# MCP reference

> Generated from the registry. Do not edit by hand.

Product version 0.3.0. A single version in the path, "/v1", for the whole API. Operation detail pages (parameters, response fields, examples) are published in French; every table row links to one. Types, bounds and required fields are in the machine-readable schemas: openapi.json for HTTP, mcp-tools.json for agent tools.

The tool catalogue, with the scopes, minimum rank, reversibility class and error codes of each tool; then the operations no tool exposes, with the reason.

| Tool | Operation | Scopes | Minimum rank | Reversibility | Error codes |
| --- | --- | --- | --- | --- | --- |
| `access_request_list` | [`access.request.list`](../operations/access.request.list.md) — List Glowsoft requests for access to a project's data, most recent first. | `project:read` | `admin` | `N` | `curseur_expire`, `curseur_invalide` |
| `access_request_revoke` | [`access.request.revoke`](../operations/access.request.revoke.md) — Revoke an open Glowsoft access, or refuse a pending request. | `project:write` | `admin` | `R` | `rien_a_annuler` |
| `action_undo` | [`action.undo`](../operations/action.undo.md) — Undo, in one call and within five minutes, a class E action using the token it returned. | `project:write` | `developer` | `R` | `annulation_invalide`, `annulation_expiree`, `annulation_perimee` |
| `audit_read` | [`audit.read`](../operations/audit.read.md) — Read the audit log of the caller's scope, most recent first. | `audit:read` | `reader` | `N` | `curseur_expire`, `curseur_invalide` |
| `auth_email_list` | [`auth_email.list`](../operations/auth_email.list.md) — Read the sending log of a project's authentication emails. | `db:read` | `developer` | `N` | `curseur_expire`, `curseur_invalide` |
| `backend_auth_configure` | [`backend.auth.configure`](../operations/backend.auth.configure.md) — Set the authentication of a project's backend. | `db:write` | `maintainer` | `E` | `projet_non_revendique` |
| `backend_auth_provider_configure` | [`backend.auth_provider.configure`](../operations/backend.auth_provider.configure.md) — Configure a third-party identity provider for a project's backend. | `db:write` | `maintainer` | `R` | `projet_non_revendique`, `secret_store_unavailable` |
| `backend_auth_read` | [`backend.auth.read`](../operations/backend.auth.read.md) — Read the authentication settings of a project's backend. | `db:read` | `maintainer` | `N` | — |
| `backend_key_replace` | [`backend.key.replace`](../operations/backend.key.replace.md) — Replace the publishable key of a project's backend, in a single step. | `project:write` | `admin` | `E` | — |
| `backend_key_revoke` | [`backend.key.revoke`](../operations/backend.key.revoke.md) — Revoke one secret key of a project's backend, leaving the others untouched. | `project:write` | `admin` | `E` | — |
| `backend_read` | [`backend.read`](../operations/backend.read.md) — Read a project's backend: its entry points, its publishable key and its keys. | `project:read` | `reader` | `N` | — |
| `backend_realtime_configure` | [`backend.realtime.configure`](../operations/backend.realtime.configure.md) — Turn a project's backend realtime on or off. | `db:write` | `maintainer` | `R` | — |
| `backend_schema_drift_read` | [`backend.schema_drift.read`](../operations/backend.schema_drift.read.md) — Read the gap between the schema declared by a project's repository and its actual database. | `db:read` | `maintainer` | `N` | — |
| `build_cache_manage` | [`build_cache.manage`](../operations/build_cache.manage.md) — Purge a project's remote cache, by key or entirely, or set its retention. | `deploy:write` | `developer` | `R` | — |
| `database_impersonation_create` | [`database.impersonation.create`](../operations/database.impersonation.create.md) — Open a session impersonating a user of the project's database. | `db:read` | `maintainer` | `R` | — |
| `database_impersonation_read` | [`database.impersonation.read`](../operations/database.impersonation.read.md) — Read as an impersonated user, to test a policy. | `db:read` | `maintainer` | `N` | `usurpation_expiree`, `colonne_personnelle_refusee`, `backend_indisponible` |
| `database_impersonation_write` | [`database.impersonation.write`](../operations/database.impersonation.write.md) — Write as an impersonated user, after confirmation. | `db:write` | `maintainer` | `E` | `usurpation_expiree`, `nonce_invalide`, `validation_humaine_requise`, `colonne_personnelle_refusee`, `backend_indisponible`, `elicitation_requise`, `confirmation_declinee` |
| `database_migrate` | [`database.migrate`](../operations/database.migrate.md) — Apply a schema migration to a project's database. | `db:write` | `maintainer` | `E` | `migration_destructive`, `migration_refusee_par_la_base`, `backend_indisponible` |
| `database_policy_list` | [`database.policy.list`](../operations/database.policy.list.md) — List, for each table of the project, the policy the platform proposes. | `db:read` | `maintainer` | `N` | `backend_indisponible`, `curseur_expire`, `curseur_invalide` |
| `database_policy_write` | [`database.policy.write`](../operations/database.policy.write.md) — Apply a row-level security policy to a table. | `db:write` | `maintainer` | `E` | `nonce_invalide`, `validation_humaine_requise`, `backend_indisponible`, `elicitation_requise`, `confirmation_declinee` |
| `database_policy_write_proposed` | [`database.policy.write_proposed`](../operations/database.policy.write_proposed.md) — Apply to a table the policy the platform proposes, tested beforehand. | `db:write`, `db:read` | `maintainer` | `E` | `nonce_invalide`, `validation_humaine_requise`, `backend_indisponible`, `elicitation_requise`, `confirmation_declinee` |
| `database_posture_read` | [`database.posture.read`](../operations/database.posture.read.md) — Read the latest security posture analysis of a project's database. | `db:read` | `maintainer` | `N` | — |
| `database_sql_read` | [`database.sql.read`](../operations/database.sql.read.md) — Read a project's database with a read-only SQL statement. | `db:read` | `developer` | `N` | `colonne_personnelle_refusee`, `service_action_forbidden`, `backend_indisponible` |
| `database_sql_write` | [`database.sql.write`](../operations/database.sql.write.md) — Modify a project's database with a SQL statement, its effect measured first. | `db:write` | `maintainer` | `E` | `nonce_invalide`, `validation_humaine_requise`, `colonne_personnelle_refusee`, `token_scope_missing`, `backend_indisponible`, `elicitation_requise`, `confirmation_declinee` |
| `deployment_cancel` | [`deployment.cancel`](../operations/deployment.cancel.md) — Cancel a deployment still queued or building, before it has served. | `deploy:write` | `developer` | `R` | `deployment_not_cancellable`, `invalid_transition` |
| `deployment_create` | [`deployment.create`](../operations/deployment.create.md) — Deploy: build a Git reference (without putting it live if needed) or promote an already built version. | `deploy:write` | `developer` | `R` | `invalid_transition`, `plafond_de_depense_atteint`, `promotion_impossible`, `controles_non_satisfaits`, `contournement_reserve` |
| `deployment_hook_revoke` | [`deployment.hook.revoke`](../operations/deployment.hook.revoke.md) — Revoke a deploy hook: its next call is refused. | `deploy:write` | `maintainer` | `E` | — |
| `deployment_list` | [`deployment.list`](../operations/deployment.list.md) — List a project's deployments, most recent first, page by page. | `project:read` | `reader` | `N` | `curseur_expire`, `curseur_invalide` |
| `deployment_log_read` | [`deployment.log.read`](../operations/deployment.log.read.md) — Read a build log, structured by step and timestamped to the millisecond. | `project:read` | `reader` | `N` | — |
| `deployment_read` | [`deployment.read`](../operations/deployment.read.md) — Read a deployment's state, its end cause and the duration of each step. | `project:read` | `reader` | `N` | — |
| `deployment_restorable_list` | [`deployment.restorable.list`](../operations/deployment.restorable.list.md) — What a restore would bring back, and what it would not. | `project:read` | `reader` | `N` | — |
| `deployment_rollback` | [`deployment.rollback`](../operations/deployment.rollback.md) — Restore an environment's previous release, without rebuilding. | `deploy:write` | `developer` | `E` | `rien_a_restaurer`, `release_refroidie`, `release_sans_port`, `deja_servie`, `confirmation_perimee`, `placement_impossible`, `state_signing_unavailable` |
| `domain_add` | [`domain.add`](../operations/domain.add.md) — Attach a domain to a project and start its verification. | `domain:write` | `maintainer` | `E` | `domaine_reserve`, `domaine_deja_servi`, `projet_non_revendique` |
| `domain_delete` | [`domain.delete`](../operations/domain.delete.md) — Remove a domain from a project: it stops being routed and certified. | `domain:write` | `admin` | `I` | `domaine_reserve`, `nonce_invalide`, `validation_humaine_requise`, `elicitation_requise`, `confirmation_declinee` |
| `domain_list` | [`domain.list`](../operations/domain.list.md) — List a project's host names, the environment each serves and its state. | `project:read` | `reader` | `N` | `curseur_expire`, `curseur_invalide` |
| `env_delete_nonproduction` | [`env.delete.nonproduction`](../operations/env.delete.nonproduction.md) — Delete a variable from a non-production environment. | `secrets:write` | `developer` | `E` | `wrong_operation` |
| `env_delete_production` | [`env.delete.production`](../operations/env.delete.production.md) — Delete a variable from the production environment. | `secrets:write` | `maintainer` | `E` | — |
| `env_list` | [`env.list`](../operations/env.list.md) — List an environment's variables, without any value. | `project:read` | `developer` | `N` | `curseur_expire`, `curseur_invalide` |
| `env_pull_nonproduction` | [`env.pull.nonproduction`](../operations/env.pull.nonproduction.md) — Read the non-sensitive variables of a non-production environment. | `project:read` | `developer` | `N` | `secret_never_read`, `wrong_operation` |
| `env_pull_production` | [`env.pull.production`](../operations/env.pull.production.md) — Read the non-sensitive variables of the production environment. | `project:read` | `maintainer` | `N` | `secret_never_read` |
| `env_write_nonproduction` | [`env.write.nonproduction`](../operations/env.write.nonproduction.md) — Write an environment variable outside production. | `secrets:write` | `developer` | `E` | `production_environment`, `quota_exceeded`, `secret_store_unavailable` |
| `env_write_production` | [`env.write.production`](../operations/env.write.production.md) — Write a variable or a secret of the production environment. | `secrets:write` | `maintainer` | `E` | `quota_exceeded`, `secret_store_unavailable` |
| `environment_list` | [`environment.list`](../operations/environment.list.md) — List a project's environments and what each is serving right now. | `project:read` | `reader` | `N` | `curseur_expire`, `curseur_invalide` |
| `environment_unpin` | [`environment.unpin`](../operations/environment.unpin.md) — Lift an environment's pin and promote the latest healthy deployment. | `deploy:write` | `maintainer` | `R` | — |
| `logs_read` | [`logs.read`](../operations/logs.read.md) — Read an environment's runtime logs over a time window. | `project:read` | `reader` | `N` | `resource_busy`, `curseur_expire`, `curseur_invalide` |
| `member_list` | [`member.list`](../operations/member.list.md) — List an organization's members and their active entitlements. | `org:admin` | `admin` | `N` | `curseur_expire`, `curseur_invalide` |
| `member_manage` | [`member.manage`](../operations/member.manage.md) — Grant, change or remove an organization member's role. | `org:admin` | `admin` | `E` | `habilitation_au_dela_du_rang`, `dernier_proprietaire` |
| `organization_second_factor_exemption_list` | [`organization.second_factor_exemption.list`](../operations/organization.second_factor_exemption.list.md) — List an organization's second factor exemptions: which service account, why, by whom, until when. | `org:admin` | `admin` | `N` | `curseur_expire`, `curseur_invalide` |
| `preview_manage` | [`preview.manage`](../operations/preview.manage.md) — Create or destroy a preview attached to a branch. | `deploy:write` | `developer` | `R` | — |
| `preview_protection_configure` | [`preview.protection.configure`](../operations/preview.protection.configure.md) — Set what a project's previews require: nothing, a password, project membership, or an allowed address. | `project:write` | `maintainer` | `R` | — |
| `preview_token_revoke` | [`preview.token.revoke`](../operations/preview.token.revoke.md) — Revoke a bypass token: the edge refuses it in under thirty seconds. | `deploy:write` | `developer` | `E` | — |
| `project_create` | [`project.create`](../operations/project.create.md) — Create a project in an organization, without its backend. | `project:write` | `maintainer` | `R` | `plafond_de_creations_de_projet`, `rayon_d_explosion_atteint`, `disque_de_donnees_sature`, `plafond_de_depense_atteint`, `palier_choisi_par_une_personne` |
| `project_create_with_backend` | [`project.create_with_backend`](../operations/project.create_with_backend.md) — Create a project, its database and its first production deployment, in one call. | `project:write`, `deploy:write` | `maintainer` | `R` | `plafond_de_creations_de_projet`, `rayon_d_explosion_atteint`, `disque_de_donnees_sature`, `plafond_de_depense_atteint`, `invalid_transition`, `palier_choisi_par_une_personne` |
| `project_delete` | [`project.delete`](../operations/project.delete.md) — Request the deletion of a project, its environments and its data. | `project:write` | `owner` | `I` | `nonce_invalide`, `validation_humaine_requise`, `suppression_en_cours`, `elicitation_requise`, `confirmation_declinee` |
| `project_deletion_cancel` | [`project.deletion.cancel`](../operations/project.deletion.cancel.md) — Cancel a project's deletion: withdraw the request, cancel it during the grace period, or restore the project from the trash. | `project:write` | `owner` | `R` | `rien_a_annuler`, `corbeille_expiree`, `purge_engagee`, `slug_repris` |
| `project_list` | [`project.list`](../operations/project.list.md) — List an organization's projects, page by page. | `project:read` | `reader` | `N` | `curseur_expire`, `curseur_invalide` |
| `project_read` | [`project.read`](../operations/project.read.md) — Read a project's metadata and the state of its deployments. | `project:read` | `reader` | `N` | — |
| `project_settings_write` | [`project.settings.write`](../operations/project.settings.write.md) — Change a project's settings. | `project:write` | `maintainer` | `E` | `palier_choisi_par_une_personne` |
| `task_read` | [`task.read`](../operations/task.read.md) — Read the progress of a long-running task without keeping the connection open. | `project:read` | `reader` | `N` | — |
| `usage_read` | [`usage.read`](../operations/usage.read.md) — Read the consumption and usage counters of a contracting entity. | `billing:read` | `reader` | `N` | `chaine_de_mesure_absente` |
| `vercel_import_create` | [`vercel_import.create`](../operations/vercel_import.create.md) — Import a Vercel project's configuration: glowsoft.json and a three-category report. | `project:write` | `developer` | `R` | — |
| `webhook_list` | [`webhook.list`](../operations/webhook.list.md) — Read a project's webhooks: its receiving endpoints and their deliveries, page by page. | `project:read` | `developer` | `N` | `curseur_expire`, `curseur_invalide` |
| `webhook_replay_create` | [`webhook.replay.create`](../operations/webhook.replay.create.md) — Replay a finished delivery: one immediate attempt, then the dead letter queue if it fails. | `project:write` | `developer` | `E` | `livraison_en_attente` |

## Without a tool

| Operation | Reason |
| --- | --- |
| [`access.request.accept`](../operations/access.request.accept.md) — Accept a Glowsoft request for access to a project's data. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`account.device.create`](../operations/account.device.create.md) — Register a device (APNs or FCM token) to receive the account's notifications. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`account.device.revoke`](../operations/account.device.revoke.md) — Remove a registered device: no notification is sent to it any more. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`account.notice.list`](../operations/account.notice.list.md) — Read the notices the platform addressed to the account, and what became of them. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`account.notification.read`](../operations/account.notification.read.md) — Read, for an organization, the channels that notify the account of each kind of event, and its registered devices. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`account.notification.write`](../operations/account.notification.write.md) — Choose the channels that notify the account of one kind of event, in an organization. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`account.organization.list`](../operations/account.organization.list.md) — List the organizations where the account holds a role: identifier, slug, name and roles. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`account.passkey.accept`](../operations/account.passkey.accept.md) — Confirm a pending passkey with the output of navigator.credentials.create: it becomes active, other sessions close, and the first factor returns ten codes, once. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`account.passkey.create`](../operations/account.passkey.create.md) — Start enrolling a passkey: returns the options the browser passes to navigator.credentials.create, with a challenge to sign within fifteen minutes. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`account.password.write`](../operations/account.password.write.md) — Change the password, under a console session: the current one is required, and the account's other sessions close. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`account.recovery_codes.replace`](../operations/account.recovery_codes.replace.md) — Issue ten new recovery codes, the current password presented: the old ones stop working, the new ones are returned once. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`account.second_factor.accept`](../operations/account.second_factor.accept.md) — Confirm a pending factor with a first valid code: it becomes active, other sessions close, and the first factor returns ten recovery codes, once. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`account.second_factor.create`](../operations/account.second_factor.create.md) — Start enrolling an authenticator app: its secret is returned once, and the factor only counts once confirmed by a first code. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`account.second_factor.list`](../operations/account.second_factor.list.md) — List the account's second factors and the number of recovery codes left; never a secret. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`account.second_factor.revoke`](../operations/account.second_factor.revoke.md) — Remove a second factor, the current password presented: other sessions close, and the last factor takes the recovery codes with it. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`account.session.list`](../operations/account.session.list.md) — List the account's active console sessions: where they were opened and until when. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`account.session.revoke`](../operations/account.session.revoke.md) — Close one of the account's console sessions: it is refused at the next call. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`agent.proposal.accept`](../operations/agent.proposal.accept.md) — Accept a proposal filed by an agent and merge it. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`backend.key.create`](../operations/backend.key.create.md) — Mint a secret key for a project's backend. It is returned only once. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`billing.manage`](../operations/billing.manage.md) — Manage billing, payment methods and the spending cap. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`cache.tag.revoke`](../operations/cache.tag.revoke.md) — Invalidate or delete from the edge cache what an environment stored under tags. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`database.personal_columns.configure`](../operations/database.personal_columns.configure.md) — Set the list of columns classified as personal data in a project's database. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`database.posture.configure`](../operations/database.posture.configure.md) — Open, or not, the daily database posture fix as a merge request on the project's repository. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`database.rls.configure`](../operations/database.rls.configure.md) — Turn row-level security on or off for a table. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`deployment.hook.create`](../operations/deployment.hook.create.md) — Create a deploy hook: a signed address to call that deploys a branch to an environment. Its secret is returned only once. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`deployment.screenshot.read`](../operations/deployment.screenshot.read.md) — Read a deployment's screenshot, taken once it became healthy. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`errorpage.configure`](../operations/errorpage.configure.md) — Set, replace or remove a project's error pages, in French and English. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`errorpage.read`](../operations/errorpage.read.md) — Read the error pages a project has set. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`firewall.configure`](../operations/firewall.configure.md) — Configure the application firewall, rate limiting and address lists. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`image.configure`](../operations/image.configure.md) — Set a project's allowed image sources, and obtain the key that signs its URLs. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`image.read`](../operations/image.read.md) — Read a project's allowed image sources and its monthly transformation counter. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`mcp_client.consent.create`](../operations/mcp_client.consent.create.md) — Consent to an MCP client's authorization request, or refuse it. Returns the address to send the browser to. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`mcp_client.consent.read`](../operations/mcp_client.consent.read.md) — Re-read a pending MCP client authorization request: its name, its address, the scopes it asks for. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`mcp_client.list`](../operations/mcp_client.list.md) — List the MCP clients you authorized: their name, scopes and last use. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`mcp_client.revoke`](../operations/mcp_client.revoke.md) — Withdraw an MCP client's authorization: its agent tokens are refused at the next call. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`organization.agent_projects.configure`](../operations/organization.agent_projects.configure.md) — Decide whether projects created by the organization's agents are claimed automatically by the account on whose behalf they act. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`organization.agent_projects.read`](../operations/organization.agent_projects.read.md) — Read whether projects created by the organization's agents are claimed automatically. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`organization.audit.read`](../operations/organization.audit.read.md) — Read an organization's audit log outside its projects, most recent first. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`organization.delete`](../operations/organization.delete.md) — Delete an organization and everything it contains. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`organization.github_connection.create`](../operations/organization.github_connection.create.md) — Attach a GitHub application installation to the organization, on return from GitHub. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`organization.github_connection.list`](../operations/organization.github_connection.list.md) — Read an organization's GitHub connections, and the address to install the application. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`organization.github_connection.revoke`](../operations/organization.github_connection.revoke.md) — Remove a GitHub connection from the organization. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`organization.github_repository.list`](../operations/organization.github_repository.list.md) — Read the GitHub repositories the organization's connections open. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`organization.invitation.create`](../operations/organization.invitation.create.md) — Invite a person, by address, to an organization or one of its projects. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`organization.invitation.list`](../operations/organization.invitation.list.md) — Read an organization's pending invitations. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`organization.invitation.revoke`](../operations/organization.invitation.revoke.md) — Revoke an organization invitation before it is accepted. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`organization.second_factor.configure`](../operations/organization.second_factor.configure.md) — Require, or stop requiring, a second factor from an organization's Owners, Administrators and Security members. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`organization.second_factor.read`](../operations/organization.second_factor.read.md) — Read an organization's second factor requirement, and how many affected accounts do not hold one. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`organization.second_factor_exemption.create`](../operations/organization.second_factor_exemption.create.md) — Exempt a service account from the second factor, by name and with a reason, for three months at most. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`organization.second_factor_exemption.revoke`](../operations/organization.second_factor_exemption.revoke.md) — Remove a service account's second factor exemption. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`personal_access_token.create`](../operations/personal_access_token.create.md) — Mint a personal token: named scopes, an expiry of 365 days at most. Returned only once. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`personal_access_token.list`](../operations/personal_access_token.list.md) — List your personal tokens: scopes, expiry, last use and its address, and when an unused token will be disabled. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`personal_access_token.reactivation.create`](../operations/personal_access_token.reactivation.create.md) — Reactivate one of your personal tokens disabled for inactivity, under a console session. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`personal_access_token.revoke`](../operations/personal_access_token.revoke.md) — Revoke one of your personal tokens: it is refused at the next call. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`preview.fork.accept`](../operations/preview.fork.accept.md) — Authorize the commit of a merge request coming from a fork: it is built and deployed, with no secret. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`preview.session.create`](../operations/preview.session.create.md) — Open a preview as a project member: returns the single-use address to enter by. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`preview.token.create`](../operations/preview.token.create.md) — Mint a bypass token for a preview: it goes through the preview whatever its mode. Returned only once. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`project.deletion.accept`](../operations/project.deletion.accept.md) — Validate a project's requested deletion: a second Owner, or the only one. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`project.ownership.accept`](../operations/project.ownership.accept.md) — Claim a project created by an agent: it becomes an ordinary project, with no expiry. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`secret.reveal`](../operations/secret.reveal.md) — Read a secret's value in clear. Allowed to no role, without exception. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`service_token.create`](../operations/service_token.create.md) — Mint a service account token: named scopes, a list of projects, ninety days at most. Returned only once. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`service_token.list`](../operations/service_token.list.md) — List an organization's service account tokens: scopes, projects, who answers for them, expiry, last use and its address. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`service_token.revoke`](../operations/service_token.revoke.md) — Revoke a service account token: it is refused at the next call. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`sso.configure`](../operations/sso.configure.md) — Configure an organization's single sign-on and directory. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`vercel_import.accept`](../operations/vercel_import.accept.md) — Acknowledge the items of a Vercel import that have no equivalent, and validate the migration. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`vercel_import.list`](../operations/vercel_import.list.md) — Read a project's Vercel imports: state, report, acknowledgements and calls to the source. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`vercel_import.variables.create`](../operations/vercel_import.variables.create.md) — Import a Vercel project's variables by target and branch, with a token from the source. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`webhook.endpoint.create`](../operations/webhook.endpoint.create.md) — Declare a webhook receiving endpoint for a project. Its secret is returned only once. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`webhook.endpoint.delete`](../operations/webhook.endpoint.delete.md) — Delete a receiving endpoint: its pending deliveries go with it. | Not exposed as an agent tool; see the French detail page for the reason. |
| [`webhook.secret.replace`](../operations/webhook.secret.replace.md) — Replace an endpoint's secret: the old one still signs for 24 hours, then nothing. | Not exposed as an agent tool; see the French detail page for the reason. |
