MCP Actions - Spotify for Backstage

Soundcheck exposes MCP actions through the Actions Registry, enabling AI agents to read and manage checks, tracks, campaigns, exemptions, facts, and compliance analytics. Actions are grouped below by domain. Each entry lists the action name, what it does, its input parameters, and its return type.

Required permissions

Soundcheck checks permissions twice: when it shows a tool to a user and when that user runs it. If the second check fails, the call returns NotAllowedError. Before upgrading, check which permissions your policy grants for the actions your users need. This matters especially for policies that deny access unless you grant it explicitly.

Actions	Permission to see the tool	Permission to run the tool
`create-check`	`soundcheck.check.create`	Same permission
`update-check`	`soundcheck.check.update`	Same permission
`delete-check`	`soundcheck.check.delete`	Same permission
`list-checks`, `get-check-definition`, `get-check-details`, `get-check-failure-details`, `get-check-history`, `search-checks`, `list-check-entities`, `list-failing-checks`, `get-top-failing-checks`	`soundcheck.check.read`	Same permission
`execute-check`, `dryrun-check`	`soundcheck.check.execute`	Same permission
`set-manual-check-result`	`soundcheck.check.manual.manage`	`soundcheck.check.manual.update` for the requested catalog entity
`create-track`	`soundcheck.track.create`	Same permission
`update-track`	`soundcheck.track.update`	Same permission
`delete-track`	`soundcheck.track.delete`	Same permission
`list-tracks`, `get-track-details`, `get-track-stats`, `list-track-blockers`, `get-component-health`, `get-org-compliance-summary`, `get-team-compliance-summary`, `get-compliance-trends`, `compare-teams`, `get-rolled-up-tech-insights`, `find-struggling-components`, `get-compliance-by-level`	`soundcheck.track.read`	Same permission
`create-campaign`	`soundcheck.campaign.create`	Same permission
`update-campaign`	`soundcheck.campaign.update`	Same permission
`delete-campaign`	`soundcheck.campaign.delete`	Same permission
`list-campaigns`, `get-campaign-details`, `get-upcoming-deadlines`	`soundcheck.campaign.read`	Same permission
`set-exemption`, `remove-exemption`, `revoke-exemption`, `restore-exemption`	`soundcheck.entity.exemptions.manage`	`soundcheck.entity.exemptions.update` for the requested catalog entity
`list-exemptions`, `list-revoked-exemptions`	`soundcheck.entity.exemptions.read`	Same permission
`list-entity-facts`, `get-fact-data`	`soundcheck.fact.read`	Same permission
`get-integration-status`, `get-integration-config-schema`, `list-integration-facts`, `get-fact-schema`, `list-integrations`	`soundcheck.collector.read`	Same permission
`configure-integration`	`soundcheck.collector.update`	Same permission

Both list-entity-facts and get-fact-data require soundcheck.fact.read to appear and to run. The first returns fact names and timestamps; the second returns fact values. Neither action checks soundcheck.fact.sensitive.read. If your fact values may be sensitive, account for that when granting soundcheck.fact.read. Other ways of reading sensitive facts have separate requirements. Manual result and exemption tools need two permissions. The .manage permission lets users see the tool. The .update permission lets them change the chosen catalog entity. Grant both to users who need to make those changes. The backend checks soundcheck.entity.exemptions.read for the two exemption list actions, but does not register that permission. Check whether your installed version supports it before using it in a policy.

Checks

`create-check`

Creates a new check definition in Soundcheck. Omit rule (with type default) to create an external check. Attributes: readOnly: false · idempotent: false Parameters

Name	Type	Required	Description
`id`	`string`	Yes	Unique check identifier (slug-style, e.g. `has-readme`)
`name`	`string`	Yes	Display name (max 100 characters)
`description`	`string`	Yes	Human-readable description of the check
`ownerEntityRef`	`string`	Yes	Backstage entity ref of the owner
`type`	`'manual' \| 'default'`	No	Check type (default: `'default'`)
`rule`	`NestedConditionSchema`	No	Rule to evaluate; required for `default` checks
`applicable`	`NestedConditionSchema`	No	Applicability rule
`pathResolver`	`string`	No	Custom path resolver (default: `jsonpath`)
`includeFilter`	`Filter` (~~`CatalogFilter`~~ deprecated)	No	Entity inclusion filter
`excludeFilter`	`Filter`	No	Entity exclusion filter (requires `includeFilter`)
`warning`	`boolean`	No	If `true`, failures emit a warning state instead of failed
`passedMessage`	`string`	No	Message shown when the check passes
`failedMessage`	`string`	No	Message shown when the check fails
`notApplicableMessage`	`string`	No	Message shown when the check is not applicable
`supportChannel`	`string`	No	Support channel (Slack, email, etc.)
`skillEntityRef`	`string`	No	Entity ref of an AiContext skill that provides fix instructions

Returns:

{ "checkId": "string" }

`update-check`

Updates an existing check definition. Supports both standard and external checks. Only provided fields are changed. Attributes: readOnly: false · idempotent: true Parameters

Name	Type	Required	Description
`check`	`string`	Yes	The ID, name, or description of the check to update
`name`	`string`	No	Display name (max 100 characters)
`description`	`string`	No	Check description
`ownerEntityRef`	`string`	No	Backstage entity ref of the owner
`type`	`'manual' \| 'default'`	No	Check type
`rule`	`NestedConditionSchema \| null`	No	Rule to evaluate; pass `null` to clear
`applicable`	`NestedConditionSchema \| null`	No	Applicability rule; pass `null` to clear
`pathResolver`	`string \| null`	No	Custom path resolver; pass `null` to clear
`includeFilter`	`Filter \| null` (~~`CatalogFilter`~~ deprecated)	No	Entity inclusion filter; pass `null` to clear
`excludeFilter`	`Filter \| null`	No	Entity exclusion filter; pass `null` to clear
`warning`	`boolean`	No	If `true`, failures emit a warning state
`passedMessage`	`string \| null`	No	Message on pass; pass `null` to clear
`failedMessage`	`string \| null`	No	Message on failure; pass `null` to clear
`notApplicableMessage`	`string \| null`	No	Message when not applicable; pass `null` to clear
`supportChannel`	`string \| null`	No	Support channel; pass `null` to clear
`skillEntityRef`	`string \| null`	No	Entity ref of an AiContext skill; pass `null` to clear
`deleteHistory`	`boolean`	No	Also delete historical results on rule change (default: `false`)

Returns:

{ "checkId": "string" }

`delete-check`

Permanently deletes a check definition. Supports both standard and external checks. Fails if the check is still referenced by active (non-draft) tracks. Attributes: readOnly: false · idempotent: false Parameters

Name	Type	Required	Description
`check`	`string`	Yes	The ID, name, or description of the check to delete
`deleteHistory`	`boolean`	No	Also delete historical results; current results are always deleted (default: `false`)

Returns:

{ "checkId": "string", "deleted": true }

`list-checks`

Returns all registered Soundcheck checks. Attributes: readOnly: true · idempotent: true Parameters: None Returns:

{
  "checks": [{ "id": "string", "name": "string", "description": "string" }]
}

`get-check-definition`

Returns what a check evaluates: rule type, fact collectors, pass criteria, and pass/fail messages. Attributes: readOnly: true · idempotent: true Parameters

Name	Type	Required	Description
`checkId`	`string`	Yes	ID of the check

Returns:

{
  "id": "string",
  "name": "string",
  "description": "string",
  "type": "manual | default",
  "factCollectors": ["string"],
  "rule": {},
  "filter": {},
  "passMessage": "string",
  "failMessage": "string",
  "supportChannel": "string"
}

`get-check-details`

Returns the full details of a check, including pass/fail counts and the tracks that reference it. Attributes: readOnly: true · idempotent: true Parameters

Name	Type	Required	Description
`checkId`	`string`	Yes	ID of the check

Returns:

{
  "id": "string",
  "name": "string",
  "description": "string",
  "ownerEntityRef": "string",
  "rule": {},
  "filter": {},
  "passedMessage": "string",
  "failedMessage": "string",
  "passingCount": 0,
  "failingCount": 0,
  "associatedTracks": [{ "id": "string", "name": "string" }]
}

`execute-check`

Triggers a check to run on a component and persists the result. Manual-type checks cannot be executed; use set-manual-check-result instead. Attributes: readOnly: false · idempotent: false Parameters

Name	Type	Required	Description
`checkId`	`string`	Yes	ID of the check to execute
`entityRef`	`string`	Yes	Entity reference (e.g. `component:default/my-service`)

Returns:

{
  "checkId": "string",
  "entityRef": "string",
  "state": "string",
  "timestamp": "string"
}

`set-manual-check-result`

Sets the pass/fail result for a manual-type check on a component, with a justification. Attributes: readOnly: false · idempotent: true Parameters

Name	Type	Required	Description
`checkId`	`string`	Yes	ID of the manual check
`entityRef`	`string`	Yes	Entity reference (e.g. `component:default/my-service`)
`state`	`'passed' \| 'failed'`	Yes	Result state to set
`justification`	`string`	Yes	Reason for this result
`submittedBy`	`string`	Yes	User reference (e.g. `user:default/jsmith`)

Returns:

{
  "checkId": "string",
  "entityRef": "string",
  "state": "passed | failed",
  "justification": "string",
  "timestamp": "string"
}

`get-check-failure-details`

Returns exactly why a check is failing for a component: actual value, expected value, fact data, and failure reason. Attributes: readOnly: true · idempotent: true Parameters

Name	Type	Required	Description
`checkId`	`string`	Yes	ID of the check
`entityRef`	`string`	Yes	Entity reference

Returns:

{
  "status": "string",
  "actualValue": null,
  "expectedValue": null,
  "failureReason": "string",
  "lastRunAt": "string",
  "checkRule": {},
  "factData": null
}

`get-check-history`

Returns the last 30 days of pass/fail history for a check on a given entity, along with a trend indicator. Attributes: readOnly: true · idempotent: true Parameters

Name	Type	Required	Description
`checkId`	`string`	Yes	ID of the check
`entityRef`	`string`	Yes	Entity reference

Returns:

{
  "history": [{ "date": "YYYY-MM-DD", "state": "string" }],
  "trend": "improving | declining | stable"
}

`search-checks`

Searches for checks by keyword, returning matching checks with descriptions and associated tracks. Attributes: readOnly: true · idempotent: true Parameters

Name	Type	Required	Description
`query`	`string`	Yes	Search term to match against check names and descriptions

Returns:

{
  "checks": [
    {
      "checkId": "string",
      "checkName": "string",
      "description": "string",
      "associatedTracks": [{ "id": "string", "name": "string" }]
    }
  ]
}

`list-check-entities`

Returns entities for a check, optionally filtered by result state, owner, kind, and lifecycle. Attributes: readOnly: true · idempotent: true Parameters

Name	Type	Required	Description
`check`	`string`	Yes	The ID, name, or description of the check
`states`	`string[]`	No	Filter by result states (e.g. `["failed", "not-applicable"]`)
`entityOwners`	`string[]`	No	Filter by owner entity refs
`entityKinds`	`string[]`	No	Filter by entity kinds (e.g. `["Component"]`)
`entityLifecycles`	`string[]`	No	Filter by entity lifecycles (e.g. `["production"]`)
`limit`	`number`	No	Maximum number of entities to return (default: `25`, max: `100`)
`cursor`	`string`	No	Pagination cursor from a previous response

Returns:

{
  "resolvedCheck": {
    "id": "string",
    "name": "string",
    "description": "string"
  },
  "entities": [
    {
      "entityRef": "string",
      "state": "string",
      "hasError": false
    }
  ],
  "pagination": {
    "totalCount": 0,
    "hasNextPage": false,
    "nextCursor": "string"
  }
}

Tracks

`create-track`

Creates a new compliance track with specified checks and levels. Attributes: readOnly: false · idempotent: false Parameters

Name	Type	Required	Description
`id`	`string`	Yes	Unique track identifier (slug-style)
`name`	`string`	Yes	Display name (max 100 characters)
`description`	`string`	Yes	Track description (supports Markdown)
`ownerEntityRef`	`string`	Yes	Backstage entity ref of the owner
`levels`	`array`	Yes	Ordered levels, each containing check IDs
`documentationURL`	`string`	No	Optional documentation link
`badgeType`	`'medal' \| 'status'`	No	Badge type (default: `'status'`)
`draft`	`boolean`	No	Whether the track starts as a draft (default: `false`)
`filter`	`Filter` (~~`CatalogFilter`~~ deprecated)	No	Entity inclusion filter
`exclude`	`Filter`	No	Entity exclusion filter (requires `filter`)

Returns:

{
  "trackId": "string",
  "trackName": "string",
  "checksCount": 0,
  "levelsCount": 0
}

`update-track`

Updates an existing track. Only provided fields are changed. Attributes: readOnly: false · idempotent: true Parameters

Name	Type	Required	Description
`trackId`	`string`	Yes	ID of the track to update
`name`	`string`	No	Display name
`description`	`string`	No	Track description
`ownerEntityRef`	`string`	No	Backstage entity ref of the owner
`documentationURL`	`string \| null`	No	Documentation link; pass `null` to clear
`badgeType`	`'medal' \| 'status' \| null`	No	Badge type; pass `null` to clear
`draft`	`boolean`	No	Draft state
`levels`	`array`	No	Replaces all existing levels
`includeFilter`	`Filter \| null` (~~`CatalogFilter`~~ deprecated)	No	Entity inclusion filter; pass `null` to clear
`excludeFilter`	`Filter \| null`	No	Entity exclusion filter; pass `null` to clear

Returns:

{
  "trackId": "string",
  "trackName": "string",
  "checksCount": 0,
  "levelsCount": 0
}

`delete-track`

Permanently deletes a track. Fails if still referenced by active (non-archived) campaigns. Attributes: readOnly: false · idempotent: false Parameters

Name	Type	Required	Description
`trackId`	`string`	Yes	ID of the track to delete

Returns:

{ "trackId": "string", "deleted": true }

`list-tracks`

Returns all registered Soundcheck tracks with their IDs, names, and level names. Attributes: readOnly: true · idempotent: true Parameters: None Returns:

{
  "tracks": [
    {
      "id": "string",
      "name": "string",
      "levels": [{ "ordinal": 0, "name": "string" }]
    }
  ]
}

`get-track-details`

Returns the full configuration of a track: name, description, owner, levels with check IDs, and entity filter. Attributes: readOnly: true · idempotent: true Parameters

Name	Type	Required	Description
`trackId`	`string`	Yes	ID of the track

Returns:

{
  "id": "string",
  "name": "string",
  "description": "string",
  "owner": "string",
  "filter": {},
  "levels": [{ "ordinal": 0, "name": "string", "checkIds": ["string"] }]
}

`get-track-stats`

Returns adoption metrics for a track: component counts and percentage at each compliance level. Attributes: readOnly: true · idempotent: true Parameters

Name	Type	Required	Description
`trackId`	`string`	Yes	ID of the track

Returns:

{
  "trackId": "string",
  "trackName": "string",
  "totalComponents": 0,
  "levelBreakdown": [{ "level": "string", "count": 0, "percentage": 0 }]
}

`list-track-blockers`

Returns the most common failing checks in a track, with failure counts and the percentage of components failing each check. Attributes: readOnly: true · idempotent: true Parameters

Name	Type	Required	Description
`trackId`	`string`	Yes	ID of the track
`limit`	`number`	No	Maximum number of blockers to return (default: `10`)

Returns:

{
  "blockers": [
    {
      "checkId": "string",
      "checkName": "string",
      "failingCount": 0,
      "totalCount": 0,
      "failurePercentage": 0
    }
  ]
}

Campaigns

`create-campaign`

Creates a new compliance campaign with a track, milestones, and entity filters. Attributes: readOnly: false · idempotent: false Parameters

Name	Type	Required	Description
`id`	`string`	Yes	Unique campaign identifier (slug-style)
`name`	`string`	Yes	Campaign display name
`description`	`string`	Yes	Campaign description (supports Markdown)
`ownerEntityRef`	`string`	Yes	Backstage entity ref of the campaign owner
`startDate`	`string`	Yes	Campaign start date (ISO 8601)
`endDate`	`string`	Yes	Campaign end date (ISO 8601)
`checkIds`	`string[]`	Yes	Check IDs for the campaign (min 1)
`supportChannel`	`string`	No	Slack support channel
`draft`	`boolean`	No	Whether to start the associated track as a draft
`milestones`	`array`	No	Milestones with pass rate targets
`filter`	`Filter` (~~`CatalogFilter`~~ deprecated)	No	Entity inclusion filter
`exclude`	`Filter`	No	Entity exclusion filter (requires `filter`)

Returns:

{ "campaignId": "string", "trackId": "string" }

`update-campaign`

Updates an existing campaign. Only provided fields are changed. Attributes: readOnly: false · idempotent: true Parameters

Name	Type	Required	Description
`campaignId`	`string`	Yes	ID of the campaign to update
`name`	`string`	No	Campaign display name
`description`	`string`	No	Campaign description
`ownerEntityRef`	`string`	No	Backstage entity ref of the owner
`supportChannel`	`string`	No	Slack support channel
`startDate`	`string`	No	Campaign start date (ISO 8601)
`endDate`	`string`	No	Campaign end date (ISO 8601)
`draft`	`boolean`	No	Draft state of the associated track
`checkIds`	`string[]`	No	Replaces check IDs (min 1 if provided)
`milestones`	`array`	No	Replaces existing milestones
`includeFilter`	`Filter \| null` (~~`CatalogFilter`~~ deprecated)	No	Entity inclusion filter; pass `null` to clear
`excludeFilter`	`Filter \| null`	No	Entity exclusion filter; pass `null` to clear

Returns:

{ "campaignId": "string", "trackId": "string" }

`delete-campaign`

Permanently deletes a campaign. Attributes: readOnly: false · idempotent: false Parameters

Name	Type	Required	Description
`campaignId`	`string`	Yes	ID of the campaign to delete

Returns:

{ "campaignId": "string", "deleted": true }

`list-campaigns`

Returns all Soundcheck campaigns with their IDs, names, status, associated track IDs, and date ranges. Attributes: readOnly: true · idempotent: true Parameters: None Returns:

{
  "campaigns": [
    {
      "id": "string",
      "name": "string",
      "archived": false,
      "trackId": "string",
      "startDate": "string",
      "targetCompletionDate": "string"
    }
  ]
}

`get-campaign-details`

Returns the full configuration of a campaign: name, description, owner, status, dates, milestones, check IDs, and entity filter. Attributes: readOnly: true · idempotent: true Parameters

Name	Type	Required	Description
`campaignId`	`string`	Yes	ID of the campaign

Returns:

{
  "id": "string",
  "name": "string",
  "description": "string",
  "owner": "string",
  "supportChannel": "string",
  "archived": false,
  "trackId": "string",
  "startDate": "string",
  "targetCompletionDate": "string",
  "filter": {},
  "checkIds": ["string"],
  "milestones": [
    {
      "id": "string",
      "name": "string",
      "description": "string",
      "targetPercent": 0,
      "targetCompletionDate": "string"
    }
  ]
}

Exemptions

`set-exemption`

Exempts a component from a specific check with a documented justification. The exemption takes effect immediately. Attributes: readOnly: false · idempotent: true Parameters

Name	Type	Required	Description
`entityRef`	`string`	Yes	Entity reference (e.g. `component:default/my-service`)
`checkId`	`string`	Yes	ID of the check to exempt
`justification`	`string`	Yes	Reason for the exemption
`userRef`	`string`	Yes	User reference (e.g. `user:default/jsmith`)

Returns:

{
  "checkId": "string",
  "entityRef": "string",
  "justification": "string",
  "timestamp": "string"
}

`remove-exemption`

Removes an active exemption for a component from a specific check. If no exemption exists, the action is a no-op. Attributes: readOnly: false · idempotent: true Parameters

Name	Type	Required	Description
`entityRef`	`string`	Yes	Entity reference
`checkId`	`string`	Yes	ID of the check

Returns:

{ "checkId": "string", "entityRef": "string", "removed": true }

`list-exemptions`

Returns all active exemptions for a component, including the check name and justification for each. Attributes: readOnly: true · idempotent: true Parameters

Name	Type	Required	Description
`entityRef`	`string`	Yes	Entity reference

Returns:

{
  "exemptions": [
    {
      "checkId": "string",
      "reason": "string",
      "userRef": "string",
      "timestamp": "string"
    }
  ]
}

`revoke-exemption`

Revokes an active exemption for a component from a specific check. The exemption record is preserved but marked as revoked, and the component becomes subject to the check again. Attributes: readOnly: false · idempotent: false Parameters

Name	Type	Required	Description
`entityRef`	`string`	Yes	Entity reference (e.g. `component:default/my-service`)
`check`	`string`	Yes	The ID, name, or description of the check
`reason`	`string`	Yes	Reason for revoking the exemption
`userRef`	`string`	Yes	User reference of the person revoking (e.g. `user:default/jsmith`)

Returns:

{
  "checkId": "string",
  "entityRef": "string",
  "reason": "string",
  "revokedBy": "string",
  "revokedAt": "string"
}

`restore-exemption`

Restores a previously revoked exemption for a component from a specific check. The exemption becomes active again. Attributes: readOnly: false · idempotent: false Parameters

Name	Type	Required	Description
`entityRef`	`string`	Yes	Entity reference (e.g. `component:default/my-service`)
`check`	`string`	Yes	The ID, name, or description of the check

Returns:

{
  "checkId": "string",
  "entityRef": "string",
  "restored": true
}

`list-revoked-exemptions`

Returns revoked exemptions, optionally filtered by entity and/or check. Includes revocation details such as who revoked, when, and why. Attributes: readOnly: true · idempotent: true Parameters

Name	Type	Required	Description
`entityRef`	`string`	No	Filter by entity reference (e.g. `component:default/my-service`)
`checkId`	`string`	No	Filter by check ID
`limit`	`number`	No	Maximum number of results (default: `25`, max: `100`)
`offset`	`number`	No	Number of results to skip for pagination (default: `0`)

Returns:

{
  "exemptions": [
    {
      "checkId": "string",
      "entityRef": "string",
      "reason": "string",
      "userRef": "string",
      "revokedBy": "string",
      "revokedAt": "string",
      "revocationReason": "string"
    }
  ],
  "totalCount": 0
}

Entity compliance

`get-component-health`

Returns overall compliance score, level, track memberships, and pass/fail check counts for a component. Attributes: readOnly: true · idempotent: true Parameters

Name	Type	Required	Description
`entityRef`	`string`	Yes	Entity reference (e.g. `component:default/my-service`)

Returns:

{
  "entityRef": "string",
  "overallScore": 0.0,
  "passingChecks": 0,
  "failingChecks": 0,
  "tracks": [
    {
      "trackId": "string",
      "trackName": "string",
      "highestCertifiedLevel": "string",
      "levels": [
        {
          "name": "string",
          "passingChecks": 0,
          "failingChecks": 0,
          "score": 0.0
        }
      ]
    }
  ]
}

`list-failing-checks`

Returns all failing checks for a component, optionally filtered by track. Attributes: readOnly: true · idempotent: true Parameters

Name	Type	Required	Description
`entityRef`	`string`	Yes	Entity reference
`trackId`	`string`	No	Filter results to a specific track

Returns:

{
  "checks": [
    {
      "checkId": "string",
      "checkName": "string",
      "trackId": "string",
      "trackName": "string",
      "lastRunAt": "string",
      "failureReason": "string"
    }
  ]
}

Facts

`list-entity-facts`

Returns metadata about facts collected for a given entity. Use get-fact-data to retrieve the actual value of a specific fact. Attributes: readOnly: true · idempotent: true Parameters

Name	Type	Required	Description
`entityRef`	`string`	Yes	Entity reference (e.g. `component:default/my-service`)
`factRefs`	`string[]`	No	Filter to specific fact references

Returns:

{
  "facts": [
    {
      "factRef": "string",
      "collectorId": "string",
      "factId": "string",
      "timestamp": "string",
      "error": "string"
    }
  ],
  "message": "string"
}

`get-fact-data`

Returns the raw fact value for a specific fact from a specific collector for a given entity. Attributes: readOnly: true · idempotent: true Parameters

Name	Type	Required	Description
`entityRef`	`string`	Yes	Entity reference
`collectorId`	`string`	Yes	ID of the fact collector (e.g. `catalog`, `github`)
`factId`	`string`	Yes	Name of the fact within the collector

Returns:

{
  "factRef": "string",
  "collectorId": "string",
  "factId": "string",
  "value": null,
  "timestamp": "string"
}

Org intelligence

`get-org-compliance-summary`

Returns a high-level overview of tech health posture across all tracks: overall score, component counts, trends, and track summaries. Attributes: readOnly: true · idempotent: true Parameters

Name	Type	Required	Description
`scope`	`string`	No	Filter by scope (e.g. `"default"`)
`tracks`	`array`	No	Limit results to specific tracks
`entityKinds`	`string[]`	No	Filter by entity kinds (e.g. `["Component"]`)
`entityLifecycles`	`string[]`	No	Filter by entity lifecycles (e.g. `["production"]`)
`numberOfDays`	`number`	No	Number of days for trend data (default: `30`)

Returns:

{
  "overallPassRate": 0.0,
  "totalTracksActive": 0,
  "totalGroups": 0,
  "levelBreakdown": [
    {
      "levelOrdinal": 0,
      "levelName": "string",
      "snapshotPassRate": 0.0,
      "trend": "improving | declining | stable"
    }
  ],
  "trackSummaries": [
    {
      "trackId": "string",
      "trackName": "string",
      "overallSnapshotPassRate": 0.0
    }
  ]
}

`get-team-compliance-summary`

Returns aggregated compliance scores and track breakdown for a specific team. Attributes: readOnly: true · idempotent: true Parameters

Name	Type	Required	Description
`groupEntityRef`	`string`	Yes	Group entity ref of the team (e.g. `group:default/my-team`)
`tracks`	`array`	No	Limit results to specific tracks
`numberOfDays`	`number`	No	Number of days for trend data

Returns:

{
  "groupEntityRef": "string",
  "groupTitle": "string",
  "snapshotPassRate": 0.0,
  "trend": "improving | declining | stable",
  "trackBreakdown": [
    {
      "trackId": "string",
      "trackName": "string",
      "levels": [
        { "levelOrdinal": 0, "levelName": "string", "snapshotPassRate": 0.0 }
      ]
    }
  ]
}

`get-top-failing-checks`

Returns the checks with the highest failure rates across the org, with optional filtering. Attributes: readOnly: true · idempotent: true Parameters

Name	Type	Required	Description
`limit`	`number`	No	Maximum number of results (default: `10`)
`tracks`	`array`	No	Limit results to checks in specific tracks
`scope`	`string`	No	Filter by scope
`entityKinds`	`string[]`	No	Filter by entity kinds
`entityLifecycles`	`string[]`	No	Filter by entity lifecycles
`checkOwners`	`string[]`	No	Filter by check owner entity refs
`numberOfDays`	`number`	No	Number of days for trend data

Returns:

{
  "checks": [
    {
      "checkId": "string",
      "checkName": "string",
      "snapshotPassRate": 0.0,
      "failureRate": 0.0,
      "trend": "improving | declining | stable"
    }
  ]
}

`get-compliance-trends`

Returns time-series compliance trend data for a track, showing per-level pass rates over the requested number of days. Attributes: readOnly: true · idempotent: true Parameters

Name	Type	Required	Description
`trackId`	`string`	Yes	ID of the track
`numberOfDays`	`number`	No	Number of days of trend data (default: `30`)
`scope`	`string`	No	Filter by scope

Returns:

{
  "trackId": "string",
  "trackName": "string",
  "overallTrend": "improving | declining | stable",
  "levelTrends": [
    {
      "levelOrdinal": 0,
      "levelName": "string",
      "snapshotPassRate": 0.0,
      "trend": "improving | declining | stable",
      "trendPassRates": [0.0]
    }
  ]
}

`compare-teams`

Returns a side-by-side compliance comparison for two or more teams, ranked by pass rate. Attributes: readOnly: true · idempotent: true Parameters

Name	Type	Required	Description
`groupEntityRefs`	`string[]`	Yes	Group entity refs to compare (min 2, max 10)
`tracks`	`array`	No	Limit comparison to specific tracks
`numberOfDays`	`number`	No	Number of days for trend data

Returns:

{
  "comparison": [
    {
      "groupEntityRef": "string",
      "groupTitle": "string",
      "snapshotPassRate": 0.0,
      "trend": "improving | declining | stable",
      "rank": 1
    }
  ],
  "bestPerforming": "string",
  "worstPerforming": "string",
  "spread": 0.0
}

`get-rolled-up-tech-insights`

Returns a track-scoped compliance overview with top and bottom performing groups, mirroring the Tech Insights Explorer page. Attributes: readOnly: true · idempotent: true Parameters

Name	Type	Required	Description
`trackId`	`string`	Yes	ID of the track to explore
`limit`	`number`	No	Number of top/bottom groups to return (default: `5`)
`numberOfDays`	`number`	No	Number of days for trend data
`entityKinds`	`string[]`	No	Filter by entity kinds
`entityLifecycles`	`string[]`	No	Filter by entity lifecycles

Returns:

{
  "trackId": "string",
  "trackName": "string",
  "overallSnapshotPassRate": 0.0,
  "levelBreakdown": [
    { "levelOrdinal": 0, "levelName": "string", "snapshotPassRate": 0.0 }
  ],
  "topPerformingGroups": [
    {
      "groupEntityRef": "string",
      "groupTitle": "string",
      "snapshotPassRate": 0.0
    }
  ],
  "bottomPerformingGroups": [
    {
      "groupEntityRef": "string",
      "groupTitle": "string",
      "snapshotPassRate": 0.0
    }
  ],
  "totalGroupCount": 0
}

`find-struggling-components`

Returns the components with the lowest compliance pass rates, sorted by severity. Useful for champions identifying which teams need support. Attributes: readOnly: true · idempotent: true Parameters

Name	Type	Required	Description
`limit`	`number`	No	Maximum number of components (default: `20`)
`failureRateThreshold`	`number`	No	Only return components at or below this pass rate (default: `0.5`)
`tracks`	`array`	No	Limit results to components applicable to specific tracks
`entityKinds`	`string[]`	No	Filter by entity kinds
`entityTypes`	`string[]`	No	Filter by entity types
`entityLifecycles`	`string[]`	No	Filter by entity lifecycles
`entityOwners`	`string[]`	No	Filter by owner group entity refs
`numberOfDays`	`number`	No	Number of days for trend data

Returns:

{
  "components": [
    {
      "entityRef": "string",
      "entityTitle": "string",
      "ownerRef": "string",
      "snapshotPassRate": 0.0,
      "trend": "improving | declining | stable"
    }
  ],
  "totalBelowThreshold": 0
}

`get-compliance-by-level`

Returns adoption metrics for a specific level within a track: component counts, percentages, and top failing components. Attributes: readOnly: true · idempotent: true Parameters

Name	Type	Required	Description
`trackId`	`string`	Yes	ID of the track
`level`	`string`	Yes	Name of the level within the track (e.g. `"Bronze"`)

Returns:

{
  "trackId": "string",
  "level": "string",
  "count": 0,
  "totalComponents": 0,
  "percentage": 0,
  "failingComponents": ["string"]
}

Integrations

`get-integration-status`

Diagnoses the configuration of a Soundcheck fact collector integration: returns status, available facts, collection schedule, and any configuration errors. Attributes: readOnly: true · idempotent: true Parameters

Name	Type	Required	Description
`integrationId`	`string`	Yes	ID or name of the integration (fact collector)

Returns:

{
  "integrationId": "string",
  "name": "string",
  "status": "healthy | misconfigured",
  "factNames": ["string"],
  "scheduledCollections": 0,
  "latestCompletedTime": "string",
  "latestFailedTime": "string",
  "errors": ["string"]
}

`get-integration-config-schema`

Returns the JSON Schema describing the configuration format for a Soundcheck integration. Use this before configure-integration to understand the required fields. Attributes: readOnly: true · idempotent: true Parameters

Name	Type	Required	Description
`integrationId`	`string`	Yes	ID or name of the integration (fact collector)

Returns:

{
  "integrationId": "string",
  "name": "string",
  "isConfigurable": true,
  "isEditable": true,
  "configSchema": null,
  "currentConfig": null
}

`configure-integration`

Configures a Soundcheck fact collector integration with the provided settings. Use get-integration-config-schema first to understand the required configuration format. Attributes: readOnly: false · idempotent: true Parameters

Name	Type	Required	Description
`integrationId`	`string`	Yes	ID or name of the integration
`config`	`Record<string, unknown>`	Yes	Configuration object for the integration
`shouldSync`	`boolean`	No	Whether to trigger a sync after updating the config (default: `true`)

Returns:

{ "integrationId": "string", "name": "string", "success": true }

​Required permissions

​Checks

​create-check

​update-check

​delete-check

​list-checks

​get-check-definition

​get-check-details

​execute-check

​set-manual-check-result

​get-check-failure-details

​get-check-history

​search-checks

​list-check-entities

​Tracks

​create-track

​update-track

​delete-track

​list-tracks

​get-track-details

​get-track-stats

​list-track-blockers

​Campaigns

​create-campaign

​update-campaign

​delete-campaign

​list-campaigns

​get-campaign-details

​Exemptions

​set-exemption

​remove-exemption

​list-exemptions

​revoke-exemption

​restore-exemption

​list-revoked-exemptions

​Entity compliance

​get-component-health

​list-failing-checks

​Facts

​list-entity-facts

​get-fact-data

​Org intelligence

​get-org-compliance-summary

​get-team-compliance-summary

​get-top-failing-checks

​get-compliance-trends

​compare-teams

​get-rolled-up-tech-insights

​find-struggling-components

​get-compliance-by-level

​Integrations

​get-integration-status

​get-integration-config-schema

​configure-integration

Required permissions

Checks

`create-check`

`update-check`

`delete-check`

`list-checks`

`get-check-definition`

`get-check-details`

`execute-check`

`set-manual-check-result`

`get-check-failure-details`

`get-check-history`

`search-checks`

`list-check-entities`

Tracks

`create-track`

`update-track`

`delete-track`

`list-tracks`

`get-track-details`

`get-track-stats`

`list-track-blockers`

Campaigns

`create-campaign`

`update-campaign`

`delete-campaign`

`list-campaigns`

`get-campaign-details`

Exemptions

`set-exemption`

`remove-exemption`

`list-exemptions`

`revoke-exemption`

`restore-exemption`

`list-revoked-exemptions`

Entity compliance

`get-component-health`

`list-failing-checks`

Facts

`list-entity-facts`

`get-fact-data`

Org intelligence

`get-org-compliance-summary`

`get-team-compliance-summary`

`get-top-failing-checks`

`get-compliance-trends`

`compare-teams`

`get-rolled-up-tech-insights`

`find-struggling-components`

`get-compliance-by-level`

Integrations

`get-integration-status`

`get-integration-config-schema`

`configure-integration`