audit-searchSearch AxonFlow audit trail for recent tool executions, policy decisions, and compliance evidence
create-overrideCreate a governed session override for a policy that would otherwise deny — mandatory justification, server-clamped TTL, blocked for critical-risk policies
explain-decisionFetch the full reasoning behind an AxonFlow policy decision — matched policies, risk level, override availability, recent hit count
governance-statusCheck active governance policies and recent activity summary
list-overridesList active session overrides scoped to the caller's tenant — useful for auditing dangling overrides or confirming an override is in effect before retrying
list-recent-decisionsSurface the user's recent AxonFlow governance decisions — answers "what just got blocked", "show me my recent denials", or feeds a decision-history forensic flow
pii-scanScan content for PII and secrets before writing files, sending messages, or including sensitive data in responses. Use before and after any operation that handles potentially sensitive content.
policy-listList all active governance policies with categories, patterns, and severity levels
post-execute-auditRecord tool execution in AxonFlow audit trail after tool calls complete. Use after any tool call for compliance evidence.
pre-execute-checkCheck AxonFlow governance policy before executing commands, writing files, or modifying any state. Also scan file content for PII before writing. Use before any tool call that creates, modifies, or deletes data.
pro-tier-statusReport the user's current AxonFlow tier (Free or Pro), Pro license expiry date, endpoint, and whether a license token is configured. Use when the user asks "am I on Pro?", "what tier am I on?", "when does my Pro license expire?", "is my license active?", or wants to know which AxonFlow they're talki
recover-credentialsHelp the user recover lost AxonFlow tenant credentials via the email magic-link flow, or apply a paid Pro-tier license token. Use when the user says they've lost their AXONFLOW_AUTH, lost their secret, can't authenticate, or has a new AXON- license token to install.
revoke-overrideRevoke a previously-created AxonFlow session override — emits an audit event and ensures subsequent policy evaluations no longer consult it