---
title: "List registered tools"
method: GET
path: "/tools"
tags: ["Tools"]
---

# List registered tools

`GET /tools`

## Request

- Base URL: `https://api.mnemom.ai/v1`
- URL: `https://api.mnemom.ai/v1/tools`
- Auth: none required

Returns the active tools registry with optional filters. Reads accept any authenticated principal. Use `include_deprecated=true` to surface soft-deleted rows.

## Query parameters

- `class` 'read' | 'internal_write' | 'consequential_internal_write' | 'consequential_external_write' | 'comms_internal' | 'comms_external' | 'engineering_attestation' | 'governance_write'
- `domain` 'financial' | 'engineering' | 'intelligence' | 'growth' | 'operations' | 'governance' | 'comms' | 'identity' | 'security'
- `source_connector` string
- `include_deprecated` boolean
- `limit` integer

## Response `200`

Tools registry listing.

- object
  - `data` object[], required
    - `name` string, required: Globally unique tool name. Convention: `<connector>_<verb>_<noun>` (e.g. `campfire_create_chart_account`). Org-scoped tools use the reserved `org:<id>:` prefix.
    - `display_name` string, nullable
    - `description` string, nullable
    - `class` 'read' | 'internal_write' | 'consequential_internal_write' | 'consequential_external_write' | 'comms_internal' | 'comms_external' | 'engineering_attestation' | 'governance_write', required: 8-entry action class taxonomy per mnemom-contracts/tool-manifest/v1.yaml. V7 gateway hooks bind on this for class-scoped enforcement.
    - `domain` 'financial' | 'engineering' | 'intelligence' | 'growth' | 'operations' | 'governance' | 'comms' | 'identity' | 'security', required: 9-entry domain taxonomy. Used by domain-scoped value declarations like policy_attentiveness(domain: financial).
    - `schema` object, nullable: OpenAPI fragment / JSON Schema for the tool parameters. Populated when the tool is imported via OpenAPI spec.
    - `source_connector` string, nullable
    - `deprecated_at` string, date-time, nullable
    - `content_hash` string, nullable
    - `version` integer, required
    - `created_at` string, date-time, required
    - `updated_at` string, date-time, required
  - `count` integer, required

## Other responses

- `400`: Bad request
- `401`: Authentication required
- `429`: Rate-limit exceeded. The global per-IP limiter (100 requests/minute, applied to every `/v1/*` route) rejected this request. Back off until the window resets — `Retry-After` carries the cooldown in seconds and `X-RateLimit-Reset` the absolute reset time.
- `500`: Server error — request was well-formed but the server failed to fulfill it. Typically a downstream dependency (DB / RPC / external API) returned an unexpected error.
- `502`: An upstream dependency returned an invalid response.

---

[API](https://skmtc.dev/mnemom/apis/mnemom-api.md) · [All operations](https://skmtc.dev/mnemom/apis/mnemom-api/llms.txt) · [OpenAPI document](https://skmtc.dev/mnemom/apis/mnemom-api/revisions/274b7a6ea182?raw)