3cx-pbx-admin--diagnosticslisted

# 3CX PBX Admin & Diagnostics ## Overview This is the plugin's system-level surface: diagnostics, the PBX's own configuration inventory, a restricted database query tool, call flow app details, and the smaller set of write/delete actions that change what calls the PBX will accept or how they route. ## Read-Only Capabilities Exact tool names are not published by 3CX — see the `api-patterns` skill and call `tools/list` for the authoritative names on a connected PBX. **System and diagnostics** - Get current PBX server time - Search/list structured PBX event log - List PBX services and their state - Search application logs **PBX inventory and database** - Describe a database table's schema - List DIDs - List IP blocklist entries - List configured PBX peers - List phone blacklist entries - List accessible database tables - List configured SIP trunks - Run a read-only SQL `SELECT` query (the `Query` tool) **Call flow tools** - Get a call flow app's details - Get a call flow app's files - Get an edit URL for a supported PBX object - List call flow apps ### The Query tool The `Query` tool is hard-restricted server-side to read-only SQL `SELECT` statements, regardless of the connecting account's 3CX role — this holds even for an account that could otherwise change configuration. That restriction is enforced inside the PBX itself. It is *not* automatically safe from a Conduit-permission standpoint, though, if this PBX is reached through Conduit's BYO connector rather than