MCP reference
Product version 0.3.0. A single version in the path, "/v1", for the whole API. Operation detail pages (parameters, response fields, examples) are published in French; every table row links to one. Types, bounds and required fields are in the machine-readable schemas: openapi.json for HTTP, mcp-tools.json for agent tools.
The tool catalogue, with the scopes, minimum rank, reversibility class and error codes of each tool; then the operations no tool exposes, with the reason.
| Tool | Operation | Scopes | Minimum rank | Reversibility | Error codes |
|---|---|---|---|---|---|
access_request_list | [access.request.list](/docs/reference/access.request.list) — List Glowsoft requests for access to a project's data, most recent first. | project:read | admin | N | curseur_expire, curseur_invalide |
access_request_revoke | [access.request.revoke](/docs/reference/access.request.revoke) — Revoke an open Glowsoft access, or refuse a pending request. | project:write | admin | R | rien_a_annuler |
action_undo | [action.undo](/docs/reference/action.undo) — Undo, in one call and within five minutes, a class E action using the token it returned. | project:write | developer | R | annulation_invalide, annulation_expiree, annulation_perimee |
audit_read | [audit.read](/docs/reference/audit.read) — Read the audit log of the caller's scope, most recent first. | audit:read | reader | N | curseur_expire, curseur_invalide |
auth_email_list | [auth_email.list](/docs/reference/auth_email.list) — Read the sending log of a project's authentication emails. | db:read | developer | N | curseur_expire, curseur_invalide |
backend_auth_configure | [backend.auth.configure](/docs/reference/backend.auth.configure) — Set the authentication of a project's backend. | db:write | maintainer | E | projet_non_revendique |
backend_auth_provider_configure | [backend.auth_provider.configure](/docs/reference/backend.auth_provider.configure) — Configure a third-party identity provider for a project's backend. | db:write | maintainer | R | projet_non_revendique, secret_store_unavailable |
backend_auth_read | [backend.auth.read](/docs/reference/backend.auth.read) — Read the authentication settings of a project's backend. | db:read | maintainer | N | — |
backend_key_replace | [backend.key.replace](/docs/reference/backend.key.replace) — Replace the publishable key of a project's backend, in a single step. | project:write | admin | E | — |
backend_key_revoke | [backend.key.revoke](/docs/reference/backend.key.revoke) — Revoke one secret key of a project's backend, leaving the others untouched. | project:write | admin | E | — |
backend_read | [backend.read](/docs/reference/backend.read) — Read a project's backend: its entry points, its publishable key and its keys. | project:read | reader | N | — |
backend_realtime_configure | [backend.realtime.configure](/docs/reference/backend.realtime.configure) — Turn a project's backend realtime on or off. | db:write | maintainer | R | — |
backend_schema_drift_read | [backend.schema_drift.read](/docs/reference/backend.schema_drift.read) — Read the gap between the schema declared by a project's repository and its actual database. | db:read | maintainer | N | — |
build_cache_manage | [build_cache.manage](/docs/reference/build_cache.manage) — Purge a project's remote cache, by key or entirely, or set its retention. | deploy:write | developer | R | — |
database_impersonation_create | [database.impersonation.create](/docs/reference/database.impersonation.create) — Open a session impersonating a user of the project's database. | db:read | maintainer | R | — |
database_impersonation_read | [database.impersonation.read](/docs/reference/database.impersonation.read) — Read as an impersonated user, to test a policy. | db:read | maintainer | N | usurpation_expiree, colonne_personnelle_refusee, backend_indisponible |
database_impersonation_write | [database.impersonation.write](/docs/reference/database.impersonation.write) — Write as an impersonated user, after confirmation. | db:write | maintainer | E | usurpation_expiree, nonce_invalide, validation_humaine_requise, colonne_personnelle_refusee, backend_indisponible, elicitation_requise, confirmation_declinee |
database_migrate | [database.migrate](/docs/reference/database.migrate) — Apply a schema migration to a project's database. | db:write | maintainer | E | migration_destructive, migration_refusee_par_la_base, backend_indisponible |
database_policy_list | [database.policy.list](/docs/reference/database.policy.list) — List, for each table of the project, the policy the platform proposes. | db:read | maintainer | N | backend_indisponible, curseur_expire, curseur_invalide |
database_policy_write | [database.policy.write](/docs/reference/database.policy.write) — Apply a row-level security policy to a table. | db:write | maintainer | E | nonce_invalide, validation_humaine_requise, backend_indisponible, elicitation_requise, confirmation_declinee |
database_policy_write_proposed | [database.policy.write_proposed](/docs/reference/database.policy.write_proposed) — Apply to a table the policy the platform proposes, tested beforehand. | db:write, db:read | maintainer | E | nonce_invalide, validation_humaine_requise, backend_indisponible, elicitation_requise, confirmation_declinee |
database_posture_read | [database.posture.read](/docs/reference/database.posture.read) — Read the latest security posture analysis of a project's database. | db:read | maintainer | N | — |
database_sql_read | [database.sql.read](/docs/reference/database.sql.read) — Read a project's database with a read-only SQL statement. | db:read | developer | N | colonne_personnelle_refusee, service_action_forbidden, backend_indisponible |
database_sql_write | [database.sql.write](/docs/reference/database.sql.write) — Modify a project's database with a SQL statement, its effect measured first. | db:write | maintainer | E | nonce_invalide, validation_humaine_requise, colonne_personnelle_refusee, token_scope_missing, backend_indisponible, elicitation_requise, confirmation_declinee |
deployment_cancel | [deployment.cancel](/docs/reference/deployment.cancel) — Cancel a deployment still queued or building, before it has served. | deploy:write | developer | R | deployment_not_cancellable, invalid_transition |
deployment_create | [deployment.create](/docs/reference/deployment.create) — Deploy: build a Git reference (without putting it live if needed) or promote an already built version. | deploy:write | developer | R | invalid_transition, plafond_de_depense_atteint, quota_de_construction_atteint, conflict, promotion_impossible, controles_non_satisfaits, contournement_reserve |
deployment_hook_revoke | [deployment.hook.revoke](/docs/reference/deployment.hook.revoke) — Revoke a deploy hook: its next call is refused. | deploy:write | maintainer | E | — |
deployment_list | [deployment.list](/docs/reference/deployment.list) — List a project's deployments, most recent first, page by page. | project:read | reader | N | curseur_expire, curseur_invalide |
deployment_log_read | [deployment.log.read](/docs/reference/deployment.log.read) — Read a build log, structured by step and timestamped to the millisecond. | project:read | reader | N | — |
deployment_read | [deployment.read](/docs/reference/deployment.read) — Read a deployment's state, its end cause and the duration of each step. | project:read | reader | N | — |
deployment_restorable_list | [deployment.restorable.list](/docs/reference/deployment.restorable.list) — What a restore would bring back, and what it would not. | project:read | reader | N | — |
deployment_rollback | [deployment.rollback](/docs/reference/deployment.rollback) — Restore an environment's previous release, without rebuilding. | deploy:write | developer | E | rien_a_restaurer, release_refroidie, release_sans_port, deja_servie, confirmation_perimee, placement_impossible, state_signing_unavailable |
domain_add | [domain.add](/docs/reference/domain.add) — Attach a domain to a project and start its verification. | domain:write | maintainer | E | domaine_reserve, domaine_deja_servi, projet_non_revendique |
domain_delete | [domain.delete](/docs/reference/domain.delete) — Remove a domain from a project: it stops being routed and certified. | domain:write | admin | I | domaine_reserve, nonce_invalide, validation_humaine_requise, elicitation_requise, confirmation_declinee |
domain_list | [domain.list](/docs/reference/domain.list) — List a project's host names, the environment each serves and its state. | project:read | reader | N | curseur_expire, curseur_invalide |
env_delete_nonproduction | [env.delete.nonproduction](/docs/reference/env.delete.nonproduction) — Delete a variable from a non-production environment. | secrets:write | developer | E | wrong_operation |
env_delete_production | [env.delete.production](/docs/reference/env.delete.production) — Delete a variable from the production environment. | secrets:write | maintainer | E | — |
env_list | [env.list](/docs/reference/env.list) — List an environment's variables, without any value. | project:read | developer | N | curseur_expire, curseur_invalide |
env_pull_nonproduction | [env.pull.nonproduction](/docs/reference/env.pull.nonproduction) — Read the non-sensitive variables of a non-production environment. | project:read | developer | N | secret_never_read, wrong_operation |
env_pull_production | [env.pull.production](/docs/reference/env.pull.production) — Read the non-sensitive variables of the production environment. | project:read | maintainer | N | secret_never_read |
env_write_nonproduction | [env.write.nonproduction](/docs/reference/env.write.nonproduction) — Write an environment variable outside production. | secrets:write | developer | E | production_environment, quota_exceeded, secret_store_unavailable |
env_write_production | [env.write.production](/docs/reference/env.write.production) — Write a variable or a secret of the production environment. | secrets:write | maintainer | E | quota_exceeded, secret_store_unavailable |
environment_list | [environment.list](/docs/reference/environment.list) — List a project's environments and what each is serving right now. | project:read | reader | N | curseur_expire, curseur_invalide |
environment_unpin | [environment.unpin](/docs/reference/environment.unpin) — Lift an environment's pin and promote the latest healthy deployment. | deploy:write | maintainer | R | — |
logs_read | [logs.read](/docs/reference/logs.read) — Read an environment's runtime logs over a time window. | project:read | reader | N | resource_busy, curseur_expire, curseur_invalide |
member_list | [member.list](/docs/reference/member.list) — List an organization's members and their active entitlements. | org:admin | admin | N | curseur_expire, curseur_invalide |
member_manage | [member.manage](/docs/reference/member.manage) — Grant, change or remove an organization member's role. | org:admin | admin | E | habilitation_au_dela_du_rang, dernier_proprietaire, second_factor_required |
organization_second_factor_exemption_list | [organization.second_factor_exemption.list](/docs/reference/organization.second_factor_exemption.list) — List an organization's second factor exemptions: which service account, why, by whom, until when. | org:admin | admin | N | curseur_expire, curseur_invalide |
preview_manage | [preview.manage](/docs/reference/preview.manage) — Create or destroy a preview attached to a branch. | deploy:write | developer | R | — |
preview_protection_configure | [preview.protection.configure](/docs/reference/preview.protection.configure) — Set what a project's previews require: nothing, a password, project membership, or an allowed address. | project:write | maintainer | R | — |
preview_token_revoke | [preview.token.revoke](/docs/reference/preview.token.revoke) — Revoke a bypass token: the edge refuses it in under thirty seconds. | deploy:write | developer | E | — |
project_create | [project.create](/docs/reference/project.create) — Create a project in an organization, without its backend. | project:write | maintainer | R | plafond_de_creations_de_projet, rayon_d_explosion_atteint, disque_de_donnees_sature, plafond_de_depense_atteint, palier_choisi_par_une_personne |
project_create_with_backend | [project.create_with_backend](/docs/reference/project.create_with_backend) — Create a project, its database and its first production deployment, in one call. | project:write, deploy:write | maintainer | R | plafond_de_creations_de_projet, rayon_d_explosion_atteint, disque_de_donnees_sature, plafond_de_depense_atteint, invalid_transition, palier_choisi_par_une_personne |
project_delete | [project.delete](/docs/reference/project.delete) — Request the deletion of a project, its environments and its data. | project:write | owner | I | nonce_invalide, validation_humaine_requise, suppression_en_cours, elicitation_requise, confirmation_declinee |
project_deletion_cancel | [project.deletion.cancel](/docs/reference/project.deletion.cancel) — Cancel a project's deletion: withdraw the request, cancel it during the grace period, or restore the project from the trash. | project:write | owner | R | rien_a_annuler, corbeille_expiree, purge_engagee, slug_repris |
project_list | [project.list](/docs/reference/project.list) — List an organization's projects, page by page. | project:read | reader | N | curseur_expire, curseur_invalide |
project_read | [project.read](/docs/reference/project.read) — Read a project's metadata and the state of its deployments. | project:read | reader | N | — |
project_settings_write | [project.settings.write](/docs/reference/project.settings.write) — Change a project's settings. | project:write | maintainer | E | palier_choisi_par_une_personne |
task_read | [task.read](/docs/reference/task.read) — Read the progress of a long-running task without keeping the connection open. | project:read | reader | N | — |
usage_read | [usage.read](/docs/reference/usage.read) — Read the consumption and usage counters of a contracting entity. | billing:read | reader | N | chaine_de_mesure_absente |
vercel_import_create | [vercel_import.create](/docs/reference/vercel_import.create) — Import a Vercel project's configuration: glowsoft.json and a three-category report. | project:write | developer | R | — |
webhook_list | [webhook.list](/docs/reference/webhook.list) — Read a project's webhooks: its receiving endpoints and their deliveries, page by page. | project:read | developer | N | curseur_expire, curseur_invalide |
webhook_replay_create | [webhook.replay.create](/docs/reference/webhook.replay.create) — Replay a finished delivery: one immediate attempt, then the dead letter queue if it fails. | project:write | developer | E | livraison_en_attente |
Without a tool
| Operation | Reason |
|---|---|
[access.request.accept](/docs/reference/access.request.accept) — Accept a Glowsoft request for access to a project's data. | Not exposed as an agent tool; see the French detail page for the reason. |
[account.device.create](/docs/reference/account.device.create) — Register a device (APNs or FCM token) to receive the account's notifications. | Not exposed as an agent tool; see the French detail page for the reason. |
[account.device.revoke](/docs/reference/account.device.revoke) — Remove a registered device: no notification is sent to it any more. | Not exposed as an agent tool; see the French detail page for the reason. |
[account.invitation.accept](/docs/reference/account.invitation.accept) — Join the organization, or the project, of an invitation received by email, with the role it carries. | Not exposed as an agent tool; see the French detail page for the reason. |
[account.notice.list](/docs/reference/account.notice.list) — Read the notices the platform addressed to the account, and what became of them. | Not exposed as an agent tool; see the French detail page for the reason. |
[account.notification.read](/docs/reference/account.notification.read) — Read, for an organization, the channels that notify the account of each kind of event, and its registered devices. | Not exposed as an agent tool; see the French detail page for the reason. |
[account.notification.write](/docs/reference/account.notification.write) — Choose the channels that notify the account of one kind of event, in an organization. | Not exposed as an agent tool; see the French detail page for the reason. |
[account.organization.list](/docs/reference/account.organization.list) — List the organizations where the account holds a role: identifier, slug, name and roles. | Not exposed as an agent tool; see the French detail page for the reason. |
[account.passkey.accept](/docs/reference/account.passkey.accept) — Confirm a pending passkey with the output of navigator.credentials.create: it becomes active, other sessions close, and the first factor returns ten codes, once. | Not exposed as an agent tool; see the French detail page for the reason. |
[account.passkey.create](/docs/reference/account.passkey.create) — Start enrolling a passkey: returns the options the browser passes to navigator.credentials.create, with a challenge to sign within fifteen minutes. | Not exposed as an agent tool; see the French detail page for the reason. |
[account.password.write](/docs/reference/account.password.write) — Change the password, under a console session: the current one is required, and the account's other sessions close. | Not exposed as an agent tool; see the French detail page for the reason. |
[account.recovery_codes.replace](/docs/reference/account.recovery_codes.replace) — Issue ten new recovery codes, the current password presented: the old ones stop working, the new ones are returned once. | Not exposed as an agent tool; see the French detail page for the reason. |
[account.second_factor.accept](/docs/reference/account.second_factor.accept) — Confirm a pending factor with a first valid code: it becomes active, other sessions close, and the first factor returns ten recovery codes, once. | Not exposed as an agent tool; see the French detail page for the reason. |
[account.second_factor.create](/docs/reference/account.second_factor.create) — Start enrolling an authenticator app: its secret is returned once, and the factor only counts once confirmed by a first code. | Not exposed as an agent tool; see the French detail page for the reason. |
[account.second_factor.list](/docs/reference/account.second_factor.list) — List the account's second factors and the number of recovery codes left; never a secret. | Not exposed as an agent tool; see the French detail page for the reason. |
[account.second_factor.revoke](/docs/reference/account.second_factor.revoke) — Remove a second factor, the current password presented: other sessions close, and the last factor takes the recovery codes with it. | Not exposed as an agent tool; see the French detail page for the reason. |
[account.session.list](/docs/reference/account.session.list) — List the account's active console sessions: where they were opened and until when. | Not exposed as an agent tool; see the French detail page for the reason. |
[account.session.revoke](/docs/reference/account.session.revoke) — Close one of the account's console sessions: it is refused at the next call. | Not exposed as an agent tool; see the French detail page for the reason. |
[agent.proposal.accept](/docs/reference/agent.proposal.accept) — Accept a proposal filed by an agent and merge it. | Not exposed as an agent tool; see the French detail page for the reason. |
[backend.key.create](/docs/reference/backend.key.create) — Mint a secret key for a project's backend. It is returned only once. | Not exposed as an agent tool; see the French detail page for the reason. |
[billing.manage](/docs/reference/billing.manage) — Manage billing, payment methods and the spending cap. | Not exposed as an agent tool; see the French detail page for the reason. |
[cache.tag.revoke](/docs/reference/cache.tag.revoke) — Invalidate or delete from the edge cache what an environment stored under tags. | Not exposed as an agent tool; see the French detail page for the reason. |
[database.personal_columns.configure](/docs/reference/database.personal_columns.configure) — Set the list of columns classified as personal data in a project's database. | Not exposed as an agent tool; see the French detail page for the reason. |
[database.posture.configure](/docs/reference/database.posture.configure) — Open, or not, the daily database posture fix as a merge request on the project's repository. | Not exposed as an agent tool; see the French detail page for the reason. |
[database.rls.configure](/docs/reference/database.rls.configure) — Turn row-level security on or off for a table. | Not exposed as an agent tool; see the French detail page for the reason. |
[deployment.hook.create](/docs/reference/deployment.hook.create) — Create a deploy hook: a signed address to call that deploys a branch to an environment. Its secret is returned only once. | Not exposed as an agent tool; see the French detail page for the reason. |
[deployment.screenshot.read](/docs/reference/deployment.screenshot.read) — Read a deployment's screenshot, taken once it became healthy. | Not exposed as an agent tool; see the French detail page for the reason. |
[errorpage.configure](/docs/reference/errorpage.configure) — Set, replace or remove a project's error pages, in French and English. | Not exposed as an agent tool; see the French detail page for the reason. |
[errorpage.read](/docs/reference/errorpage.read) — Read the error pages a project has set. | Not exposed as an agent tool; see the French detail page for the reason. |
[firewall.configure](/docs/reference/firewall.configure) — Configure the application firewall, rate limiting and address lists. | Not exposed as an agent tool; see the French detail page for the reason. |
[image.configure](/docs/reference/image.configure) — Set a project's allowed image sources, and obtain the key that signs its URLs. | Not exposed as an agent tool; see the French detail page for the reason. |
[image.read](/docs/reference/image.read) — Read a project's allowed image sources and its monthly transformation counter. | Not exposed as an agent tool; see the French detail page for the reason. |
[mcp_client.consent.create](/docs/reference/mcp_client.consent.create) — Consent to an MCP client's authorization request, or refuse it. Returns the address to send the browser to. | Not exposed as an agent tool; see the French detail page for the reason. |
[mcp_client.consent.read](/docs/reference/mcp_client.consent.read) — Re-read a pending MCP client authorization request: its name, its address, the scopes it asks for. | Not exposed as an agent tool; see the French detail page for the reason. |
[mcp_client.list](/docs/reference/mcp_client.list) — List the MCP clients you authorized: their name, scopes and last use. | Not exposed as an agent tool; see the French detail page for the reason. |
[mcp_client.revoke](/docs/reference/mcp_client.revoke) — Withdraw an MCP client's authorization: its agent tokens are refused at the next call. | Not exposed as an agent tool; see the French detail page for the reason. |
[organization.agent_projects.configure](/docs/reference/organization.agent_projects.configure) — Decide whether projects created by the organization's agents are claimed automatically by the account on whose behalf they act. | Not exposed as an agent tool; see the French detail page for the reason. |
[organization.agent_projects.read](/docs/reference/organization.agent_projects.read) — Read whether projects created by the organization's agents are claimed automatically. | Not exposed as an agent tool; see the French detail page for the reason. |
[organization.audit.read](/docs/reference/organization.audit.read) — Read an organization's audit log outside its projects, most recent first. | Not exposed as an agent tool; see the French detail page for the reason. |
[organization.billing.read](/docs/reference/organization.billing.read) — Read an organization's billing: details, spend cap, this month's plans and invoices. | Not exposed as an agent tool; see the French detail page for the reason. |
[organization.delete](/docs/reference/organization.delete) — Delete an organization and everything it contains. | Not exposed as an agent tool; see the French detail page for the reason. |
[organization.github_connection.create](/docs/reference/organization.github_connection.create) — Attach a GitHub application installation to the organization, on return from GitHub. | Not exposed as an agent tool; see the French detail page for the reason. |
[organization.github_connection.list](/docs/reference/organization.github_connection.list) — Read an organization's GitHub connections, and the address to install the application. | Not exposed as an agent tool; see the French detail page for the reason. |
[organization.github_connection.revoke](/docs/reference/organization.github_connection.revoke) — Remove a GitHub connection from the organization. | Not exposed as an agent tool; see the French detail page for the reason. |
[organization.github_repository.list](/docs/reference/organization.github_repository.list) — Read the GitHub repositories the organization's connections open. | Not exposed as an agent tool; see the French detail page for the reason. |
[organization.invitation.create](/docs/reference/organization.invitation.create) — Invite a person, by address, to an organization or one of its projects. | Not exposed as an agent tool; see the French detail page for the reason. |
[organization.invitation.list](/docs/reference/organization.invitation.list) — Read an organization's pending invitations. | Not exposed as an agent tool; see the French detail page for the reason. |
[organization.invitation.revoke](/docs/reference/organization.invitation.revoke) — Revoke an organization invitation before it is accepted. | Not exposed as an agent tool; see the French detail page for the reason. |
[organization.invoice.read](/docs/reference/organization.invoice.read) — Download an issued invoice: its Factur-X PDF, as archived at issuance. | Not exposed as an agent tool; see the French detail page for the reason. |
[organization.payment_method.read](/docs/reference/organization.payment_method.read) — Read an organization's payment method: the valid mandate's card, read from Mollie. | Not exposed as an agent tool; see the French detail page for the reason. |
[organization.payment_method.write](/docs/reference/organization.payment_method.write) — Register a card: the Mollie Components token, then 3-D Secure at Mollie. | Not exposed as an agent tool; see the French detail page for the reason. |
[organization.second_factor.configure](/docs/reference/organization.second_factor.configure) — Require, or stop requiring, a second factor from an organization's Owners, Administrators and Security members. | Not exposed as an agent tool; see the French detail page for the reason. |
[organization.second_factor.read](/docs/reference/organization.second_factor.read) — Read an organization's second factor requirement, and how many affected accounts do not hold one. | Not exposed as an agent tool; see the French detail page for the reason. |
[organization.second_factor_exemption.create](/docs/reference/organization.second_factor_exemption.create) — Exempt a service account from the second factor, by name and with a reason, for three months at most. | Not exposed as an agent tool; see the French detail page for the reason. |
[organization.second_factor_exemption.revoke](/docs/reference/organization.second_factor_exemption.revoke) — Remove a service account's second factor exemption. | Not exposed as an agent tool; see the French detail page for the reason. |
[personal_access_token.create](/docs/reference/personal_access_token.create) — Mint a personal token: named scopes, an expiry of 365 days at most. Returned only once. | Not exposed as an agent tool; see the French detail page for the reason. |
[personal_access_token.list](/docs/reference/personal_access_token.list) — List your personal tokens: scopes, expiry, last use and its address, and when an unused token will be disabled. | Not exposed as an agent tool; see the French detail page for the reason. |
[personal_access_token.reactivation.create](/docs/reference/personal_access_token.reactivation.create) — Reactivate one of your personal tokens disabled for inactivity, under a console session. | Not exposed as an agent tool; see the French detail page for the reason. |
[personal_access_token.revoke](/docs/reference/personal_access_token.revoke) — Revoke one of your personal tokens: it is refused at the next call. | Not exposed as an agent tool; see the French detail page for the reason. |
[preview.fork.accept](/docs/reference/preview.fork.accept) — Authorize the commit of a merge request coming from a fork: it is built and deployed, with no secret. | Not exposed as an agent tool; see the French detail page for the reason. |
[preview.session.create](/docs/reference/preview.session.create) — Open a preview as a project member: returns the single-use address to enter by. | Not exposed as an agent tool; see the French detail page for the reason. |
[preview.token.create](/docs/reference/preview.token.create) — Mint a bypass token for a preview: it goes through the preview whatever its mode. Returned only once. | Not exposed as an agent tool; see the French detail page for the reason. |
[project.deletion.accept](/docs/reference/project.deletion.accept) — Validate a project's requested deletion: a second Owner, or the only one. | Not exposed as an agent tool; see the French detail page for the reason. |
[project.ownership.accept](/docs/reference/project.ownership.accept) — Claim a project created by an agent: it becomes an ordinary project, with no expiry. | Not exposed as an agent tool; see the French detail page for the reason. |
[project.tier.write](/docs/reference/project.tier.write) — Change a project's tier, prorated to the day; dryRun returns the preview. | Not exposed as an agent tool; see the French detail page for the reason. |
[routingrules.read](/docs/reference/routingrules.read) — Read a project's routing rules and their version history. | Not exposed as an agent tool; see the French detail page for the reason. |
[routingrules.rollback](/docs/reference/routingrules.rollback) — Roll the routing rules back to an earlier version, in one step. | Not exposed as an agent tool; see the French detail page for the reason. |
[routingrules.write](/docs/reference/routingrules.write) — Publish or simulate a project's routing rules, without a redeploy. | Not exposed as an agent tool; see the French detail page for the reason. |
[secret.reveal](/docs/reference/secret.reveal) — Read a secret's value in clear. Allowed to no role, without exception. | Not exposed as an agent tool; see the French detail page for the reason. |
[service_token.create](/docs/reference/service_token.create) — Mint a service account token: named scopes, a list of projects, ninety days at most. Returned only once. | Not exposed as an agent tool; see the French detail page for the reason. |
[service_token.list](/docs/reference/service_token.list) — List an organization's service account tokens: scopes, projects, who answers for them, expiry, last use and its address. | Not exposed as an agent tool; see the French detail page for the reason. |
[service_token.revoke](/docs/reference/service_token.revoke) — Revoke a service account token: it is refused at the next call. | Not exposed as an agent tool; see the French detail page for the reason. |
[sso.configure](/docs/reference/sso.configure) — Configure an organization's single sign-on and directory. | Not exposed as an agent tool; see the French detail page for the reason. |
[vercel_import.accept](/docs/reference/vercel_import.accept) — Acknowledge the items of a Vercel import that have no equivalent, and validate the migration. | Not exposed as an agent tool; see the French detail page for the reason. |
[vercel_import.list](/docs/reference/vercel_import.list) — Read a project's Vercel imports: state, report, acknowledgements and calls to the source. | Not exposed as an agent tool; see the French detail page for the reason. |
[vercel_import.variables.create](/docs/reference/vercel_import.variables.create) — Import a Vercel project's variables by target and branch, with a token from the source. | Not exposed as an agent tool; see the French detail page for the reason. |
[webhook.endpoint.create](/docs/reference/webhook.endpoint.create) — Declare a webhook receiving endpoint for a project. Its secret is returned only once. | Not exposed as an agent tool; see the French detail page for the reason. |
[webhook.endpoint.delete](/docs/reference/webhook.endpoint.delete) — Delete a receiving endpoint: its pending deliveries go with it. | Not exposed as an agent tool; see the French detail page for the reason. |
[webhook.secret.replace](/docs/reference/webhook.secret.replace) — Replace an endpoint's secret: the old one still signs for 24 hours, then nothing. | Not exposed as an agent tool; see the French detail page for the reason. |