Search the documentation Press / to search

Reference

Françaisv0.3.0

The reference is generated from the operations registry: it cannot drift from the product. Every operation exists in three forms, with the same rights and the same safeguards: an HTTP API route, an MCP tool for your agent, a command of the command line.

This page is published in French, as the registry generates it. The summaries below are in English.

HTTP APIEvery /v1 route and its operation.MCP toolsEvery tool, its scopes and reversibility.Command lineEvery bastide command and its operation.OpenAPIThe OpenAPI document of the HTTP API.mcp-tools.jsonThe tool catalogue, with their JSON schemas.

`access`

Operation	Summary
`access.request.accept`	Accept a Glowsoft request for access to a project's data.
`access.request.list`	List Glowsoft requests for access to a project's data, most recent first.
`access.request.revoke`	Revoke an open Glowsoft access, or refuse a pending request.

`account`

Operation	Summary
`account.device.create`	Register a device (APNs or FCM token) to receive the account's notifications.
`account.device.revoke`	Remove a registered device: no notification is sent to it any more.
`account.invitation.accept`	Join the organization, or the project, of an invitation received by email, with the role it carries.
`account.notice.list`	Read the notices the platform addressed to the account, and what became of them.
`account.notification.read`	Read, for an organization, the channels that notify the account of each kind of event, and its registered devices.
`account.notification.write`	Choose the channels that notify the account of one kind of event, in an organization.
`account.organization.list`	List the organizations where the account holds a role: identifier, slug, name and roles.
`account.passkey.accept`	Confirm a pending passkey with the output of navigator.credentials.create: it becomes active, other sessions close, and the first factor returns ten codes, once.
`account.passkey.create`	Start enrolling a passkey: returns the options the browser passes to navigator.credentials.create, with a challenge to sign within fifteen minutes.
`account.password.write`	Change the password, under a console session: the current one is required, and the account's other sessions close.
`account.recovery_codes.replace`	Issue ten new recovery codes, the current password presented: the old ones stop working, the new ones are returned once.
`account.second_factor.accept`	Confirm a pending factor with a first valid code: it becomes active, other sessions close, and the first factor returns ten recovery codes, once.
`account.second_factor.create`	Start enrolling an authenticator app: its secret is returned once, and the factor only counts once confirmed by a first code.
`account.second_factor.list`	List the account's second factors and the number of recovery codes left; never a secret.
`account.second_factor.revoke`	Remove a second factor, the current password presented: other sessions close, and the last factor takes the recovery codes with it.
`account.session.list`	List the account's active console sessions: where they were opened and until when.
`account.session.revoke`	Close one of the account's console sessions: it is refused at the next call.

`action`

Operation	Summary
`action.undo`	Undo, in one call and within five minutes, a class E action using the token it returned.

`agent`

Operation	Summary
`agent.proposal.accept`	Accept a proposal filed by an agent and merge it.

`audit`

Operation	Summary
`audit.read`	Read the audit log of the caller's scope, most recent first.

`auth_email`

Operation	Summary
`auth_email.list`	Read the sending log of a project's authentication emails.

`backend`

Operation	Summary
`backend.auth.configure`	Set the authentication of a project's backend.
`backend.auth.read`	Read the authentication settings of a project's backend.
`backend.auth_provider.configure`	Configure a third-party identity provider for a project's backend.
`backend.key.create`	Mint a secret key for a project's backend. It is returned only once.
`backend.key.replace`	Replace the publishable key of a project's backend, in a single step.
`backend.key.revoke`	Revoke one secret key of a project's backend, leaving the others untouched.
`backend.read`	Read a project's backend: its entry points, its publishable key and its keys.
`backend.realtime.configure`	Turn a project's backend realtime on or off.
`backend.schema_drift.read`	Read the gap between the schema declared by a project's repository and its actual database.

`billing`

Operation	Summary
`billing.manage`	Manage billing, payment methods and the spending cap.

`build_cache`

Operation	Summary
`build_cache.manage`	Purge a project's remote cache, by key or entirely, or set its retention.

`cache`

Operation	Summary
`cache.tag.revoke`	Invalidate or delete from the edge cache what an environment stored under tags.

`database`

Operation	Summary
`database.impersonation.create`	Open a session impersonating a user of the project's database.
`database.impersonation.read`	Read as an impersonated user, to test a policy.
`database.impersonation.write`	Write as an impersonated user, after confirmation.
`database.migrate`	Apply a schema migration to a project's database.
`database.personal_columns.configure`	Set the list of columns classified as personal data in a project's database.
`database.policy.list`	List, for each table of the project, the policy the platform proposes.
`database.policy.write`	Apply a row-level security policy to a table.
`database.policy.write_proposed`	Apply to a table the policy the platform proposes, tested beforehand.
`database.posture.configure`	Open, or not, the daily database posture fix as a merge request on the project's repository.
`database.posture.read`	Read the latest security posture analysis of a project's database.
`database.rls.configure`	Turn row-level security on or off for a table.
`database.sql.read`	Read a project's database with a read-only SQL statement.
`database.sql.write`	Modify a project's database with a SQL statement, its effect measured first.

`deployment`

Operation	Summary
`deployment.cancel`	Cancel a deployment still queued or building, before it has served.
`deployment.create`	Deploy: build a Git reference (without putting it live if needed) or promote an already built version.
`deployment.hook.create`	Create a deploy hook: a signed address to call that deploys a branch to an environment. Its secret is returned only once.
`deployment.hook.revoke`	Revoke a deploy hook: its next call is refused.
`deployment.list`	List a project's deployments, most recent first, page by page.
`deployment.log.read`	Read a build log, structured by step and timestamped to the millisecond.
`deployment.read`	Read a deployment's state, its end cause and the duration of each step.
`deployment.restorable.list`	What a restore would bring back, and what it would not.
`deployment.rollback`	Restore an environment's previous release, without rebuilding.
`deployment.screenshot.read`	Read a deployment's screenshot, taken once it became healthy.

`domain`

Operation	Summary
`domain.add`	Attach a domain to a project and start its verification.
`domain.delete`	Remove a domain from a project: it stops being routed and certified.
`domain.list`	List a project's host names, the environment each serves and its state.

`env`

Operation	Summary
`env.delete.nonproduction`	Delete a variable from a non-production environment.
`env.delete.production`	Delete a variable from the production environment.
`env.list`	List an environment's variables, without any value.
`env.pull.nonproduction`	Read the non-sensitive variables of a non-production environment.
`env.pull.production`	Read the non-sensitive variables of the production environment.
`env.write.nonproduction`	Write an environment variable outside production.
`env.write.production`	Write a variable or a secret of the production environment.

`environment`

Operation	Summary
`environment.list`	List a project's environments and what each is serving right now.
`environment.unpin`	Lift an environment's pin and promote the latest healthy deployment.

`errorpage`

Operation	Summary
`errorpage.configure`	Set, replace or remove a project's error pages, in French and English.
`errorpage.read`	Read the error pages a project has set.

`firewall`

Operation	Summary
`firewall.configure`	Configure the application firewall, rate limiting and address lists.

`image`

Operation	Summary
`image.configure`	Set a project's allowed image sources, and obtain the key that signs its URLs.
`image.read`	Read a project's allowed image sources and its monthly transformation counter.

`logs`

Operation	Summary
`logs.read`	Read an environment's runtime logs over a time window.

`mcp_client`

Operation	Summary
`mcp_client.consent.create`	Consent to an MCP client's authorization request, or refuse it. Returns the address to send the browser to.
`mcp_client.consent.read`	Re-read a pending MCP client authorization request: its name, its address, the scopes it asks for.
`mcp_client.list`	List the MCP clients you authorized: their name, scopes and last use.
`mcp_client.revoke`	Withdraw an MCP client's authorization: its agent tokens are refused at the next call.

`member`

Operation	Summary
`member.list`	List an organization's members and their active entitlements.
`member.manage`	Grant, change or remove an organization member's role.

`organization`

Operation	Summary
`organization.agent_projects.configure`	Decide whether projects created by the organization's agents are claimed automatically by the account on whose behalf they act.
`organization.agent_projects.read`	Read whether projects created by the organization's agents are claimed automatically.
`organization.audit.read`	Read an organization's audit log outside its projects, most recent first.
`organization.billing.read`	Read an organization's billing: details, spend cap, this month's plans and invoices.
`organization.delete`	Delete an organization and everything it contains.
`organization.github_connection.create`	Attach a GitHub application installation to the organization, on return from GitHub.
`organization.github_connection.list`	Read an organization's GitHub connections, and the address to install the application.
`organization.github_connection.revoke`	Remove a GitHub connection from the organization.
`organization.github_repository.list`	Read the GitHub repositories the organization's connections open.
`organization.invitation.create`	Invite a person, by address, to an organization or one of its projects.
`organization.invitation.list`	Read an organization's pending invitations.
`organization.invitation.revoke`	Revoke an organization invitation before it is accepted.
`organization.invoice.read`	Download an issued invoice: its Factur-X PDF, as archived at issuance.
`organization.payment_method.read`	Read an organization's payment method: the valid mandate's card, read from Mollie.
`organization.payment_method.write`	Register a card: the Mollie Components token, then 3-D Secure at Mollie.
`organization.second_factor.configure`	Require, or stop requiring, a second factor from an organization's Owners, Administrators and Security members.
`organization.second_factor.read`	Read an organization's second factor requirement, and how many affected accounts do not hold one.
`organization.second_factor_exemption.create`	Exempt a service account from the second factor, by name and with a reason, for three months at most.
`organization.second_factor_exemption.list`	List an organization's second factor exemptions: which service account, why, by whom, until when.
`organization.second_factor_exemption.revoke`	Remove a service account's second factor exemption.

`personal_access_token`

Operation	Summary
`personal_access_token.create`	Mint a personal token: named scopes, an expiry of 365 days at most. Returned only once.
`personal_access_token.list`	List your personal tokens: scopes, expiry, last use and its address, and when an unused token will be disabled.
`personal_access_token.reactivation.create`	Reactivate one of your personal tokens disabled for inactivity, under a console session.
`personal_access_token.revoke`	Revoke one of your personal tokens: it is refused at the next call.

`preview`

Operation	Summary
`preview.fork.accept`	Authorize the commit of a merge request coming from a fork: it is built and deployed, with no secret.
`preview.manage`	Create or destroy a preview attached to a branch.
`preview.protection.configure`	Set what a project's previews require: nothing, a password, project membership, or an allowed address.
`preview.session.create`	Open a preview as a project member: returns the single-use address to enter by.
`preview.token.create`	Mint a bypass token for a preview: it goes through the preview whatever its mode. Returned only once.
`preview.token.revoke`	Revoke a bypass token: the edge refuses it in under thirty seconds.

`project`

Operation	Summary
`project.create`	Create a project in an organization, without its backend.
`project.create_with_backend`	Create a project, its database and its first production deployment, in one call.
`project.delete`	Request the deletion of a project, its environments and its data.
`project.deletion.accept`	Validate a project's requested deletion: a second Owner, or the only one.
`project.deletion.cancel`	Cancel a project's deletion: withdraw the request, cancel it during the grace period, or restore the project from the trash.
`project.list`	List an organization's projects, page by page.
`project.ownership.accept`	Claim a project created by an agent: it becomes an ordinary project, with no expiry.
`project.read`	Read a project's metadata and the state of its deployments.
`project.settings.write`	Change a project's settings.
`project.tier.write`	Change a project's tier, prorated to the day; dryRun returns the preview.

`routingrules`

Operation	Summary
`routingrules.read`	Read a project's routing rules and their version history.
`routingrules.rollback`	Roll the routing rules back to an earlier version, in one step.
`routingrules.write`	Publish or simulate a project's routing rules, without a redeploy.

`secret`

Operation	Summary
`secret.reveal`	Read a secret's value in clear. Allowed to no role, without exception.

`service_token`

Operation	Summary
`service_token.create`	Mint a service account token: named scopes, a list of projects, ninety days at most. Returned only once.
`service_token.list`	List an organization's service account tokens: scopes, projects, who answers for them, expiry, last use and its address.
`service_token.revoke`	Revoke a service account token: it is refused at the next call.

`sso`

Operation	Summary
`sso.configure`	Configure an organization's single sign-on and directory.

`task`

Operation	Summary
`task.read`	Read the progress of a long-running task without keeping the connection open.

`usage`

Operation	Summary
`usage.read`	Read the consumption and usage counters of a contracting entity.

`vercel_import`

Operation	Summary
`vercel_import.accept`	Acknowledge the items of a Vercel import that have no equivalent, and validate the migration.
`vercel_import.create`	Import a Vercel project's configuration: glowsoft.json and a three-category report.
`vercel_import.list`	Read a project's Vercel imports: state, report, acknowledgements and calls to the source.
`vercel_import.variables.create`	Import a Vercel project's variables by target and branch, with a token from the source.

`webhook`

Operation	Summary
`webhook.endpoint.create`	Declare a webhook receiving endpoint for a project. Its secret is returned only once.
`webhook.endpoint.delete`	Delete a receiving endpoint: its pending deliveries go with it.
`webhook.list`	Read a project's webhooks: its receiving endpoints and their deliveries, page by page.
`webhook.replay.create`	Replay a finished delivery: one immediate attempt, then the dead letter queue if it fails.
`webhook.secret.replace`	Replace an endpoint's secret: the old one still signs for 24 hours, then nothing.

Report a mistake on this page