MCP Tools

The OnFire MCP server publishes a focused set of tools, all tenant-scoped to the authenticated user. The tools fall into a handful of natural groups:

Prospecting

• ai_prospecting — rank likely buyers or score one named person.
• ai_prospecting_field_glossary — the self-describing contract for every field ai_prospecting can return.
• manage_ai_prospecting — edit your prospecting schema via the shadow lifecycle.

Identity resolution

• match_company — resolve a company to a verified LinkedIn URL + firmographics.
• match_person — resolve a person to a verified LinkedIn profile + current role.

Enrichment

• contact_data_enrichment — append verified emails and phones (paid, two-phase consent above 10).

Discovery

• search_people — composite-filter search over the people graph.
• search_companies — composite-filter search over the company graph.
• get_personas — list valid persona names for search_people / search_companies.
• get_events — list valid event names for search_people.
• get_industries — list valid industry names for search_companies.

Account research

• bdr_account_research — the canonical BDR brief in one call.
• query_company_filings — section-extract a company’s most recent 10-K.
• query_employee_footprint — find current employees whose LinkedIn mentions specific tech/competitor keywords.
• query_intent_signals — pull intent signals from the OnFire signals database.

Datasets

• list_datasets — list active MCP datasets for the tenant.
• describe_dataset — schema + sample rows for a dataset.
• query_datasets — read-only DuckDB SQL against one or more datasets.
• download_dataset — mint a clickable CSV download URL.

CRM and platform plumbing

• get_tenant_settings — read the tenant’s settings object.
• get_current_tenant — report which tenant this session is operating as.

Internal databases

• connect_query — read the Connect database (enrichment runs + audit logs).
• septer_query — read the Septer database (sales engagement jobs + cadences).

Cross-cutting conventions

Every tool inherits a few rules that are worth knowing once:

• Tenant scoping. The tenant is taken from your OAuth session. Super-tenant administrators can target other tenants via target_tenant_id on the tools that accept it; everyone else is blocked server-side.
• Datasets. Tools that can return large row counts (search, prospecting, signals, footprint, filings, BDR research) write the full result to a short-lived MCP dataset (CSV in S3, 7-day TTL) and return a compact envelope with a dataset handle. Use the dataset tools to slice or download.
• Row caps. SQL tools cap responses at 1,000 rows; query_datasets caps at 500. Tools surface a truncated: true flag plus total_count when the cap is hit.
• Enrichment consent. contact_data_enrichment is the only paid tool. Above 10 contacts it requires a two-phase consent flow — the agent must show the user_facing_message verbatim and wait for an explicit approval before sending contacts.