Workspace plugins
Read installed plugins and manage their credentials and enabled state.
Use list_plugins to inspect the plugins installed in your workspace. Use list_mcp_servers to inspect its registered external servers. The former Tools → MCP Servers screen is not part of the current app.
Credentials
For OAuth, call reauth_plugin_credential and complete the returned browser authorization flow. For secret authentication, use set_plugin_secret. Org Owner or Admin authority is required for these credential changes.
Oxagen encrypts credentials at rest and uses them for mediated calls on the agent's behalf. Until authentication succeeds, tools that need that credential are unavailable. If a credential expires or is revoked, authenticate again.
Enable, disable, and remove
Use set_plugin_enabled to change the enabled state. A disabled plugin stays installed, so you can enable it later. Use uninstall_plugin to remove the installation.
The tool materializer also considers connection health, IAM, tool roles, consent, and approval. An installed and enabled plugin is not a promise that every agent can call every tool it offers.
See Plugin governance for the audit record and External MCP servers for runtime configuration.
MCP server registries
Add and manage MCP server registries so the marketplace lists every server they publish.
Architecture atlas
Generated diagrams of the Oxagen monorepo: datastores and schemas, the request path, the capability kernel's gate order, the governed turn, run evidence, metering and billing, the knowledge graph, background jobs, the CLI and MCP surfaces, deployment topology, the configuration contract, the inventory of secrets and variables, and the ADR index.