Every tool the Krafto MCP server exposes to a connected AI client. Connect via the MCP page, or use a long-lived mcp_live_... token from the AI & MCP Dashboard for clients that can't do the OAuth flow.
| Tool | Required scope | What it does |
|---|---|---|
| search_assets | catalog:read | Search the Krafto catalog by keyword, category, and filters. |
| get_asset_details | catalog:read | Get full details for a single published asset by its ID. |
| get_categories | catalog:read | List every active category in the Krafto catalog. |
| get_asset_manifest | catalog:read | Read an asset's AI-facing manifest (structured metadata for agent use). |
| list_library | library:read | List everything the signed-in user owns in their Krafto library. |
| check_entitlement | library:read | Check whether the signed-in user already owns a specific asset. |
| get_download_url | library:download | Generate a real, short-lived signed download URL for an owned asset. |
| get_account_info | account:read | Read the signed-in user's basic account info (name, email, tier). |
| purchase_asset_with_wallet | wallet:spend | Purchase an asset using the signed-in user's Krafto Wallet balance. |
Every scope a connected client or app can hold. A tool call fails with a clear message if the caller's connection or token doesn't carry the scope it needs.
catalog:readBrowse categories, search, and read product details.library:readSee which assets a user already owns.library:downloadGenerate signed download links for owned assets.account:readRead the connected user's basic profile info.wallet:spendPurchase assets using the user's Krafto Wallet balance.Two ways a tool call is authenticated: the interactive OAuth flow (a session-scoped connection, managed per client from your account) or a self-issued long-lived PAT (mcp_live_..., generated once and used by clients that can't do OAuth). Either way, the tool only gets the scopes that connection or token was actually granted — never more.
If you're building an app for other people to connect (not just yourself), apply for developer access and request the scopes your app needs — see the Developer API reference.