Tool reference
Every tool the connector exposes, grouped by what it touches, with its display title and whether it reads or writes.
The connector uses the platform's agent tools plus account management controls shared with the CLI. Display titles are what most hosts show; the snake_case name is what the model calls. Tools not marked read-only are writes, and hosts that gate on annotations ask before running them.
Integrations and credentials
| Tool | Title | Reads only | Does |
|---|---|---|---|
search_internal_api_docs | Search Integration Actions | yes | Hybrid search across every operation the workspace can use. |
get_internal_api_operation_docs | View Integration Action Details | yes | One operation's full reference. |
search_connected_credentials | View Connected Accounts | yes | Credentials the member can use, with env var names. |
user_connect_credential | Ask to Connect an Account | Returns a dashboard link to connect a service. | |
bash | Run a Command | Run a shell command in the sandbox with declared credentials injected. Open-world. | |
get_credential_health | Check a Connection | yes | Stored status, expiry, scopes and last introspection time; no secrets. |
refresh_credential | Refresh a Connection | Refresh provider introspection. | |
rename_credential | Rename a Connection | Set an owner-controlled label. | |
update_credential_notes | Update Connection Notes | Update usage guidance. | |
get_credential_dependents | View Connection Dependents | yes | Resources that depend on the connection. |
get_credential_access_history | View Connection Access History | yes | Access history for credentials owned by the member. |
delete_credential | Disconnect an Account | Disconnect an owned account. Destructive. |
Sandbox and files
Images, browser screenshots, and PDFs return native MCP media content rather than encoded text. A host must support the corresponding image or embedded-resource content to display it. Ordinary text output remains bounded.
| Tool | Title | Reads only | Does |
|---|---|---|---|
read_file | Read a File | yes | |
write_file | Write a File | ||
edit_file | Edit a File | Targeted string replacement. | |
delete_file | Delete a File | Destructive. | |
list_files | List Files | yes | |
search_files | Search Files | yes | |
send_file_to_user | Send a File | Upload a sandbox file and return a seven-day download link. |
Web
| Tool | Title | Reads only | Does |
|---|---|---|---|
search_internet | Search the Web | yes | Open-world web search. |
scrape_webpage | Read a Web Page | yes | Fetch a page through the proxy scraper. Also open-world. |
Workflows, apps, and skills
| Tool | Title | Reads only | Does |
|---|---|---|---|
search_resources | Search Workflows, Apps, and Skills | yes | |
link_resources | Link Resources | Show the user a card linking to an existing workflow, app, skill, or specialist. | |
load_resource | Open a Workflow, App, or Skill | yes | Load its files into the sandbox for editing. |
create_resource | Create a Workflow, App, Skill, or Custom API | Create and scaffold in the specialist named by specialistId. Runs immediately; see the caveat below. | |
update_resource | Publish Changes | Validate and publish the sandbox files as the live version. | |
validate_resource | Validate Changes | yes | Workflow/app checks or skill frontmatter and bundle validation, no publish. |
get_live_files | View Published Files | yes | |
get_resource_config | View Settings | yes | Credential, const, and trigger bindings. |
update_resource_config | Update Settings | Wire resource credentials, consts, schedules, and poll trigger credentials/input values. | |
set_workflow_type | Set Workflow Type | Switch code and agent. | |
set_resource_specialist | Move to a Specialist | ||
search_trigger_providers | Search Triggers | yes | |
fetch_workflow_trigger_sample | Fetch Sample Trigger Data | yes | Live records from a configured poll trigger. |
stage_workflow_input_file | Attach a Workflow Input File | Stage a file for a file-type input. | |
preview_workflow_filter | Preview Workflow Filter | Run the workflow's filter.ts once and return its decision. The only way to test a filter. | |
run_workflow | Run a Workflow | Start a test execution in the background. | |
get_workflow_executions | View Workflow Runs | yes | |
get_workflow_execution_traces | View Workflow Run Logs | yes | Input, run record, logs, and the step thread. |
load_skill | Load a Skill | yes | Load a workspace or platform skill as context. |
set_resource_enabled | Enable or Disable | Enable or disable workflows, apps, or skills. | |
delete_resource | Delete a Workflow, App, or Skill | Archive one owned resource. Destructive. | |
get_resource_versions | View Version History | yes | Published snapshots, newest first. |
revert_resource_version | Restore a Published Version | Restore a snapshot and rebuild an app when needed. Destructive. | |
get_workflow_execution | Open a Workflow Run | yes | Conversation, pending questions and available actions. |
resume_workflow_execution | Answer and Resume a Workflow Run | Answer all pending questions by tool-call id. | |
continue_workflow_execution | Continue a Workflow Run | Send a follow-up to a finished agent or app-agent execution. | |
cancel_workflow_execution | Stop a Workflow Run | Stop a running or paused execution; completed actions remain. | |
retry_workflow_execution | Retry a Workflow Run | Repeat a finished execution with its original input and trigger. | |
get_workflow_trigger_activity | Inspect Trigger Activity | yes | Poll-source state/errors, filter decisions and captured events. |
sync_workflow_triggers | Check Triggers Now | Poll active sources now; new events can start runs. | |
replay_workflow_trigger_item | Replay a Captured Event | Start a real run from a captured event and its source trigger. |
Version restoration replaces the live bundle. Reload the resource before editing again. Retry, replay and trigger sync can perform real external actions. Use triggerKey to select the workflow.json trigger a test or replay represents when more than one is possible.
Apps
| Tool | Title | Reads only | Does |
|---|---|---|---|
get_app_build_status | Check App Build Status | yes | |
run_app_handler | Run an App Action | Run a handler against the live app. | |
run_app_agent | Run an App Agent | Start a declared app agent. | |
get_app_handler_invocations | View App Activity | yes | |
get_app_errors | View App Errors | yes | Browser-side errors the iframe reported. |
screenshot_app | Screenshot an App | yes | Render pages at phone and desktop width. |
invalidate_app_handler_cache | Refresh App Cache |
Custom APIs
create_resource with type custom-api creates one; these tools document and manage it. Load the custom-api skill for the authoring contract.
| Tool | Title | Reads only | Does |
|---|---|---|---|
list_custom_apis | List Custom APIs | yes | |
get_custom_api | Open a Custom API | yes | One custom API and its operations. |
update_custom_api | Update a Custom API | Title, description, auth, and base configuration. | |
upsert_custom_api_operation | Save a Custom API Operation | Create or replace one operation. | |
delete_custom_api_operation | Delete a Custom API Operation | Destructive. | |
set_custom_api_status | Publish or Unpublish a Custom API | Move a custom API between draft and live. |
Specialists and storage
| Tool | Title | Reads only | Does |
|---|---|---|---|
list_specialists | List Specialists | yes | |
create_specialist | Create a Specialist | ||
update_specialist | Update a Specialist | ||
delete_specialist | Delete a Specialist | ||
read_specialist_file | Read a Specialist's File | yes | A shared file from a specialist the member can access. |
storage_list | Storage List | Objects in a user store. | |
storage_get | Storage Get | Object to a sandbox path. | |
storage_put | Storage Put | Sandbox path to an object. | |
storage_delete | Storage Delete | ||
load_specialist_files | Load the Specialist's Files | yes | Load selected text or binary files into specialist/ with SHA receipts. |
save_specialist_file | Save a File to the Specialist | Save workspace bytes. Replacements require the loaded SHA receipt; stale writes are refused. | |
remove_specialist_file | Remove a Specialist File | Remove one shared file. Destructive. | |
preview_specialist_export | Preview a Specialist Export | yes | Inspect the portable resource set and exclusions. |
export_specialist | Export a Specialist | Produce a downloadable ZIP with explicitly selected files and memory. | |
preview_specialist_import | Preview a Specialist Import | yes | Inspect a workspace ZIP and return its SHA receipt. |
import_specialist | Import a Specialist | Create a specialist from the reviewed archive and receipt. | |
list_specialist_templates | List Specialist Templates | yes | Discover available templates. |
get_specialist_template | View a Specialist Template | yes | Review contents and the current version. |
install_specialist_template | Install a Specialist Template | Install the reviewed template version. | |
publish_specialist_template | Publish a Specialist Template | Publish a selected specialist snapshot with an explicit audience. | |
unpublish_specialist_template | Unpublish a Specialist Template | Remove a publication. Destructive. |
Pass specialistId explicitly: the connector has no default specialist. Loading another specialist uses the same specialist/ directory; keep each file receipt with its specialist id.
Unlike a workflow run, which reaches only the stores it declares, the connector's storage tools are unscoped: they see every user store the member can reach. None of the four is annotated read-only, storage_list included, so a host that gates on annotations prompts for all of them.
Sharing
| Tool | Title | Reads only | Does |
|---|---|---|---|
inspect_sharing | View Sharing Settings | yes | Direct member grants and organization-wide access. |
grant_sharing | Grant Access | Grant a role to a member or organization as the owner. | |
revoke_sharing | Revoke Access | Remove a direct grant. Destructive. |
Sharing supports specialists, workflows, apps, skills and credentials. Specialist grants can also provide inherited access; removing a resource's direct grant does not remove that inherited access. Ownership transfer remains in the dashboard.
Browser
| Tool | Title | Reads only | Does |
|---|---|---|---|
browser_session_open | Open a Browser Session | A hosted browser the agent drives with Playwright over CDP. | |
browser_exec | Use the Browser | Run Playwright snippets with persistent JavaScript state and native screenshots. | |
browser_pilot | Browser Pilot | Delegate a whole UI objective; the browser navigates, fills, and selects on its own. | |
browser_session_close | Close the Browser Session | Save the login, stop billing. | |
browser_report_login | Confirm Browser Login | Mark a saved login active or logged_out. | |
browser_request_login | Request a Browser Login | Return a sign-in link and token for the user's own saved browser; closes any open session first. | |
browser_finish_login | Save Browser Login | After the user confirms signing in, save the browser and turn it off. |
Browser sessions survive separate tool calls and server replicas. Close the session when finished; abandoned sessions are reaped after five idle minutes. For a login handoff, call browser_request_login, give the user the link it returns, and wait for them to say they have signed in; the browser saves as they go. Then call browser_finish_login with the returned token to save and turn it off, and reopen the browser session to use the saved login. browser_pilot appears only where the deployment enables the browser pilot.
Workspace and memory
| Tool | Title | Reads only | Does |
|---|---|---|---|
list_organization_members | List Workspace Members | yes | Names and emails, for resolving a person to an address. |
user_question | Ask a Question | Comes back as text for you to answer in the chat. | |
remember | Remember | Queue a change to workspace or personal memory for the memory agent. |
The sandbox lazily refreshes saved memory under memory/org/ and memory/personal/. Use read_file and list_files for guides and references. Uploaded originals retain their bytes under originals/<fileId>/<filename> within each side; extracted references link to their originals. Structured file tools cannot edit these mounts. Use remember to propose a durable change.
Workspace proposals require an Admin or Owner role. Every member can propose changes to their own personal memory. The memory agent reviews proposals before changing saved memory.
Two caveats
Nothing on this surface asks you to confirm. In the dashboard, creating a resource shows a widget with a Create button you press. Over the connector there is no such step: create_resource runs the moment the model calls it, and the only confirmation is whatever the assistant chose to ask you in the chat. Worth knowing before setting every tool to always-allow.
The browser tools appear only where the deployment has browser automation configured. Without it the browser tools are absent.