Alter Onboarding
Guide developers from setup through a verified, policy-aware, audited Alter API call.
| Endpoint | https://mcp.alterauth.com/mcp (streamable-http) |
|---|---|
| Registry version | 0.4.0 |
| Now | 14 tools · grade D (63) · pin ts_a1ff4be9ef632d5bc9dead379105d150 · protocol 2025-06-18 |
| First / last listed | 2026-10-28 00:40 UTC / 2026-10-28 00:40 UTC |
| Grade over time | 2026-10-28: D (63), 14 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: list_phases list_skills get_started next_step sdk_integration sdk_pattern troubleshoot verify_integration fetch_doc search_docs list_providers list_operations get_operation_schema policy_language
list_phases | List the lifecycle phases this server serves (setup, modify) and what each is for. params: none |
list_skills | List the guidance Skills available on this server, with the phase each serves. Read a skill via its resource (skill://alter/<name>). params: none |
get_started | Begin or change an Alter integration. Without args: lists the phases. With `phase`: returns that phase's flows + a heuristic hint — classify the use case YOURSELF and call again with `goal` for the plan. If the use case spans multiple flows, run them sequentially. params: phase, use_case, goal |
next_step | Return the next step for a flow. Pass the goal (flow id) and the id of the last completed step (omit `after` for the first step). Run each step's detect command FIRST and skip the run command when detection passes. The design step also returns that flow's complete starter ALTER_INTEGRATION.md. params: goal*, after |
sdk_integration | Return the Alter SDK wiring (install + client init + request) to write into the developer's codebase, for a language and setup goal. params: language*, goal* |
sdk_pattern | Return a runnable Alter SDK call pattern for a language: `proxy-call` (zero-egress proxy_request + HITL), `resolve-grant-by-user` (call as an end user via their delegated grant), `delegate-managed-secret` (the operator-side delegation step), or `resolve-ambiguous-grant` (an identity-mode call matched several of one user's grants: choose deliberately, never the first, and persist it; ask the develo params: language*, pattern* |
troubleshoot | Map a @alter-ai/cli exit code or error message to a remediation. params: exit_code, error |
verify_integration | Return a copy-pasteable recipe to VERIFY an integration works: `first-call` (code↔design, an audit row, correct attribution) or `per-user-isolation` (a multi-user/broker server runs two users under different credentials and rejects cross-user access). Guidance only — you run the commands. params: scenario* |
fetch_doc | Fetch any page of the Alter documentation by slug (e.g. "quickstart"). The whole published docs site is bundled here, skill pages included, so every page a doc, a skill or a flow step links to can be read in-band. Accepts any spelling the docs use: a bare slug, a leading slash, a #section anchor, a full docs.alterauth.com URL, or an older path that now redirects. Omit the slug to list every page. params: slug |
search_docs | Search every bundled page of the Alter documentation (docs and skill pages) by keywords: returns the best-matching pages with the section and a snippet that matched. Use it when a flow step or doc did not point you at the page you need, instead of guessing slugs or listing every page; then read one with fetch_doc and its slug. params: query*, limit |
list_providers | List every provider with an ingested API spec in Alter's provider-spec catalog, with each spec's source and freshness. Optionally filter by `kind`. Start here, then call list_operations for a provider's operations. params: kind |
list_operations | List the API operations a provider exposes, live from Alter's provider-spec catalog (e.g. "what can I call on google?"). Returns operation ids + methods/paths, plus the spec's source and freshness. Omit `kind` to auto-detect the provider family; when the id exists in both oauth and managed you'll be asked to pass `kind`. Machine-readable rows ride in `structuredContent` (see this tool's outputSche params: provider_id*, kind, search, limit, offset |
get_operation_schema | Fetch one provider API operation's full contract — method, path, parameters, request/response schemas — live from Alter's provider-spec catalog, plus the spec's source and freshness. Get operation ids from list_operations first. params: provider_id*, operation_id*, kind |
policy_language | The authoritative grammar of Alter's runtime-policy language, live from the deployed backend: every authorable rule type with its JSON body schema, caps, authorable levels, worked examples, and fail-closed semantics. Call with no arguments for the overview; pass `rule_type` (e.g. "content_match") for one type's full grammar. Use it before authoring rules with `alter policy rules create` — never gu params: rule_type |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.