# Brainkb MCP server

Source: https://glimind.com/server/mcp-registry%2Forg.brainkb%2Fbrainkb
Registry id: `mcp-registry/org.brainkb/brainkb`
Status: live (checked 2026-10-27T14:11:32.293Z)

## Measurements (30 days)

- Uptime: 99.84%
- Checks: 5084
- Outages (90 days): 6

## Install

```json
{
  "mcpServers": {
    "brainkb-mcp-server": {
      "type": "http",
      "url": "https://mcp.brainkb.org/mcp"
    }
  }
}
```

Claude Code:

```sh
claude mcp add --transport http brainkb-mcp-server https://mcp.brainkb.org/mcp
```

## Tools (72)

- `brainkb_activate_user`: (Admin) Activate a user's account (sets the JWT user active) by email.
- `brainkb_add_access_rule`: (Space manager) Restrict a space action to a subject. action: 'read' | 'write' | 'manage'. subject_type: 'global_role' (e.g. 'Admin','Lab Member') | 'member' (a
- `brainkb_add_space_graph`: Register a named graph and bind it to a space, so ingest/read on that graph are governed by the space's membership and visibility. Owner/editor only. The named_
- `brainkb_add_space_member`: Add/update a space member. role: 'owner' | 'editor' | 'viewer'. Owner only.
- `brainkb_assign_role`: (Admin) Assign a role/group to a user by email (e.g. 'Lab Member', 'External', or a custom group). The user must already have a profile (created on first login/
- `brainkb_available_roles`: (Admin) List the available roles/groups (Admin, Lab Member, Curator, …).
- `brainkb_ban_user`: (Admin) Ban a user by email (reversible; preserves history). This is how accounts are removed — there is NO hard delete. Banning an Admin is SuperAdmin-only; Su
- `brainkb_capabilities`: (Admin only) Show a user's roles, effective capabilities, and delegated grants. Useful to check why someone can/can't create team spaces, ingest, etc.
- `brainkb_create_permission`: (Admin) Create a new usermanagement permission, e.g. name='dataset.export', resource='dataset', action='export'. Attach it to roles via the usermanagement role-
- `brainkb_create_role`: (Admin) Create a new role/group — e.g. an 'External' collaborator group — which can then be assigned with brainkb_assign_role.
- `brainkb_create_space`: Create a workspace/space, or a subspace inside one. The caller becomes owner. slug: lowercase/hyphen id, **globally unique** — if it's already taken the call re
- `brainkb_create_token`: Generate a Personal Access Token (PAT) for browser-free auth. Requires you to be logged in already (brainkb_login or brainkb_globus_login). The token is shown O
- `brainkb_deactivate_user`: (Admin) Deactivate a user's account by email.
- `brainkb_delete_space`: PERMANENTLY delete a space and everything in it. SuperAdmin only; irreversible. Drops the space's named graphs and the ingestion-history (delta) graphs that hol
- `brainkb_delta`: The exact triples a job added (its delta), as JSON-LD.
- `brainkb_delta_compare`: Compare two jobs' deltas: A-only / B-only / shared triple counts + triples.
- `brainkb_delta_history`: A named graph's change history: one entry per ingest delta (job, triple count, timestamp), newest first.
- `brainkb_discard_upload`: Delete one of your staged uploads without ingesting it.
- `brainkb_finish_login`: Complete an OAuth login started with brainkb_globus_login by exchanging the one-time code shown in the browser for a session token. The code is single-use and n
- `brainkb_get_space`: A space's details: graphs, members (direct, plus `inherited_members` with the parent space each comes from), visibility, `parent_slug`, `ancestors` (root first)
- `brainkb_globus_login`: Start an OAuth login (Globus / ORCID / GitHub) for THIS session — use this instead of brainkb_login when the user signs in with Globus rather than a password. R
- `brainkb_grant_capability`: (Admin only) Delegate a capability to a user — e.g. 'create_team_space' or 'manage_team_space' so a Curator/Lab Member can create/manage team spaces. Grantable:
- `brainkb_grant_role_capability`: (Admin only) Grant a capability to a whole role/group so EVERY member gets it — e.g. give a custom group 'uk_collaborator' the 'ingest' or 'create_private_space
- `brainkb_ingest_files`: Ingest local RDF files (ttl/nt/nq/rdf/owl/jsonld/json) into a named graph. Returns a job_id; runs in the background — poll with brainkb_job_status.
- `brainkb_ingest_text`: Ingest raw RDF text (Turtle / N-Triples / JSON-LD, auto-detected) into a named graph. Returns a job_id; ingestion runs in the background — poll with brainkb_job
- `brainkb_ingest_upload`: Ingest a file you staged with `POST /upload` into a named graph. This is the route for a large local file: your HTTP client streams the bytes straight to this s
- `brainkb_job_status`: Detailed status of one ingest job: status, progress %, current file/stage, per-file failures, and (when complete) a summary.
- `brainkb_list_access_rules`: List a space's fine-grained access rules (member/manager of the space).
- `brainkb_list_capabilities`: (Admin only) Catalog of all KG capabilities, which are delegatable ('grantable'), which are admin-only, and a description of each. Use this to see the available
- `brainkb_list_jobs`: List the user's ingest jobs (newest first) with status and progress.
- `brainkb_list_permissions`: (Admin) List all usermanagement permissions (resource/action pairs used for page-access and role-permission mapping). These are the addable 'permission' options
- `brainkb_list_registered_graphs`: List registered named graphs visible to the caller (private-space graphs the caller can't access are hidden).
- `brainkb_list_reserved_graphs`: (Admin/SuperAdmin) List reserved named graphs: graph IRIs, or every IRI under a prefix, that only an Admin/SuperAdmin — or, when reserved for a space, that spac
- `brainkb_list_spaces`: List spaces the user can see (their own/member spaces + public ones), each annotated with THIS caller's permission so you know what they may do: - your_role: 'o
- `brainkb_list_tokens`: List your Personal Access Tokens (metadata only — the secret is never shown): id, name, prefix, created/last-used/expiry, and whether each is active/revoked/exp
- `brainkb_list_uploads`: List RDF files YOU have staged with POST /upload but not yet ingested. Shows each upload_id, its size, sha256 and when it expires. Only your own uploads are vis
- `brainkb_list_users`: (Admin) List users (profiles) — filter by `q` (name/email/orcid) or `role`. Shows profile_id, email, roles, providers, ban status.
- `brainkb_list_writable_spaces`: Spaces the caller can ingest into, each with its graphs (and descriptions) and `parent_slug` for subspaces — decided by the same checks ingestion uses: owner/ e
- `brainkb_login`: Authenticate to BrainKB with the user's credentials and cache the JWT for THIS session only (isolated per caller). The password/token are never echoed. Uses sin
- `brainkb_logout`: Forget the cached token for this session.
- `brainkb_provenance_graph`: PROV-O ingestion/activity history (JSON-LD) for a named graph.
- `brainkb_provenance_job`: PROV-O provenance bundle (JSON-LD) for one ingest job.
- `brainkb_qa_list`: Find a canned question BrainKB can answer, then run it with brainkb_qa_run. Prefer these over writing SPARQL: they are vetted against BrainKB's actual vocabular
- `brainkb_qa_run`: Run a canned question from brainkb_qa_list by id. `params` maps parameter names to values; they are validated and escaped, never spliced in raw. Runs through th
- `brainkb_read_space`: Read all RDF (JSON-LD) in a space's graphs. Public spaces are readable by anyone without logging in (read-only); private spaces require login and membership. Do
- `brainkb_recover_job`: Attempt to recover a stuck/errored ingest job (marks it recoverable/errored).
- `brainkb_remove_access_rule`: (Space manager) Delete a fine-grained access rule by its id (see brainkb_list_access_rules).
- `brainkb_remove_role`: (Admin) Remove a role/group from a user by email.
- `brainkb_reserve_graph`: (Admin/SuperAdmin) Reserve a named graph so other users can't create it. match_type 'exact' reserves one graph IRI; 'prefix' reserves every IRI starting with it
- `brainkb_revoke_capability`: (Admin only) Revoke a previously granted capability from a user.
- `brainkb_revoke_role_capability`: (Admin only) Revoke a capability from a role/group.
- `brainkb_revoke_token`: Revoke one of your Personal Access Tokens by id (see brainkb_list_tokens). Takes effect immediately — the next call using that token fails.
- `brainkb_role_capabilities`: (Admin only) List the capabilities granted to a role/group (e.g. 'uk_collaborator', 'Lab Member').
- `brainkb_search`: Full-text search over the knowledge graphs, access-filtered by space visibility. Pass `space` to scope to one workspace, omit for a full search. No login needed
- `brainkb_set_space_visibility`: Set a space 'public' (anyone, even anonymous, can read) or 'private' (members only). Owner only. Everything in a public space is public: making a space public a
- `brainkb_space_tree`: A space and every subspace below it (any depth), nested: each node has slug, name, visibility, the caller's role and whether it's inherited from a parent, and i
- `brainkb_sparql`: Run an arbitrary SPARQL query. Requires an Admin/SuperAdmin role (the sparql_admin capability) — for ordinary questions prefer brainkb_search, brainkb_read_spac
- `brainkb_synthscholar_evidence`: Evidence spans of an ingested review: the quoted text its claims rest on, with the study, section, relevance, and whether the quote was matched verbatim in the 
- `brainkb_synthscholar_find_study`: Which ingested reviews (that you can read) include or screened a study — by DOI, PMID or part of its title (6+ characters) — and what happened to it in each: in
- `brainkb_synthscholar_get_review`: One ingested review: summary, its graph and space, the files kept (path, kind, media type, size, sha256), the run's search log and verification, the screening b
- `brainkb_synthscholar_ingest`: Ingest a SynthScholar review — the output directory of a run (the folder holding review.json and review.ttl, as the synthscholar skill writes it) — into a space
- `brainkb_synthscholar_list_reviews`: Ingested SynthScholar reviews you can read (public spaces: anyone): id, title, research question, space, graph, included count, when ingested, ingest job. `q` f
- `brainkb_synthscholar_records`: Per-study records an ingested review produced. `kind`: `charting` (the data-charting form's answers per study), `appraisal` (critical appraisal by domain) or `n
- `brainkb_synthscholar_screening`: The screening audit trail of an ingested review: every decision with its stage (title_abstract | full_text), decision (include | exclude), what it was judged on
- `brainkb_synthscholar_studies`: The included studies of an ingested review, filtered. `q`: text in title, authors, journal, DOI, PMID or keywords. `full_text`: true = read in full, false = abs
- `brainkb_synthscholar_text`: An ingested review's own text: `abstract`, `introduction`, `synthesis`, `bias`, `limitations`, `conclusions`, `research_question`, `search_queries` or `per_grou
- `brainkb_unban_user`: (Admin) Lift a ban on a user by email.
- `brainkb_unreserve_graph`: (Admin/SuperAdmin) Remove a reservation by its id (see brainkb_list_reserved_graphs). System reservations cannot be removed.
- `brainkb_update_space`: Rename a space, change its description, and/or give it a new slug. Owner/manager only. Pass only what changes; description="" clears it. `new_slug` (lowercase l
- `brainkb_upload_status`: State of one of your staged/submitted uploads. `state` is `staged` (waiting for brainkb_ingest_upload), `submitting` (the server is streaming it to the ingest A
- `brainkb_use_token`: Use a Personal Access Token (brainkb_pat_...) for THIS session — an alternative to setting BRAINKB_TOKEN in the config. Validates the token, then caches it so s
- `brainkb_whoami`: Report the current caller's auth state (email, authenticated, and when the cached session expires). When signed in it also returns base_url — the backend THIS S

Measured by Glimind (https://glimind.com): MCP handshake + tool list only, no tool is ever called. CC BY 4.0.