Check AI spend summary for a workspace, team, or project. Returns real cost breakdown by provider, model, and time period from the ThinkNEO AI gateway.
Parameters (3)
workspacestring
Workspace name or ID
periodstring
Time period: today, this-week, this-month, last-month
group_bystring
Group costs by: provider, model, team, or project
thinkneo_complete
Run a governed LLM completion through the ThinkNEO AI gateway. The request is authorized, classified, and policy-checked against your workspace governance BEFORE any provider is called — a blocked prompt never reaches the model. Tenant/workspace are derived from your API key.
Parameters (5)
promptstringrequired
The user prompt to complete
modelstring
provider/model, e.g. 'anthropic/claude-haiku-4-5-20251001'
systemany
Optional system instruction
max_tokensinteger
Max output tokens
temperaturenumber
Sampling temperature
thinkneo_read_memory
Read Claude Code project memory files. Without arguments, returns the MEMORY.md index listing all available memories. With a filename argument, returns the full content of that specific memory file. Use this to access project context, user preferences, feedback, and reference notes persisted across Claude Code sessions.
Parameters (1)
filenameany
Name of the memory file to read (e.g. 'user_fabio.md', 'project_thinkneodo_droplet.md'). Omit to get the MEMORY.md index with all available files.
thinkneo_write_memory
Write or update a Claude Code project memory file (.md). Persists project context, user preferences, feedback, and reference notes across Claude Code sessions. Filename must end in .md with lowercase alphanumeric characters. Path traversal is blocked. Requires authentication.Use this to persist project context, user preferences, feedback, and reference notes across Claude Code sessions. The filename must end in .md and contain only lowercase letters, digits, underscores, and hyphens (e.g. 'user_fabio.md', 'project_new_feature.md'). Path traversal is blocked.
Parameters (2)
filenamestringrequired
Name of the memory file to write (e.g. 'user_fabio.md', 'project_thinkneodo_droplet.md'). Must end in .md.
contentstringrequired
Full markdown content to write to the file.
thinkneo_evaluate_guardrail
Evaluate a prompt or text against ThinkNEO guardrail policies before sending it to an AI provider. Returns risk assessment, violations found, and recommendations. Requires authentication.
Parameters (3)
textstringrequired
The prompt or text content to evaluate for policy violations (max 32,000 characters)
workspacestringrequired
Workspace whose guardrail policies to apply for this evaluation
guardrail_modestring
Evaluation mode: 'monitor' (log violations only) or 'enforce' (block the request on violation)
thinkneo_check
Free-tier prompt safety check. Analyzes text for prompt injection patterns and PII (credit card numbers, Brazilian CPF, US SSN, email, phone, passwords). Returns a safety assessment with specific warnings. No authentication required.
Parameters (1)
textstringrequired
The text or prompt to check for safety issues (max 50,000 characters)
thinkneo_check_policy
Check AI governance policies including model access, budget limits, data controls, and agent governance from the ThinkNEO gateway.
Parameters (1)
workspacestring
Workspace name or ID
thinkneo_get_budget_status
Check AI budget status including spend vs limit, forecast, and chargeback data from the ThinkNEO gateway.
Parameters (1)
workspacestring
Workspace name or ID
thinkneo_list_alerts
List active alerts for budget, policy, SLA, and security from the ThinkNEO gateway.
Parameters (2)
workspacestring
Workspace name or ID
severitystring
Filter by severity: critical, high, medium, low, all
thinkneo_get_compliance_status
Get compliance status including framework coverage (EU AI Act, ISO 42001, NIST AI RMF, SOC 2) and governance assessments from the ThinkNEO gateway.
Parameters (2)
workspacestring
Workspace name or ID
frameworkstring
Filter by framework: eu-ai-act, iso-42001, nist-ai-rmf, soc2, all
thinkneo_provider_status
Get real-time health and performance status of AI providers routed through the ThinkNEO gateway. Shows latency, error rates, and availability. No authentication required.
Parameters (2)
providerany
Specific provider to check: openai, anthropic, google, mistral, xai, cohere, or together. Omit to get status for all providers.
workspaceany
Workspace context for provider routing configuration (optional)
thinkneo_schedule_demo
Schedule a demo or discovery call with the ThinkNEO team. Collects contact information and preferences. No authentication required.
Parameters (7)
contact_namestringrequired
Full name of the person requesting the demo
companystringrequired
Company or organization name
emailstringrequired
Business email address to receive follow-up from the ThinkNEO team
roleany
Contact's role: cto, cfo, security, engineering, or other
interestany
Primary area of interest: guardrails, finops, observability, governance, or full platform
preferred_datesany
Preferred meeting dates, times, and timezone (e.g., 'Tuesdays or Thursdays, 9-11am EST')
contextany
Additional context such as current AI providers used, request volume, or specific use case
thinkneo_usage
Returns usage statistics for your ThinkNEO API key. Shows calls today, this week, this month, monthly limit, remaining calls, top tools used, estimated cost, and current tier. Works without authentication (returns general info).
No parameters.
thinkneo_route_model
AI Smart Router — find the cheapest model that meets your quality threshold. Specify your task type and quality requirements, and ThinkNEO will recommend the optimal model with estimated cost and savings vs premium models. Supports 17+ models across Anthropic, OpenAI, Google, Meta, Mistral, DeepSeek, Alibaba, Cohere, and xAI. Requires authentication.
Parameters (7)
task_typestringrequired
The type of AI task: summarization, classification, code_generation, chat, analysis, translation, or embedding
Maximum acceptable latency in milliseconds. Omit for no limit.
budget_per_requestany
Maximum budget per request in USD. Omit for no limit.
preferred_providersany
Comma-separated list of preferred providers (e.g., 'openai,anthropic'). These will be prioritized at similar cost.
estimated_tokensinteger
Estimated total tokens for the request (input + output). Default 1000.
text_sampleany
Optional sample text for better routing. Helps estimate token count and task complexity. Max 500 characters.
thinkneo_get_savings_report
Get your AI cost savings report. Shows total requests routed, original cost (what you'd have paid with premium models), actual cost, total savings, savings percentage, breakdown by task type, and model distribution. Requires authentication.
Simulate how much your organization would save on AI costs using ThinkNEO Smart Router. Enter your current monthly AI spend and primary model, and see estimated monthly and annual savings with a recommended model mix. No authentication required — try it now!
Parameters (3)
monthly_ai_spendnumberrequired
Your current monthly AI API spend in USD (e.g., 5000.00)
primary_modelstring
Your primary model: 'gpt-4o', 'claude-opus-4', 'claude-sonnet-4', 'gpt-4.1', or 'gemini-2.5-pro'
task_distributionany
JSON string of task distribution, e.g., '{"chat": 0.3, "summarization": 0.2, "code_generation": 0.2, "classification": 0.15, "analysis": 0.1, "translation": 0.05}'. Values should sum to ~1.0. Omit for default enterprise distribution.
thinkneo_evaluate_trust_score
Evaluate your organization AI Trust Score (0-100) across 10 dimensions: Guardrails, PII Protection, Injection Defense, Audit Trail, Compliance, Model Governance, Cost Controls, Outcome Validation, Observability, and Smart Routing. Returns a score, detailed breakdown, badge level (Platinum/Gold/Silver/Bronze/Unrated), and actionable recommendations. Score is valid for 30 days. Generates a public badge URL for embedding in websites and documentation. Part of the 'From Prompt to Proof' framework. Requires authentication.
Parameters (1)
org_namestringrequired
Organization name for the trust score badge (e.g., 'Acme Corp')
thinkneo_get_trust_badge
Get a public AI Trust Score badge by report token. Returns the organization name, score, badge level, and validity period. Use the badge URL to embed the trust badge in websites and documentation. No authentication required.
Parameters (1)
report_tokenstringrequired
The report token from a trust score evaluation (URL-safe string)
thinkneo_registry_search
Search the ThinkNEO MCP Marketplace — the npm for MCP tools. Discover MCP servers and tools by keyword, category, rating, or verified status. Returns name, description, tools count, rating, downloads, and verified badge. No authentication required.
Parameters (5)
querystring
Search query — matches name, description, tags, and tool names
categoryany
Filter by category: governance, security, data, development, productivity, communication, analytics, devops, finance, marketing, other
min_ratingany
Minimum average rating (1.0-5.0)
verified_onlyboolean
If true, return only verified packages
limitinteger
Max results to return (1-100, default 20)
thinkneo_registry_get
Get full details for an MCP server package from the ThinkNEO Marketplace. Returns readme, full tools list, version history, reviews, security score, and installation instructions. No authentication required.
Parameters (1)
namestringrequired
Package name (e.g. 'thinkneo-control-plane', 'filesystem', 'github')
thinkneo_registry_publish
Publish an MCP server to the ThinkNEO Marketplace. Validates the endpoint by calling initialize and tools/list, runs automated security scan for secrets and injection patterns, computes a security score (0-100), and stores the entry with version history. Validates the endpoint (calls initialize + tools/list), runs security scan (secrets detection, injection patterns), and stores the entry. Authentication required.
Parameters (10)
namestringrequired
Package name (lowercase, hyphens allowed, e.g. 'my-mcp-server')
display_namestringrequired
Human-readable display name
descriptionstringrequired
Short description of what this MCP server does (max 500 chars)
endpoint_urlstringrequired
MCP server endpoint URL (e.g. https://my-server.com/mcp)
Tags for discoverability (e.g. ['ai', 'governance', 'security'])
repo_urlstring
Source code repository URL
licensestring
License (e.g. MIT, Apache-2.0)
readmestring
Full readme/documentation in markdown
thinkneo_registry_review
Rate and review an MCP server in the ThinkNEO Marketplace. One review per user per package (updates on repeat). Rating from 1 (poor) to 5 (excellent) with optional comment. Reviews affect the package average rating shown in search results. One review per user per package (updates on repeat). Authentication required.
Parameters (3)
namestringrequired
Package name to review
ratingintegerrequired
Rating from 1 (poor) to 5 (excellent)
commentstring
Review comment (max 2000 chars)
thinkneo_registry_install
Get installation config for an MCP server from the ThinkNEO Marketplace. Returns ready-to-use JSON config for Claude Desktop, Cursor, Windsurf, or custom clients. Tracks the download. No authentication required.
Parameters (2)
namestringrequired
Package name to install (e.g. 'thinkneo-control-plane')
client_typestring
Your MCP client: claude-desktop, cursor, windsurf, or custom
thinkneo_bridge_mcp_to_a2a
Bridge MCP tool registry to A2A format. Shows tool-to-skill mappings.
Parameters (1)
tool_namestring
MCP tool name to bridge
thinkneo_bridge_a2a_to_mcp
Bridge A2A agents to MCP tool format.
Parameters (1)
agent_namestring
A2A agent name to map
thinkneo_bridge_generate_agent_card
Generate an A2A Agent Card from registry data.
Parameters (1)
agent_idstringrequired
Agent ID from registry
thinkneo_bridge_list_mappings
List all MCP <-> A2A bridge mappings for a tenant.
No parameters.
thinkneo_start_trace
Start a new agent observability trace. Creates a session that tracks all tool calls, model calls, decisions, and errors for an AI agent run. Returns a session_id to use with thinkneo_log_event and thinkneo_end_trace. Requires authentication.
Parameters (3)
agent_namestringrequired
Name of the agent being traced (e.g., 'marketing-agent', 'support-bot')
agent_typestring
Type of agent: 'assistant', 'autonomous', 'workflow', 'pipeline', or 'generic'
metadataany
Optional dict with additional context (e.g., {"task": "email-draft", "user_id": "u123"})
thinkneo_log_event
Log an event within an active agent trace. Supports event types: tool_call, model_call, decision, error, pii_access, guardrail_triggered. Returns event_id and running session cost. Requires authentication.
Parameters (9)
session_idstringrequired
Session ID from thinkneo_start_trace
event_typestringrequired
Event type: 'tool_call', 'model_call', 'decision', 'error', 'pii_access', or 'guardrail_triggered'
tool_nameany
Name of the tool called (for tool_call events)
model_nameany
Model used (for model_call events, e.g., 'gpt-4o', 'claude-sonnet-4-20250514')
input_summaryany
Brief summary of the input (max 500 chars, truncated if longer)
output_summaryany
Brief summary of the output (max 500 chars, truncated if longer)
costnumber
Estimated cost in USD for this event (e.g., 0.003 for an API call)
latency_msinteger
Latency in milliseconds for this event
metadataany
Optional dict with additional event context
thinkneo_end_trace
End an active agent trace and get the session summary. Returns total cost, duration, tool/model call counts, and event count. Triggers post-session anomaly detection (cost spikes, error rate). Requires authentication.
Parameters (2)
session_idstringrequired
Session ID from thinkneo_start_trace
statusstring
Final session status: 'success', 'failure', or 'timeout'
thinkneo_get_trace
Retrieve the full trace for an agent session. Returns the complete timeline of events (tool calls, model calls, decisions, errors), session metadata, total cost, duration, and any alerts triggered. Requires authentication.
Parameters (1)
session_idstringrequired
Session ID to retrieve the trace for
thinkneo_get_observability_dashboard
Get the agent observability dashboard — aggregated metrics for your AI agents. Includes total sessions, events, cost, error rate, latency, top agents, top tools, active alerts, and cost trend over time. Like Datadog, but for AI agents. Requires authentication.
Parameters (1)
periodstring
Time period: '1h', '24h', '7d', or '30d'
thinkneo_set_baseline
Define the pre-AI cost baseline for a business process. Example: 'customer_support_ticket costs $12 per ticket and takes 15 minutes without AI'. This baseline is used to calculate ROI when agents handle the same process. Call this once per process to establish the comparison point.
Parameters (6)
process_namestringrequired
Name of the business process, e.g. 'customer_support_ticket', 'loan_review', 'content_moderation'
cost_per_unit_usdnumberrequired
Pre-AI cost per unit in USD, e.g. 12.00 for a $12 support ticket
unit_labelstring
What one unit represents, e.g. 'ticket', 'review', 'decision', 'document'
avg_duration_minutesany
Average time in minutes for one unit without AI, e.g. 15
workspacestring
Workspace identifier
notesany
Additional context about this baseline
thinkneo_log_decision
Log a business decision made by an AI agent. Tracks the AI cost and the business value generated. If a baseline exists for the process, value is auto-calculated from the baseline cost. Example: agent 'support-bot' resolved a 'customer_support_ticket' at $0.03 AI cost, replacing a $12 human-handled ticket. ROI: 400:1.
Parameters (9)
agent_namestringrequired
Name of the AI agent that made the decision, e.g. 'support-bot', 'loan-reviewer'
decision_typestringrequired
Type of decision, e.g. 'ticket_resolved', 'loan_approved', 'content_reviewed'
ai_cost_usdnumber
Actual AI cost for this decision in USD, e.g. 0.03
process_nameany
Links to a baseline process for auto ROI calculation
value_generated_usdany
Explicit business value in USD. If omitted and process_name has a baseline, auto-calculated.
Log a risk event that was blocked or avoided by the governance layer. Quantifies the estimated dollar impact of the avoided risk. Examples: PII leak blocked (est. $50K GDPR fine), prompt injection prevented, policy violation caught before production. If estimated_impact_usd is not provided, a default is calculated from severity.
Estimated cost if this risk had materialized in USD
agent_nameany
Agent involved, if applicable
descriptionany
Brief description of what was blocked
workspacestring
Workspace identifier
thinkneo_decision_cost
Analyze cost-per-decision for AI agents. Shows the actual AI cost for each decision, compared to the pre-AI baseline. Answers: 'How much does each AI decision cost?' and 'How does it compare to doing it without AI?'
Parameters (4)
workspacestring
Workspace identifier
agent_nameany
Filter by specific agent
process_nameany
Filter by specific process
periodstring
Time period: 'today', 'this-week', 'this-month', 'all'
thinkneo_agent_roi
Calculate ROI per AI agent. Shows value generated vs AI cost consumed, with daily trend, success rate, and comparison to pre-AI baseline. Answers: 'Is this agent generating or consuming value?' and 'What's the ROI trend?'
Parameters (3)
workspacestring
Workspace identifier
agent_nameany
Specific agent to analyze. If omitted, returns all agents.
daysinteger
Number of days to analyze
thinkneo_business_impact
Executive business impact dashboard. Returns a single view of: total value generated by AI agents, total AI cost, net ROI, risk avoided in dollars, cost per decision, top performing agents, and risk event summary. This is the report a CxO needs to justify AI investment.
Parameters (2)
workspacestring
Workspace identifier
periodstring
Time period: 'this-week', 'this-month', 'this-quarter', 'all'
thinkneo_a2a_log
Retrieve A2A (agent-to-agent) interaction logs from the live gateway. Shows which agents called which, actions performed, costs, and outcomes.
Parameters (2)
workspacestring
Workspace identifier
limitinteger
Max events to return
thinkneo_a2a_policy
Retrieve A2A interaction policies from the live gateway. Shows allowed actions, rate limits, cost caps, and approval requirements.
Parameters (1)
workspacestring
Workspace identifier
thinkneo_a2a_flow
Visualize agent-to-agent communication flow. Shows registered agents, their approval status, and interaction patterns from the live gateway.
Parameters (1)
workspacestring
Workspace identifier
thinkneo_a2a_audit
Retrieve immutable audit trail for A2A interactions with hash verification. Each event is cryptographically chained for tamper detection.
Parameters (2)
workspacestring
Workspace identifier
trace_idany
Filter by trace ID
thinkneo_detect_waste
Detect waste and inefficiency in AI operations. Analyzes agent performance, A2A communication overhead, error costs, unused capacity, and cost outliers. Returns specific actionable findings like 'you are losing $3,200/month on error retries' or 'this flow is 5x more expensive than your best-performing flow'. This is the diagnostic tool that creates the buying trigger.
Parameters (2)
workspacestring
Workspace identifier
daysinteger
Analysis window in days
thinkneo_register_claim
Register an action claim from an AI agent. The agent declares it performed an action (e.g., sent an email, created a PR, wrote a file) and ThinkNEO will verify it actually happened. Returns a claim_id for tracking. Part of the Outcome Validation Loop — 'From Prompt to Proof'. Requires authentication.
Parameters (7)
actionstringrequired
Type of action claimed: 'email_sent', 'http_request', 'file_written', 'db_insert', 'pr_created', 'payment_processed', 'message_sent', 'api_call', 'task_completed', 'data_exported', 'notification_sent', 'custom'
targetstringrequired
Target of the action — what was acted upon. Examples: 'user@example.com' (email), 'https://api.example.com/endpoint' (http), '/opt/data/report.pdf' (file), 'usage_log' (db table)
evidence_typestringrequired
How to verify the claim: 'http_status' (check URL response), 'file_exists' (check file path), 'db_row_exists' (check database row), 'webhook' (wait for callback), 'smtp_delivery' (check email delivery), 'manual' (flag for human review)
agent_nameany
Name of the agent making the claim (e.g., 'marketing-agent')
session_idany
Optional observability session_id to link this claim to a trace
metadataany
Optional verification context. For http_status: {expected_status: 200, method: 'GET'}. For file_exists: {expected_hash: 'sha256...'}. For db_row_exists: {where_column: 'id', where_value: '123'}.
ttl_hoursinteger
Hours until claim expires if not verified (default 24, max 168)
thinkneo_verify_claim
Trigger verification of a registered action claim. Runs the appropriate verification adapter (HTTP check, file check, database check, etc.) and returns the result with evidence. If already verified, returns cached result (use force=true to re-verify). Part of the Outcome Validation Loop — 'From Prompt to Proof'. Requires authentication.
Parameters (2)
claim_idstringrequired
UUID of the claim to verify (from thinkneo_register_claim)
forceboolean
Force re-verification even if already verified/failed
thinkneo_get_proof
Retrieve the immutable proof record for a verified claim. Includes the original claim, verification evidence, verifier identity, and a SHA-256 proof hash for tamper detection. This is the 'proof' in 'From Prompt to Proof'. Requires authentication.
Parameters (1)
claim_idstringrequired
UUID of the claim to get proof for
thinkneo_verification_dashboard
Aggregated outcome verification metrics — verification rates, failure patterns, agent reliability rankings, and daily trends. Shows how reliably your AI agents are delivering verified outcomes. 'Datadog for AI outcomes'. Requires authentication.
Parameters (1)
periodstring
Time period: '24h', '7d', or '30d'
thinkneo_benchmark_report
View the outcome benchmark matrix — real quality scores per provider/model/task_type based on verified outcomes, not static estimates. Shows verification rates, sample counts, and rankings. Requires authentication.
Parameters (1)
task_typeany
Filter by task type: 'summarization', 'code_generation', 'classification', 'translation', etc. Leave empty for all.
thinkneo_benchmark_compare
Compare providers side-by-side for a specific task type. Shows quality scores, verification rates, and rankings based on real outcomes. Requires authentication.
Parameters (2)
task_typestringrequired
Task type to compare: 'summarization', 'code_generation', 'classification', 'translation', 'analysis', 'chat'
providersany
Optional list of providers to compare (e.g., ['anthropic', 'openai']). Leave empty for all.
thinkneo_router_explain
Explain why the Smart Router would choose a specific model for a task type. Shows both benchmark-based (real outcomes) and static quality estimates, and explains the reasoning behind the recommendation. Requires authentication.
Generate a compliance report for regulatory frameworks (EU AI Act, ISO 42001, SOC2, NIST). Exports from live audit data.
Parameters (3)
workspacestring
Workspace identifier
formatstring
Output format: ndjson or csv
frameworkstring
Framework: eu-ai-act, iso-42001, soc2, nist
thinkneo_sla_define
Define or update an SLA (Service Level Agreement) for an AI agent. Set accuracy, quality, cost, safety, or latency thresholds with automatic breach detection and configurable actions (alert, escalate, disable, switch_model). Like SRE SLOs but for AI agent outcomes. Requires authentication.
Parameters (6)
agent_namestringrequired
Agent name to set SLA for (e.g., 'support-bot', 'finance-agent')
'min' = actual must be >= threshold (for accuracy, quality). 'max' = actual must be <= threshold (for cost, latency).
thinkneo_sla_status
Check current SLA status for all agents or a specific agent. Shows actual metric values vs thresholds, healthy/breached status, and error budget remaining. Automatically records breaches. Requires authentication.
Parameters (1)
agent_nameany
Optional: specific agent name. Leave empty for all agents.
thinkneo_sla_breaches
View SLA breach history — which SLAs were breached, by which agents, actual vs threshold values, and resolution status. Requires authentication.
Parameters (2)
daysinteger
Days to look back (default 30)
agent_nameany
Filter by agent name
thinkneo_sla_dashboard
SLA overview dashboard — all agents, current status, error budgets, and recent breaches (7d). The SRE dashboard for AI agents. Requires authentication.
No parameters.
thinkneo_audit_export
Export audit events from the live gateway. Supports JSON and CSV formats with date range filtering for SIEM integration.
Parameters (4)
workspacestring
Workspace identifier
formatstring
Output format: ndjson or csv
start_dateany
Start date ISO format
end_dateany
End date ISO format
thinkneo_compare_models
Compare available AI models from the live gateway catalog.
Parameters (1)
modelsstringrequired
Comma-separated model IDs to compare (e.g. gpt-4o,claude-sonnet-4-20250514,gemini-2.5-flash)
thinkneo_count_tokens
Estimate token count for text (chars/4 approximation).
Parameters (1)
textstringrequired
Text to estimate tokens for
thinkneo_optimize_prompt
Analyze prompt and suggest optimizations with live metrics context.
Parameters (1)
promptstringrequired
Prompt text to analyze
thinkneo_rotate_key
Instruct the gateway to rotate an API key.
Parameters (1)
key_prefixstringrequired
First 8 chars of the key to rotate
thinkneo_manage_secrets
Check connector grants and secrets status from the gateway.
No parameters.
thinkneo_cache_status
Get semantic cache stats from the live gateway runtime metrics.
No parameters.
thinkneo_detect_injection
Detect prompt injection attempts in text using guardrail patterns. Also retrieves live guardrails_blocked stats from the gateway.
Parameters (1)
textstringrequired
Text to analyze for injection attempts
thinkneo_check_pii_international
Detect international PII across 30+ document types from 15+ countries: Brazil (CPF, CNPJ, RG, PIS), USA (SSN, EIN, ITIN, Passport), UK (NINO, UTR), Canada (SIN), EU (IBAN, VAT), Germany (Tax-ID), France (INSEE), Spain (DNI/NIE), Italy (Codice Fiscale), Argentina (CUIT), Mexico (CURP/RFC), Australia (TFN/ABN), India (Aadhaar/PAN), China (ID), Japan (My Number), and credit cards (Luhn validated). Required for LGPD/GDPR/HIPAA compliance. No authentication required.
Parameters (2)
textstringrequired
Text to scan for PII (max 100,000 chars)
countriesarray
Filter by country codes (BR, US, UK, CA, EU, DE, FR, ES, IT, AR, MX, AU, IN, CN, JP, INTL). Empty = all.
thinkneo_alert_rule_list
List your configurable Monitor Agent alert rules. Each rule watches a metric (e.g. an API key reaching a % of its budget, workspace spend, error rate) and notifies your channels (email/discord/whatsapp) when it fires. Requires an admin API key.
Parameters (1)
workspacestring
Workspace id (optional — defaults to the API key's workspace)
thinkneo_alert_rule_create
Create a Monitor Agent alert rule. Example: notify by email when API key 'X' reaches 75% of its budget → metric=key_spend_pct_of_budget, operator=gte, threshold=75, scope_value=<api_key_id>, budget_usd=<key budget>. Requires an admin API key.
Parameters (10)
namestringrequired
Human-readable rule name
metricstringrequired
One of: key_spend_24h_usd, key_spend_30d_usd, key_spend_pct_of_budget, workspace_error_rate_pct, workspace_max_rps, workspace_requests, workspace_spend_24h_usd, workspace_spend_30d_usd
thresholdnumberrequired
Threshold value to compare the metric against
operatorstring
Comparison: gte, gt, lte, lt, eq
scope_valuestring
API key id — required for key_* metrics
budget_usdnumber
Key budget in USD — required for key_spend_pct_of_budget
severitystring
low, medium, high, critical
channelsstring
Comma-separated: email, discord_webhook, whatsapp
cooldown_minutesinteger
Minimum minutes between firings
workspacestring
Workspace id (optional — defaults to the API key's workspace)
thinkneo_alert_rule_delete
Delete a Monitor Agent alert rule by its rule_id. Requires an admin API key.
Parameters (2)
rule_idstringrequired
The rule_id to delete (from thinkneo_alert_rule_list)
workspacestring
Workspace id (optional — defaults to the API key's workspace)
thinkneo_alert_rule_test
Send a test notification through a rule's configured channels to confirm delivery (email/discord/whatsapp). Requires an admin API key.
Parameters (2)
rule_idstringrequired
The rule_id to test (from thinkneo_alert_rule_list)
workspacestring
Workspace id (optional — defaults to the API key's workspace)
72 MCP Tools — Governance, guardrails, FinOps, smart routing, observability, compliance, outcome validation, and more.
24 A2A Skills — Bidirectional MCP-A2A bridge for Google's Agent-to-Agent Protocol (v0.3.0, Linux Foundation).
Apache-2.0 — Use it, fork it, contribute.
What This Is Not
Not the full ThinkNEO Platform. Governance orchestration, cryptographic audit chain, tenant management, and enterprise integrations are proprietary and run at thinkneo.ai.
Not a standalone security product. ThinkShield is the defense component of a larger governed platform.
Why Open
We open-source our defense layer because real security doesn't depend on hidden rules — it depends on tested, audited, continuously improved detection plus a strong governance moat around it.
Snort. Suricata. Falco. OWASP CRS. The security industry runs on open detection. We follow that tradition.
The detection is open. The governance is proprietary. That's where the moat is.
