Endpoints
Access is enforced per call: an organization-scoped connection only reaches the workspaces the credential can already access, and a read-only member cannot invoke a write tool.
Connecting
An OAuth connection opens a browser, where you sign in and then allow the client to use your account before it receives a credential. arg.ai asks every time, because a client’s name is reported by the client itself.Tools
The MCP server exposes the agent’s own tools, plus a few that exist only over MCP for binary transfer and workspace discovery.Files
Shell and code
Actions
Four meta-tools front the whole Action catalog, so the client never carries a schema per Action.Web
Sites
Automations
Skills, comments, and notifications
For
send_notification, omit users or pass me to notify yourself. Recipients can also be user ids or email addresses. Omit channels for all delivery, or select any of ios, email, and in-app; recipient preferences still apply. A target derives the notification title, so title is optional when target is present.
Organization scope only
Tools carry MCP annotations, so a client can tell read-only tools from destructive ones before
calling them.
Arg files in the conversation
In ChatGPT and Claude,open_file also shows the file in the conversation as an interactive view - the same live viewer Arg uses, so a deck pages, a whiteboard pans and a spreadsheet scrolls. Anyone who can edit the file in Arg can edit it there too, as themselves, in the same live session as everyone who has it open in Arg; anyone who can only read it watches the changes arrive. Open in Arg opens the file in the app, Expand takes the view full screen, and Share copies the file’s Arg link or, if you can share the file, creates a public link that anyone can view for 7 days.
In Claude, apps you built in Arg (.html, .tsx) and hosted sites don’t show inside the view; use Open in Arg for those.
The view never holds your Arg sign-in. It asks the Arg server for a one-time link to the file each time it opens, checked against your access at that moment, so a file someone stops sharing with you stops opening.
Paste an Arg link into the conversation and ask about it, and the assistant opens it with open_file before it reads or changes the file.
The assistant also shows you what it makes. When it writes a document, board, design, deck or spreadsheet, the file appears in the conversation as soon as it is saved, and after it edits one it opens the result with open_file. Code and data files it writes stay out of the way.
Working well over MCP
- Call
list_skillsbefore starting a task you have a skill for. Skills are how a workspace tells an agent your conventions; loading one is cheaper than inferring them. - Prefer
create_upload_sessionover base64 in a tool argument for anything large. It returns a manifest with the file’s Arg URL plus the part, complete, and abort URLs. The completion response returns the file URL again after the upload finishes. - Use the URL returned by
write_fileto open the created file directly in Arg. - Reach for
run_actionbefore hand-rolling a capability - media generation, PDF rendering, and integration calls already exist in the catalog.
Related
- Agents overview - the same abilities, driven by the API instead
- Tools - the REST equivalents of the file and shell tools
- Actions - what
search_actionsis searching - API keys - credentials for non-OAuth clients