a new role/group — e.g. an 'External' collaborator group — which can then be assigned with brainkb_assign_role.
brainkb_assign_role — (Admin) Assign a role/group to a user by email (e.g. 'Lab Member', 'External', or a custom group). The user must already have a profile (created on first
brainkb_remove_role — (Admin) Remove a role/group from a user by email.
brainkb_activate_user — (Admin) Activate a user's account (sets the JWT user active) by email.
brainkb_deactivate_user — (Admin) Deactivate a user's account by email.
brainkb_ban_user — (Admin) Ban a user by email (reversible; preserves history). This is how accounts are removed — there is NO hard delete. Banning an Admin is SuperAdmin-
brainkb_unban_user — (Admin) Lift a ban on a user by email.
brainkb_list_permissions — (Admin) List all usermanagement permissions (resource/action pairs used for page-access and role-permission mapping). These are the addable 'permission'
brainkb_create_permission — (Admin) Create a new usermanagement permission, e.g. name='dataset.export', resource='dataset', action='export'. Attach it to roles via the usermanageme

when	check	result	http	latency	detail
6 h ago	mcp initialize	ok	200	103 ms	server brainkb 1.29.0 · protocol 2025-06-18 · 53 tools
13 h ago	mcp initialize	ok	200	100 ms	server brainkb 1.29.0 · protocol 2025-06-18 · 53 tools
20 h ago	mcp initialize	ok	200	105 ms	server brainkb 1.29.0 · protocol 2025-06-18 · 53 tools

brainkb

This record is unclaimed

Evidence

What the publisher says

Capabilities

Where this record came from