Two read-only monitoring tools join the surface: get_alerts (the account alert log, with keyset paging) and get_readiness (the DMARC enforcement-readiness verdict). Both are token-gated: create an API token in the dashboard and the agent can watch a domain over the same transport it diagnoses one. 15 tools total. The skill adds the full operate workflow: enroll, verify, watch, propose, apply with human approval, re-check.