Every change Wellknown observed on this MCP server, newest first, with what it was before and what it became. Tool-surface changes carry the definition diff. Nothing here is edited after the fact.
Certificate recorded, valid to 2026-11-22
Authorization not required, issuer https://api.vtc.com
Added "describe_public_app_surface", "fetch_app_public_route", "list_guest_public_apps" and 5 more; changed the definition of "ask_space_public", "find_space", "get_space_public_profile" and 4 more (7 tools before, 15 now)
before
—after
Ask a Space's Public AI Supportbefore
—after
{"destructiveHint":false,"idempotentHint":true,"openWorldHint":false,"readOnlyHint":true,"title":"Ask a Space's Public AI Support"}before
—after
Find Public Spacebefore
—after
{"destructiveHint":false,"idempotentHint":true,"openWorldHint":false,"readOnlyHint":true,"title":"Find Public Space"}before
—after
Get Space Public Profilebefore
—after
{"destructiveHint":false,"idempotentHint":true,"openWorldHint":false,"readOnlyHint":true,"title":"Get Space Public Profile"}before
—after
List Developer Catalogbefore
—after
{"destructiveHint":false,"idempotentHint":true,"openWorldHint":false,"readOnlyHint":true,"title":"List Developer Catalog"}before
—after
List Network Public Appsbefore
—after
{"destructiveHint":false,"idempotentHint":true,"openWorldHint":false,"readOnlyHint":true,"title":"List Network Public Apps"}before
—after
List Space Public AI Documentsbefore
—after
{"destructiveHint":false,"idempotentHint":true,"openWorldHint":false,"readOnlyHint":true,"title":"List Space Public AI Documents"}before
—after
Read Public Collectionbefore
—after
{"destructiveHint":false,"idempotentHint":true,"openWorldHint":false,"readOnlyHint":true,"title":"Read Public Collection"}Describe Public App — AI manifest plus guest/public read hints for one app (module_code). No Space JWT required.
Fetch Public App Route — GET an allowlisted HTTPS public API URL on *.apps.vtc.com (path must include /public). No JWT.
List Public Space Apps — List apps on a Space dashboard that allow guest browse (public_guest_access=yes). Uses public ZAPI — no Space JWT.
List Public Collection Documents — Read documents from a collection the Space marked public-read (ZAPI). No JWT.
Search Public Spaces and People — Search public people by username, and public spaces or networks by name or username (no login). Networks are spaces with kind "network". Use a space or network id with set_guest_context.
Search Public People — Find public people by username (optional leading @). No login. People who opted out of search, or who are only in a private network, are omitted. Email is not searchable.
Search Public Spaces — Find public VTC Spaces by space name or space username/slug (no login). Use the returned id with set_guest_context.
Select Public Space — Bind a Space for guest/public tools (no login). Accepts a numeric id, public slug (dexi), or a name that matches one public space. Prefer search_public_spaces when the name may match several spaces.
Added "ask_space_public", "find_space", "get_space_public_profile" and 3 more; removed "count_documents", "describe_public_app_surface", "execute_action" and 25 more; changed the definition of "list_developer_catalog" (29 tools before, 7 now)
Public ZAPI developer catalog of app-facing API services (no auth).Use when discovering platform endpoints for child apps — not for Space Mongo data.
Ask a Space's public AI Support a question in plain text (e.g. "what are the options for solar panels"). Answers only from the Space's AI documents and collections the Space marked 'Public to AI Support' (public fields only). Same route as the Space's guest support chat; the Space pays for answers.
Search the public VTC Space directory by name, handle, description or tag (no login). Returns space_id for the other public tools.
Unknown → Live
First tool surface recorded: 29 tools (server version 0.5.1)
https://mcp.vtc.com/mcp (mcp_streamable_http) — from mcp_registry, with the record
Showing the latest 7 events. The API returns up to 500 and filters by kind: ?kind=tool_surface_changed
Public profile of one Space (description, website, networks) and which AI Support modes it offers guests.
Public app catalog shown to members of a VTC network (e.g. network id 1 = VTC).
List the documents a Space's public AI Support uses (names and types only).
Read documents from a Space collection that the Space explicitly shared as public (public-read). Optional text filter matched over the returned rows. Private collections return "not found or not public".
Count documents with an optional filter. Soft-deleted rows (status=deleted) are excluded by default when the collection has status — set include_deleted=true to override.
AI manifest plus guest/public read hints for one app (module_code). No Space JWT required.
Execute an AI Guide tool via ZAPI /ai/tools/execute (same path as in-product Guide). For confirm_required tools: first call WITHOUT confirmation_token returns a proposal; second call WITH confirmation_token performs the action. Read-only tools (confirm_required=false) run immediately. Do not set confirmed yourself without a token.
Call this first after auth. Summarizes environment, group_id, user, and role so you do not query the wrong Space or live vs beta.
GET an allowlisted HTTPS public API URL on *.apps.vtc.com (path must include /public). No JWT.
Find documents (max 50, skip capped). Prefer narrow filter + projection. Call list_collections and sample_document before guessing schema. Soft-deletes excluded by default; sensitive fields redacted by default.
Fetch the AI tool manifest for a module_code (installed app). Use after list_space_apps when you need tool schemas — not for inspecting Mongo collections.
Lightweight summary of the authenticated Space from JWT claims (group_id, network_id, role). Does not query Mongo. Prefer this or explain_space_context before DB tools.
Fetch one space workflow by id (steps, trigger, gaps). Read-only.
List AI Guide tools the current JWT may run (default: platform.* only). Opt into installed app manifests with include_apps or VTC_MCP_ACTION_MODULES. Call explain_space_context first. Does not execute anything.
List collections in the authenticated space silo (excludes system.*). Call this before assuming collection names. Use include_counts sparingly.
List apps on a Space dashboard that allow guest browse (public_guest_access=yes). Uses public ZAPI — no Space JWT.
Read documents from a collection the Space marked public-read (ZAPI). No JWT.
List apps installed / owned in the authenticated Space (JWT group_id). Call explain_space_context first. Not a Mongo query.
List saved workflows in the authenticated Space. Call explain_space_context first. Read-only.
Start ZAPI OTP login for an existing account. Then call verify_otp with the code and space group_id. Prefer explain_space_context after auth before querying.
Draft a workflow from natural language via ZAPI /ai/propose-workflow. Does not persist — review then save_workflow. Prefer this over inventing step schemas.
Run a saved workflow. dry_run=true (default) previews without side effects. dry_run=false requires confirmation_token from a prior proposal. Does not call /ai/execute-agent.
Return one document for schema inference. Sensitive fields are redacted by default. Prefer this before large finds.
Create a workflow in the Space (space admin JWT). First call returns confirmation_token; second call with that token persists. Defaults automation_enabled to false unless you set true explicitly. Does not use /ai/execute-agent.
Search public people by username, and public spaces or networks by name or username (no login). Networks are spaces with kind "network". Use a space or network id with set_guest_context.
Find public people by username (optional leading @). No login. People who opted out of search, or who are only in a private network, are omitted. Email is not searchable.
Find public VTC Spaces by space name or space username/slug (no login). Use the returned id with set_guest_context.
Bind a Space for guest/public tools (no login). Accepts a numeric id, public slug (dexi), or a name that matches one public space. Prefer search_public_spaces when the name may match several spaces.
Set/replace the in-memory JWT (space-scoped token from the app). Prefer OTP for interactive use. JWT is never written to disk.
Call after auth (and ideally after explain_space_context). Resolves the current Shared space silo via ZAPI (URI redacted). Does not accept group_id — silo is always the JWT space.
Decode the current session JWT claims (no signature verify — ZAPI verifies on /db/).
Complete OTP login and store a space-scoped JWT in memory only (not on disk). group_id is required for Shared space DB access.