MCP Tool Catalog

Orbit exposes its operations to any MCP-capable client. This is a grouped index; tools accept an optional node parameter for multi-node routing where relevant.

Status, completions & handoff

orbit_status, orbit_status_markdown, orbit_get_completions, orbit_get_completion_full, orbit_get_context, orbit_get_context_file, orbit_list_context, orbit_handoff, orbit_list_projects, orbit_create_project.

Read live project state, completion history, and project context. orbit_handoff owns reading and writing handoff files under context/handoffs/ (content-first writes, history preserved).

Queue & sessions

orbit_queue_prompt, orbit_queue_list, orbit_cancel_prompt, orbit_edit_prompt, orbit_list_sandbox_sessions, orbit_decompose.

orbit_edit_prompt edits a pending queue prompt in place — no need to cancel and re-queue to fix a typo or add a depends_on:.

Context (write)

orbit_write_context, orbit_append_context, orbit_write_global_context, orbit_append_global_context.

Files & locks

orbit_read_file, orbit_write_file, orbit_delete_file, orbit_list_files, orbit_lock_file, orbit_list_locks, orbit_unlock_file.

orbit_write_file and orbit_delete_file are scoped to registered project directories or the canonical global context directory; critical files (e.g. COMPLETION_LOG.md, CLAUDE.md, .gitignore, package.json) are protected, and orbit_write_file overwrites a file’s entire contents rather than patching it.

Servers & QA

orbit_server_start, orbit_server_stop, orbit_server_status, orbit_server_logs, orbit_run_script, orbit_get_qa_history, orbit_get_qa_results.

Git, shell & GitHub

orbit_git_status, orbit_git_log, orbit_git_diff, orbit_git_show, orbit_exec_shell, orbit_github_prs, orbit_github_issues, orbit_github_actions, orbit_github_branches, orbit_github_issue_create, orbit_github_pr.

Read-only git inspection, an allowlisted shell-exec tool (diagnostics, npm run/list/outdated, $env: injection) gated to registered project roots, and GitHub PR/issue/actions reads plus creation.

Project settings

orbit_get_project_settings, orbit_set_project_setting.

Read and write per-project configuration values (e.g. vercelProjectId, neon_connection_string). Protected keys — path, slug, id, color, colorIndex — cannot be overwritten. Snake_case key aliases (e.g. vercel_project_id) are auto-normalized to camelCase before writing.

Benchmark Mode

orbit_benchmark_create, orbit_benchmark_results, orbit_benchmark_review, orbit_benchmark_status, orbit_benchmark_list, orbit_benchmark_cancel.

Full lifecycle for Benchmark Mode (API mode) jobs. orbit_benchmark_create launches a job; orbit_benchmark_results reads job output; orbit_benchmark_review runs the three-phase review pass. rows and configs parameters on orbit_benchmark_create must be real JSON arrays, not stringified JSON.

orbit_benchmark_results and orbit_benchmark_status return bounded summaries by default. Pass runId to read one run with its archived response and scorecard, or use model, includeResponses, includeScorecards, and maxChars to narrow or expand the read. Output tokens include provider reasoning where reported; visible response length is shown separately in characters.

Bridge relay (node-to-node messaging)

relay_channels, relay_poll, relay_post, relay_confirm, relay_history, relay_status.

List, poll, and inspect Bridge channels for the current account. relay_post is approval-gated — outbound messages queue for human review before delivery. relay_confirm sends a pending message only after its exact content has been shown to the user and they’ve given explicit yes (user_confirmed: true; any other value is rejected). If a channel is omitted and exactly one active channel exists, it is selected automatically.

Cloud, DB & deploy providers

orbit_vercel_*, orbit_railway_*, orbit_neon_*, orbit_supabase_*.

Built-in (no external MCP URL) tools for Vercel/Railway deploys and env vars, and Neon/Supabase queries and schema.

Firestore

orbit_firestore_query, orbit_firestore_collections, orbit_firestore_schema.

Query Firestore collections with optional filters, ordering, and limit (orbit_firestore_query); list all top-level collections (orbit_firestore_collections); sample up to 10 documents and infer field types (orbit_firestore_schema). All three are read-only.

Stripe

orbit_stripe_summary, orbit_stripe_customers, orbit_stripe_revenue.

Read-only billing visibility. orbit_stripe_summary returns active subscription count, MRR estimate, and last 5 charges. orbit_stripe_customers lists customers with email, name, and subscription status (max 25). orbit_stripe_revenue returns total revenue, charge count, and average charge for a period.

Sentry

orbit_sentry_errors, orbit_sentry_issues, orbit_sentry_resolve.

orbit_sentry_errors and orbit_sentry_issues are read-only. orbit_sentry_resolve resolves a Sentry issue by ID — it is a write tool requiring approval, not a read.

App Store & Play Store

orbit_appstore_status, orbit_appstore_builds, orbit_playstore_status.

Read-only mobile release visibility. orbit_appstore_status returns the latest App Store Connect build and review state; orbit_appstore_builds lists recent TestFlight builds (max 25); orbit_playstore_status returns production and internal testing track state from Google Play.

Slack & Discord notifications

orbit_slack_notify, orbit_slack_deploy_notify, orbit_discord_notify.

All three are write tools requiring approval. orbit_slack_notify sends a message to a named Slack channel; orbit_slack_deploy_notify fetches the latest Vercel or Railway deploy and posts a formatted status message; orbit_discord_notify sends a message via a Discord webhook. Credentials are read from the Vault (slack, slack_webhook, or discord_webhook_{project}).

Discord guild management

discord_list_roles, discord_get_channel_permissions, discord_set_channel_permission, discord_sync_category.

Built-in (not plugin-registered) Discord bot tools, gated on a bot token in the Vault (orbit-discord.BOT_TOKEN or discord_bot_token). discord_list_roles and discord_get_channel_permissions are read-only; the latter resolves role names for readable audits. discord_set_channel_permission (write, requires approval) sets a role’s permission overwrite on a channel using named permission strings like SEND_MESSAGES rather than raw bitfields. discord_sync_category (write, requires approval) copies a category’s permission overwrites onto each child channel and reports per-channel success or failure.

Godot

orbit_godot_list_projects, orbit_godot_get_project_info, orbit_godot_launch_editor, orbit_godot_run_project, orbit_godot_stop_project, orbit_godot_get_debug_output, orbit_godot_get_version, orbit_godot_create_scene, orbit_godot_add_node, orbit_godot_save_scene.

Proxy tools for Godot Engine project management. Requires a godot-mcp proxy configured in the Orbit config file. Covers project listing and metadata, launching and running projects in debug mode, reading debug output, and scene file creation and editing.

Vault & services

orbit_vault_get, orbit_vault_set (create-only), orbit_vault_list, orbit_vault_search, orbit_vault_detect_services, orbit_vault_delegate_exec (operator preview and one-use queued command approval), orbit_mcp_detect_services, orbit_mcp_get_service_url.

Sivants Studio

44 is_* tools (for example is_generate_image, is_generate_preview, is_get_balance); legacy orbit_image_generate, orbit_image_models.

Code intelligence & Cortex decision memory

orbit_code_search (plus Memtrace MCP tools); orbit_recall_decision, orbit_why_here, orbit_decision_detail for Cortex governance and decision lineage.

Agent Wiki findings

orbit_findings_add, orbit_findings_search, orbit_findings_mark.

Store one to three evidence-backed project findings at a time (project and actor are derived from the authenticated session), search stored findings, and mark a finding’s disposition. Duplicate normalized assertions and evidence paths return the existing finding instead of creating a new one.

Boards

orbit_board_list, orbit_board_read, orbit_board_write, orbit_board_update, orbit_board_claim, orbit_board_activate, orbit_board_status, orbit_board_verify, orbit_board_attach_asset, orbit_board_delete.

Tasks

orbit_tasks_create, orbit_tasks_update, orbit_tasks_delete.

Captures

orbit_list_captures, orbit_get_capture, orbit_get_capture_image, orbit_update_capture, orbit_delete_capture, orbit_capture_stats.

Multi-node

orbit_list_nodes; all tools accept an optional node parameter.

orbit_note_send, orbit_note_list, orbit_note_ack send and read non-executable notes between nodes (or to all currently visible nodes on the account). Finding notes require structured evidence, and a note thread has an unattended exchange budget — it can pause with thread_budget_exhausted until a human engages. orbit_note_ack marks a note read and is idempotent.

Apollo & chat

orbit_chat_send.

DanceOS

18 orbit_danceos_* tools (contacts, tags, campaigns, sequences, inbox), with a destructive-action confirmation on campaign send.

Onboarding

orbit_set_onboarding_milestone.

Operator / developer tools

orbit_prompt_number_repair_dry_run — inventories prompt-number surfaces across a project and reports proposed renumber, void, suppress, and foreign corrections without mutating anything; a preview only. orbit_rearm_dependency_guard — resets a tripped canonical dependency-integrity guard after fresh verification. orbit_stash_resolve — resolves a stash-related recovery state from an MCP client instead of the Git tab UI.

Security

32 orbit_security_* tools. Operator-only — project agents and read-only sessions cannot call them.

Read-only: orbit_security_readiness, orbit_security_dashboard, orbit_security_notifications, orbit_security_checklist, orbit_security_audit_results, orbit_security_finding, orbit_security_plan, orbit_security_trends, orbit_security_schedules.

Mutations: orbit_security_audit_start, orbit_security_audit_cancel, orbit_security_checklist_record, orbit_security_finding_triage, orbit_security_finding_restore, orbit_security_suppression_disable, orbit_security_finding_mark_fixed, orbit_security_finding_confirm_rotation, orbit_security_finding_verify, orbit_security_fix_preview, orbit_security_fix_approve, orbit_security_plan_create, orbit_security_plan_start, orbit_security_plan_pause, orbit_security_plan_step_preview, orbit_security_plan_step_approve, orbit_security_plan_step_verify, orbit_security_plan_step_confirm_rotation, orbit_security_plan_export, orbit_security_schedule_create, orbit_security_schedule_set_enabled.

Two tools read like reads but are classified as mutations because they refresh state as a side effect: orbit_security_fix and orbit_security_plan_step each refresh the bound fix’s status from the queue authority before returning it. orbit_security_plan_export is a mutation because it may materialize review-only fix previews for steps that don’t have one yet — it never approves or queues anything.

Fix approval is single-item only: orbit_security_fix_approve and orbit_security_plan_step_approve each take one preview_hash — the unchanged hash returned by the preview you reviewed — and fail if the preview is stale or the source has drifted since. There is no approve-all or bulk-approval tool. orbit_security_audit_start and orbit_security_schedule_create accept a profile of standard (deterministic working-tree audit), history (deterministic Git-history audit), or deep (paid model review); recurring deep-profile schedules are refused.

Utility

orbit_web_fetch — fetches an HTTP or HTTPS URL and returns the page content as stripped plain text. Accepts url (required) and maxChars (optional, default 20 000, max 50 000). Local file paths, non-HTTP schemes, and raw binary responses are not supported; content is always returned as text.