Callers

Callers are Act-As identities projected from audit evidence in the active workspace. Tools expose identity, verification, and attributed activity without returning credentials.

Interactive MCP users are not added to this registry. Their session identity and revocable grants belong to the interactive OAuth flow; Callers tracks customer end users carried through delegated Act-As.

dome_callers_list

List callers. Requires audit.view.

The response includes observed verification methods and lifetime LLM calls, tool calls, and LLM tokens.

{
  "name": "dome_callers_list",
  "arguments": {
    "group": "support",
    "attribute_key": "region",
    "attribute_value": "us"
  }
}

dome_callers_get

Get one caller with attributed agents, models, tools, and activity. Requires audit.view.

Use the record UUID when two verification providers assert the same subject. Retrieve IDs with dome_callers_list.

Current-month blocks appear only when activity belongs to the current UTC calendar month. Lifetime totals remain available separately.

{
  "name": "dome_callers_get",
  "arguments": {
    "caller": "{{CALLER_ID}}"
  }
}

dome_callers_delete

Erase a projected caller record and its per-agent activity rows. Requires config.manage.

The operation leaves underlying audit evidence intact. Later traffic for the same identity recreates the caller record.

{
  "name": "dome_callers_delete",
  "arguments": {
    "caller": "{{CALLER_ID}}"
  }
}