MCP tools: Meta & apps

​

get_sources

• providers — upstream hosts data is fetched from, keyed by host (acleddata.com), carrying kind (feed / structured / feed+structured / operational-status), attribution-review status, and license.
• outlets — named public source identities (Reuters, IDF Official), carrying an editorial tier and the same provenance block the news tools attach to stories (propaganda risk, source type, whether each was declared or reviewed, state affiliation). Platform channels also carry platformIdentities with their stable platform and handle.

• tier: null means undeclared, never “tier 4.” WorldMonitor’s internal tier helper defaults unknown names to 4; this tool does not, so a caller can distinguish a declared low-tier outlet from one that was never rated.
• Excluded manifest rows are reported, not dropped. summary.excludedProviderCount counts local transports and development-only URLs kept out of the provider count.
• Truncation is visible. Enumerated views return matched alongside returned; the full provider inventory does not fit one response.
• API endpoints: none — committed-registry read, no upstream call.
• Kind: deterministic local compute. No LLM, no freshness budget.
• Access: free. This is the one data tool callable with no credentials at all, so an agent can see what WorldMonitor covers before anyone signs up. The only other credential-free tool is report_issue, which stores a report and reads no data. It consumes no quota for any principal and carries _meta["worldmonitor/access"]: "free" in tools/list, which is how a client that reads schemas rather than prose can tell. Uncredentialed calls take their own per-IP ceiling, tighter than the discovery limit, and that ceiling fails closed — if it can’t be reached, the call is refused rather than served. Every other tool carries either "free-account" (direct cache reads, callable by any signed-in account within the allowance) or "subscription" (Pro-only — every tool with server-side execute logic, including a few that never fetch upstream). Each tool section on this page states its class on its Access line.

​

get_mcp_allowance

• Access: free-account. Requires verified user-bound OAuth or wm_… credentials and existing entitlement checks. Anonymous and operator credentials cannot read an account snapshot.
• Quota: no daily allowance, free-account call/window, panel admission or internal reader reservation. Status stays available at the daily cap and uses the shared 192/minute protocol bucket across both credential doors.
• API sharing: sharedWithRestApi reports whether the counter includes REST requests. Shadow-mode API counters retain the sold API ceiling. Account totals do not identify individual callers.
• API endpoints: none. The tool and account resource use one shared enforcement-counter reader. Responses are no-store.

​

start_upgrade

• Access: free-account. Requires user-bound OAuth or wm_… credentials. Anonymous callers get the usual -32001 no-account denial; operator keys get -32002.
• Quota: spends no daily allowance and no free-account call, so it works after the allowance is exhausted. The per-minute limit still applies.
• Checkout path: the same one the pricing page uses, so the per-account checkout limit and the existing-subscription and pending-payment guards apply. An account that already holds a plan in the same family gets -32002 with error.data.reason: "already-subscribed"; Pro to Pro Business is a prorated in-place upgrade the user confirms on worldmonitor.app/pro, and API Starter to API Business is a prorated change in the billing portal. A payment pending for under 15 minutes returns reason: "payment-in-progress". The checkout limit, 5 sessions per account per 10 minutes and shared with the pricing page, returns -32029 at HTTP 429 with Retry-After.
• Terms of Service: creating a session records the account’s acceptance of the Terms, as the pricing page does. The Terms count an MCP request as acceptance.
• After payment: once the payment webhook lands, the next get_mcp_allowance call reports the paid plan’s limit. No re-authorization is needed.
• API endpoints: none. Responses are no-store.

​

describe_tool

• { "error": "missing_tool_name", "hint": "Pass tool_name as a non-empty string matching a tool from tools/list." } — tool_name was omitted, empty, or non-string.
• { "error": "unknown_tool", "requested": "<the bad name>", "available": [...sorted list of all tool names...] } — tool_name didn’t match any registered tool. The available array lets the LLM self-correct in one extra call.
• API endpoints: none — server-local lookup, no upstream call.
• Access: free-account — callable by any signed-in account; exempt from both the free-account allowance and the Pro daily quota (the per-minute rate limit still applies).
• Kind: metadata lookup — sub-millisecond, no Redis, no LLM.
• Quota: EXEMPT from the Pro daily quota (50/day). Per-minute rate limit (60/min) still applies.

curl -s https://worldmonitor.app/mcp \
  -H "X-WorldMonitor-Key: $WM_KEY" \
  -H 'Content-Type: application/json' \
  -d '{
    "jsonrpc":"2.0","id":1,
    "method":"tools/call",
    "params":{"name":"describe_tool","arguments":{"tool_name":"get_market_data"}}
  }'

​

report_issue

• Access: free. No credentials are needed. A Pro or API account whose entitlement check passes reports under its own budget; every other caller, including a free account or a key whose check fails, reports anonymously. Identity always comes from the request’s credentials, never from the arguments.
• Limits: 5 reports per hour per IP for anonymous callers and 30 per day per account, plus service-wide ceilings. Arguments over 24 KB are rejected before any feedback limit or storage call. The tool spends no daily allowance.
• Redaction: credentials and email addresses are replaced before storage. Secrets and personal data do not belong in a report.
• Security reports: a security report only flags that a vulnerability exists. Send the details through the private advisory form.
• Errors: -32602 names the invalid field. -32029 at HTTP 429 with Retry-After: 3600 means a limit is spent. -32603 at HTTP 503 with Retry-After: 60 means the limiter or the store is unavailable, and the report was not stored. -32002 at HTTP 403 means the account is being deleted. A refused security report keeps advisoryUrl in error.data.
• Annotations: not read-only (it writes a row), not destructive (it only inserts), not idempotent (the same report outside the 10-minute window is stored again), closed world.
• API endpoints: none. The report goes straight to storage.

​

open_news_dashboard

{ "name": "open_news_dashboard", "arguments": { "country": "DE", "time_range": "24h" } }

​

analyze_news_headlines

{ "name": "analyze_news_headlines", "arguments": { "headlines": ["Energy ministers discuss winter supply"], "mode": "brief", "lang": "en" } }