MCP tools
Connect your assistant and select its permissions first. Each tool below lists its arguments and links to the full input constraints and JSON result.
Arguments are one JSON object, combining REST path, query and body fields. Use idempotencyKey for writes. Argument tables show required fields, defaults and confirmation values. Deployment, backup and restore calls queue work: follow the returned resource/job ID to check success.
Tool index
Projects
Deployments and logs
Servers
Backups and jobs
Identity
Projects
list_projects
List authorized active projects using a bounded cursor.
Permission: projects:read · Team member.
get_project
Read public project metadata. Secret values and private configuration snapshots are excluded.
Permission: projects:read · Team member.
list_environments
List the active environments for a project.
Permission: projects:read · Team member.
get_project_configuration
Read the supported Compose runtime configuration and routes.
Permission: projects:read · Team member.
list_variables
List variable names and environment scopes. Values are never returned.
Permission: projects:read · Team member.
list_domains
List custom domains and their verification status.
Permission: projects:read · Team member.
list_aliases
List generated deployment, branch, and environment aliases.
Permission: projects:read · Team member.
rename_project
Rename a project using its current settings version. Resource IDs stay unchanged.
Permission: projects:write · Team member.
update_variables
Patch write-only variables. Omitted values are preserved; deleted names are removed only in their chosen environment scope.
Permission: secrets:write · Team member.
update_project_configuration
Replace Compose runtime configuration and routes with settings version protection. Host lifecycle command changes require their separate administrator scope.
Permission: projects:write · Team member.
delete_project
Delete a project and optionally queue deployed runtime removal. Requires current administrator role and the project name as confirmation.
Permission: projects:write · Owner/admin.
create_project
Create a Compose project from a repository accessible to the owner’s linked GitHub account. Browser GitHub connection and installation consent must already be complete.
Permission: projects:write · Team member · Workspace-wide access required.
update_environments
Replace environment definitions with project settings version protection. Omitted server assignments are preserved. Production is required.
Permission: projects:write · Team member.
update_environment_servers
Update default and per-environment server assignments, regenerating environment aliases. Unspecified environment assignments are preserved.
Permission: projects:write · Team member.
Deployments and logs
list_deployments
List deployment metadata. Build snapshots and variable values are excluded.
Permission: deployments:read · Team member.
get_deployment
Read deployment status by immutable deployment ID.
Permission: deployments:read · Team member.
read_deployment_logs
Read bounded build or control log entries. Application output may contain secrets.
Permission: logs:read · Team member.
read_runtime_logs
Read bounded runtime output from current environment server assignments. Application output may contain secrets.
Permission: logs:read · Team member.
deploy
Queue a deployment from a matching GitHub branch. Requires a unique idempotencyKey; returns acceptance, not execution success.
Permission: deployments:write · Team member.
redeploy
Queue the recorded commit and runtime settings with current routing.
Permission: deployments:write · Team member.
rollback
Queue a successful recorded commit and runtime settings with current routing.
Permission: deployments:write · Team member.
get_deployment_options
List one provider page of matching branches and recent commits only for the selected branch. Continue with nextCursor to reach later matching branches, including after empty filtered pages.
Permission: deployments:read · Team member.
Servers
list_servers
List team server metadata. Unavailable to project-restricted credentials.
Permission: servers:read · Team member · Workspace-wide access required.
get_server
Read server metadata. Enrollment and agent credentials are excluded.
Permission: servers:read · Team member · Workspace-wide access required.
read_server_metrics
Read bounded host metric samples.
Permission: servers:read · Team member · Workspace-wide access required.
Backups and jobs
get_backup_policy
Read a backup policy without commands or storage credentials.
Permission: backups:read · Team member.
list_backups
List backup status metadata. Storage credentials and internal manifests are excluded.
Permission: backups:read · Team member.
get_backup
Read backup status by immutable backup run ID.
Permission: backups:read · Team member.
list_backup_artifacts
List restore artifact identifiers, types, sizes, and checksums. Object keys and credentials are excluded.
Permission: backups:read · Team member.
list_backup_policies
List policy identifiers and enabled state. Database connection secrets are excluded.
Permission: backups:read · Team member.
list_backup_storage
List team storage destination metadata without access keys. Unavailable to project-restricted credentials.
Permission: backups:read · Team member · Workspace-wide access required.
get_job
Read an asynchronous backup or restore job status without its credential-bearing payload.
Permission: backups:read · Team member.
read_job_logs
Read bounded backup or restore output. Logs may contain application secrets.
Permission: logs:read · Team member.
run_backup
Queue a manual run of an enabled backup policy.
Permission: backups:write · Owner/admin.
restore_backup
Queue a destructive restore into the current environment. Requires administrator role and explicit confirmation.
Permission: backups:restore · Owner/admin.
create_backup_policy
Create a backup policy. Requires current administrator role.
Permission: backups:write · Owner/admin.
update_backup_policy
Replace a backup policy using its current settings version. Requires current administrator role.
Permission: backups:write · Owner/admin.
delete_backup_policy
Remove a backup policy without deleting retained backup runs. Requires current administrator role.
Permission: backups:write · Owner/admin.
Identity
get_identity
Read the authenticated user, selected team, and effective credential scopes.
Permission: projects:read · Team member.
None.