MCP Tool Reference

This page is generated directly from the Nametag MCP server, so it always matches the tools the server actually exposes. Every tool is a call to the public Nametag API.

Scopes

Tools are gated by the access level a console user grants when connecting a client. The levels map to these capability scopes:

Scope	Meaning
nametag.verifications.read	Read verification requests and results.
nametag.verifications.write	Create and cancel verifications.
nametag.accounts.read	Look up accounts and their status.
nametag.directories.read	List identity-provider integrations.
nametag.directories.write	Add and modify integrations.
nametag.console.links	Build deep links into the Nametag console.
offline_access	Obtain a refresh token for long-lived access.

Tools

Cancel a verification (cancel_verification)

Cancel an outstanding verification request by id. The link stops working. This cannot be undone.

Scope: nametag.verifications.write · Minimum role: user · Destructive

Parameter	Type	Required	Description
id	string	yes	The verification request id to cancel.

Build a console link (console_link)

Build a deep link into the Nametag console for a human to open. Use target to pick the destination: “request” (view a verification by ticket; needs ticket), “requests” (the verification search page; optional query), “integrations” (the integrations page for an environment), or add_integration (start connecting a new integration; needs kind, e.g. okta). Returns a URL — this tool does not change anything.

Scope: nametag.console.links · Read-only

Parameter	Type	Required	Description
env	string	no	Environment id (required for env-scoped targets).
kind	string	no	Integration kind to add, e.g. okta (for target=add_integration).
query	string	no	Optional search text (for target=requests).
target	enum: request, requests, integrations, add_integration	yes	The console destination.
ticket	string	no	The verification ticket/short code (for target=request).

Create a verification request (create_verification_request)

Create a Nametag identity-verification request and return a link the person can open to verify themselves. Optionally deliver the link automatically by SMS (set phone) or WhatsApp (set whatsapp) in E.164 format like +12025550123. Use label to tag the request with a name or helpdesk ticket number so you can find it later. Returns the verification link, its id, and status.

Scope: nametag.verifications.write · Minimum role: user

Parameter	Type	Required	Description
claims	array	no	Identity claims to request, e.g. [“nt:name”,“nt:email”]. Optional; the environment default is used otherwise.
env	string	no	Environment id to create the request in. Omit if the connection is scoped to a single environment.
external_ticket	string	no	A reference into an external ticketing system (Zendesk, ServiceNow, …). Optional.
label	string	no	A label for the request, e.g. the person’s name or a helpdesk ticket number. Shown in the console and searchable.
phone	string	no	Phone number in E.164 format (e.g. +12025550123). If set, the link is sent by SMS.
template	string	no	Template id to use for the request (optional).
ttl	string	no	How long the link is valid, as a Go duration like 72h. Optional.
whatsapp	string	no	Phone number in E.164 format. If set, the link is sent by WhatsApp.

Find accounts (find_accounts)

Search directory accounts by free text — name, email, username, or phone. Use this to answer “which accounts does Alice Smith have?” or “has alice@example.com been verified?”. Each result says whether the account is bound to a verified identity (verified) or not.

Scope: nametag.accounts.read · Minimum role: user · Read-only

Parameter	Type	Required	Description
env	string	no	Environment id to search. Omit if the connection is scoped to a single environment.
limit	integer	no	Maximum results to return (default 50).
query	string	yes	Free-text search: a person’s name, email, username, or phone number.
verified	boolean	no	If set, only return accounts that are (true) or are not (false) bound to a verified identity.

Find verifications (find_verifications)

Search verification requests in an environment by free text — matches labels, ticket numbers, phone numbers, and names. Use this to answer questions like “show me the verification for ticket 1234”. Returns the matching requests with their state and status.

Scope: nametag.verifications.read · Minimum role: user · Read-only

Parameter	Type	Required	Description
env	string	no	Environment id to search. Omit if the connection is scoped to a single environment.
query	string	yes	Free-text search across label, ticket, phone, and name.
status	enum: active, expired, hideExpired, scheduledForDeletion, rejectedAll, rejectedFraud	no	Optional status filter.

Get an account (get_account)

Fetch a single account by its Nametag account id, an email/username identifier, or the directory’s immutable id. Returns the account’s identifiers, display name, and whether it is bound to a verified identity.

Scope: nametag.accounts.read · Minimum role: user · Read-only

Parameter	Type	Required	Description
id	string	yes	The account id, an email/username, or the directory immutable identifier.

Get account recovery status (get_account_status)

Report an account’s recovery status: recent activity and, per recovery factor (MFA reset, password reset, temporary access pass, unlock), whether the account is eligible. Requires the account id and its environment.

Scope: nametag.accounts.read · Minimum role: user · Read-only

Parameter	Type	Required	Description
account_id	string	yes	The account id.
env	string	no	Environment id the account belongs to. Omit if the connection is scoped to a single environment.

Get a verification (get_verification)

Look up a single verification request and its result. Provide id (the request id), or external_ticket together with env, or ticket (the short code in a verification link). Returns the current state (e.g. new, in progress, verified/success, rejected, expired) and, if the person completed it, the verified subject.

Scope: nametag.verifications.read · Minimum role: user · Read-only

Parameter	Type	Required	Description
env	string	no	Environment id; required when looking up by external_ticket.
external_ticket	string	no	An external ticket reference; requires env.
id	string	no	The verification request id.
ticket	string	no	The short code from a verification link (nametag.co/i/).

List environments (list_environments)

List the Nametag environments this connection can access, with their ids and names. Verifications and accounts always belong to an environment; use this to discover which one to use.

Read-only

This tool takes no parameters.

List integrations (list_integrations)

List the identity-provider (directory) integrations configured for an environment — for example Okta, Microsoft Entra, Duo, or OneLogin. Returns each integration’s id, kind, and status.

Scope: nametag.directories.read · Minimum role: user · Read-only

Parameter	Type	Required	Description
env	string	no	Environment id. Omit if the connection is scoped to a single environment.

Describe this connection (whoami)

Describe the current Nametag connection: which organization and environments it can access, the access level granted, and the capabilities (scopes) it holds. Use this to check what you are allowed to do before attempting an action.

Read-only

This tool takes no parameters.