{
  "status": "online",
  "service": "FLOWORK Sovereign MCP Server (Nano Modular Edition)",
  "domain": "mcp.floworkos.com",
  "appId": "app_flw_universal_gateway",
  "version": "1.0.0",
  "transport": [
    "JSON-RPC 2.0",
    "Server-Sent Events (SSE)"
  ],
  "public_access": "UNRESTRICTED_PUBLIC_OPEN",
  "total_tools": 69,
  "endpoints": {
    "sse": "/sse",
    "messages": "/messages",
    "tools": "/tools/list",
    "call": "/tools/call",
    "vault": "/api/mcp/vault",
    "user_key": "/api/mcp/user-key"
  },
  "tools": [
    {
      "name": "ambient_music_action",
      "description": "Control the background ambient radio, lo-fi beats, cyberpunk streams, or specific playlist in the Flowork OS browser client."
    },
    {
      "name": "analyze_website_traffic",
      "description": "FLOWORK X-Ray & Comprehensive Website Intelligence Engine. Extracts Global/Country/Category Traffic Ranks, 3-Month Monthly Visits Trends, Full Traffic Channels (Direct, Organic/Paid Search, Social Organic/Paid, Referral, GenAI, Display Ads), Top Ranking Keywords (CPC & Volume), On-Page SEO Health Score, Meta Tags, and DNS resolution for any domain."
    },
    {
      "name": "analyze_youtube_video",
      "description": "FLOWORK FBE V6 Enterprise YouTube DeepScan Engine. Extracts 26+ deep intelligence parameters: Algorithm Synergy (title-tag match, hashtag spam), Deep Monetization (ad breaks count, sponsorship words, e-commerce links), Secret Keywords/Tags, Exact View & Like metrics, Retention Heatmap, Broadcast Tech (HDR, 360VR, Audio Quality), and Channel Upload Timing Schedule."
    },
    {
      "name": "ask_question",
      "description": "Ask the user one or more interactive multiple-choice clarification questions via centered modal dialog popup."
    },
    {
      "name": "audit_web_vulnerabilities",
      "description": "FLOWORK HackerOne & DevSecOps Web Security Scanner (Enterprise Grade). Audits target domain across 20+ security vectors: sensitive config leaks (.env, .git, SQL dumps), CORS origin reflection, DMARC/SPF email security policies, dangling DNS takeover risks, exposed API/OpenAPI blueprints, GraphQL introspection, and modern HTTP security headers (CSP, Permissions-Policy, HSTS). Generates HackerOne-ready reports with CWE IDs, CVSS v3.1 scores, and remediation configs."
    },
    {
      "name": "base64_media_utility",
      "description": "Encode plain text or binary URLs into Base64 format, or decode Base64 strings into readable text or data URLs."
    },
    {
      "name": "browser_agent",
      "description": "AI Agent untuk Chrome Extension Flowork. Menerima konteks halaman web (URL, teks, elemen interaktif) dan memutuskan aksi DOM berikutnya (click, type, scroll, navigate, dll) untuk menyelesaikan task yang diberikan user."
    },
    {
      "name": "calculate_blast_radius",
      "description": "Analyze code dependency graph, calculate caller cascade impact, and generate Mermaid AST blast radius visual maps."
    },
    {
      "name": "check_backlinks_and_domain_seo",
      "description": "Analyze domain authority, backlink footprint, referring links, subdomain mapping, DNS infrastructure (MX, NS, SPF/DMARC), SSL/TLS certificate security, and historical archive snapshots for any domain."
    },
    {
      "name": "delete_task_plan",
      "description": "Delete or archive an active task plan or reset the task checklist in the Trajectory Ledger."
    },
    {
      "name": "delete_walkthrough",
      "description": "Delete or archive a walkthrough checkpoint from the Trajectory Vault."
    },
    {
      "name": "deploy_swarm_colony",
      "description": "Deploys an entire specialized Swarm Fleet (Coder, Recon, Auditor, Architect) with 24/7 Edge Cron Triggers to the user Cloudflare Account."
    },
    {
      "name": "deploy_swarm_node",
      "description": "Provisions and deploys a new Sovereign Swarm Edge Worker Node to the user Cloudflare account and registers it with the Brain D1 Mesh."
    },
    {
      "name": "devto_publish_article",
      "description": "Publish technical articles directly to Dev.to. Defaults to publishing live immediately. Requires a Dev.to API Key (configured in Flowork Vault or passed via api_key)."
    },
    {
      "name": "dns_lookup_deep",
      "description": "Perform exhaustive DNS record matrix lookup for any domain across all record types."
    },
    {
      "name": "extract_youtube_transcript",
      "description": "Extract full subtitles, spoken transcripts, and timestamps from any YouTube video for AI summarization."
    },
    {
      "name": "fetch_web_content",
      "description": "Fetch and extract raw HTML or REST data from generic public HTTP/HTTPS URLs. [STRICT RESTRICTION]: DO NOT USE FOR YOUTUBE. For any YouTube channel, URL, or video analysis, you MUST use 'youtube_command_center' instead."
    },
    {
      "name": "flowork_mapping",
      "description": "Generate real-time topological microservice maps of FLOWORK OS ecosystem."
    },
    {
      "name": "generate_audit_certificate",
      "description": "Generates an immutable, cryptographic Sovereign Audit Certificate (SHA-256) proving isolated Edge execution, constitutional compliance, and zero foreign data leakage."
    },
    {
      "name": "generate_qr_code",
      "description": "Generate customizable QR Code images for URLs, payment text, or WiFi access."
    },
    {
      "name": "generate_video_summary",
      "description": "Generate structured executive summaries, key bullet takeaways, and chapter highlights from video transcripts or descriptions."
    },
    {
      "name": "get_goal_contract",
      "description": "Retrieve the Single Sovereign Goal Contract from Trajectory Ledger D1 Database and KV Storage."
    },
    {
      "name": "get_secret_credential",
      "description": "Retrieve encrypted secret key or API token from FLOWORK Sovereign Key Vault."
    },
    {
      "name": "get_swarm_result",
      "description": "Retrieve detailed execution results, artifacts, and trajectory logs from a Colony subagent or swarm node."
    },
    {
      "name": "get_task_ledger",
      "description": "Retrieve current task roadmap, execution trajectory, and checklist items from the Trajectory Ledger."
    },
    {
      "name": "get_walkthrough",
      "description": "Retrieve sealed walkthrough checkpoints, verification proofs, and engineering milestones from Trajectory Vault."
    },
    {
      "name": "github_commit_file",
      "description": "Autonomously create or commit file changes to a GitHub repository branch. Auto-triggers Cloudflare Pages continuous deployment."
    },
    {
      "name": "github_create_issue",
      "description": "Create a new issue, bug report, or feature ticket in a GitHub repository."
    },
    {
      "name": "github_create_pull_request",
      "description": "Open a new Pull Request on a GitHub repository comparing two branches."
    },
    {
      "name": "github_get_file_contents",
      "description": "Retrieve raw content of any public or authenticated file or directory from a GitHub repository."
    },
    {
      "name": "github_search_repositories",
      "description": "Search open repositories, code, and developer projects on GitHub."
    },
    {
      "name": "html_to_markdown",
      "description": "Convert raw HTML string or web snippets into clean, sanitized markdown format."
    },
    {
      "name": "http_request",
      "description": "Execute public HTTP requests (GET/POST/PUT/DELETE) to external endpoints or REST APIs. [STRICT RESTRICTION]: DO NOT USE FOR YOUTUBE. For any YouTube channel, URL, or video analysis, you MUST use 'youtube_command_center' instead."
    },
    {
      "name": "http_security_headers_audit",
      "description": "Examine web server security response headers for Clickjacking (X-Frame-Options), HSTS, CSP, X-Content-Type-Options, and CORS configuration."
    },
    {
      "name": "json_validator_formatter",
      "description": "Validate, format (beautify), or compress (minify) JSON payloads."
    },
    {
      "name": "key_vault_manager",
      "description": "Securely manage, save, list, and retrieve encrypted API tokens, SSH keys, and passwords from FLOWORK Sovereign Key Vault."
    },
    {
      "name": "list_mcp_servers",
      "description": "List all registered Model Context Protocol (MCP) servers and their connection statuses."
    },
    {
      "name": "list_secret_credentials",
      "description": "List all stored API keys, tokens, and secret credential names in FLOWORK Sovereign Key Vault (Zero-Leak: values stay hidden)."
    },
    {
      "name": "mcp_server_manager",
      "description": "Register, list, or remove custom Model Context Protocol (MCP) server endpoints in your Flowork ecosystem."
    },
    {
      "name": "provision_byoc_satellite",
      "description": "1-Click Automated Provisioner that creates D1 Database, KV Vault, R2 Storage, and deploys the Sovereign Satellite Worker to the user Cloudflare Account via REST API v4."
    },
    {
      "name": "radar_whatsapp_group",
      "description": "Validate WhatsApp group invite links, inspect group title, participant count, creation metadata, and extract phone contacts."
    },
    {
      "name": "read_url_content",
      "description": "Fetch and extract public web page contents into clean plain text or markdown for generic articles and docs. [STRICT RESTRICTION]: DO NOT USE FOR YOUTUBE. For any YouTube channel, URL, or video analysis, you MUST use 'youtube_command_center' instead."
    },
    {
      "name": "recall_creator_history",
      "description": "Recall historical milestones, codebase evolutions, and engineering blueprints authored by the creator."
    },
    {
      "name": "register_mcp_server",
      "description": "Register a new Model Context Protocol (MCP) server endpoint in the Flowork ecosystem."
    },
    {
      "name": "remove_mcp_server",
      "description": "Remove a registered Model Context Protocol (MCP) server from the active fleet."
    },
    {
      "name": "run_red_team_audit",
      "description": "Military-grade static analysis & vulnerability red-team scanner. Detects hardcoded secrets, SQL injection, RCE, path traversal, prototype pollution, and lazy placeholder code."
    },
    {
      "name": "satellite_secret_sync",
      "description": "Owner-only: sinkronkan platform secrets (JWT_SECRET + INTERNAL_SERVICE_SECRET) ke satellite worker user lama agar verifikasi token user aktif dan tulisan (chat/memori/ingest) masuk D1 user."
    },
    {
      "name": "save_checkpoint",
      "description": "Persist and seal an engineering milestone checkpoint in current chat session to prevent regressions."
    },
    {
      "name": "save_secret_credential",
      "description": "Securely encrypt and persist a new API key, OAuth token, or secret password into FLOWORK Sovereign Key Vault."
    },
    {
      "name": "search_news",
      "description": "Search for recent world news, tech updates, and financial headlines."
    },
    {
      "name": "search_web",
      "description": "Search the public web using privacy search engines (DuckDuckGo / Brave Search) to gather real-time data, trends, and documentation."
    },
    {
      "name": "send_chat_file",
      "description": "Deliver a file, document, patch, or dataset to the user chat feed with download and preview options."
    },
    {
      "name": "send_swarm_message",
      "description": "Send a follow-up message, technical query, or tradeoff discussion to a Colony subagent and receive conversational LLM feedback."
    },
    {
      "name": "set_goal_contract",
      "description": "Persist or update the Single Sovereign Goal Contract into Trajectory Ledger D1 Database and KV Storage."
    },
    {
      "name": "set_task_plan",
      "description": "Create or update the task execution roadmap and milestone plan in the Trajectory Ledger."
    },
    {
      "name": "soul_recall",
      "description": "Recall Sovereign Identity, Founding Mandate, and Ethical Philosophy from FLOWORK Sovereign Brain."
    },
    {
      "name": "spawn_swarm_agent",
      "description": "Spawns and dispatches an autonomous subagent task to a decentralized Flowork Swarm Node (Cloudflare Edge Worker farm or Local PC Node) based on capability filtering."
    },
    {
      "name": "ssl_cert_transparency",
      "description": "Discover all subdomains and issued SSL/TLS certificates for any root domain using Certificate Transparency logs."
    },
    {
      "name": "team_guardian_audit",
      "description": "Execute multi-agent independent code audit sentinel. Verifies blast radius containment, syntax integrity, zero credential leaks, and anti-lazy code compliance before production merge."
    },
    {
      "name": "text_crypto_utility",
      "description": "Fast text processing utility: Hash computation (SHA-256, MD5), Base64 encode/decode, URL encode/decode, and character/word counter."
    },
    {
      "name": "tool_search",
      "description": "Search and discover specialized tools from FLOWORK Cloud MCP Fleet. Returns matching tool schemas and parameter descriptions."
    },
    {
      "name": "update_task_item",
      "description": "Update the progress, status, or notes of an existing step in the Trajectory Ledger."
    },
    {
      "name": "update_walkthrough",
      "description": "Update or append details to an existing engineering walkthrough milestone in current chat session and Trajectory Vault."
    },
    {
      "name": "web_search",
      "description": "Search the open web using privacy search engine for current news, documentation, and data."
    },
    {
      "name": "whois_domain_lookup",
      "description": "Lookup domain registration details, registrar organization, creation date, and expiration via RDAP."
    },
    {
      "name": "youtube_analytics_pulse",
      "description": "Real-time YouTube Multi-Channel Analytics Pulse & Fleet Leaderboard Engine. Inspect channel metrics, top performing videos, viral velocity, engagement rates, and executive fleet rankings across 600 channels."
    },
    {
      "name": "youtube_command_center",
      "description": "MANDATORY PRIMARY TOOL FOR ALL YOUTUBE OPERATIONS: analytics, deepscan, view comments, and post replies. ALWAYS call this tool whenever user mentions YouTube, provides a YouTube URL, asks to view comments (lihat komen), reply to comments (balas komen), check subscribers, lifetime views, SEO tags, monetization, or patrol comments. Returns authentic Sovereign Telemetry Digest directly formatted for AI deliberation. NEVER use fetch_web_content or http_request for YouTube."
    },
    {
      "name": "youtube_comment_responder",
      "description": "MANDATORY DEDICATED TOOL TO VIEW AND REPLY TO YOUTUBE COMMENTS. ALWAYS call this tool whenever user asks to view comments (lihat komen), read viewer feedback, reply to comments (balas komen), or auto-reply to channel comments. DO NOT call get_secret_credential: All OAuth refresh tokens and channel permissions are automatically resolved internally from the Flowork YouTube Fleet database."
    },
    {
      "name": "youtube_swarm_commander",
      "description": "Autonomous YouTube Swarm Comment Commander for managing, monitoring, and replying to comments across a fleet of YouTube channels (up to 600 channels) with isolated credentials, distinct personas, and anti-duplication protection."
    }
  ]
}