Lists the platform connections (OAuth) of the organization: its own and, in an Account, the ones it uses from its workspace (include_inherited, default true; an Account's own connection of a platform wins over the workspace's). Filter with platform. Each connection has id, platform (google_ads, google_analytics, google_search_console, google_business_profile, youtube, meta_ads, tiktok_ads, tiktok, linkedin_ads, linkedin_page, whatsapp_business), name, status (active, or error when the platform rejected the token and someone has to reconnect it in the app; auth_error says why), account (the platform account that authorized it: id, name, email), connected_by and connected_at, token_expires_at and refresh_token_expires_at (epoch ms; LinkedIn asks for a manual reconnection once a year), last_reauthorized_at, inherited (true when an Account uses its workspace's connection) with owner_org_id, and scope_status (ok, drift when permissions MB Suite now needs are missing —listed in missing_scopes, fixed with «Update permissions» in Settings → Integrations— or unknown for old connections). It never returns tokens or secrets. Mailboxes and calendars that people connect for the CRM are personal and not listed. Use it to check that a platform is connected and healthy before reading its data; which accounts each module reads is in integrations.data_sources.list. Not paginated. Requires view access to Integrations. With LinkedIn or TikTok, their terms limit it through the API and the MCP: what they do not allow answers 403 platform_terms_restricted, and their records are left out of the response (the permissions guide lists what each platform allows).
Instruções para agentes
When a connection is in error or has missing_scopes, tell the person to reconnect it (or update its permissions) in Settings → Integrations: it cannot be done through the API.
Escopo
integrations:read
Permissão
Ver o módulo
Tool do MCP
integrations_credentials_listNa superfície completa; na compacta, mb_execute_operation com id: "integrations.credentials.list".
Custo declarado: até 125 leituras e 0 escritas por chamada (contam na cota diária).
Returns one platform connection of the organization by its id (from integrations.credentials.list), or, in an Account, a connection of its workspace that it inherits. Each connection has id, platform (google_ads, google_analytics, google_search_console, google_business_profile, youtube, meta_ads, tiktok_ads, tiktok, linkedin_ads, linkedin_page, whatsapp_business), name, status (active, or error when the platform rejected the token and someone has to reconnect it in the app; auth_error says why), account (the platform account that authorized it: id, name, email), connected_by and connected_at, token_expires_at and refresh_token_expires_at (epoch ms; LinkedIn asks for a manual reconnection once a year), last_reauthorized_at, inherited (true when an Account uses its workspace's connection) with owner_org_id, and scope_status (ok, drift when permissions MB Suite now needs are missing —listed in missing_scopes, fixed with «Update permissions» in Settings → Integrations— or unknown for old connections). It never returns tokens or secrets. Errors: 404 credential_not_found (no such connection, a disconnected one, or a workspace connection this Account does not inherit). Requires view access to Integrations. With LinkedIn or TikTok, their terms limit it through the API and the MCP: what they do not allow answers 403 platform_terms_restricted (the permissions guide lists what each platform allows).
Escopo
integrations:read
Permissão
Ver o módulo
Tool do MCP
integrations_credentials_getNa superfície completa; na compacta, mb_execute_operation com id: "integrations.credentials.get".
Custo declarado: até 2 leituras e 0 escritas por chamada (contam na cota diária).
Parâmetros
credential_idstringrotaobrigatório
The connection id, as listed by integrations.credentials.list.
Resposta
idstring
platformstring
namestring | null
statusenum
Valores: active, error
auth_errorstring | null
accountobject
connected_bystring | null
The email of who connected it, as it was stored.
connected_atnumber | null
token_expires_atnumber | null
refresh_token_expires_atnumber | null
last_reauthorized_atnumber | null
inheritedboolean
owner_org_idstring
scope_statusenum
Valores: ok, drift, unknown
missing_scopesarray<string>
connected_by_namestring | null
Their name, as the team shows it (null when they are no longer a member).
For each platform that can be linked in Data sources (google_ads, meta_ads, google_analytics, tiktok_ads, tiktok, google_search_console, google_business_profile, facebook_page, instagram, linkedin_ads, linkedin_page, youtube, whatsapp_business), returns available (there is an active connection to read it with), is_inherited (the Account uses its workspace's connection), credential_org_id (the organization whose connection is used: the Account itself or its workspace) and integration_name (the integration to connect: Facebook pages and Instagram use the Meta one). An object keyed by platform. Call it before linking accounts with integrations.data_sources.save. Requires view access to Integrations.
Escopo
integrations:read
Permissão
Ver o módulo
Tool do MCP
integrations_credentials_availabilityNa superfície completa; na compacta, mb_execute_operation com id: "integrations.credentials.availability".
Custo declarado: até 125 leituras e 0 escritas por chamada (contam na cota diária).
Disconnects one of the organization's platform connections: its tokens are deleted from MB Suite (TikTok also revokes the grant; Google and Meta are not revoked on purpose, it would cut the person's other connections) and, with cleanup_linked (default true), the accounts linked in Data sources through it are unlinked and the CRM lead sources that depended on it (here and in the Accounts that inherit it) are paused; they resume on their own when it is reconnected. An Account cannot disconnect the workspace's connection it inherits (404 credential_not_found): the workspace does it. Nothing goes to the trash: reconnecting is authorizing again in Settings → Integrations. Owners and admins only. Outside the app it needs a dry run (which counts the linked accounts and lead sources affected) and a confirm_token. Errors: 404 credential_not_found, 400 system_credential. With TikTok, their terms limit it through the API and the MCP: what they do not allow answers 403 platform_terms_restricted (the permissions guide lists what each platform allows).
Instruções para agentes
Before confirming, tell the person how many linked accounts and lead sources the dry run says will be affected, and that reconnecting is done in the app.
Pede confirmação: primeiro dry_run: true (prévia e confirm_token, válido por 10 minutos e por uma única execução), depois o mesmo corpo com confirm_token. Em algumas poucas, só com certos dados: a descrição diz quando. Por que e como: Prévia e confirmação.
Escopo
integrations:writee «Permitir exclusões» (integrations:delete no OAuth)
Permissão
Editar no módulo · Só owner, admin
Tool do MCP
integrations_credentials_disconnectNa superfície completa; na compacta, mb_execute_operation com id: "integrations.credentials.disconnect".
Custo declarado: até 300 leituras e 120 escritas por chamada (contam na cota diária).
Parâmetros
credential_idstringrotaobrigatório
The connection id, as listed by integrations.credentials.list.
cleanup_linkedbooleancorpoopcional
true (default): also unlink the data sources that used it and pause the CRM lead sources that depended on it. false: only remove the connection, to reconnect without losing the configuration.
Disconnects all the organization's active connections of one platform at once: YouTube keeps one per channel, TikTok one per account and LinkedIn pages one per person who authorized. Each one is removed like integrations.credentials.disconnect, and with cleanup_linked (default true) the platform's linked accounts in Data sources are unlinked and the dependent CRM lead sources paused, once. Returns how many were disconnected. Owners and admins only; outside the app it needs a dry run and a confirm_token. Errors: 409 integration_not_connected (details.platform) when the organization has no active connection of that platform. With TikTok, their terms limit it through the API and the MCP: what they do not allow answers 403 platform_terms_restricted (the permissions guide lists what each platform allows).
Pede confirmação: primeiro dry_run: true (prévia e confirm_token, válido por 10 minutos e por uma única execução), depois o mesmo corpo com confirm_token. Em algumas poucas, só com certos dados: a descrição diz quando. Por que e como: Prévia e confirmação.
Escopo
integrations:writee «Permitir exclusões» (integrations:delete no OAuth)
Permissão
Editar no módulo · Só owner, admin
Tool do MCP
integrations_credentials_disconnect_platformNa superfície completa; na compacta, mb_execute_operation com id: "integrations.credentials.disconnect_platform".
Lists, live from the platform, what one of the organization's connections can reach and could be linked in Data sources: Google Ads accounts (manager accounts come with linkable false), GA4 properties, Search Console sites, Business Profile locations, YouTube channels, Meta ad accounts, Facebook pages and their Instagram accounts, TikTok advertisers or the TikTok account itself, LinkedIn ad accounts, LinkedIn pages and the person's LinkedIn profile, and WhatsApp numbers. Each item has platform (the Data sources platform), id (the platform's own id), name, linked (already linked in this organization), linkable and connection: pass that connection object as is to integrations.data_sources.save with the same platform to link it. WhatsApp numbers are listed but linked from the app (linkable false). Use credential_id from integrations.credentials.list (an Account can use its workspace's connection when it inherits the platform); filter with platform for Meta and LinkedIn pages connections. It never returns tokens. It calls the platform (spends that platform's external quota) and can take a few seconds; one page, no cursor. Who can: whoever can link accounts of that platform here (integrations.data_sources.save explains the rule): 403 data_sources_forbidden otherwise. Errors: 404 credential_not_found, 409 integration_reconnect_required (the connection expired, was revoked or lacks a permission: reconnect it in the app), 409 integration_not_connected, 409 external_rejected, 429 external_rate_limited, 503 external_unavailable. With Google Ads, Google Business Profile, LinkedIn, TikTok or YouTube, their terms limit it through the API and the MCP: what they do not allow answers 403 platform_terms_restricted, and their records are left out of the response (the permissions guide lists what each platform allows).
Instruções para agentes
Show the person the items with linkable true and ask which ones to link; do not link accounts the person did not choose.
Escopo
integrations:read
Permissão
Ver o módulo
Tool do MCP
integrations_credentials_accounts_listNa superfície completa; na compacta, mb_execute_operation com id: "integrations.credentials.accounts.list".
Custo declarado: até 8 leituras e 0 escritas por chamada (contam na cota diária). Usa uma plataforma externa (google): conta na cota de operações externas.
Parâmetros
credential_idstringrotaobrigatório
The connection id, as listed by integrations.credentials.list.
platformenumqueryopcional
Only what this Data sources platform can link: a Meta connection lists ad accounts (meta_ads), Facebook pages (facebook_page) and Instagram accounts (instagram); a LinkedIn pages connection lists pages (linkedin_page) and the person's profile (linkedin_profile). Without it, everything the connection reaches.
Com uma API key de teste o pedido vai sempre para a sua organização de prática: dados de exemplo que você pode reiniciar.Na prática esta operação não é simulada (usa outra plataforma): responde 409 sandbox_external_unavailable.
