node-autotask 0.25.0 → 0.27.0

package/MCP_TOOL_CATALOG.json

@@ -1,7 +1,7 @@
 {
   "generatedBy": "scripts/build-tool-catalog.mjs",
-  "generatedAt": "2026-10-23T14:34:41.969Z",
-  "planHash": "479d7826acf548a8713c6891fe6cc5ea6ebb7c287896c932aac70834860a206f",
+  "generatedAt": "2026-10-26T03:09:40.649Z",
+  "planHash": "7318bd56d1c2e0dd4ba45a724bb37cf58f95f73fdd77c0fea6fce919430e17d0",
   "metaTools": [
     {
       "name": "autotask_catalog",
@@ -43,7 +43,7 @@
     {
       "name": "autotask_read",
       "title": "Read One Registry Operation (read mode)",
-      "description": "Route an effect=read registry operation by its exact name (never fuzzy, never a tool name): the 363 field/entity/UDF-info reads (getEntityInfo/getFieldInfo/getUdfInfo) have no dedicated tool and ride this one, and any read op is routable. For field discovery use operations.fieldCatalog (compact) instead of per-resource getFieldInfo (full dump). Read-only by construction — every op it can route is effect=read (zero mutating requests), and a write or delete op is refused BEFORE any request (cross-mode refusal; the message names the correct tool). Reads have no dry run (a read with dry_run: true is refused). Harness approval policy: approve every tool with readOnlyHint !== true (exactly 256 today); the 603 readOnlyHint: true tools — including this one — are safe ungated; the 57 destructiveHint: true tools (56 dedicated delete tools + autotask_delete) require confirm === the operation key. Migration: autotask_invoke is REPLACED by autotask_read/autotask_write/autotask_delete — update harness config. For query/count ops args[0] is a params object (filter/limit); call autotask_describe first for the exact arg shape and filter grammar. The argument set is CLOSED at the top level: an unknown argument is refused before any request, with a typed error naming the key and the valid keys.",
+      "description": "Route an effect=read registry operation by its exact name (never fuzzy, never a tool name): the 384 field/entity/UDF-info reads (getEntityInfo/getFieldInfo/getUdfInfo) have no dedicated tool and ride this one, and any read op is routable. For field discovery use operations.fieldCatalog (compact) instead of per-resource getFieldInfo (full dump). Read-only by construction — every op it can route is effect=read (zero mutating requests), and a write or delete op is refused BEFORE any request (cross-mode refusal; the message names the correct tool). Reads have no dry run (a read with dry_run: true is refused). Harness approval policy: approve every tool with readOnlyHint !== true (exactly 267 today); the 629 readOnlyHint: true tools — including this one — are safe ungated; the 57 destructiveHint: true tools (56 dedicated delete tools + autotask_delete) require confirm === the operation key. Migration: autotask_invoke is REPLACED by autotask_read/autotask_write/autotask_delete — update harness config. For query/count ops args[0] is a params object (filter/limit); call autotask_describe first for the exact arg shape and filter grammar. The argument set is CLOSED at the top level: an unknown argument is refused before any request, with a typed error naming the key and the valid keys.",
       "input": {
         "operation": {
           "type": "string",
@@ -63,7 +63,7 @@
     {
       "name": "autotask_write",
       "title": "Write One Registry Operation (write mode)",
-      "description": "Route an effect=write registry operation by its exact name (never fuzzy, never a tool name), dry-run-first: the first call always travels dry_run: true (the pinned DryRunResult envelope, simulated: true — the mutating request is never issued); pass dry_run: false to apply. A read or delete op is refused BEFORE any request (cross-mode refusal; the message names the correct tool). The 3 approval-gated writes (configuration_items.moveConfigurationItem, contacts.moveToCompany, resources.transferOwnership) additionally require confirm === the operation key, in BOTH dry-run and apply mode. Harness approval policy: this tool is one of the 256 tools that require approval (readOnlyHint !== true); the 603 readOnlyHint: true tools are safe ungated, and the 57 destructiveHint: true tools (56 dedicated delete tools + autotask_delete) require confirm === the operation key. Migration: autotask_invoke is REPLACED by autotask_read/autotask_write/autotask_delete — update harness config. For query/count ops args[0] is a params object (filter/limit); call autotask_describe first for the exact arg shape and filter grammar. The argument set is CLOSED at the top level: an unknown argument is refused before any request, with a typed error naming the key and the valid keys.",
+      "description": "Route an effect=write registry operation by its exact name (never fuzzy, never a tool name), dry-run-first: the first call always travels dry_run: true (the pinned DryRunResult envelope, simulated: true — the mutating request is never issued); pass dry_run: false to apply. A read or delete op is refused BEFORE any request (cross-mode refusal; the message names the correct tool). The 3 approval-gated writes (configuration_items.moveConfigurationItem, contacts.moveToCompany, resources.transferOwnership) additionally require confirm === the operation key, in BOTH dry-run and apply mode. Harness approval policy: this tool is one of the 267 tools that require approval (readOnlyHint !== true); the 629 readOnlyHint: true tools are safe ungated, and the 57 destructiveHint: true tools (56 dedicated delete tools + autotask_delete) require confirm === the operation key. Migration: autotask_invoke is REPLACED by autotask_read/autotask_write/autotask_delete — update harness config. For query/count ops args[0] is a params object (filter/limit); call autotask_describe first for the exact arg shape and filter grammar. The argument set is CLOSED at the top level: an unknown argument is refused before any request, with a typed error naming the key and the valid keys.",
       "input": {
         "operation": {
           "type": "string",
@@ -93,7 +93,7 @@
     {
       "name": "autotask_delete",
       "title": "Delete One Registry Operation (delete mode)",
-      "description": "Route an effect=destructive (delete) registry operation by its exact name (never fuzzy, never a tool name), dry-run-first: the first call always travels dry_run: true (the pinned DryRunResult envelope, simulated: true); pass dry_run: false to apply. confirm === the operation key is REQUIRED for every delete (all 56), in BOTH dry-run and apply mode — the deliberate act is the call, not the delete. A read or write op is refused BEFORE any request (cross-mode refusal; the message names the correct tool). Harness approval policy: this tool is one of the 57 destructiveHint: true tools that require approval + confirm; approve every tool with readOnlyHint !== true (exactly 256 today); the 603 readOnlyHint: true tools are safe ungated. Migration: autotask_invoke is REPLACED by autotask_read/autotask_write/autotask_delete — update harness config. The argument set is CLOSED at the top level: an unknown argument is refused before any request, with a typed error naming the key and the valid keys.",
+      "description": "Route an effect=destructive (delete) registry operation by its exact name (never fuzzy, never a tool name), dry-run-first: the first call always travels dry_run: true (the pinned DryRunResult envelope, simulated: true); pass dry_run: false to apply. confirm === the operation key is REQUIRED for every delete (all 56), in BOTH dry-run and apply mode — the deliberate act is the call, not the delete. A read or write op is refused BEFORE any request (cross-mode refusal; the message names the correct tool). Harness approval policy: this tool is one of the 57 destructiveHint: true tools that require approval + confirm; approve every tool with readOnlyHint !== true (exactly 267 today); the 629 readOnlyHint: true tools are safe ungated. Migration: autotask_invoke is REPLACED by autotask_read/autotask_write/autotask_delete — update harness config. The argument set is CLOSED at the top level: an unknown argument is refused before any request, with a typed error naming the key and the valid keys.",
       "input": {
         "operation": {
           "type": "string",
@@ -557,6 +557,78 @@
       "reachReason": null,
       "boundedAlternative": null
     },
+    {
+      "operation": "billing_item_approval_levels.count",
+      "core": false,
+      "tool": "autotask_billingItemApprovalLevel_count",
+      "purpose": "Count billing item approval level records matching a JSON filter.",
+      "preferredWhen": null,
+      "backingOperation": "billing_item_approval_levels.count",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "extended",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "billing_item_approval_levels.create",
+      "core": false,
+      "tool": "autotask_billingItemApprovalLevel_create",
+      "purpose": "Create a billing item approval level (the REST-only approval write for a time entry).",
+      "preferredWhen": "Prefer time_entries.approve: it performs this create AND the documented follow-up update, then verifies the read-back. Use this raw create only when the follow-up update must be controlled separately.",
+      "backingOperation": "billing_item_approval_levels.create",
+      "effect": "write",
+      "dryRunFirst": true,
+      "confirm": false,
+      "requiredArgs": [
+        "data"
+      ],
+      "tier": "extended",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "billing_item_approval_levels.get",
+      "core": false,
+      "tool": "autotask_billingItemApprovalLevel_get",
+      "purpose": "Get one billing item approval level by id.",
+      "preferredWhen": "Preferred when the numeric id is known (e.g. the id time_entries.approve returned); query by timeEntryID when it is not.",
+      "backingOperation": "billing_item_approval_levels.get",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [
+        "id"
+      ],
+      "tier": "extended",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "billing_item_approval_levels.query",
+      "core": false,
+      "tool": "autotask_billingItemApprovalLevel_query",
+      "purpose": "Query BillingItemApprovalLevel records with a JSON filter.",
+      "preferredWhen": "Default for filtered reads (the bounded query op). queryAll is the unbounded raw walk — only when you need the ENTIRE set and accept a large payload; default to the bounded query op. Prefer an includeFields subset over the full model (field names via operations.fieldCatalog). latest: N is the latest-N rows (id-descending) when the newest rows are the goal (the vendor has no sort — count-anchored, docs/API.md §4). Prefer a fieldsPreset for common narrow reads (v1: \"billing_join\" on billing_items.query) over a hand-listed includeFields; noteChars: N caps the untrusted-class free-text fields of the resource (notes/descriptions/UDF prose) to N chars each with the explicit … [+N chars truncated] marker (opt-in; the raw result when absent).",
+      "backingOperation": "billing_item_approval_levels.query",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "extended",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
     {
       "operation": "billing_items.count",
       "core": false,
@@ -3231,6 +3303,148 @@
       "reachReason": null,
       "boundedAlternative": null
     },
+    {
+      "operation": "currencies.count",
+      "core": false,
+      "tool": "autotask_currency_count",
+      "purpose": "Count currency records matching a JSON filter.",
+      "preferredWhen": null,
+      "backingOperation": "currencies.count",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "currencies.get",
+      "core": false,
+      "tool": "autotask_currency_get",
+      "purpose": "Get one Currency by id.",
+      "preferredWhen": "Preferred when the numeric id is already known; currencies.resolve is for a field value.",
+      "backingOperation": "currencies.get",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [
+        "id"
+      ],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "currencies.getEntityInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the Currency capability metadata (canCreate/canUpdate/hasUserDefinedFields/...).",
+      "preferredWhen": null,
+      "backingOperation": "currencies.getEntityInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "currencies.getFieldInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the Currency field catalog (types, picklists, required, maxLength) — the full raw field dump (the largest read of the info trio; compact discovery: operations.fieldCatalog).",
+      "preferredWhen": null,
+      "backingOperation": "currencies.getFieldInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "currencies.getUdfInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the Currency user-defined-field catalog.",
+      "preferredWhen": null,
+      "backingOperation": "currencies.getUdfInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "currencies.query",
+      "core": false,
+      "tool": "autotask_currency_query",
+      "purpose": "Query Currency records with a JSON filter.",
+      "preferredWhen": "Default for filtered reads (the bounded query op). queryAll is the unbounded raw walk — only when you need the ENTIRE set and accept a large payload; default to the bounded query op. Prefer an includeFields subset over the full model (field names via operations.fieldCatalog). latest: N is the latest-N rows (id-descending) when the newest rows are the goal (the vendor has no sort — count-anchored, docs/API.md §4). Prefer a fieldsPreset for common narrow reads (v1: \"billing_join\" on billing_items.query) over a hand-listed includeFields; noteChars: N caps the untrusted-class free-text fields of the resource (notes/descriptions/UDF prose) to N chars each with the explicit … [+N chars truncated] marker (opt-in; the raw result when absent).",
+      "backingOperation": "currencies.query",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "currencies.resolve",
+      "core": false,
+      "tool": "autotask_currency_resolve",
+      "purpose": "Resolve a currency from a numeric id (the direct fetch, tried first) or an exact value of its primary text field(s) (name — exact match only). Returns the Currency record with the numeric id for get/update/delete. Other identifier forms (e.g. an email address) are NOT tried by resolve — use the resource's dedicated lookup op where one exists (see autotask_catalog).",
+      "preferredWhen": null,
+      "backingOperation": "currencies.resolve",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [
+        "identifier"
+      ],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "currencies.search",
+      "core": false,
+      "tool": "autotask_currency_search",
+      "purpose": "Search currency records by text (contains on the searchable fields).",
+      "preferredWhen": null,
+      "backingOperation": "currencies.search",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [
+        "query"
+      ],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
     {
       "operation": "departments.count",
       "core": false,
@@ -4805,6 +5019,110 @@
       "reachReason": null,
       "boundedAlternative": null
     },
+    {
+      "operation": "invoice_templates.count",
+      "core": false,
+      "tool": "autotask_invoiceTemplate_count",
+      "purpose": "Count invoice template records matching a JSON filter.",
+      "preferredWhen": null,
+      "backingOperation": "invoice_templates.count",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "invoice_templates.get",
+      "core": false,
+      "tool": "autotask_invoiceTemplate_get",
+      "purpose": "Get one InvoiceTemplate by id.",
+      "preferredWhen": "Preferred when the numeric id is already known.",
+      "backingOperation": "invoice_templates.get",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [
+        "id"
+      ],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "invoice_templates.getEntityInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the InvoiceTemplate capability metadata (canCreate/canUpdate/hasUserDefinedFields/...).",
+      "preferredWhen": null,
+      "backingOperation": "invoice_templates.getEntityInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "invoice_templates.getFieldInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the InvoiceTemplate field catalog (types, picklists, required, maxLength) — the full raw field dump (the largest read of the info trio; compact discovery: operations.fieldCatalog).",
+      "preferredWhen": null,
+      "backingOperation": "invoice_templates.getFieldInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "invoice_templates.getUdfInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the InvoiceTemplate user-defined-field catalog.",
+      "preferredWhen": null,
+      "backingOperation": "invoice_templates.getUdfInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "invoice_templates.query",
+      "core": false,
+      "tool": "autotask_invoiceTemplate_query",
+      "purpose": "Query InvoiceTemplate records with a JSON filter.",
+      "preferredWhen": "Default for filtered reads (the bounded query op). queryAll is the unbounded raw walk — only when you need the ENTIRE set and accept a large payload; default to the bounded query op. Prefer an includeFields subset over the full model (field names via operations.fieldCatalog). latest: N is the latest-N rows (id-descending) when the newest rows are the goal (the vendor has no sort — count-anchored, docs/API.md §4). Prefer a fieldsPreset for common narrow reads (v1: \"billing_join\" on billing_items.query) over a hand-listed includeFields; noteChars: N caps the untrusted-class free-text fields of the resource (notes/descriptions/UDF prose) to N chars each with the explicit … [+N chars truncated] marker (opt-in; the raw result when absent).",
+      "backingOperation": "invoice_templates.query",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
     {
       "operation": "modules.get",
       "core": false,
@@ -5055,45 +5373,474 @@
       "tool": "autotask_opportunityCategories_resolve",
       "purpose": "Resolve an opportunity category from a numeric id (the direct fetch, tried first) or an exact value of its primary text field(s) (name — exact match only). Returns the Opportunity category record with the numeric id for get/update/delete. Other identifier forms (e.g. an email address) are NOT tried by resolve — use the resource's dedicated lookup op where one exists (see autotask_catalog).",
       "preferredWhen": null,
-      "backingOperation": "opportunity_categories.resolve",
+      "backingOperation": "opportunity_categories.resolve",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [
+        "identifier"
+      ],
+      "tier": "extended",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "opportunity_categories.search",
+      "core": false,
+      "tool": "autotask_opportunityCategories_search",
+      "purpose": "Search opportunity category records by text (contains on the searchable fields).",
+      "preferredWhen": null,
+      "backingOperation": "opportunity_categories.search",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [
+        "query"
+      ],
+      "tier": "extended",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "opportunity_categories.update",
+      "core": false,
+      "tool": "autotask_opportunityCategories_update",
+      "purpose": "Update an opportunity category.",
+      "preferredWhen": "Preferred over create or delete when the record exists and only some fields change.",
+      "backingOperation": "opportunity_categories.update",
+      "effect": "write",
+      "dryRunFirst": true,
+      "confirm": false,
+      "requiredArgs": [
+        "id",
+        "data"
+      ],
+      "tier": "extended",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level_associations.count",
+      "core": false,
+      "tool": "autotask_organizationalLevelAssociation_count",
+      "purpose": "Count organizational level association records matching a JSON filter.",
+      "preferredWhen": null,
+      "backingOperation": "organizational_level_associations.count",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level_associations.create",
+      "core": false,
+      "tool": "autotask_organizationalLevelAssociation_create",
+      "purpose": "Create an organizational level association.",
+      "preferredWhen": "Only for a record that does not exist yet; prefer update for an id you already have.",
+      "backingOperation": "organizational_level_associations.create",
+      "effect": "write",
+      "dryRunFirst": true,
+      "confirm": false,
+      "requiredArgs": [
+        "data"
+      ],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level_associations.get",
+      "core": false,
+      "tool": "autotask_organizationalLevelAssociation_get",
+      "purpose": "Get one OrganizationalLevelAssociation by id.",
+      "preferredWhen": "Preferred when the numeric id is already known.",
+      "backingOperation": "organizational_level_associations.get",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [
+        "id"
+      ],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level_associations.getEntityInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the OrganizationalLevelAssociation capability metadata (canCreate/canUpdate/hasUserDefinedFields/...).",
+      "preferredWhen": null,
+      "backingOperation": "organizational_level_associations.getEntityInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level_associations.getFieldInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the OrganizationalLevelAssociation field catalog (types, picklists, required, maxLength) — the full raw field dump (the largest read of the info trio; compact discovery: operations.fieldCatalog).",
+      "preferredWhen": null,
+      "backingOperation": "organizational_level_associations.getFieldInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level_associations.getUdfInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the OrganizationalLevelAssociation user-defined-field catalog.",
+      "preferredWhen": null,
+      "backingOperation": "organizational_level_associations.getUdfInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level_associations.query",
+      "core": false,
+      "tool": "autotask_organizationalLevelAssociation_query",
+      "purpose": "Query OrganizationalLevelAssociation records with a JSON filter.",
+      "preferredWhen": "Default for filtered reads (the bounded query op). queryAll is the unbounded raw walk — only when you need the ENTIRE set and accept a large payload; default to the bounded query op. Prefer an includeFields subset over the full model (field names via operations.fieldCatalog). latest: N is the latest-N rows (id-descending) when the newest rows are the goal (the vendor has no sort — count-anchored, docs/API.md §4). Prefer a fieldsPreset for common narrow reads (v1: \"billing_join\" on billing_items.query) over a hand-listed includeFields; noteChars: N caps the untrusted-class free-text fields of the resource (notes/descriptions/UDF prose) to N chars each with the explicit … [+N chars truncated] marker (opt-in; the raw result when absent).",
+      "backingOperation": "organizational_level_associations.query",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level_associations.update",
+      "core": false,
+      "tool": "autotask_organizationalLevelAssociation_update",
+      "purpose": "Update an organizational level association.",
+      "preferredWhen": "Preferred over create or delete when the record exists and only some fields change.",
+      "backingOperation": "organizational_level_associations.update",
+      "effect": "write",
+      "dryRunFirst": true,
+      "confirm": false,
+      "requiredArgs": [
+        "id",
+        "data"
+      ],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level1s.count",
+      "core": false,
+      "tool": "autotask_organizationalLevel1_count",
+      "purpose": "Count organizational level 1 records matching a JSON filter.",
+      "preferredWhen": null,
+      "backingOperation": "organizational_level1s.count",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level1s.create",
+      "core": false,
+      "tool": "autotask_organizationalLevel1_create",
+      "purpose": "Create an organizational level 1.",
+      "preferredWhen": "Only for a record that does not exist yet; prefer update for an id you already have.",
+      "backingOperation": "organizational_level1s.create",
+      "effect": "write",
+      "dryRunFirst": true,
+      "confirm": false,
+      "requiredArgs": [
+        "data"
+      ],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level1s.get",
+      "core": false,
+      "tool": "autotask_organizationalLevel1_get",
+      "purpose": "Get one OrganizationalLevel1 by id.",
+      "preferredWhen": "Preferred when the numeric id is already known.",
+      "backingOperation": "organizational_level1s.get",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [
+        "id"
+      ],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level1s.getEntityInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the OrganizationalLevel1 capability metadata (canCreate/canUpdate/hasUserDefinedFields/...).",
+      "preferredWhen": null,
+      "backingOperation": "organizational_level1s.getEntityInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level1s.getFieldInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the OrganizationalLevel1 field catalog (types, picklists, required, maxLength) — the full raw field dump (the largest read of the info trio; compact discovery: operations.fieldCatalog).",
+      "preferredWhen": null,
+      "backingOperation": "organizational_level1s.getFieldInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level1s.getUdfInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the OrganizationalLevel1 user-defined-field catalog.",
+      "preferredWhen": null,
+      "backingOperation": "organizational_level1s.getUdfInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level1s.query",
+      "core": false,
+      "tool": "autotask_organizationalLevel1_query",
+      "purpose": "Query OrganizationalLevel1 records with a JSON filter.",
+      "preferredWhen": "Default for filtered reads (the bounded query op). queryAll is the unbounded raw walk — only when you need the ENTIRE set and accept a large payload; default to the bounded query op. Prefer an includeFields subset over the full model (field names via operations.fieldCatalog). latest: N is the latest-N rows (id-descending) when the newest rows are the goal (the vendor has no sort — count-anchored, docs/API.md §4). Prefer a fieldsPreset for common narrow reads (v1: \"billing_join\" on billing_items.query) over a hand-listed includeFields; noteChars: N caps the untrusted-class free-text fields of the resource (notes/descriptions/UDF prose) to N chars each with the explicit … [+N chars truncated] marker (opt-in; the raw result when absent).",
+      "backingOperation": "organizational_level1s.query",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level1s.update",
+      "core": false,
+      "tool": "autotask_organizationalLevel1_update",
+      "purpose": "Update an organizational level 1.",
+      "preferredWhen": "Preferred over create or delete when the record exists and only some fields change.",
+      "backingOperation": "organizational_level1s.update",
+      "effect": "write",
+      "dryRunFirst": true,
+      "confirm": false,
+      "requiredArgs": [
+        "id",
+        "data"
+      ],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level2s.count",
+      "core": false,
+      "tool": "autotask_organizationalLevel2_count",
+      "purpose": "Count organizational level 2 records matching a JSON filter.",
+      "preferredWhen": null,
+      "backingOperation": "organizational_level2s.count",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level2s.create",
+      "core": false,
+      "tool": "autotask_organizationalLevel2_create",
+      "purpose": "Create an organizational level 2.",
+      "preferredWhen": "Only for a record that does not exist yet; prefer update for an id you already have.",
+      "backingOperation": "organizational_level2s.create",
+      "effect": "write",
+      "dryRunFirst": true,
+      "confirm": false,
+      "requiredArgs": [
+        "data"
+      ],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level2s.get",
+      "core": false,
+      "tool": "autotask_organizationalLevel2_get",
+      "purpose": "Get one OrganizationalLevel2 by id.",
+      "preferredWhen": "Preferred when the numeric id is already known.",
+      "backingOperation": "organizational_level2s.get",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [
+        "id"
+      ],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level2s.getEntityInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the OrganizationalLevel2 capability metadata (canCreate/canUpdate/hasUserDefinedFields/...).",
+      "preferredWhen": null,
+      "backingOperation": "organizational_level2s.getEntityInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level2s.getFieldInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the OrganizationalLevel2 field catalog (types, picklists, required, maxLength) — the full raw field dump (the largest read of the info trio; compact discovery: operations.fieldCatalog).",
+      "preferredWhen": null,
+      "backingOperation": "organizational_level2s.getFieldInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "organizational_level2s.getUdfInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the OrganizationalLevel2 user-defined-field catalog.",
+      "preferredWhen": null,
+      "backingOperation": "organizational_level2s.getUdfInfo",
       "effect": "read",
       "dryRunFirst": false,
       "confirm": false,
-      "requiredArgs": [
-        "identifier"
-      ],
-      "tier": "extended",
+      "requiredArgs": [],
+      "tier": "advanced",
       "reachable": true,
-      "reach": "dedicated tool",
-      "reachReason": null,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
       "boundedAlternative": null
     },
     {
-      "operation": "opportunity_categories.search",
+      "operation": "organizational_level2s.query",
       "core": false,
-      "tool": "autotask_opportunityCategories_search",
-      "purpose": "Search opportunity category records by text (contains on the searchable fields).",
-      "preferredWhen": null,
-      "backingOperation": "opportunity_categories.search",
+      "tool": "autotask_organizationalLevel2_query",
+      "purpose": "Query OrganizationalLevel2 records with a JSON filter.",
+      "preferredWhen": "Default for filtered reads (the bounded query op). queryAll is the unbounded raw walk — only when you need the ENTIRE set and accept a large payload; default to the bounded query op. Prefer an includeFields subset over the full model (field names via operations.fieldCatalog). latest: N is the latest-N rows (id-descending) when the newest rows are the goal (the vendor has no sort — count-anchored, docs/API.md §4). Prefer a fieldsPreset for common narrow reads (v1: \"billing_join\" on billing_items.query) over a hand-listed includeFields; noteChars: N caps the untrusted-class free-text fields of the resource (notes/descriptions/UDF prose) to N chars each with the explicit … [+N chars truncated] marker (opt-in; the raw result when absent).",
+      "backingOperation": "organizational_level2s.query",
       "effect": "read",
       "dryRunFirst": false,
       "confirm": false,
-      "requiredArgs": [
-        "query"
-      ],
-      "tier": "extended",
+      "requiredArgs": [],
+      "tier": "advanced",
       "reachable": true,
       "reach": "dedicated tool",
       "reachReason": null,
       "boundedAlternative": null
     },
     {
-      "operation": "opportunity_categories.update",
+      "operation": "organizational_level2s.update",
       "core": false,
-      "tool": "autotask_opportunityCategories_update",
-      "purpose": "Update an opportunity category.",
+      "tool": "autotask_organizationalLevel2_update",
+      "purpose": "Update an organizational level 2.",
       "preferredWhen": "Preferred over create or delete when the record exists and only some fields change.",
-      "backingOperation": "opportunity_categories.update",
+      "backingOperation": "organizational_level2s.update",
       "effect": "write",
       "dryRunFirst": true,
       "confirm": false,
@@ -5101,7 +5848,7 @@
         "id",
         "data"
       ],
-      "tier": "extended",
+      "tier": "advanced",
       "reachable": true,
       "reach": "dedicated tool",
       "reachReason": null,
@@ -7386,6 +8133,130 @@
       "reachReason": null,
       "boundedAlternative": null
     },
+    {
+      "operation": "sales_orders.count",
+      "core": false,
+      "tool": "autotask_salesOrder_count",
+      "purpose": "Count sales order records matching a JSON filter.",
+      "preferredWhen": null,
+      "backingOperation": "sales_orders.count",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "extended",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "sales_orders.get",
+      "core": false,
+      "tool": "autotask_salesOrder_get",
+      "purpose": "Get one SalesOrder by id.",
+      "preferredWhen": "Preferred when the numeric id is already known.",
+      "backingOperation": "sales_orders.get",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [
+        "id"
+      ],
+      "tier": "extended",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "sales_orders.getEntityInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the SalesOrder capability metadata (canCreate/canUpdate/hasUserDefinedFields/...).",
+      "preferredWhen": null,
+      "backingOperation": "sales_orders.getEntityInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "extended",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "sales_orders.getFieldInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the SalesOrder field catalog (types, picklists, required, maxLength) — the full raw field dump (the largest read of the info trio; compact discovery: operations.fieldCatalog).",
+      "preferredWhen": null,
+      "backingOperation": "sales_orders.getFieldInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "extended",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "sales_orders.getUdfInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the SalesOrder user-defined-field catalog.",
+      "preferredWhen": null,
+      "backingOperation": "sales_orders.getUdfInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "extended",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "sales_orders.query",
+      "core": false,
+      "tool": "autotask_salesOrder_query",
+      "purpose": "Query SalesOrder records with a JSON filter.",
+      "preferredWhen": "Default for filtered reads (the bounded query op). queryAll is the unbounded raw walk — only when you need the ENTIRE set and accept a large payload; default to the bounded query op. Prefer an includeFields subset over the full model (field names via operations.fieldCatalog). latest: N is the latest-N rows (id-descending) when the newest rows are the goal (the vendor has no sort — count-anchored, docs/API.md §4). Prefer a fieldsPreset for common narrow reads (v1: \"billing_join\" on billing_items.query) over a hand-listed includeFields; noteChars: N caps the untrusted-class free-text fields of the resource (notes/descriptions/UDF prose) to N chars each with the explicit … [+N chars truncated] marker (opt-in; the raw result when absent).",
+      "backingOperation": "sales_orders.query",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "extended",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "sales_orders.update",
+      "core": false,
+      "tool": "autotask_salesOrder_update",
+      "purpose": "Update a sales order.",
+      "preferredWhen": "Preferred over create or delete when the record exists and only some fields change.",
+      "backingOperation": "sales_orders.update",
+      "effect": "write",
+      "dryRunFirst": true,
+      "confirm": false,
+      "requiredArgs": [
+        "id",
+        "data"
+      ],
+      "tier": "extended",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
     {
       "operation": "service_call_task_resources.count",
       "core": false,
@@ -9583,6 +10454,149 @@
       "reachReason": null,
       "boundedAlternative": null
     },
+    {
+      "operation": "tax_regions.count",
+      "core": false,
+      "tool": "autotask_taxRegion_count",
+      "purpose": "Count tax region records matching a JSON filter.",
+      "preferredWhen": null,
+      "backingOperation": "tax_regions.count",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "tax_regions.create",
+      "core": false,
+      "tool": "autotask_taxRegion_create",
+      "purpose": "Create a tax region.",
+      "preferredWhen": "Only for a record that does not exist yet; prefer update for an id you already have.",
+      "backingOperation": "tax_regions.create",
+      "effect": "write",
+      "dryRunFirst": true,
+      "confirm": false,
+      "requiredArgs": [
+        "data"
+      ],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "tax_regions.get",
+      "core": false,
+      "tool": "autotask_taxRegion_get",
+      "purpose": "Get one TaxRegion by id.",
+      "preferredWhen": "Preferred when the numeric id is already known.",
+      "backingOperation": "tax_regions.get",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [
+        "id"
+      ],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "tax_regions.getEntityInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the TaxRegion capability metadata (canCreate/canUpdate/hasUserDefinedFields/...).",
+      "preferredWhen": null,
+      "backingOperation": "tax_regions.getEntityInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "tax_regions.getFieldInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the TaxRegion field catalog (types, picklists, required, maxLength) — the full raw field dump (the largest read of the info trio; compact discovery: operations.fieldCatalog).",
+      "preferredWhen": null,
+      "backingOperation": "tax_regions.getFieldInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "tax_regions.getUdfInfo",
+      "core": false,
+      "tool": null,
+      "purpose": "Get the TaxRegion user-defined-field catalog.",
+      "preferredWhen": null,
+      "backingOperation": "tax_regions.getUdfInfo",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "autotask_read (exact operation name; effect=read — read-only; zero mutating requests)",
+      "reachReason": "no dedicated tool — the op is still discoverable and invocable by exact name",
+      "boundedAlternative": null
+    },
+    {
+      "operation": "tax_regions.query",
+      "core": false,
+      "tool": "autotask_taxRegion_query",
+      "purpose": "Query TaxRegion records with a JSON filter.",
+      "preferredWhen": "Default for filtered reads (the bounded query op). queryAll is the unbounded raw walk — only when you need the ENTIRE set and accept a large payload; default to the bounded query op. Prefer an includeFields subset over the full model (field names via operations.fieldCatalog). latest: N is the latest-N rows (id-descending) when the newest rows are the goal (the vendor has no sort — count-anchored, docs/API.md §4). Prefer a fieldsPreset for common narrow reads (v1: \"billing_join\" on billing_items.query) over a hand-listed includeFields; noteChars: N caps the untrusted-class free-text fields of the resource (notes/descriptions/UDF prose) to N chars each with the explicit … [+N chars truncated] marker (opt-in; the raw result when absent).",
+      "backingOperation": "tax_regions.query",
+      "effect": "read",
+      "dryRunFirst": false,
+      "confirm": false,
+      "requiredArgs": [],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
+    {
+      "operation": "tax_regions.update",
+      "core": false,
+      "tool": "autotask_taxRegion_update",
+      "purpose": "Update a tax region.",
+      "preferredWhen": "Preferred over create or delete when the record exists and only some fields change.",
+      "backingOperation": "tax_regions.update",
+      "effect": "write",
+      "dryRunFirst": true,
+      "confirm": false,
+      "requiredArgs": [
+        "id",
+        "data"
+      ],
+      "tier": "advanced",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
     {
       "operation": "threshold_information.get",
       "core": true,
@@ -10393,6 +11407,25 @@
       "reachReason": null,
       "boundedAlternative": null
     },
+    {
+      "operation": "time_entries.approve",
+      "core": false,
+      "tool": "autotask_timeEntry_approve",
+      "purpose": "Approve a time entry (the REST-only approval path): create the BillingItemApprovalLevels record, apply the vendor-documented follow-up update of BillingApprovalDateTime + BillingApprovalResourceID, then read the entry back and report whether the vendor accepted it.",
+      "preferredWhen": "Approving (or adding the next approval level to) a time entry. This is the only approval channel the REST API exposes — there is no TimeEntries/Approve path. When the follow-up update throws, the approval level record HAS been created on the vendor (there is no rollback and no delete): reconcile by re-reading the entry's billingApprovalLevelMostRecent or querying billing_item_approval_levels by timeEntryID.",
+      "backingOperation": "time_entries.approve",
+      "effect": "write",
+      "dryRunFirst": true,
+      "confirm": false,
+      "requiredArgs": [
+        "id"
+      ],
+      "tier": "extended",
+      "reachable": true,
+      "reach": "dedicated tool",
+      "reachReason": null,
+      "boundedAlternative": null
+    },
     {
       "operation": "time_entries.count",
       "core": false,
@@ -22364,11 +23397,11 @@
     }
   ],
   "counts": {
-    "registryOperations": 1217,
+    "registryOperations": 1275,
     "coreOperations": 10,
-    "catalogRows": 1217,
-    "withTool": 854,
-    "readModeOnly": 363,
+    "catalogRows": 1275,
+    "withTool": 891,
+    "readModeOnly": 384,
     "neverExposed": 0,
     "metaTools": 5
   }