whoami
Get the identity of the authenticated user.
Telos exposes a curated set of read-only tools over the Model Context Protocol so external agents can ground decisions in your actual product state. Writes stay on the REST surface where they are typed, validated, and audited; this plane is for reading.
POST /api/mcp speaks the Streamable HTTP MCP transport. Auth is the same bearer token you use for REST: Authorization: Bearer telos_live_…. Rate limits and role-based ACL from the REST API apply here too.
{
"mcpServers": {
"telos": {
"command": "npx",
"args": [
"-y",
"@modelcontextprotocol/inspector",
"--transport=http",
"--url=https://your-host.telos.app/api/mcp",
"--header=Authorization: Bearer telos_live_…"
]
}
}
}Auto-rendered from the source registry. Every input parameter is validated against a Zod schema on the server.
Get the identity of the authenticated user.
List teams in the organisation.
List users in the organisation.
List visions in the organisation, most recent first.
Get a specific vision by id.
List the version history for a vision.
List strategic objectives. Optionally scope to a vision.
Get a specific strategic objective by id.
List metrics tracked by the organisation.
Get a specific metric by id.
List strategies in the organisation. Defaults to active.
List opportunities. Optionally filter by lifecycle state (active/completed/rejected) or team.
Get a specific opportunity by id.
List tasks. Optionally filter by opportunity, status, priority, or team.
Get a specific task by id.
List intake items. Optionally filter by status.
Get intake queue counts grouped by status and category.
List customers. Optionally filter by status.
Get a specific customer by id.
By design, MCP is read-only. To mutate state from an agent, call the REST API directly. The same bearer key works for both. This split keeps every write typed, validated, and auditable through a single service layer; the read plane stays simple and safe to expand without surfacing destructive operations through a fuzzy tool name.