One endpoint.102 operations.

check-coverage

Check monitoring coverage — Given components found in a repository, report which are already watched by Beaam and which are not — with the exact call that would start watching each gap.

auth required read-only mcp

detection-stats

Detection stats — True-positive / false-alarm counts, incident and suppression totals — how well Beaam is deciding what's worth your attention.

auth required read-only mcp

Takes no input.

explain-incident

Explain an incident — Explain why an incident happened in one sentence — the correlated services, learned lead/lag history, and any control-plane change (deploy, scaling, config) that preceded the failure. Uses AI narration only if your organization has enabled it; otherwise returns the same evidence deterministically.

auth required read-only mcp

get-collector-health

Get collector health — Return collector health for the user's integrations — whether Beaam is successfully collecting, when it last succeeded, and the last error.

auth required read-only mcp

get-health-grid

Get the health heatmap — Return per-service health buckets across a window for every watched service of a connection — the heatmap view, ordered worst-first. Shows whether services failed together, which the exception view cannot.

auth required read-only mcp

get-health-timeline

Get an integration's health timeline — Summarize an integration's health over a time window (up to 7 days): worst-state timeline buckets, plus the events inside the window — state changes, alerts sent, and newly discovered services.

auth required read-only mcp

get-ingest-stats

Get ingest stats — Return OTLP ingest volume (requests, datapoints, bytes) per stack over a look-back window.

auth required read-only mcp

get-monitoring-health

Get monitoring health — Report whether Beaam's own collection is healthy — per integration, flagging any whose collector has errored or gone silent — plus the freshest check time.

auth required read-only mcp

Takes no input.

get-public-status

Get a published status page — Return the deliberately limited service health and recent incidents for an explicitly published public status token.

public read-only

get-service

Get a service — Return one service's full detail — display name, type, external id, current health state, source, and sensible defaults.

auth required read-only mcp

get-status-board

Get the status board — Return everything the status board shows in one call: watched services, connections, open incidents, recent alerts, and when Beaam last checked.

auth required read-only mcp

Takes no input.

list-detection-rules

List a service's alert rules — Return the alert rules Beaam uses to decide whether to alert for a service — the sensible defaults plus any overrides — with each rule's threshold, severity, and hysteresis.

auth required read-only mcp

list-integration-rules

List provider-level alert rules — Return the default alert rules for a provider or service type (applied to all its services), with each rule's threshold, severity, and whether it's been customised.

auth required read-only mcp

list-services

List services — Return the services Beaam has discovered for the signed-in user, with each one's current health state and whether it's being watched. Pass watchedOnly to limit to watched services.

auth required read-only mcp

query-metrics

Query metrics — Return recent OTel metrics for a stack from the telemetry store, optionally filtered to one metric.

auth required read-only mcp

set-detection-rule

Set a service's alert rule — Change a service's alert rule: set its threshold, its level (degraded/broken), enable/disable it, or reset it to the default. Pass serviceId and metric.

auth required destructive mcp

set-integration-rule

Set a provider-level alert rule — Change the default alert rule for a service type (applies to all its services): set threshold, its level (degraded/broken), enable/disable, or reset. Individual services can still override.

auth required destructive mcp

set-public-status

Configure public status publishing — Publish or unpublish a stack status page, choose its limited contents, or rotate its revocable public identifier.

auth required

set-service-mute

Mute a service — Stop sending alerts for one service for a bounded time (max 24h), while it keeps being checked and incidents keep opening. Pass minutes: 0 to unmute.

auth required destructive mcp

set-service-watched

Watch or unwatch one service — Start or stop watching a single service. Stopping ends collection for it — use set-service-mute instead to keep the record while silencing alerts.

auth required destructive mcp

apply-monitoring-plan

Apply an approved monitoring plan — Execute a plan from plan-monitoring: watch every public URL immediately, then walk the user through credentialed providers one at a time. Give them `next.url`, poll check-oauth-connect with `next.state`, then call next-connection. Anything left is remembered, so stopping early is safe. Single-use.

auth required destructive mcp

begin-aws-connect

Begin an AWS connection — Start connecting an AWS account: returns a one-click CloudFormation URL and an external ID. Give the user the URL to open and create the stack, then poll check-aws-registration with the external ID; once registered, call connect-aws.

auth required mcp

Takes no input.

begin-oauth-connect

Start connecting a provider with OAuth — Begin an OAuth connection and return a URL for the user to open. They approve in their browser; no API token is created or pasted. Give the user the URL, then poll check-oauth-connect with the returned `state` to find out when they are done — do not ask them to tell you.

auth required mcp

check-aws-registration

Check AWS auto-registration — Check whether the CloudFormation stack from begin-aws-connect has reported its AWS account ID yet. Poll every few seconds after the user creates the stack; when status is 'registered', call connect-aws with the returned accountId.

auth required read-only mcp

check-oauth-connect

Check an OAuth connection in progress — Check whether the user has finished approving the URL from begin-oauth-connect. Poll every few seconds using the `state` it returned. `pending` means keep waiting; `connected` is done; `failed` carries the reason; `expired` carries a fresh `url` to offer instead of starting over.

auth required read-only mcp

connect-aws

Connect an AWS account — Finish connecting AWS with the 12-digit account ID and the external ID from begin-aws-connect. Returns connected, pending (stack still creating — retry in ~30s), or error. Discovered AWS services are watched automatically.

auth required mcp

connect-cloudflare

Connect Cloudflare — Connect Cloudflare with a read-only API token. Imports Workers, Pages projects, zones, R2 buckets, KV namespaces, D1 databases, Queues and Durable Object namespaces across every account the token reaches; pass watch:'all' to start watching them immediately, or follow up with set-watchlist.

auth required mcp

connect-digitalocean

Connect DigitalOcean — Watch a DigitalOcean account's Droplets — powered off, archived, or destroyed.

auth required mcp

connect-hostinger

Connect Hostinger — Watch a Hostinger account's VPS — suspended by Hostinger, stopped, or destroyed.

auth required mcp

connect-http

Connect HTTP endpoint — Add a URL to monitor. Beaam will ping it every minute and alert if it goes down.

auth required mcp

connect-mcp

Connect MCP server — Add a remote MCP server to monitor. Beaam validates the initialize + tools/list handshake every minute and alerts if it breaks.

auth required mcp

connect-mongodb

Connect MongoDB Atlas — Connect MongoDB Atlas using a read-only service account (Client ID + Secret). Discovers your clusters; pass watch:'all' to start watching them immediately, or follow up with set-watchlist.

auth required mcp

connect-neon

Connect Neon — Watch a Neon account's projects — disabled computes and failed control-plane operations.

auth required mcp

connect-netlify

Connect Netlify — Watch a Netlify account's sites — deploys that failed, so a change you thought shipped is not silently missing.

auth required mcp

connect-polar

Connect Polar — Watch a Polar organization's subscription payment health — how many subscriptions have stopped paying.

auth required mcp

connect-resend

Connect Resend — Watch a Resend account's sending domains — bounce rate, complaint rate, and whether each domain can still send.

auth required mcp

connect-sentry

Connect Sentry — Connect Sentry using an auth token with project:read and org:read scopes. Discovers all projects and returns connected / error.

auth required mcp

connect-stripe

Connect Stripe — Connect Stripe using a restricted secret key with read access to Events and Account. Discovers the account and starts monitoring payment failures.

auth required mcp

connect-supabase

Connect Supabase — Connect Supabase with a personal access token. Imports every project in your organization; pass watch:'all' to start watching them immediately, or follow up with set-watchlist.

auth required mcp

connect-vercel

Connect Vercel — Watch a Vercel account's projects — production deploys that failed, without firing for preview builds.

auth required mcp

create-stack

Create a stack — Create a stack — a group of services you think of together. Pass withIngestKey to also mint a one-time OTLP ingest key; otherwise the stack is grouping only and a key can be minted later.

auth required mcp

delete-integration

Delete an integration — Remove an integration and everything associated with it — its services, history, incidents, alerts, and stored credentials. Irreversible.

auth required destructive mcp

delete-stack

Delete a stack — Delete an empty stack. Refuses while it still holds services or connections — move those first — and refuses to delete your only stack.

auth required destructive mcp

get-integration-catalog

List everything Beaam can monitor — The public catalog of Beaam integrations — what each one watches, which signals can raise an incident, and what else is collected for context. Includes integrations on the roadmap (planned) and any temporarily withdrawn.

public read-only mcp

Takes no input.

list-connections

List connections — Return the user's connected integration instances (accounts) with each one's status, collection mode, and check interval. Filter by provider or stack.

auth required read-only mcp

list-integrations

List integrations — Return the catalog of integrations to choose from — available ones (connectable now, like AWS) and planned ones — with whether the signed-in user has each connected.

auth required read-only mcp

list-planned-connections

List planned connections not yet made — List the providers an approved monitoring plan proposed that are still not connected. Read-only; use next-connection to actually walk through them.

auth required read-only mcp

Takes no input.

list-stacks

List stacks — Return the signed-in user's stacks — each one a logical app + environment that integrations attach to and telemetry is grouped under.

auth required read-only mcp

Takes no input.

next-connection

Get the next thing to connect — The next provider from an approved plan that is not connected yet, with a one-click URL. Call after apply-monitoring-plan, then again each time check-oauth-connect reports connected, until status is 'done'. Pass `dismiss` only if the user says they do not want that provider.

auth required destructive mcp

plan-monitoring

Plan what Beaam would monitor in a project — Given evidence about a project (filenames, dependencies, env var names, public URLs), return what Beaam would connect and watch, what it cannot, and any questions that need answering first. Read-only — it plans, it never connects.

auth required mcp

rediscover-integration

Re-discover a connection now — Look for resources created since this connection was last checked, and add any new ones as unwatched services.

auth required destructive mcp

remove-missing-services

Remove services that no longer exist — Permanently remove services that the provider no longer has, along with their history. Only affects services already detected as missing by re-discovery.

auth required destructive mcp

rename-stack

Rename a stack — Change a stack's display name. Its slug — the OTel service.namespace your exporters send to — is deliberately left alone.

auth required destructive mcp

revoke-ingest-key

Revoke a stack's ingest key — Disable a stack's OTLP ingest key immediately; the stack stops accepting telemetry until you rotate to a new key.

auth required destructive

rotate-ingest-key

Rotate a stack's ingest key — Generate a new OTLP ingest key for a stack and invalidate the old one. Returns the new key once.

auth required destructive

set-collector-mode

Set collection mode — Switch an integration between pull (scheduled polling) and push (real-time metric stream). Switching to push rotates and returns a one-time stack ingest key.

auth required destructive mcp

set-service-stack

Move services to a stack — Move one or more services into a stack, so the list groups by the application they belong to rather than by the account they were discovered in. Services whose telemetry you push yourself get their stack from the ingest key and can't be moved here.

auth required destructive mcp

set-watchlist

Set the watchlist — Choose which discovered services Beaam watches for an integration. Pass the integration id and the service ids to watch; the rest are unwatched.

auth required destructive mcp

update-integration-settings

Update integration settings — Edit an integration's friendly name and/or its check interval (seconds). Invalid values are ignored.

auth required destructive mcp

acknowledge-incident

Acknowledge an incident — Mark an incident as being handled ("I'm on it"), or clear that. Quiets Beaam about it while you work on it.

auth required destructive mcp

get-incident

Get an incident — Fetch a single incident by id, with its current state and acknowledgement/snooze status.

auth required read-only mcp

list-alerts

List alerts — Return the alerts Beaam has sent, newest first, with each alert's review state (real incident, false alarm, or unreviewed).

auth required read-only mcp

list-checks

List checks — Return recent poll results (checks) for the user's services — newest first — optionally filtered to one or more services and a closed time window. Reports when the window predates the 30-day raw-retention limit, so an empty result is never mistaken for a quiet period.

auth required read-only mcp

list-incidents

List incidents — Return the signed-in user's incidents (the times Beaam decided something was genuinely wrong), newest first.

auth required read-only mcp

list-recent-changes

List recent changes — Return recent control-plane changes across your connected providers — deploys, config edits, scaling and pauses — newest first.

auth required read-only mcp

list-suppressions

List suppressions — Return what Beaam noticed but chose not to alert on (and why), newest first.

auth required read-only mcp

review-alert

Review an alert — Mark a past alert as a real incident or a false alarm, so Beaam can track and tune its accuracy.

auth required destructive mcp

snooze-incident

Snooze an incident — Stay quiet about an incident for a while ("not now"). Pass minutes to snooze, or 0 to clear it.

auth required destructive mcp

accept-invitation

Accept an invitation — Accept an organization invitation using its token. Joins the org and makes it your active organization.

auth required

acknowledge-welcome

Acknowledge the welcome — Record that this account has seen its welcome message, so it is shown once and never again.

auth required mcp

Takes no input.

cancel-subscription

Cancel subscription — Cancel the caller's Solo subscription at the end of the current billing period (downgrade to Free). Access continues until period end.

auth required destructive

Takes no input.

create-api-key

Create an API key — Create a personal API key for the public API and the hosted MCP server. The secret is shown once at creation.

auth required

create-checkout

Start Solo checkout — Create a secure Polar checkout session for the signed-in Beaam account's $19/month Solo plan.

auth required

create-organization

Create an organization — Create a new organization (a separate workspace with its own integrations, members, and plan) and switch to it.

auth required

delete-account

Delete account — Permanently delete your Beaam account and associated monitoring data after password reauthentication. Irreversible.

auth required destructive

delete-all-data

Delete all integrations and data — Remove every integration and all monitoring data (services, history, incidents, alerts, credentials). Notification channels are kept. Pass confirm:"DELETE". Irreversible.

auth required destructive

delete-notification-channel

Delete notification channel — Delete one of the user's notification channels by id.

auth required destructive mcp

delete-organization

Delete an organization — Permanently delete an organization and all of its data (integrations, services, history, members). Owner only.

auth required destructive

get-activation-progress

Get activation progress — Show whether this account has connected monitoring, received its first real signal, and verified its default alert path.

auth required read-only mcp

Takes no input.

get-billing

Get billing & plan — Return the active organization's effective plan and usage, plus the caller's own account plan and available billing actions.

auth required read-only

Takes no input.

invite-member

Invite a member — Invite someone to your active organization by email and get a one-time link to share. Owners and admins only.

auth required

join-waitlist

Join the waitlist — Add an email address to the Beaam waitlist.

public

list-api-keys

List API keys — Return the caller's API keys — name, prefix, created and last-used times, and whether revoked. Never returns the secret.

auth required read-only

Takes no input.

list-devices

List mobile devices — Return the user's mobile devices registered for push alerts — platform, device name, and when each was last seen. Use unregister-device to remove one.

auth required read-only mcp

Takes no input.

list-members

List organization members — List the members of your active organization (with roles), plus pending invitations if you can manage members.

auth required read-only

Takes no input.

list-notification-channels

List notification channels — Return the user's configured notification channels (email/SMS/push/Slack/webhook), each with its destination, enabled state, and whether it's in the global default set. Pass serviceId to also get that service's routing.

auth required read-only mcp

list-organizations

List organizations — List the organizations you belong to, your role in each, and which one is currently active.

auth required read-only

Takes no input.

list-payments

List payments — Return past payments for the signed-in account, newest first, with amount, status and a receipt link where one exists.

auth required read-only

Takes no input.

preview-invitation

Preview an invitation — Look up an organization invitation by token to see the organization, invited email, and role.

public read-only

record-product-event

Record a product journey event — Record a non-sensitive setup, integration-selection, or upgrade-intent event for the signed-in account.

auth required

register-device

Register mobile device — Enroll a mobile device for push alerts using its Expo push token. Creates the push notification channel on first registration; re-registering the same token just refreshes it.

auth required mcp

remove-member

Remove a member — Remove a member from your active organization, revoking their access. Owners and admins only.

auth required destructive

rename-organization

Rename an organization — Rename an organization (defaults to your active one). Owners and admins only.

auth required

resume-subscription

Resume subscription — Undo a scheduled cancellation so the caller's Solo subscription renews as normal instead of ending at the current period.

auth required

Takes no input.

revoke-api-key

Revoke an API key — Revoke a personal API key by id; it stops working immediately.

auth required destructive

revoke-invitation

Revoke an invitation — Revoke a pending invitation to your active organization, invalidating its link. Owners and admins only.

auth required

save-notification-channel

Save notification channel — Create or update a notification channel. type is email, sms, push, slack, or webhook; destination is an email address, E.164 phone, or https:// webhook URL. SMS channels require the Solo plan. Push channels can only be updated here — they're created by registering a device.

auth required destructive mcp

send-test-alert

Send a test alert — Send a harmless test alert through your real notification channels (email, SMS, push, Slack, or webhook) and report whether each delivery worked. Omit channelId to test all enabled default channels.

auth required mcp

set-ai-explanations

Set AI incident explanations — Turn AI incident explanations on or off for your organization. When on, Beaam may send a short incident evidence summary to an LLM to write a one-sentence explanation; when off, no incident data is ever sent to an LLM.

auth required

set-service-notifications

Set service notifications — Choose how a service's alerts route: 'global' uses the default channels; 'custom' uses the given channelIds. Pass the service id and mode.

auth required destructive mcp

switch-organization

Switch active organization — Make one of your organizations the active one for the current session. You must be a member of it.

auth required

unregister-device

Unregister mobile device — Remove a mobile device from push alerting, by device id or by its Expo push token. Removing the last device also removes the push notification channel; registering again restores it.

auth required destructive mcp