fettle-mcp 0.3.0 → 0.4.0

package/contracts/mcp_tools.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "instructions": "Fettle is an uptime monitoring service. The tools see only the API key's organization: monitors (create, edit, pause, delete, check, tag), heartbeats (create, list), incidents (list, acknowledge), status pages (list). No tool edits, pauses or deletes a heartbeat, manages a status page, or lists or manages notification channels: send the user to https://dashboard.fettle.sh. Each tool's description lists its arguments, limits and errors.\n\nFINDING THINGS\n- list_monitors gives one short row per monitor; use it to find ids. get_monitor returns one monitor's full config and state, get_uptime_summary its uptime over 24h, 7d and 30d.\n- Broken right now: list_monitors with status [\"DOWN\", \"DEGRADED\"]. List filters are JSON arrays, not repeated arguments. Monitor statuses: PENDING (no verdict yet), UP, DEGRADED, DOWN, PAUSED.\n- Certificates expiring first: list_monitors with type [\"SSL\"] and sort \"ssl_expiry\".\n- Lists are paginated: page from 1, size 1..100 (default 25).\n- tag filters a list. On list_monitors tag_match \"all\" (default) needs every tag, \"any\" one of them; list_heartbeats always needs every tag.\n\nPLAN LIMITS\nCall get_plan_usage before creating monitors or heartbeats: the plan, its limits (null means no limit) and current usage. Paused monitors count toward the monitor limit. interval_seconds is 30..86400, but the plan sets a minimum (min_interval_seconds); an interval below 60 seconds also uses the fast-interval quota (max_fast_monitors); a monitor may use at most max_regions regions, picked from allowed_regions. A broken limit or an unknown region code is a 403 naming it: change the request or tell the user the limit; never retry it unchanged.\n\nCREATING MONITORS\n- create_monitor creates one; bulk_create_monitors up to 100, all or nothing: one bad item, or a batch over the plan's limits, creates nothing.\n- target: HTTP takes a URL (https:// is added when the scheme is missing). PING, SSL, TCP and DNS take a public hostname or IP, no :port or path; the port goes in config. localhost and non-public addresses (private, loopback, link-local...) are a 422. type and target never change after create.\n- is_active false creates a monitor paused; resume_monitor starts it.\n- confirmation_threshold (1..10, default 3): how many checks in a row must fail in every region before the monitor goes DOWN and an incident opens. notification_cooldown_seconds (60..86400, default 1800) only holds back a duplicate first alert, never the recovery. Reminders for an open, unacknowledged incident follow the plan's renotify_interval_seconds and renotify_max_count (get_plan_usage; 0 means none).\n- channel_ids binds notification channels by id (get_monitor shows a monitor's channel_ids). An empty binding alerts every verified, active channel. On create omit it or pass []; on update [] clears the binding and omitting it keeps it.\n- update_monitor changes only the fields you pass. Never send null: omit a field to keep it. config is the exception: it replaces the whole config, so send every config field you want to keep.\n\nCONFIG BY TYPE\n- HTTP, all optional: method (default GET), expected_status_codes (default [200]), keyword (case-sensitive text the body must contain; not with HEAD), follow_redirects and verify_ssl (default true), request_headers, request_body (POST, PUT, PATCH, DELETE only).\n- PING, optional: packet_count 1..20 (default 4).\n- SSL, optional: warn_before_days 1..365 (default 14), port (default 443). One region.\n- TCP, config required: port or ports, not both; expected_state \"open\" (default) or \"closed\", lowercase.\n- DNS, config required: record_type (A, AAAA, CNAME, MX, TXT, NS); expected_value optional. One region.\n\nEXPOSED PORTS ON A SERVER\nRead get_exposed_ports_preset. Create ONE TCP monitor on the server's public hostname or IP with config {\"ports\": [the preset ports], \"expected_state\": \"closed\"}: 1..20 distinct ports, one region, interval_seconds at least 300. It counts as one monitor and fails when any listed port accepts a connection.\n\nTAGS\nCall list_tags first and reuse existing names. Tags are trimmed, lowercased and deduplicated; at most 10 per monitor or heartbeat, each at most 50 characters of a-z 0-9 : _ . / - starting with a letter or digit.\n\nHEARTBEATS\nA heartbeat waits for a scheduled job to call its ping_url. It is never reported late before its first successful ping. After that an alert fires period_seconds + grace_seconds after the last ping; ping_url + \"/start\" also restarts the clock, ping_url + \"/fail\" marks it DOWN at once. Job every N seconds, alert after T seconds of silence: period_seconds = N, grace_seconds = T - N.\n\nINCIDENTS\nlist_incidents lists monitor and heartbeat incidents, newest first. An incident resolves itself when its monitor or heartbeat recovers; pausing a monitor closes it silently. acknowledge_incident stops repeat alerts; the recovery alert still goes out.\n\nERRORS (start of a failed call's text)\n- \"Authentication failed\": the key is missing, unknown, revoked, expired, not allowed from this address, or its creator lost access. Do not retry; tell the user.\n- \"Invalid argument(s)\": names each failing field by path, for example 'monitors.3.target'. \"Invalid request:\": the rule the request broke. Fix, retry.\n- \"Forbidden:\": a plan limit or unknown region; the reason says which. A message about write scope: the key is read-only, and every tool that changes something needs the write scope.\n- \"Not found:\": no such id in this organization.\n- \"Rate limited\": wait the seconds given, then retry. Every tool call counts toward the organization's per-minute budget (get_plan_usage limits.api_rate_limit_per_minute); check_now also has its own cap of 10 per minute per calling address.\n- \"Tool 'x' failed: the API returned 5xx\": server fault, retry once later. \"Tool 'x' does not accept argument(s)\": drop the ones named.\n- \"Request failed with status N\": any other refusal; read the reason, do not retry unchanged.\n",
+  "instructions": "Fettle is an uptime monitoring service. The tools see only the API key's organization: monitors, heartbeats, maintenance windows, incidents, status page incidents, tags, channels (read), regions. Channels, status pages, members, API keys and billing are managed only in the dashboard (https://dashboard.fettle.sh). Read a tool's description (arguments, limits, errors) before its first call.\n\nFINDING THINGS\n- list_monitors gives one short row per monitor; use it to find ids. Filters are JSON arrays. Broken now: status [\"DOWN\", \"DEGRADED\"]. Certificates expiring first: type [\"SSL\"], sort \"ssl_expiry\".\n- tag filters lists; tag_match \"all\" (default) needs every tag, \"any\" one of them.\n- Lists are paginated: page from 1, size 1..100 (default 25).\n\nPLAN LIMITS\nCall get_plan_usage before creating anything: limits (null means none) and usage. A broken limit or an unknown region is a 403 naming it: change the request or tell the user; never retry it unchanged.\n\nCREATING MONITORS\n- check_target probes a target once before create_monitor. list_regions names the region codes.\n- bulk_create_monitors creates up to 100, all or nothing.\n- type and target never change after create.\n- channel_ids: ids from list_channels. Empty or omitted on create alerts every verified, active channel. Email is not a channel: every alert also goes to the account email of whoever created the monitor or heartbeat.\n- update tools change only the fields you pass. Never send null; omit a field to keep it. A monitor's config is replaced whole: send every config field you want to keep.\n- Exposed ports on a server: follow get_exposed_ports_preset.\n\nMANY MONITORS AT ONCE\nFind ids with list_monitors, then bulk_pause_monitors, bulk_resume_monitors or bulk_update_monitors (interval, timeout, regions, channels, threshold, cooldown) for up to 100 ids, all or nothing. bulk_update_monitor_tags adds or removes tags on up to 300. There is no bulk delete.\n\nTAGS\nCall list_tags first and reuse names. Tags are flat labels such as env:prod, trimmed, lowercased and deduplicated; at most 10 per item. rename_tag and delete_tag act on every monitor and heartbeat.\n\nHEARTBEATS\nA job calls ping_url when it succeeds. Job every N seconds, alert after T seconds of silence: period_seconds = N, grace_seconds = T - N. Never late before its first success ping. ping_url + \"/start\" restarts the clock, ping_url + \"/fail\" marks it DOWN at once.\n\nMAINTENANCE\nBefore a deploy or reboot, create_maintenance_window (scope ORG or MONITOR) instead of pausing monitors: checks keep running, but no incident opens and no alert goes out. Not for heartbeats. preview_maintenance_window shows a schedule's next occurrences; list_active_maintenance shows what is silenced now.\n\nOUTAGES\nlist_monitors status [\"DOWN\"] -> list_check_results (status code, error, region per check) -> get_incident. acknowledge_incident stops repeat alerts; the recovery alert still goes out. create_status_page_incident and post_status_page_update can email the page's subscribers: confirm the text with the user first.\n\nERRORS (start of a failed call's text)\n- \"Authentication failed\": the key is missing, revoked or expired, the address is not allowed, or its creator lost access. Do not retry; tell the user.\n- \"This tool requires/needs an API key with write scope\": the key is read-only; tell the user.\n- \"Invalid argument(s)\": names each failing field. \"Invalid request:\": the rule broken. Fix, retry.\n- \"Forbidden:\": a plan limit, an unknown region, or the key's user lacks the permission; the reason says which.\n- \"Not found:\": no such id in this organization.\n- \"Rate limited\": wait the seconds given, then retry. All API key calls share the organization's per-minute budget.\n- \"Tool '<name>' failed: the API returned 5xx\": server fault, retry once later.\n- \"Tool '<name>' does not accept argument(s)\": drop the ones named.\n- \"Request failed with status N\": read the reason, do not retry unchanged.\n",
   "tools": [
     {
       "name": "list_monitors",
@@ -162,7 +162,7 @@
     {
       "name": "create_monitor",
       "title": "Create a monitor",
-      "description": "Create a monitor that checks a URL, host or port on a schedule and return it (the get_monitor shape). Requires a key with the write scope. Required: name (1 to 255 characters), type (HTTP, PING, SSL, TCP or DNS), target, interval_seconds, timeout_seconds and regions. target (up to 2048 characters): for HTTP an http:// or https:// URL (https:// is added when the scheme is missing; port, path and query are kept); for PING, SSL, TCP and DNS a bare public hostname or IP address with no :port and no path (the TCP or SSL port goes in config; host:port is a 422, while a full URL such as https://host:8443/x is cut down to its host and its port is lost). Hostnames must be ASCII (punycode for internationalized domains). localhost, *.localhost and IP addresses that are not public (private, loopback, link-local, CGNAT 100.64.0.0/10, reserved or unspecified) are rejected with a 422. type and target cannot be changed later. config is a JSON object whose shape depends on type. HTTP takes method (GET, HEAD, POST, PUT, PATCH or DELETE, any case; default GET), expected_status_codes (a non-empty list of codes 100 to 599, default [200]), keyword (case-sensitive substring the response body must contain, at most 1024 characters; not allowed with HEAD), follow_redirects (default true), verify_ssl (default true; false skips TLS verification, which also means that monitor can no longer report a TLS_INVALID failure), request_headers (an object of header name to value: at most 20 headers; a name is at most 128 characters of letters, digits and ! # $ % & ' * + - . ^ _ ` | ~; a value is at most 1024 bytes of printable ASCII, space or tab; the whole object at most 8192 bytes as JSON; two names differing only in case, and the reserved names Host, Content-Length, Transfer-Encoding, Connection, Upgrade, TE, Trailer, Keep-Alive, CF-Connecting-IP and any Proxy-* name, are a 422) and request_body (a string of at most 8192 bytes as UTF-8; requires POST, PUT, PATCH or DELETE), all optional. Reads never return request_header values: each one comes back as the literal __FETTLE_UNCHANGED__, and writing that value back in an update keeps the stored header unchanged (on create it is a 422). PING takes packet_count (1 to 20, default 4), optional. SSL takes warn_before_days (1 to 365, default 14) and port (1 to 65535, default 443), both optional. TCP takes either port (one port, 1 to 65535, expected_state \"open\" by default or \"closed\") or ports — a list of 1 to 20 distinct ports that must all be closed: ports requires expected_state \"closed\", exactly one region and interval_seconds of at least 300, and a check fails when any listed port accepts a connection (the monitor goes DOWN once confirmation_threshold failures confirm it). Passing both port and ports, or neither, is a 422. expected_state values are lowercase. DNS requires record_type (A, AAAA, CNAME, MX, TXT or NS; no default) and takes optional expected_value (at most 2048 characters): when set, one answer must equal it (case-insensitive, ignoring surrounding spaces and a trailing dot; exact for TXT); when absent, any answer passes. For MX the answers are the mail host names only, without priority (mail.example.com, not 10 mail.example.com). A and AAAA both look up every address of the host, IPv4 and IPv6 alike, and any one of them may match; write an IPv6 address in its shortest form. Omit config for HTTP, PING or SSL to use their defaults; omitting it on a TCP or DNS monitor is a 422. regions is a list of one or more distinct region codes (get_plan_usage lists them in limits.allowed_regions, for example eu-central; an unknown code is a 403) — SSL and DNS monitors must target exactly one region (422 otherwise). interval_seconds (integer, 30 to 86400) is the time between checks; timeout_seconds (integer, 1 to 120) is how long one check may take. confirmation_threshold (integer, 1 to 10; 3 when not set on create) is how many checks in a row must fail in every region before the monitor goes DOWN and an incident opens. notification_cooldown_seconds (integer, 60 to 86400; 1800 when not set on create) only holds back a duplicate first alert for the same incident within that window. Repeat reminders while the incident stays open and unacknowledged follow the plan's renotify_interval_seconds and renotify_max_count (see get_plan_usage; 0 means no reminders), not this value; it never holds back the recovery alert. Plan limits apply: monitor count, minimum interval_seconds, how many monitors may use an interval below 60 seconds, and max_regions per monitor. Breaking one is a 403 that names the limit (more regions than the plan allows is a 403 too; SSL/DNS with more than one region is a 422). get_plan_usage shows the limits and current usage. is_active (boolean, default true): false creates it paused — no check runs until resume_monitor; a paused monitor still counts toward the plan's monitor limits. channel_ids (array of channel uuids) binds notification channels; omit it or pass an empty list to alert every verified, active channel of the organization; an id that is not an active channel of this organization is a 404. No tool lists channels: take ids from the user or from another monitor's get_monitor. tags is an optional list of flat labels (for example env:prod, service:api) used to group and filter monitors, at most 10 per monitor. Tags are trimmed, lowercased and deduplicated on write, each at most 50 characters of lowercase letters, digits and : _ . / - , starting with a letter or digit. Call list_tags first to reuse the organization's existing names instead of inventing near-duplicates. Other errors: 422 for an invalid argument, naming it. To create many monitors at once, use bulk_create_monitors. Example: {\"name\": \"API\", \"type\": \"HTTP\", \"target\": \"https://api.example.com/health\", \"interval_seconds\": 300, \"timeout_seconds\": 10, \"regions\": [\"eu-central\"], \"config\": {\"expected_status_codes\": [200]}, \"tags\": [\"env:prod\"]}",
+      "description": "Create a monitor that checks a URL, host or port on a schedule and return it (the get_monitor shape). Requires a key with the write scope. Required: name (1 to 255 characters), type (HTTP, PING, SSL, TCP or DNS), target, interval_seconds, timeout_seconds and regions. target (up to 2048 characters): for HTTP an http:// or https:// URL (https:// is added when the scheme is missing; port, path and query are kept); for PING, SSL, TCP and DNS a bare public hostname or IP address with no :port and no path (the TCP or SSL port goes in config; host:port is a 422, while a full URL such as https://host:8443/x is cut down to its host and its port is lost). Hostnames must be ASCII (punycode for internationalized domains). localhost, *.localhost and IP addresses that are not public (private, loopback, link-local, CGNAT 100.64.0.0/10, reserved or unspecified) are rejected with a 422. type and target cannot be changed later. config is a JSON object whose shape depends on type. HTTP takes method (GET, HEAD, POST, PUT, PATCH or DELETE, any case; default GET), expected_status_codes (a non-empty list of codes 100 to 599, default [200]), keyword (case-sensitive substring the response body must contain, at most 1024 characters; not allowed with HEAD), follow_redirects (default true), verify_ssl (default true; false skips TLS verification, which also means that monitor can no longer report a TLS_INVALID failure), request_headers (an object of header name to value: at most 20 headers; a name is at most 128 characters of letters, digits and ! # $ % & ' * + - . ^ _ ` | ~; a value is at most 1024 bytes of printable ASCII, space or tab; the whole object at most 8192 bytes as JSON; two names differing only in case, and the reserved names Host, Content-Length, Transfer-Encoding, Connection, Upgrade, TE, Trailer, Keep-Alive, CF-Connecting-IP and any Proxy-* name, are a 422) and request_body (a string of at most 8192 bytes as UTF-8; requires POST, PUT, PATCH or DELETE), all optional. Reads never return request_header values: each one comes back as the literal __FETTLE_UNCHANGED__, and writing that value back in an update keeps the stored header unchanged (on create it is a 422). PING takes packet_count (1 to 20, default 4), optional. SSL takes warn_before_days (1 to 365, default 14) and port (1 to 65535, default 443), both optional. TCP takes either port (one port, 1 to 65535, expected_state \"open\" by default or \"closed\") or ports — a list of 1 to 20 distinct ports that must all be closed: ports requires expected_state \"closed\", exactly one region and interval_seconds of at least 300, and a check fails when any listed port accepts a connection (the monitor goes DOWN once confirmation_threshold failures confirm it). Passing both port and ports, or neither, is a 422. expected_state values are lowercase. DNS requires record_type (A, AAAA, CNAME, MX, TXT or NS; no default) and takes optional expected_value (at most 2048 characters): when set, one answer must equal it (case-insensitive, ignoring surrounding spaces and a trailing dot; exact for TXT); when absent, any answer passes. For MX the answers are the mail host names only, without priority (mail.example.com, not 10 mail.example.com). A and AAAA both look up every address of the host, IPv4 and IPv6 alike, and any one of them may match; write an IPv6 address in its shortest form. Omit config for HTTP, PING or SSL to use their defaults; omitting it on a TCP or DNS monitor is a 422. regions is a list of one or more distinct region codes (get_plan_usage lists them in limits.allowed_regions, for example eu-central; an unknown code is a 403) — SSL and DNS monitors must target exactly one region (422 otherwise). interval_seconds (integer, 30 to 86400) is the time between checks; timeout_seconds (integer, 1 to 120) is how long one check may take. confirmation_threshold (integer, 1 to 10; 3 when not set on create) is how many checks in a row must fail in every region before the monitor goes DOWN and an incident opens. notification_cooldown_seconds (integer, 60 to 86400; 1800 when not set on create) only holds back a duplicate first alert for the same incident within that window. Repeat reminders while the incident stays open and unacknowledged follow the plan's renotify_interval_seconds and renotify_max_count (see get_plan_usage; 0 means no reminders), not this value; it never holds back the recovery alert. Plan limits apply: monitor count, minimum interval_seconds, how many monitors may use an interval below 60 seconds, and max_regions per monitor. Breaking one is a 403 that names the limit (more regions than the plan allows is a 403 too; SSL/DNS with more than one region is a 422). get_plan_usage shows the limits and current usage. is_active (boolean, default true): false creates it paused — no check runs until resume_monitor; a paused monitor still counts toward the plan's monitor limits. channel_ids (array of channel uuids) binds notification channels; omit it or pass an empty list to alert every verified, active channel of the organization; an id that is not an active channel of this organization is a 404. list_channels gives the ids. tags is an optional list of flat labels (for example env:prod, service:api) used to group and filter monitors, at most 10 per monitor. Tags are trimmed, lowercased and deduplicated on write, each at most 50 characters of lowercase letters, digits and : _ . / - , starting with a letter or digit. Call list_tags first to reuse the organization's existing names instead of inventing near-duplicates. Other errors: 422 for an invalid argument, naming it. To create many monitors at once, use bulk_create_monitors. Example: {\"name\": \"API\", \"type\": \"HTTP\", \"target\": \"https://api.example.com/health\", \"interval_seconds\": 300, \"timeout_seconds\": 10, \"regions\": [\"eu-central\"], \"config\": {\"expected_status_codes\": [200]}, \"tags\": [\"env:prod\"]}",
       "scope": "write",
       "input_schema": {
         "type": "object",
@@ -364,6 +364,147 @@
         "fixed_query": {}
       }
     },
+    {
+      "name": "bulk_pause_monitors",
+      "title": "Pause many monitors",
+      "description": "Pause up to 100 monitors in one call, all or nothing: no checks run and each open incident closes without an alert. Use it to stop monitoring a whole project or group (find ids with list_monitors and its filters); to silence alerts around a deploy, prefer create_maintenance_window. Requires a key with the write scope. monitor_ids (array of 1 to 100 distinct monitor uuids, required); one id that is not a monitor of this organization is a 404 naming it and nothing changes; a repeated id is a 422. Pausing a paused monitor is not an error. Returns monitors: the short rows after the change (the list_monitors row shape), in request order. Example: {\"monitor_ids\": [\"<id from list_monitors>\", \"<id from list_monitors>\"]}",
+      "scope": "write",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "monitor_ids": {
+            "description": "Monitors to act on. Every id must belong to the active organization.",
+            "items": {
+              "format": "uuid",
+              "type": "string"
+            },
+            "maxItems": 100,
+            "minItems": 1,
+            "type": "array"
+          }
+        },
+        "required": [
+          "monitor_ids"
+        ],
+        "additionalProperties": false
+      },
+      "operation": {
+        "method": "POST",
+        "path": "/v1/monitors/bulk/pause",
+        "path_params": [],
+        "query": [],
+        "body": true,
+        "fixed_query": {}
+      }
+    },
+    {
+      "name": "bulk_resume_monitors",
+      "title": "Resume many monitors",
+      "description": "Resume up to 100 paused monitors in one call, all or nothing; each goes back to PENDING and is checked on the next tick. Requires a key with the write scope. monitor_ids (array of 1 to 100 distinct monitor uuids, required); an unknown id is a 404 naming it, a repeated id a 422. Resuming more monitors than the plan's active limit allows is a 403 and nothing changes (see get_plan_usage). A monitor that is already running is left as it is. Returns monitors: the short rows after the change (the list_monitors row shape), in request order. Example: {\"monitor_ids\": [\"<id from list_monitors>\", \"<id from list_monitors>\"]}",
+      "scope": "write",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "monitor_ids": {
+            "description": "Monitors to act on. Every id must belong to the active organization.",
+            "items": {
+              "format": "uuid",
+              "type": "string"
+            },
+            "maxItems": 100,
+            "minItems": 1,
+            "type": "array"
+          }
+        },
+        "required": [
+          "monitor_ids"
+        ],
+        "additionalProperties": false
+      },
+      "operation": {
+        "method": "POST",
+        "path": "/v1/monitors/bulk/resume",
+        "path_params": [],
+        "query": [],
+        "body": true,
+        "fixed_query": {}
+      }
+    },
+    {
+      "name": "bulk_update_monitors",
+      "title": "Change settings of many monitors",
+      "description": "Set the same values on up to 100 monitors in one call, all or nothing, for example move twenty PING monitors to other regions or a slower interval. Requires a key with the write scope. monitor_ids (array of 1 to 100 distinct monitor uuids, required; an unknown id is a 404 naming it, a repeated id a 422). changes (object, required) holds one or more of: interval_seconds (30 to 86400), timeout_seconds (1 to 120), regions (list of region codes; see list_regions), channel_ids (array of channel uuids from list_channels; replaces each monitor's binding, [] clears it, an unknown channel is a 404), confirmation_threshold (1 to 10) and notification_cooldown_seconds (60 to 86400). Omit a field to keep it; never send null. config, name and tags are not here: use update_monitor or bulk_update_monitor_tags. The plan's rules apply to the result: an interval below the plan minimum, too many fast-interval monitors, more regions than allowed or an unknown region is a 403. A value one monitor cannot take (an SSL or DNS monitor with more than one region; a port-list TCP monitor with several regions or an interval under 300) is a 422 that starts with monitors[<i>] (\"<name>\"). Returns monitors: short rows (id, name, type, target, status, is_active, tags, interval_seconds, ssl_expires_at, last_checked_at), so they show the interval but not the other changed settings; get_monitor gives a monitor's full settings. Example: {\"monitor_ids\": [\"<id from list_monitors>\", \"<id from list_monitors>\"], \"changes\": {\"regions\": [\"eu-central\", \"us-east\"], \"interval_seconds\": 300}}",
+      "scope": "write",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "monitor_ids": {
+            "description": "Monitors to act on. Every id must belong to the active organization.",
+            "items": {
+              "format": "uuid",
+              "type": "string"
+            },
+            "maxItems": 100,
+            "minItems": 1,
+            "type": "array"
+          },
+          "changes": {
+            "additionalProperties": false,
+            "minProperties": 1,
+            "properties": {
+              "interval_seconds": {
+                "maximum": 86400,
+                "minimum": 30,
+                "type": "integer"
+              },
+              "timeout_seconds": {
+                "maximum": 120,
+                "minimum": 1,
+                "type": "integer"
+              },
+              "regions": {
+                "items": {
+                  "type": "string"
+                },
+                "minItems": 1,
+                "type": "array"
+              },
+              "channel_ids": {
+                "items": {
+                  "format": "uuid",
+                  "type": "string"
+                },
+                "type": "array"
+              },
+              "confirmation_threshold": {
+                "maximum": 10,
+                "minimum": 1,
+                "type": "integer"
+              },
+              "notification_cooldown_seconds": {
+                "maximum": 86400,
+                "minimum": 60,
+                "type": "integer"
+              }
+            },
+            "type": "object"
+          }
+        },
+        "required": [
+          "monitor_ids",
+          "changes"
+        ],
+        "additionalProperties": false
+      },
+      "operation": {
+        "method": "PATCH",
+        "path": "/v1/monitors/bulk",
+        "path_params": [],
+        "query": [],
+        "body": true,
+        "fixed_query": {}
+      }
+    },
     {
       "name": "get_exposed_ports_preset",
       "title": "Get the exposed-ports preset",
@@ -387,7 +528,7 @@
     {
       "name": "update_monitor",
       "title": "Update a monitor",
-      "description": "Change an existing monitor's settings and return it (the get_monitor shape); its type and target cannot change (sending either is a 422). Requires a key with the write scope. monitor_id (uuid, required) is the monitor's id from list_monitors; an id that is not a monitor of this organization (or a deleted one) is a 404. Every other field is optional: name (1 to 255 characters), interval_seconds, timeout_seconds, regions, config, confirmation_threshold, notification_cooldown_seconds, channel_ids, badge_enabled and tags. Only the fields you pass are modified: omit a field to leave it unchanged, and never send null. At least one field besides monitor_id is required (422 otherwise). config is the exception to partial updates: passing it replaces the monitor's entire config, not just the keys you include — any field of that type's schema you leave out is reset to its default. Passing only port on a TCP monitor whose expected_state is closed silently resets expected_state to open unless you include it too. config is a JSON object whose shape depends on type. HTTP takes method (GET, HEAD, POST, PUT, PATCH or DELETE, any case; default GET), expected_status_codes (a non-empty list of codes 100 to 599, default [200]), keyword (case-sensitive substring the response body must contain, at most 1024 characters; not allowed with HEAD), follow_redirects (default true), verify_ssl (default true; false skips TLS verification, which also means that monitor can no longer report a TLS_INVALID failure), request_headers (an object of header name to value: at most 20 headers; a name is at most 128 characters of letters, digits and ! # $ % & ' * + - . ^ _ ` | ~; a value is at most 1024 bytes of printable ASCII, space or tab; the whole object at most 8192 bytes as JSON; two names differing only in case, and the reserved names Host, Content-Length, Transfer-Encoding, Connection, Upgrade, TE, Trailer, Keep-Alive, CF-Connecting-IP and any Proxy-* name, are a 422) and request_body (a string of at most 8192 bytes as UTF-8; requires POST, PUT, PATCH or DELETE), all optional. Reads never return request_header values: each one comes back as the literal __FETTLE_UNCHANGED__, and writing that value back in an update keeps the stored header unchanged (on create it is a 422). PING takes packet_count (1 to 20, default 4), optional. SSL takes warn_before_days (1 to 365, default 14) and port (1 to 65535, default 443), both optional. TCP takes either port (one port, 1 to 65535, expected_state \"open\" by default or \"closed\") or ports — a list of 1 to 20 distinct ports that must all be closed: ports requires expected_state \"closed\", exactly one region and interval_seconds of at least 300, and a check fails when any listed port accepts a connection (the monitor goes DOWN once confirmation_threshold failures confirm it). Passing both port and ports, or neither, is a 422. expected_state values are lowercase. DNS requires record_type (A, AAAA, CNAME, MX, TXT or NS; no default) and takes optional expected_value (at most 2048 characters): when set, one answer must equal it (case-insensitive, ignoring surrounding spaces and a trailing dot; exact for TXT); when absent, any answer passes. For MX the answers are the mail host names only, without priority (mail.example.com, not 10 mail.example.com). A and AAAA both look up every address of the host, IPv4 and IPv6 alike, and any one of them may match; write an IPv6 address in its shortest form. The ports rules above are checked against the monitor after the change, so changing only the interval or the regions of a ports monitor can be rejected too. A monitor that checks a list of ports cannot switch to a single port (422): create a new monitor instead. regions is a list of one or more distinct region codes (get_plan_usage lists them in limits.allowed_regions, for example eu-central; an unknown code is a 403) — SSL and DNS monitors must target exactly one region (422 otherwise). interval_seconds (integer, 30 to 86400) is the time between checks; timeout_seconds (integer, 1 to 120) is how long one check may take. confirmation_threshold (integer, 1 to 10; 3 when not set on create) is how many checks in a row must fail in every region before the monitor goes DOWN and an incident opens. notification_cooldown_seconds (integer, 60 to 86400; 1800 when not set on create) only holds back a duplicate first alert for the same incident within that window. Repeat reminders while the incident stays open and unacknowledged follow the plan's renotify_interval_seconds and renotify_max_count (see get_plan_usage; 0 means no reminders), not this value; it never holds back the recovery alert. Plan limits apply: minimum interval_seconds, how many monitors may use an interval below 60 seconds (only moving a monitor from 60 seconds or more to below 60 takes a slot), and max_regions per monitor. Breaking one is a 403 that names the limit. get_plan_usage shows the limits and current usage. Use pause_monitor and resume_monitor, not this tool, to stop or restart checks. channel_ids (array of channel uuids), when passed, replaces the whole binding; an empty list clears it, after which every verified, active channel is alerted; omit it to leave the binding unchanged; an id that is not an active channel of this organization is a 404. badge_enabled (boolean) turns the monitor's public status badge on or off; a monitor on a published status page has a badge even when it is false. tags, when passed, replaces the monitor's whole tag list (at most 10); pass an empty list to clear it. Tags are trimmed, lowercased and deduplicated on write, each at most 50 characters of lowercase letters, digits and : _ . / - , starting with a letter or digit. Call list_tags first to reuse the organization's existing names instead of inventing near-duplicates. Example: {\"monitor_id\": \"<id from list_monitors>\", \"interval_seconds\": 600}",
+      "description": "Change an existing monitor's settings and return it (the get_monitor shape); its type and target cannot change (sending either is a 422). Requires a key with the write scope. monitor_id (uuid, required) is the monitor's id from list_monitors; an id that is not a monitor of this organization (or a deleted one) is a 404. Every other field is optional: name (1 to 255 characters), interval_seconds, timeout_seconds, regions, config, confirmation_threshold, notification_cooldown_seconds, channel_ids, badge_enabled and tags. Only the fields you pass are modified: omit a field to leave it unchanged, and never send null. At least one field besides monitor_id is required (422 otherwise). config is the exception to partial updates: passing it replaces the monitor's entire config, not just the keys you include — any field of that type's schema you leave out is reset to its default. Passing only port on a TCP monitor whose expected_state is closed silently resets expected_state to open unless you include it too. config is a JSON object whose shape depends on type. HTTP takes method (GET, HEAD, POST, PUT, PATCH or DELETE, any case; default GET), expected_status_codes (a non-empty list of codes 100 to 599, default [200]), keyword (case-sensitive substring the response body must contain, at most 1024 characters; not allowed with HEAD), follow_redirects (default true), verify_ssl (default true; false skips TLS verification, which also means that monitor can no longer report a TLS_INVALID failure), request_headers (an object of header name to value: at most 20 headers; a name is at most 128 characters of letters, digits and ! # $ % & ' * + - . ^ _ ` | ~; a value is at most 1024 bytes of printable ASCII, space or tab; the whole object at most 8192 bytes as JSON; two names differing only in case, and the reserved names Host, Content-Length, Transfer-Encoding, Connection, Upgrade, TE, Trailer, Keep-Alive, CF-Connecting-IP and any Proxy-* name, are a 422) and request_body (a string of at most 8192 bytes as UTF-8; requires POST, PUT, PATCH or DELETE), all optional. Reads never return request_header values: each one comes back as the literal __FETTLE_UNCHANGED__, and writing that value back in an update keeps the stored header unchanged (on create it is a 422). PING takes packet_count (1 to 20, default 4), optional. SSL takes warn_before_days (1 to 365, default 14) and port (1 to 65535, default 443), both optional. TCP takes either port (one port, 1 to 65535, expected_state \"open\" by default or \"closed\") or ports — a list of 1 to 20 distinct ports that must all be closed: ports requires expected_state \"closed\", exactly one region and interval_seconds of at least 300, and a check fails when any listed port accepts a connection (the monitor goes DOWN once confirmation_threshold failures confirm it). Passing both port and ports, or neither, is a 422. expected_state values are lowercase. DNS requires record_type (A, AAAA, CNAME, MX, TXT or NS; no default) and takes optional expected_value (at most 2048 characters): when set, one answer must equal it (case-insensitive, ignoring surrounding spaces and a trailing dot; exact for TXT); when absent, any answer passes. For MX the answers are the mail host names only, without priority (mail.example.com, not 10 mail.example.com). A and AAAA both look up every address of the host, IPv4 and IPv6 alike, and any one of them may match; write an IPv6 address in its shortest form. The ports rules above are checked against the monitor after the change, so changing only the interval or the regions of a ports monitor can be rejected too. A monitor that checks a list of ports cannot switch to a single port (422): create a new monitor instead. regions is a list of one or more distinct region codes (get_plan_usage lists them in limits.allowed_regions, for example eu-central; an unknown code is a 403) — SSL and DNS monitors must target exactly one region (422 otherwise). interval_seconds (integer, 30 to 86400) is the time between checks; timeout_seconds (integer, 1 to 120) is how long one check may take. confirmation_threshold (integer, 1 to 10; 3 when not set on create) is how many checks in a row must fail in every region before the monitor goes DOWN and an incident opens. notification_cooldown_seconds (integer, 60 to 86400; 1800 when not set on create) only holds back a duplicate first alert for the same incident within that window. Repeat reminders while the incident stays open and unacknowledged follow the plan's renotify_interval_seconds and renotify_max_count (see get_plan_usage; 0 means no reminders), not this value; it never holds back the recovery alert. Plan limits apply: minimum interval_seconds, how many monitors may use an interval below 60 seconds (only moving a monitor from 60 seconds or more to below 60 takes a slot), and max_regions per monitor. Breaking one is a 403 that names the limit. get_plan_usage shows the limits and current usage. Use pause_monitor and resume_monitor, not this tool, to stop or restart checks. channel_ids (array of channel uuids), when passed, replaces the whole binding; an empty list clears it, after which every verified, active channel is alerted; omit it to leave the binding unchanged; an id that is not an active channel of this organization is a 404; list_channels gives the ids. badge_enabled (boolean) turns the monitor's public status badge on or off; a monitor on a published status page has a badge even when it is false. tags, when passed, replaces the monitor's whole tag list (at most 10); pass an empty list to clear it. Tags are trimmed, lowercased and deduplicated on write, each at most 50 characters of lowercase letters, digits and : _ . / - , starting with a letter or digit. Call list_tags first to reuse the organization's existing names instead of inventing near-duplicates. Example: {\"monitor_id\": \"<id from list_monitors>\", \"interval_seconds\": 600}",
       "scope": "write",
       "input_schema": {
         "type": "object",
@@ -584,7 +725,7 @@
     {
       "name": "bulk_update_monitor_tags",
       "title": "Retag several monitors at once",
-      "description": "Add and/or remove tags across up to 300 monitors in one call — the way to retag a whole fleet without one request per monitor. monitor_ids (array of 1 to 300 distinct monitor uuids, required; a repeated id is a 422) names the monitors; every one must belong to the organization: an unknown id rejects the whole request with a 404 naming every id it could not find. add and remove (arrays of up to 10 tags each, optional) apply as (current tags | add) - remove per monitor. A tag listed in both add and remove is rejected with a 422, not silently resolved — the two lists must be disjoint. At least one of add or remove is required. A monitor that would end up with more than 10 tags rejects the whole request (422); nothing is changed when any check fails. Returns monitors_updated. Tags are trimmed, lowercased and deduplicated on write, each at most 50 characters of lowercase letters, digits and : _ . / - , starting with a letter or digit. Call list_tags first to reuse the organization's existing names instead of inventing near-duplicates. Requires a key with the write scope.",
+      "description": "Add and/or remove tags across up to 300 monitors in one call — the way to retag a whole fleet without one request per monitor. monitor_ids (array of 1 to 300 distinct monitor uuids, required; a repeated id is a 422) names the monitors; every one must belong to the organization: an unknown id rejects the whole request with a 404 naming every id it could not find. add and remove (arrays of up to 10 tags each, optional) apply as (current tags | add) - remove per monitor. A tag listed in both add and remove is rejected with a 422, not silently resolved — the two lists must be disjoint. At least one of add or remove is required. A monitor that would end up with more than 10 tags rejects the whole request (422); nothing is changed when any check fails. Returns monitors_updated. Tags are trimmed, lowercased and deduplicated on write, each at most 50 characters of lowercase letters, digits and : _ . / - , starting with a letter or digit. Call list_tags first to reuse the organization's existing names instead of inventing near-duplicates. Requires a key with the write scope. Example: {\"monitor_ids\": [\"<id from list_monitors>\", \"<id from list_monitors>\"], \"add\": [\"env:prod\"], \"remove\": [\"env:staging\"]}",
       "scope": "write",
       "input_schema": {
         "type": "object",
@@ -785,7 +926,7 @@
     {
       "name": "list_heartbeats",
       "title": "List heartbeat monitors",
-      "description": "List heartbeat (cron / dead-man's-switch) monitors: each with id, name, state (PENDING, UP, DOWN or PAUSED; a new heartbeat is PENDING until a successful ping makes it UP or a /fail ping makes it DOWN), period_seconds, grace_seconds, ping_url, last_ping_at, last_success_at, overdue_at, tags and channel_ids. The result is a page: items plus total, page, size and pages. All arguments are optional. page (integer, 1 or more, default 1) and size (integer, 1 to 100, default 25) select the page. q (string, up to 255 characters) matches a case-insensitive substring of the name. sort is status (the default: DOWN, then PENDING, then UP, then PAUSED, newest first within each), name (alphabetical) or created_at (newest first). tag takes a JSON array of up to 10 tags, lowercased before matching, and keeps heartbeats carrying every tag given (AND, not OR).",
+      "description": "List heartbeat (cron / dead-man's-switch) monitors: each with id, name, state (PENDING, UP, DOWN or PAUSED; a new heartbeat is PENDING until a successful ping makes it UP or a /fail ping makes it DOWN), period_seconds, grace_seconds, ping_url, last_ping_at, last_success_at, overdue_at, tags and channel_ids. The result is a page: items plus total, page, size and pages. All arguments are optional. page (integer, 1 or more, default 1) and size (integer, 1 to 100, default 25) select the page. q (string, up to 255 characters) matches a case-insensitive substring of the name. sort is status (the default: DOWN, then PENDING, then UP, then PAUSED, newest first within each), name (alphabetical) or created_at (newest first). tag takes a JSON array of up to 10 tags, lowercased before matching; with tag_match all (the default) a heartbeat must carry every tag given, with tag_match any at least one.",
       "scope": "read",
       "input_schema": {
         "type": "object",
@@ -818,6 +959,13 @@
             },
             "maxItems": 10,
             "type": "array"
+          },
+          "tag_match": {
+            "enum": [
+              "all",
+              "any"
+            ],
+            "type": "string"
           }
         },
         "required": [],
@@ -832,7 +980,8 @@
           "size",
           "q",
           "sort",
-          "tag"
+          "tag",
+          "tag_match"
         ],
         "body": false,
         "fixed_query": {}
@@ -841,7 +990,7 @@
     {
       "name": "create_heartbeat",
       "title": "Create a heartbeat monitor",
-      "description": "Create a heartbeat monitor and get back ping_url, the URL a scheduled job should call (GET or POST) each time it succeeds. Requires a key with the write scope; the plan caps how many heartbeats an organization may have (403 past it, see get_plan_usage). Required: name (1 to 255 characters), period_seconds and grace_seconds. It is never reported late before its first successful ping (a /fail call still marks it DOWN). After that, an alert fires period_seconds + grace_seconds after the last ping (a success ping, or a call to ping_url + \"/start\" when the job begins, restarts that clock; ping_url + \"/fail\" marks it DOWN at once). To ping every N seconds and be alerted after T seconds of silence, set period_seconds = N and grace_seconds = T - N (T at least N; period_seconds 60 to 2592000, grace_seconds 0 to 2592000, and grace may exceed the period). notification_cooldown_seconds (integer, 60 to 86400, optional; 1800 when omitted) only holds back a duplicate first alert for the same incident within that window. Repeat reminders while the incident stays open and unacknowledged follow the plan's renotify_interval_seconds and renotify_max_count (see get_plan_usage; 0 means no reminders), not this value; the recovery alert is never held back by it. channel_ids (array of channel uuids, optional) binds notification channels; omit it or pass an empty list to alert every verified, active channel; an id that is not an active channel of this organization is a 404. tags is an optional list of flat labels (for example env:prod, service:api) used to group and filter heartbeats, at most 10 per heartbeat. Tags are trimmed, lowercased and deduplicated on write, each at most 50 characters of lowercase letters, digits and : _ . / - , starting with a letter or digit. Call list_tags first to reuse the organization's existing names instead of inventing near-duplicates. Other errors: 422 for an invalid argument, naming it. Example: {\"name\": \"nightly backup\", \"period_seconds\": 86400, \"grace_seconds\": 3600}",
+      "description": "Create a heartbeat monitor and get back ping_url, the URL a scheduled job should call (GET or POST) each time it succeeds. Requires a key with the write scope; the plan caps how many heartbeats an organization may have (403 past it, see get_plan_usage). Required: name (1 to 255 characters), period_seconds and grace_seconds. It is never reported late before its first successful ping (a /fail call still marks it DOWN). After that, an alert fires period_seconds + grace_seconds after the last ping (a success ping, or a call to ping_url + \"/start\" when the job begins, restarts that clock; ping_url + \"/fail\" marks it DOWN at once). To ping every N seconds and be alerted after T seconds of silence, set period_seconds = N and grace_seconds = T - N (T at least N; period_seconds 60 to 2592000, grace_seconds 0 to 2592000, and grace may exceed the period). notification_cooldown_seconds (integer, 60 to 86400, optional; 1800 when omitted) only holds back a duplicate first alert for the same incident within that window. Repeat reminders while the incident stays open and unacknowledged follow the plan's renotify_interval_seconds and renotify_max_count (see get_plan_usage; 0 means no reminders), not this value; the recovery alert is never held back by it. channel_ids (array of channel uuids, optional) binds notification channels; omit it or pass an empty list to alert every verified, active channel; an id that is not an active channel of this organization is a 404; list_channels gives the ids. tags is an optional list of flat labels (for example env:prod, service:api) used to group and filter heartbeats, at most 10 per heartbeat. Tags are trimmed, lowercased and deduplicated on write, each at most 50 characters of lowercase letters, digits and : _ . / - , starting with a letter or digit. Call list_tags first to reuse the organization's existing names instead of inventing near-duplicates. Other errors: 422 for an invalid argument, naming it. Example: {\"name\": \"nightly backup\", \"period_seconds\": 86400, \"grace_seconds\": 3600}",
       "scope": "write",
       "input_schema": {
         "type": "object",
@@ -897,9 +1046,485 @@
       }
     },
     {
-      "name": "list_status_pages",
-      "title": "List status pages",
-      "description": "List the organization's status pages: each with id, slug, name, description, is_published (whether it is publicly visible now), history_days, created_at, groups (each with name, position and its components) and ungrouped_components (components outside any group). The result is a page: items plus total, page, size and pages. All arguments are optional. page (integer, 1 or more, default 1) and size (integer, 1 to 100, default 25) select the page. sort is created_at (the default, newest first) or name (alphabetical).",
+      "name": "get_heartbeat",
+      "title": "Get a heartbeat monitor",
+      "description": "Return one heartbeat: name, state, period_seconds, grace_seconds, ping_url, last_ping_at, last_success_at, last_start_at, last_duration_ms, overdue_at (when it will be reported late), notification_cooldown_seconds, is_active, channel_ids and tags. heartbeat_id (uuid, required) is the heartbeat's id from list_heartbeats; an id that is not a heartbeat of this organization (or a deleted one) is a 404.",
+      "scope": "read",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "heartbeat_id": {
+            "format": "uuid",
+            "type": "string"
+          }
+        },
+        "required": [
+          "heartbeat_id"
+        ],
+        "additionalProperties": false
+      },
+      "operation": {
+        "method": "GET",
+        "path": "/v1/heartbeats/{heartbeat_id}",
+        "path_params": [
+          "heartbeat_id"
+        ],
+        "query": [],
+        "body": false,
+        "fixed_query": {}
+      }
+    },
+    {
+      "name": "update_heartbeat",
+      "title": "Update a heartbeat monitor",
+      "description": "Change a heartbeat; only the fields you pass change (omit a field to keep it). Requires a key with the write scope. heartbeat_id (uuid, required) is the heartbeat's id from list_heartbeats; an id that is not a heartbeat of this organization (or a deleted one) is a 404. name (1 to 255 characters). period_seconds (60 to 2592000) and grace_seconds (0 to 2592000): an alert fires period_seconds + grace_seconds after the last ping. A new period or grace applies from the next ping; the current deadline (overdue_at) is not recomputed. notification_cooldown_seconds (60 to 86400) only holds back a duplicate first alert. channel_ids (array of channel uuids) replaces the binding; [] clears it, which alerts every verified, active channel; an id that is not an active channel of this organization is a 404 (list_channels gives the ids). tags replaces the whole tag list, at most 10; [] clears it. Tags are trimmed, lowercased and deduplicated on write, each at most 50 characters of lowercase letters, digits and : _ . / - , starting with a letter or digit. Call list_tags first to reuse the organization's existing names instead of inventing near-duplicates. Other errors: 422 for an invalid argument, naming it. Returns the heartbeat. Example: {\"heartbeat_id\": \"<id from list_heartbeats>\", \"grace_seconds\": 7200}",
+      "scope": "write",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "heartbeat_id": {
+            "format": "uuid",
+            "type": "string"
+          },
+          "name": {
+            "maxLength": 255,
+            "minLength": 1,
+            "type": "string"
+          },
+          "period_seconds": {
+            "maximum": 2592000,
+            "minimum": 60,
+            "type": "integer"
+          },
+          "grace_seconds": {
+            "maximum": 2592000,
+            "minimum": 0,
+            "type": "integer"
+          },
+          "notification_cooldown_seconds": {
+            "maximum": 86400,
+            "minimum": 60,
+            "type": "integer"
+          },
+          "channel_ids": {
+            "items": {
+              "format": "uuid",
+              "type": "string"
+            },
+            "type": "array"
+          },
+          "tags": {
+            "items": {
+              "type": "string"
+            },
+            "type": "array"
+          }
+        },
+        "required": [
+          "heartbeat_id"
+        ],
+        "additionalProperties": false
+      },
+      "operation": {
+        "method": "PATCH",
+        "path": "/v1/heartbeats/{heartbeat_id}",
+        "path_params": [
+          "heartbeat_id"
+        ],
+        "query": [],
+        "body": true,
+        "fixed_query": {}
+      }
+    },
+    {
+      "name": "pause_heartbeat",
+      "title": "Pause a heartbeat monitor",
+      "description": "Pause a heartbeat: it is no longer reported late, pings to its ping_url are accepted but ignored, and its open incident closes without an alert. Use it when the job is stopped on purpose, for example a runner taken out of service. Requires a key with the write scope. heartbeat_id (uuid, required) is the heartbeat's id from list_heartbeats; an id that is not a heartbeat of this organization (or a deleted one) is a 404. Pausing a paused heartbeat succeeds without change. Returns the heartbeat.",
+      "scope": "write",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "heartbeat_id": {
+            "format": "uuid",
+            "type": "string"
+          }
+        },
+        "required": [
+          "heartbeat_id"
+        ],
+        "additionalProperties": false
+      },
+      "operation": {
+        "method": "POST",
+        "path": "/v1/heartbeats/{heartbeat_id}/pause",
+        "path_params": [
+          "heartbeat_id"
+        ],
+        "query": [],
+        "body": false,
+        "fixed_query": {}
+      }
+    },
+    {
+      "name": "resume_heartbeat",
+      "title": "Resume a heartbeat monitor",
+      "description": "Resume a paused heartbeat. It goes back to PENDING with no deadline, so it is not reported late until its next successful ping restarts the clock. Resuming one that is not paused resets it to PENDING the same way. Requires a key with the write scope. heartbeat_id (uuid, required) is the heartbeat's id from list_heartbeats; an id that is not a heartbeat of this organization (or a deleted one) is a 404. Returns the heartbeat.",
+      "scope": "write",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "heartbeat_id": {
+            "format": "uuid",
+            "type": "string"
+          }
+        },
+        "required": [
+          "heartbeat_id"
+        ],
+        "additionalProperties": false
+      },
+      "operation": {
+        "method": "POST",
+        "path": "/v1/heartbeats/{heartbeat_id}/resume",
+        "path_params": [
+          "heartbeat_id"
+        ],
+        "query": [],
+        "body": false,
+        "fixed_query": {}
+      }
+    },
+    {
+      "name": "delete_heartbeat",
+      "title": "Delete a heartbeat monitor",
+      "description": "Delete a heartbeat for good; its ping_url stops working (404). This cannot be undone — to stop alerts for a while, use pause_heartbeat instead. Requires a key with the write scope. heartbeat_id (uuid, required) is the heartbeat's id from list_heartbeats; an id that is not a heartbeat of this organization (or a deleted one) is a 404.",
+      "scope": "write",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "heartbeat_id": {
+            "format": "uuid",
+            "type": "string"
+          }
+        },
+        "required": [
+          "heartbeat_id"
+        ],
+        "additionalProperties": false
+      },
+      "operation": {
+        "method": "DELETE",
+        "path": "/v1/heartbeats/{heartbeat_id}",
+        "path_params": [
+          "heartbeat_id"
+        ],
+        "query": [],
+        "body": false,
+        "fixed_query": {}
+      }
+    },
+    {
+      "name": "list_maintenance_windows",
+      "title": "List maintenance windows",
+      "description": "List the organization's maintenance windows: each with id, name, enabled, scope (ORG or MONITOR), dtstart, duration_minutes, rrule, timezone, monitor_ids, created_at and next_occurrences (always empty here; get_maintenance_window fills it). The result is a page: items plus total, page, size and pages. All arguments are optional. page (integer, 1 or more, default 1) and size (integer, 1 to 100, default 25) select the page. q (string, up to 255 characters) matches a case-insensitive substring of the name. sort is created_at (the default, newest first) or name (alphabetical).",
+      "scope": "read",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "page": {
+            "minimum": 1,
+            "type": "integer"
+          },
+          "size": {
+            "maximum": 100,
+            "minimum": 1,
+            "type": "integer"
+          },
+          "q": {
+            "maxLength": 255,
+            "type": "string"
+          },
+          "sort": {
+            "enum": [
+              "name",
+              "created_at"
+            ],
+            "type": "string"
+          }
+        },
+        "required": [],
+        "additionalProperties": false
+      },
+      "operation": {
+        "method": "GET",
+        "path": "/v1/maintenance-windows",
+        "path_params": [],
+        "query": [
+          "page",
+          "size",
+          "q",
+          "sort"
+        ],
+        "body": false,
+        "fixed_query": {}
+      }
+    },
+    {
+      "name": "list_active_maintenance",
+      "title": "List maintenance windows in effect now",
+      "description": "List the enabled maintenance windows that are in effect right now, as a plain array (not a page) of the list_maintenance_windows shape. Use it to tell whether alerts are silenced at the moment; an ORG-scope window covers every monitor. No arguments.",
+      "scope": "read",
+      "input_schema": {
+        "type": "object",
+        "properties": {},
+        "required": [],
+        "additionalProperties": false
+      },
+      "operation": {
+        "method": "GET",
+        "path": "/v1/maintenance-windows/active",
+        "path_params": [],
+        "query": [],
+        "body": false,
+        "fixed_query": {}
+      }
+    },
+    {
+      "name": "get_maintenance_window",
+      "title": "Get a maintenance window",
+      "description": "Return one maintenance window, in the list_maintenance_windows shape, with next_occurrences filled in (the next three, each with start and end). window_id (uuid, required) is the window's id from list_maintenance_windows; an id that is not a window of this organization is a 404.",
+      "scope": "read",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "window_id": {
+            "format": "uuid",
+            "type": "string"
+          }
+        },
+        "required": [
+          "window_id"
+        ],
+        "additionalProperties": false
+      },
+      "operation": {
+        "method": "GET",
+        "path": "/v1/maintenance-windows/{window_id}",
+        "path_params": [
+          "window_id"
+        ],
+        "query": [],
+        "body": false,
+        "fixed_query": {}
+      }
+    },
+    {
+      "name": "create_maintenance_window",
+      "title": "Create a maintenance window",
+      "description": "Create a maintenance window that silences alerts for a time. Requires a key with the write scope. Required: name (1 to 255 characters), scope, dtstart and duration_minutes. enabled (boolean, default true): false stores it without effect. During a window the covered monitors keep being checked, but no incident opens and no alert goes out; use a window rather than pausing monitors around a deploy or reboot. scope is ORG (every monitor of the organization, monitor_ids ignored) or MONITOR (only monitor_ids, a list of monitor uuids from list_monitors, at least one; an id that is not a monitor of this organization is a 404). dtstart is the first start as an ISO 8601 date-time in local wall-clock time of timezone, for example 2026-10-14T22:00:00; a UTC offset or Z is a 422. duration_minutes (integer, 1 to 40320) is how long each occurrence lasts. rrule (at most 1024 characters) repeats it, as a single iCal RRULE without the RRULE: prefix, for example FREQ=WEEKLY;BYDAY=SU;BYHOUR=3; hourly, minutely and secondly frequencies are refused. timezone (IANA name such as Europe/Berlin, at most 64 characters) is the zone the schedule repeats in, so a weekly 03:00 stays 03:00 across daylight-saving changes. Call preview_maintenance_window first to check a recurring schedule. Omit rrule for a one-time window. When timezone is omitted the organization's timezone is used. The plan caps how many windows an organization may have (403 past it or when the plan has none; see max_maintenance_windows in get_plan_usage). Other errors: 422 for an invalid argument or schedule, naming it. Returns the window. Example: {\"name\": \"Deploy\", \"scope\": \"MONITOR\", \"monitor_ids\": [\"<id from list_monitors>\"], \"dtstart\": \"2026-10-14T22:00:00\", \"duration_minutes\": 30}",
+      "scope": "write",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "maxLength": 255,
+            "minLength": 1,
+            "type": "string"
+          },
+          "enabled": {
+            "type": "boolean"
+          },
+          "scope": {
+            "enum": [
+              "MONITOR",
+              "ORG"
+            ],
+            "type": "string"
+          },
+          "dtstart": {
+            "format": "date-time",
+            "type": "string"
+          },
+          "duration_minutes": {
+            "exclusiveMinimum": 0,
+            "maximum": 40320,
+            "type": "integer"
+          },
+          "rrule": {
+            "maxLength": 1024,
+            "type": "string"
+          },
+          "timezone": {
+            "maxLength": 64,
+            "type": "string"
+          },
+          "monitor_ids": {
+            "items": {
+              "format": "uuid",
+              "type": "string"
+            },
+            "type": "array"
+          }
+        },
+        "required": [
+          "name",
+          "scope",
+          "dtstart",
+          "duration_minutes"
+        ],
+        "additionalProperties": false
+      },
+      "operation": {
+        "method": "POST",
+        "path": "/v1/maintenance-windows",
+        "path_params": [],
+        "query": [],
+        "body": true,
+        "fixed_query": {}
+      }
+    },
+    {
+      "name": "update_maintenance_window",
+      "title": "Update a maintenance window",
+      "description": "Change a maintenance window; only the fields you pass change (omit a field to keep it; a recurring window cannot be turned into a one-time one — delete it and create a new one). monitor_ids replaces the list. Requires a key with the write scope. window_id (uuid, required) is the window's id from list_maintenance_windows; an id that is not a window of this organization is a 404. Fields: name, enabled, scope, dtstart, duration_minutes, rrule, timezone, monitor_ids. During a window the covered monitors keep being checked, but no incident opens and no alert goes out; use a window rather than pausing monitors around a deploy or reboot. scope is ORG (every monitor of the organization, monitor_ids ignored) or MONITOR (only monitor_ids, a list of monitor uuids from list_monitors, at least one; an id that is not a monitor of this organization is a 404). dtstart is the first start as an ISO 8601 date-time in local wall-clock time of timezone, for example 2026-10-14T22:00:00; a UTC offset or Z is a 422. duration_minutes (integer, 1 to 40320) is how long each occurrence lasts. rrule (at most 1024 characters) repeats it, as a single iCal RRULE without the RRULE: prefix, for example FREQ=WEEKLY;BYDAY=SU;BYHOUR=3; hourly, minutely and secondly frequencies are refused. timezone (IANA name such as Europe/Berlin, at most 64 characters) is the zone the schedule repeats in, so a weekly 03:00 stays 03:00 across daylight-saving changes. Call preview_maintenance_window first to check a recurring schedule. Other errors: 422 for an invalid argument, 406 for a resulting schedule that is invalid (for example a bad rrule), each with the reason. Returns the window. Example: {\"window_id\": \"<id from list_maintenance_windows>\", \"enabled\": false}",
+      "scope": "write",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "window_id": {
+            "format": "uuid",
+            "type": "string"
+          },
+          "name": {
+            "maxLength": 255,
+            "minLength": 1,
+            "type": "string"
+          },
+          "enabled": {
+            "type": "boolean"
+          },
+          "scope": {
+            "enum": [
+              "MONITOR",
+              "ORG"
+            ],
+            "type": "string"
+          },
+          "dtstart": {
+            "format": "date-time",
+            "type": "string"
+          },
+          "duration_minutes": {
+            "exclusiveMinimum": 0,
+            "maximum": 40320,
+            "type": "integer"
+          },
+          "rrule": {
+            "maxLength": 1024,
+            "type": "string"
+          },
+          "timezone": {
+            "maxLength": 64,
+            "type": "string"
+          },
+          "monitor_ids": {
+            "items": {
+              "format": "uuid",
+              "type": "string"
+            },
+            "type": "array"
+          }
+        },
+        "required": [
+          "window_id"
+        ],
+        "additionalProperties": false
+      },
+      "operation": {
+        "method": "PATCH",
+        "path": "/v1/maintenance-windows/{window_id}",
+        "path_params": [
+          "window_id"
+        ],
+        "query": [],
+        "body": true,
+        "fixed_query": {}
+      }
+    },
+    {
+      "name": "delete_maintenance_window",
+      "title": "Delete a maintenance window",
+      "description": "Delete a maintenance window; alerts for its monitors resume at once. This cannot be undone — to suspend it, use update_maintenance_window with enabled false. Requires a key with the write scope. window_id (uuid, required) is the window's id from list_maintenance_windows; an id that is not a window of this organization is a 404.",
+      "scope": "write",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "window_id": {
+            "format": "uuid",
+            "type": "string"
+          }
+        },
+        "required": [
+          "window_id"
+        ],
+        "additionalProperties": false
+      },
+      "operation": {
+        "method": "DELETE",
+        "path": "/v1/maintenance-windows/{window_id}",
+        "path_params": [
+          "window_id"
+        ],
+        "query": [],
+        "body": false,
+        "fixed_query": {}
+      }
+    },
+    {
+      "name": "preview_maintenance_window",
+      "title": "Preview a maintenance schedule",
+      "description": "Return the next three occurrences (start and end) a schedule would produce, without saving anything, as an array. Use it before create_maintenance_window for a recurring window. Requires a key with the write scope. Required: dtstart (ISO 8601 date-time in local wall-clock time of timezone; a UTC offset or Z is a 422) and duration_minutes (integer, 1 to 40320). rrule (single iCal RRULE without the RRULE: prefix, at most 1024 characters; hourly, minutely and secondly frequencies are refused) and timezone (IANA name, at most 64 characters; the organization's timezone when omitted). An invalid schedule is a 422 with the reason. Example: {\"dtstart\": \"2026-10-18T03:00:00\", \"duration_minutes\": 60, \"rrule\": \"FREQ=WEEKLY;BYDAY=SU\", \"timezone\": \"Europe/Berlin\"}",
+      "scope": "write",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "dtstart": {
+            "format": "date-time",
+            "type": "string"
+          },
+          "duration_minutes": {
+            "exclusiveMinimum": 0,
+            "maximum": 40320,
+            "type": "integer"
+          },
+          "rrule": {
+            "maxLength": 1024,
+            "type": "string"
+          },
+          "timezone": {
+            "maxLength": 64,
+            "type": "string"
+          }
+        },
+        "required": [
+          "dtstart",
+          "duration_minutes"
+        ],
+        "additionalProperties": false
+      },
+      "operation": {
+        "method": "POST",
+        "path": "/v1/maintenance-windows/preview",
+        "path_params": [],
+        "query": [],
+        "body": true,
+        "fixed_query": {}
+      }
+    },
+    {
+      "name": "list_status_pages",
+      "title": "List status pages",
+      "description": "List the organization's status pages: each with id, slug, name, description, is_published (whether it is publicly visible now), history_days, created_at, groups (each with name, position and its components) and ungrouped_components (components outside any group). The result is a page: items plus total, page, size and pages. All arguments are optional. page (integer, 1 or more, default 1) and size (integer, 1 to 100, default 25) select the page. sort is created_at (the default, newest first) or name (alphabetical).",
       "scope": "read",
       "input_schema": {
         "type": "object",
@@ -936,6 +1561,570 @@
         "body": false,
         "fixed_query": {}
       }
+    },
+    {
+      "name": "list_check_results",
+      "title": "List a monitor's check results",
+      "description": "List individual check results of a monitor, newest first: each with id, region, checked_at, status (UP, DEGRADED, DOWN or ERROR), response_time_ms, status_code, error_message, details and maintenance_window_id (set when the check ran inside a window). Use it to find out why a monitor is DOWN: which regions fail, with what code or error. The result is a page: items plus total, page, size and pages; total counts only the results that match the filters. monitor_id (uuid, required) is the monitor's id from list_monitors; an id that is not a monitor of this organization (or a deleted one) is a 404. All other arguments are optional. page (integer, 1 or more, default 1) and size (integer, 1 to 100, default 25) pick the page. region (string, up to 64 characters) keeps only results of that exact region code. status (UP, DEGRADED, DOWN or ERROR) keeps only that status. period_days (integer, 1 to 365) keeps only results of the last that many days; without it every stored result is eligible.",
+      "scope": "read",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "monitor_id": {
+            "format": "uuid",
+            "type": "string"
+          },
+          "page": {
+            "minimum": 1,
+            "type": "integer"
+          },
+          "size": {
+            "maximum": 100,
+            "minimum": 1,
+            "type": "integer"
+          },
+          "region": {
+            "maxLength": 64,
+            "type": "string"
+          },
+          "status": {
+            "enum": [
+              "UP",
+              "DEGRADED",
+              "DOWN",
+              "ERROR"
+            ],
+            "type": "string"
+          },
+          "period_days": {
+            "maximum": 365,
+            "minimum": 1,
+            "type": "integer"
+          }
+        },
+        "required": [
+          "monitor_id"
+        ],
+        "additionalProperties": false
+      },
+      "operation": {
+        "method": "GET",
+        "path": "/v1/monitors/{monitor_id}/check-results",
+        "path_params": [
+          "monitor_id"
+        ],
+        "query": [
+          "page",
+          "size",
+          "region",
+          "status",
+          "period_days"
+        ],
+        "body": false,
+        "fixed_query": {}
+      }
+    },
+    {
+      "name": "get_response_time_by_region",
+      "title": "Get a monitor's response time by region",
+      "description": "Return a monitor's average response time over time, one series per region: monitor_id, window, bucket_seconds and regions, each with region, display_name and points. Every region the monitor is configured for has a series. points are oldest first and cover the whole window, each with bucket_start, avg_response_time_ms (null when the bucket had no successful check) and sample_count. Use it to see where a monitor is slow and since when. monitor_id (uuid, required) is the monitor's id from list_monitors; an id that is not a monitor of this organization (or a deleted one) is a 404. window (optional) is 24h (the default; 24 hourly buckets), 7d (28 six-hourly buckets) or 30d (30 daily buckets); any other value is a 422.",
+      "scope": "read",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "monitor_id": {
+            "format": "uuid",
+            "type": "string"
+          },
+          "window": {
+            "enum": [
+              "24h",
+              "7d",
+              "30d"
+            ],
+            "type": "string"
+          }
+        },
+        "required": [
+          "monitor_id"
+        ],
+        "additionalProperties": false
+      },
+      "operation": {
+        "method": "GET",
+        "path": "/v1/monitors/{monitor_id}/response-time-by-region",
+        "path_params": [
+          "monitor_id"
+        ],
+        "query": [
+          "window"
+        ],
+        "body": false,
+        "fixed_query": {}
+      }
+    },
+    {
+      "name": "get_uptime_daily",
+      "title": "Get a monitor's daily uptime",
+      "description": "Return a monitor's uptime for each UTC day, as monitor_id and days: an array ordered oldest first and ending today, one entry per day with date, uptime_percentage, total_checks, up_checks, down_checks, degraded_checks and maintenance_checks. A degraded check counts as up, and a day with no checks (or only checks inside a maintenance window) has a null uptime_percentage, not 100. Use it to find the day an outage or degradation began; get_uptime_summary gives the 24h, 7d and 30d totals. monitor_id (uuid, required) is the monitor's id from list_monitors; an id that is not a monitor of this organization (or a deleted one) is a 404. days (optional integer, 1 to 365, default 30) is how many days to return; it is capped at the plan's history retention (limits.history_retention_days in get_plan_usage), so fewer days can come back than asked for.",
+      "scope": "read",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "monitor_id": {
+            "format": "uuid",
+            "type": "string"
+          },
+          "days": {
+            "maximum": 365,
+            "minimum": 1,
+            "type": "integer"
+          }
+        },
+        "required": [
+          "monitor_id"
+        ],
+        "additionalProperties": false
+      },
+      "operation": {
+        "method": "GET",
+        "path": "/v1/monitors/{monitor_id}/uptime-daily",
+        "path_params": [
+          "monitor_id"
+        ],
+        "query": [
+          "days"
+        ],
+        "body": false,
+        "fixed_query": {}
+      }
+    },
+    {
+      "name": "get_incident",
+      "title": "Get an incident",
+      "description": "Return one incident: id, monitor_id or heartbeat_id (exactly one is set), started_at, resolved_at, cause, cause_detail, last_notified_at, acknowledged_at, acknowledged_by, renotify_count and notification_logs (the alert attempts: each with id, channel_type, destination, event TRIGGERED, RESOLVED or SSL_EXPIRY, sent_at, status PENDING, SENT or FAILED, and error). destination is an email address, a Telegram chat id, or for a webhook only scheme://host/… (the full URL is never returned). incident_id (uuid, required) is the incident's id from list_incidents; an id that is not an incident of this organization is a 404.",
+      "scope": "read",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "incident_id": {
+            "format": "uuid",
+            "type": "string"
+          }
+        },
+        "required": [
+          "incident_id"
+        ],
+        "additionalProperties": false
+      },
+      "operation": {
+        "method": "GET",
+        "path": "/v1/incidents/{incident_id}",
+        "path_params": [
+          "incident_id"
+        ],
+        "query": [],
+        "body": false,
+        "fixed_query": {}
+      }
+    },
+    {
+      "name": "rename_tag",
+      "title": "Rename a tag everywhere",
+      "description": "Rename a tag on every monitor and heartbeat that carries it; an item that already has the new name keeps one copy. Requires a key with the write scope. Required: from (the existing tag) and to (the new name). Tags are trimmed, lowercased and deduplicated on write, each at most 50 characters of lowercase letters, digits and : _ . / - , starting with a letter or digit. Call list_tags first to reuse the organization's existing names instead of inventing near-duplicates. Returns from, to and how many monitors_updated and heartbeats_updated changed; a tag nothing carries is not an error, both counts are 0. Example: {\"from\": \"prod\", \"to\": \"env:prod\"}",
+      "scope": "write",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "from": {
+            "minLength": 1,
+            "type": "string"
+          },
+          "to": {
+            "minLength": 1,
+            "type": "string"
+          }
+        },
+        "required": [
+          "from",
+          "to"
+        ],
+        "additionalProperties": false
+      },
+      "operation": {
+        "method": "PATCH",
+        "path": "/v1/tags",
+        "path_params": [],
+        "query": [],
+        "body": true,
+        "fixed_query": {}
+      }
+    },
+    {
+      "name": "delete_tag",
+      "title": "Remove a tag everywhere",
+      "description": "Remove a tag from every monitor and heartbeat that carries it. This cannot be undone. Requires a key with the write scope. tag (string, required) is the tag to remove, as list_tags shows it. Returns from (the tag) and how many monitors_updated and heartbeats_updated changed; a tag nothing carries is not an error, both counts are 0.",
+      "scope": "write",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "tag": {
+            "minLength": 1,
+            "type": "string"
+          }
+        },
+        "required": [
+          "tag"
+        ],
+        "additionalProperties": false
+      },
+      "operation": {
+        "method": "DELETE",
+        "path": "/v1/tags",
+        "path_params": [],
+        "query": [
+          "tag"
+        ],
+        "body": false,
+        "fixed_query": {}
+      }
+    },
+    {
+      "name": "get_status_page",
+      "title": "Get a status page",
+      "description": "Return one status page in the list_status_pages shape, including its groups and ungrouped_components; each component has an id (the component_ids of a status page incident are these), a monitor_id, display_name and position. page_id (uuid, required) is the page's id from list_status_pages; an id that is not a status page of this organization is a 404.",
+      "scope": "read",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "page_id": {
+            "format": "uuid",
+            "type": "string"
+          }
+        },
+        "required": [
+          "page_id"
+        ],
+        "additionalProperties": false
+      },
+      "operation": {
+        "method": "GET",
+        "path": "/v1/status-pages/{page_id}",
+        "path_params": [
+          "page_id"
+        ],
+        "query": [],
+        "body": false,
+        "fixed_query": {}
+      }
+    },
+    {
+      "name": "list_status_page_incidents",
+      "title": "List a status page's incidents",
+      "description": "List the incidents on a status page, newest first, both those posted by a person and those Fettle opened itself: each with id, title, status, is_auto (opened by Fettle from a monitor rather than by a person), started_at, resolved_at, notified_at (when subscribers were first emailed; null if they were not), component_ids and updates (the timeline, oldest first, each with id, status, body, created_by and created_at). The result is a page: items plus total, page, size and pages. page_id (uuid, required) is the page's id from list_status_pages; an id that is not a status page of this organization is a 404. Optional: page (integer, 1 or more, default 1) and size (integer, 1 to 100, default 25).",
+      "scope": "read",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "page_id": {
+            "format": "uuid",
+            "type": "string"
+          },
+          "page": {
+            "minimum": 1,
+            "type": "integer"
+          },
+          "size": {
+            "maximum": 100,
+            "minimum": 1,
+            "type": "integer"
+          }
+        },
+        "required": [
+          "page_id"
+        ],
+        "additionalProperties": false
+      },
+      "operation": {
+        "method": "GET",
+        "path": "/v1/status-pages/{page_id}/incidents",
+        "path_params": [
+          "page_id"
+        ],
+        "query": [
+          "page",
+          "size"
+        ],
+        "body": false,
+        "fixed_query": {}
+      }
+    },
+    {
+      "name": "create_status_page_incident",
+      "title": "Post an incident on a status page",
+      "description": "Open an incident on a status page with a first message. This is public and emails the page's confirmed subscribers (details below): confirm the wording with the user before calling. Requires a key with the write scope. page_id (uuid, required) is the page's id from list_status_pages; an id that is not a status page of this organization is a 404. Required: title (1 to 255 characters) and body (the first message, 1 to 5000 characters). status is INVESTIGATING, IDENTIFIED, MONITORING or RESOLVED; RESOLVED closes the incident on the page. It defaults to INVESTIGATING. Any status but RESOLVED emails every confirmed subscriber of the page at once; RESOLVED records an already closed incident (a postmortem) and emails nobody. component_ids (optional array of component uuids from get_status_page) marks the affected components; an id that is not a component of this page is a 404. Returns the incident. Example: {\"page_id\": \"<id from list_status_pages>\", \"title\": \"API errors\", \"body\": \"We are investigating elevated error rates.\"}",
+      "scope": "write",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "page_id": {
+            "format": "uuid",
+            "type": "string"
+          },
+          "title": {
+            "maxLength": 255,
+            "minLength": 1,
+            "type": "string"
+          },
+          "status": {
+            "enum": [
+              "INVESTIGATING",
+              "IDENTIFIED",
+              "MONITORING",
+              "RESOLVED"
+            ],
+            "type": "string"
+          },
+          "body": {
+            "maxLength": 5000,
+            "minLength": 1,
+            "type": "string"
+          },
+          "component_ids": {
+            "items": {
+              "format": "uuid",
+              "type": "string"
+            },
+            "type": "array"
+          }
+        },
+        "required": [
+          "page_id",
+          "title",
+          "body"
+        ],
+        "additionalProperties": false
+      },
+      "operation": {
+        "method": "POST",
+        "path": "/v1/status-pages/{page_id}/incidents",
+        "path_params": [
+          "page_id"
+        ],
+        "query": [],
+        "body": true,
+        "fixed_query": {}
+      }
+    },
+    {
+      "name": "post_status_page_update",
+      "title": "Post an update to a status page incident",
+      "description": "Add a message to a status page incident and set its status; status RESOLVED closes it. This is public and emails the page's confirmed subscribers (details below): confirm the wording with the user before calling. Requires a key with the write scope. page_id (uuid, required) is the page's id from list_status_pages; an id that is not a status page of this organization is a 404. incident_id (uuid, required) is the incident's id from list_status_page_incidents (not from list_incidents); an unknown one is a 404. Required: status and body (1 to 5000 characters). status is INVESTIGATING, IDENTIFIED, MONITORING or RESOLVED; RESOLVED closes the incident on the page. Every confirmed subscriber is emailed the update, except that an incident subscribers were never told about stays silent when this update resolves it. A resolved incident only accepts further RESOLVED updates; any other status is a 409. Returns the incident. Example: {\"page_id\": \"<id from list_status_pages>\", \"incident_id\": \"<id from list_status_page_incidents>\", \"status\": \"RESOLVED\", \"body\": \"Fixed; error rates are back to normal.\"}",
+      "scope": "write",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "page_id": {
+            "format": "uuid",
+            "type": "string"
+          },
+          "incident_id": {
+            "format": "uuid",
+            "type": "string"
+          },
+          "status": {
+            "enum": [
+              "INVESTIGATING",
+              "IDENTIFIED",
+              "MONITORING",
+              "RESOLVED"
+            ],
+            "type": "string"
+          },
+          "body": {
+            "maxLength": 5000,
+            "minLength": 1,
+            "type": "string"
+          }
+        },
+        "required": [
+          "page_id",
+          "incident_id",
+          "status",
+          "body"
+        ],
+        "additionalProperties": false
+      },
+      "operation": {
+        "method": "POST",
+        "path": "/v1/status-pages/{page_id}/incidents/{incident_id}/updates",
+        "path_params": [
+          "page_id",
+          "incident_id"
+        ],
+        "query": [],
+        "body": true,
+        "fixed_query": {}
+      }
+    },
+    {
+      "name": "update_status_page_incident",
+      "title": "Rename a status page incident",
+      "description": "Change a status page incident's title; nothing is sent to subscribers. To change its status, use post_status_page_update. Requires a key with the write scope. page_id (uuid, required) is the page's id from list_status_pages; an id that is not a status page of this organization is a 404. incident_id (uuid, required) is from list_status_page_incidents. title (1 to 255 characters, required). Returns the incident. Example: {\"page_id\": \"<id from list_status_pages>\", \"incident_id\": \"<id from list_status_page_incidents>\", \"title\": \"API errors in eu-central\"}",
+      "scope": "write",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "page_id": {
+            "format": "uuid",
+            "type": "string"
+          },
+          "incident_id": {
+            "format": "uuid",
+            "type": "string"
+          },
+          "title": {
+            "maxLength": 255,
+            "minLength": 1,
+            "type": "string"
+          }
+        },
+        "required": [
+          "page_id",
+          "incident_id",
+          "title"
+        ],
+        "additionalProperties": false
+      },
+      "operation": {
+        "method": "PATCH",
+        "path": "/v1/status-pages/{page_id}/incidents/{incident_id}",
+        "path_params": [
+          "page_id",
+          "incident_id"
+        ],
+        "query": [],
+        "body": true,
+        "fixed_query": {}
+      }
+    },
+    {
+      "name": "delete_status_page_incident",
+      "title": "Delete a status page incident",
+      "description": "Remove an incident, with its timeline, from a status page; it stops showing at once and no tool restores it. Nothing is sent to subscribers. To close an incident instead, use post_status_page_update with RESOLVED. Requires a key with the write scope. page_id (uuid, required) is the page's id from list_status_pages; an id that is not a status page of this organization is a 404. incident_id (uuid, required) is from list_status_page_incidents.",
+      "scope": "write",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "page_id": {
+            "format": "uuid",
+            "type": "string"
+          },
+          "incident_id": {
+            "format": "uuid",
+            "type": "string"
+          }
+        },
+        "required": [
+          "page_id",
+          "incident_id"
+        ],
+        "additionalProperties": false
+      },
+      "operation": {
+        "method": "DELETE",
+        "path": "/v1/status-pages/{page_id}/incidents/{incident_id}",
+        "path_params": [
+          "page_id",
+          "incident_id"
+        ],
+        "query": [],
+        "body": false,
+        "fixed_query": {}
+      }
+    },
+    {
+      "name": "list_channels",
+      "title": "List notification channels",
+      "description": "List the organization's notification channels (up to 100): each with id, type (TELEGRAM, WEBHOOK, SLACK or DISCORD), label, is_verified, is_active and destination_hint (a chat id, a masked address, or for a webhook only its scheme and host). Use the ids in channel_ids of monitors and heartbeats. An inactive or unknown id cannot be bound (404), and only a verified, active channel is alerted: one that is not verified yet can be bound but receives nothing until it is. Email is not listed: every alert also goes to the account email of the user who created the monitor or heartbeat. Channels are added in the dashboard. No arguments.",
+      "scope": "read",
+      "input_schema": {
+        "type": "object",
+        "properties": {},
+        "required": [],
+        "additionalProperties": false
+      },
+      "operation": {
+        "method": "GET",
+        "path": "/v1/channels/directory",
+        "path_params": [],
+        "query": [],
+        "body": false,
+        "fixed_query": {}
+      }
+    },
+    {
+      "name": "list_regions",
+      "title": "List check regions",
+      "description": "List every check region of the platform as regions, each with code (what the regions argument takes), display_name, city, country_code, group and group_display_name. The plan decides which of them an organization may use: get_plan_usage shows limits.allowed_regions and how many one monitor may use (max_regions). No arguments.",
+      "scope": "read",
+      "input_schema": {
+        "type": "object",
+        "properties": {},
+        "required": [],
+        "additionalProperties": false
+      },
+      "operation": {
+        "method": "GET",
+        "path": "/v1/regions",
+        "path_params": [],
+        "query": [],
+        "body": false,
+        "fixed_query": {}
+      }
+    },
+    {
+      "name": "check_target",
+      "title": "Probe a target before creating a monitor",
+      "description": "Run one real check of a target from one region, chosen by Fettle, and report status (up, down, error or unknown), region, response_time_ms, status_code, error and failure_kind. unknown means no definite answer came back, not a failure. Use it before create_monitor to catch a typo or an unreachable host; a down result does not stop you from creating the monitor. Requires a key with the write scope and is rate limited per caller address (a 429 whose retry_after says how many seconds to wait). Required: type (HTTP, PING, SSL, TCP or DNS) and target, as in create_monitor. config (optional object) as in create_monitor; TCP and DNS need it. A target that is not public is a 422. Example: {\"type\": \"HTTP\", \"target\": \"https://api.example.com/health\"}",
+      "scope": "write",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "type": {
+            "enum": [
+              "HTTP",
+              "PING",
+              "SSL",
+              "TCP",
+              "DNS"
+            ],
+            "type": "string"
+          },
+          "target": {
+            "maxLength": 2048,
+            "minLength": 1,
+            "type": "string"
+          },
+          "config": {
+            "additionalProperties": true,
+            "type": "object"
+          }
+        },
+        "required": [
+          "type",
+          "target"
+        ],
+        "additionalProperties": false
+      },
+      "operation": {
+        "method": "POST",
+        "path": "/v1/monitors/precheck",
+        "path_params": [],
+        "query": [],
+        "body": true,
+        "fixed_query": {}
+      }
     }
   ]
 }