Kastra

Fetch the active Kastra governance policy for an environment. Returns the full policy document (deny rules, scoping, lifecycle metadata) and its current revision number.

get_active_policy

Tenant activity dashboard: total/24h/7d decisions, denies, allow rate, active incidents, and decision latency percentiles. This is the closest read to account 'usage'. Set include_trends=true for a per-bucket time series.

get_activity_stats

Get the tenant's onboarding governance preferences (which governance areas, surfaces, and safety options were selected during setup).

get_governance_preferences

Per-rule decision and denial counts for an environment — shows which policy rules are actually firing. Defaults to the local config's default environment when omitted.

get_rule_stats

List the tenant's API keys as MASKED metadata only (name, environment, masked key prefix, usage count, last used). Plaintext secrets are never returned.

list_api_keys

List recent HOLD checkpoints (human-in-the-loop approvals) for the tenant, with their status. Read-only — approving/denying is done in the console or popover, not here.

list_checkpoints

List governance audit-log events for the tenant (config changes, policy promotions, kill-switch toggles, etc.), newest first.

list_audit_events

List the environments configured for the tenant (e.g. dev, staging, prod) with their kill-switch / shadow-mode settings.

list_environments

List Kastra kill-switch incidents for the authorized workspace. By default returns only active incidents (still blocking AI execution); pass include_resolved=true to see historical ones too.

list_incidents

List governance policies visible to this connection (id, name, environment, version, deny-rule set, which is active). CLI/edge lists every environment; the hosted OAuth connector lists its selected default environment. OAuth approval grants workspace-wide read access; this tool's default filter does not restrict other tools. Use get_active_policy for the active policy of an environment.

list_policies