Tools

Control-plane tools available to LLM clients via MCP.

Writes are hidden from the stdio proxy unless --allow-writes is set. Setup examples always include that flag; HTTP MCP lists writes whenever the token can create.

Timestamps in tool JSON are UTC (Zulu) RFC3339 and end in Z (for example 2026-09-04T04:23:00Z). If you name a calendar day, clock time, or age, convert that UTC instant to the local machine’s timezone first. Do not say “today” or “yesterday” from the UTC date digits — that calendar day can be a day ahead of local time.

For prompts to paste into a client, see Sample queries. To connect, see Agents.

Catalog

Domain	Read	Write
Orgs	whoami, list_orgs, select_org
Apps	list_apps, get_app, list_app_branches, get_app_branch, list_app_branch_runs, get_app_branch_run, list_app_branch_preview_sources	preview_app_branch
Components	list_components, get_component, list_builds, get_build
Installs	list_installs, get_install, get_install_readme, get_install_health, list_install_components, get_install_inputs, list_workflows, get_workflow, get_workflow_step, watch_workflow, get_pending_approvals, list_deploys, get_deploy	update_install_inputs, deploy_install_components, reprovision_install, reprovision_sandbox, deprovision_install, deprovision_sandbox, approve_step, reject_step, retry_step, cancel_workflow
Actions	list_install_actions, get_action	run_action
Logs	get_workflow_step_logs, get_deploy_logs, get_build_logs
Runbooks	list_runbooks, get_runbook	run_runbook

Writes

Mutating tools are prefixed with WRITE OPERATION: in their descriptions. The stdio proxy hides them unless you pass --allow-writes. Your token must also have create permission.

Destructive tools (deprovision, approve/reject, preview apply, and similar) should be confirmed with the user before the client sets flags such as confirm=true or mode=apply.