Endpoints
Access is enforced per call: an organization-scoped connection only reaches the workspaces the credential can already access, and a read-only member cannot invoke a write tool.
Connecting
Tools
The MCP server exposes the agent’s own tools, plus a few that exist only over MCP for binary transfer and workspace discovery.Files
Shell and code
Actions
Four meta-tools front the whole Action catalog, so the client never carries a schema per Action.Web
Sites
Automations
Skills, comments, and notifications
For
send_notification, omit users or pass me to notify yourself. Recipients can also be user ids or email addresses. Omit channels for all delivery, or select any of ios, email, and in-app; recipient preferences still apply. A target derives the notification title, so title is optional when target is present.
Organization scope only
Tools carry MCP annotations, so a client can tell read-only tools from
destructive ones before calling them.
Working well over MCP
- Call
list_skillsbefore starting a task you have a skill for. Skills are how a workspace tells an agent your conventions; loading one is cheaper than inferring them. - Prefer
create_upload_sessionover base64 in a tool argument for anything large. It returns a manifest with the file’s Arg URL plus the part, complete, and abort URLs. The completion response returns the file URL again after the upload finishes. - Use the URL returned by
write_fileto open the created file directly in Arg. - Reach for
run_actionbefore hand-rolling a capability - media generation, PDF rendering, and integration calls already exist in the catalog.
Related
- Agents overview - the same abilities, driven by the API instead
- Tools - the REST equivalents of the file and shell tools
- Actions - what
search_actionsis searching - API keys - credentials for non-OAuth clients