We read every description in its 17 tools, from the live server, and the listing for 0.2.0. 6 checks, no findings.
Hidden instructionsNothing tells the agent to override its rules or keep things from you.
Passed
Invisible textNo invisible or direction-flipping characters.
Passed
Access to credentialsNo reaching for SSH keys, cloud credentials, wallets or the keychain.
Passed
Downloads and runs codeNo piping downloads into a shell or running encoded payloads.
Passed
Sends data outNo uploads of credential files or catch-all collection endpoints.
Passed
Leaked secretsNo API keys, tokens or private keys published by mistake.
Passed
Tool changes
None since Oct 26
Pinned tool set17
3 can change data · none can delete. Each tool is fingerprinted; every rescan compares against these hashes. Dashed access is read from the name.
Tool
Access
Description
Pinned hash
add_knowledge
write
Add knowledge · Train the AI agent by adding a knowledge source. type='url' crawls a website (up to 50 pages, fewer when the workspace knowledge-base quota is nearly full); type='qa' stores a single question/answer pair. Ingestion is asynchronous, the source starts as PENDING; poll `list_knowledge` for READY status.
sha256:5e0a…6511
claim_account
—
Claim SingChat account · Return the link to claim (permanently secure) this SingChat workspace by setting an email and password. Use this for workspaces that were auto-created via MCP so the user does not lose access. The link is single-use and expires after 15 minutes. Requires an authenticated legacy workspace.
sha256:fd96…86c6
configure_agent
—
Configure AI agent · Configure this workspace's AI support agent. All fields are optional, only the fields you pass are updated; the rest keep their current values. Call with no fields to just read back the current configuration. Does not touch or return any API keys.
sha256:c53c…1651
fetch
read
Fetch · Fetch the full text of a single document by id, using an id returned by the search tool. With a workspace API key this reads a knowledge document from that workspace; without a key it reads a SingChat help article. Returns id, title, text, url, and optional metadata.
sha256:819d…a488
get_analytics
read
Get Analytics · Return a compact analytics summary for this workspace over the last `days` days (default 30): conversation counts + resolution rate, message volume + AI share, plus a live snapshot of today (UTC).
sha256:acdf…930a
get_conversation
read
Get conversation · Fetch a single conversation with its contact details and the most recent messages (oldest→newest).
sha256:46b1…b0c4
get_embed_snippet
read
Get widget embed snippet · Return the SingChat chat-widget embed code for this workspace's web inbox, in three flavors: plain HTML, React (useEffect), and Next.js (next/script). Requires a workspace API key. Optionally pass `platform` to get just one flavor.
sha256:6299…fcfd
list_conversations
read
List conversations · List the workspace's support conversations (agent/inbox view), newest activity first. Optionally filter by status or a free-text search over the contact name/email and last message. Returns a compact list: id, contact name, status, unreadCount, last message preview, updatedAt.
sha256:7b98…38e0
list_knowledge
read
List knowledge · List all knowledge documents for this workspace with their processing status (PENDING | PROCESSING | READY | FAILED) and chunk counts. Use this to check whether items added via add_knowledge have finished training.
sha256:4202…4f9c
manage_faq
—
Manage FAQ · List, create, update, or delete this workspace's FAQ items (shown in the chat widget and usable by the AI agent). Set `action` to 'list' | 'create' | 'update' | 'delete'. 'create' needs `question` + `answer`; 'update' and 'delete' need `id`.
sha256:b0c0…c983
ping
—
Ping · Health check for the SingChat MCP server. Returns 'pong' and whether this request is authenticated to a workspace.
sha256:f45f…cba7
reply_to_conversation
write
Reply to conversation · Send an agent reply through a supported SingChat real-time inbox. This takes the conversation over from the AI and broadcasts the message to the visitor and agent inbox. Email, Telegram, and WhatsApp conversations are rejected before any change.
sha256:d371…43ea
Show all 17 tools ›
resolve_conversation
—
Resolve conversation · Mark a conversation as RESOLVED (closes it). The visitor's widget will no longer show it as active.
sha256:7456…f9e8
search
read
Search · Search SingChat for relevant documents. When called with a workspace API key, this searches that workspace knowledge base; without a key it searches SingChat's own help content (what SingChat is, adding the chat widget, MCP setup, free tier, AI training, channels, white label, pricing). Returns a list of results with id, title, and url. Use the fetch tool with a result id to read the full text.
Set pinned as sha256:524e…eecc · still listed 6 h ago
sha256:edd3…7d8e
search_knowledge
read
Search knowledge · Semantic search over the workspace knowledge base. Returns the most relevant chunks (with source document title and similarity score) for a query. Only searches documents that have finished training (status READY).
sha256:dda8…ac55
set_keywords
write
Add keyword auto-reply · Add a keyword auto-reply rule: when an inbound message matches any of the keywords, the bot replies with the given text. Good for canned FAQ-style triggers (e.g. keyword 'invoice' -> 'Download it from the billing page').
sha256:ef0d…f347
singchat_setup
—
Set up SingChat · Get the user up and running with SingChat live-chat. Call this FIRST. If no authenticated workspace is configured, this creates a brand-new free workspace and returns a short-lived, single-use browser claim link plus the website embed snippet. The user chooses their own sign-in details in the browser; no reusable credentials are returned to the model. If a workspace is already authenticated, it returns THIS workspace's embed snippet and dashboard link (it never creates a duplicate workspace).
