add_block_to_page | pages:edit | Add a block to a page (auto-generates the block id). Pass layoutRegion to add a layout block; omit it for a content block in the page body. Only call after the user confirms. If the result includes blockWarnings, the saved content violates the workspace block manifest (unknown block type, unknown field or wrong value shape) - correct the content and save again. |
bulk_delete_products | models:delete | Bulk-delete selected product records permanently. Only call after the user explicitly confirms. |
bulk_update_products | models:edit | Bulk-update selected product records with a single patch (status, set/adjust stock, set/adjust price). Stock is units; price is minor units. Only call after the user confirms. |
cancel_order | orders:manage | Cancel an order. Only call after the user confirms. |
clear_cart_config | site:config:edit | Remove the workspace's commerce settings entirely, putting the cart back to never-configured. Only call after the user explicitly confirms. A workspace with orders or carts is refused: report that back to the user and retry with force: true only once they confirm. To change individual settings rather than remove them, use update_cart_config. |
create_discount | discounts:manage | Create a discount code. `type` is 'percentage' (value 0-100), 'fixed' (value in minor currency units, requires currency e.g. 'USD'), or 'free_shipping' (value 0). Optional limits: minSubtotal, maxUses, startsAt, endsAt. Only call AFTER the user explicitly agreed to the code you described. |
create_form | forms:create | Create a new form with a name and slug. Optional: field definitions and settings (action type, notifications, webhook, captcha). Fields can also be added later in the Forms editor. Only call AFTER the user explicitly agreed. |
create_manual_order | orders:manage | Create a manual (admin-entered) order. Each item references a product recordId or is an ad-hoc line with name+price (minor units). Only call after the user confirms. |
create_media_folder | media:upload | Create a media folder for organizing assets. Returns the folder, whose id can be passed to upload_media (folderId) or move_media. Only call after the user agreed to the folder you described. |
create_model | models:create | Create a data model in the workspace. Field types include select/multiselect (provide `options`), relation (link to another model via `relationTo` = the target model's slug + `relationType`), and object/list (nested `fields`/`itemFields`). Optional model-level config: slug, description, icon, color, displayField, defaultSort, statusField, `product` (commerce capability: enabled, priceField, skuField, inventoryField, variantAxes) and `deliveryAccess` - a model is "none" (admin only) by default, so pass "public" when the user's app must read it through the delivery API. Only call AFTER the user has explicitly agreed to a structure you proposed (e.g. replied yes / clicked 'Yes, create'). Never create without that explicit go-ahead. |
create_page | pages:create | Create a new draft page with a name and slug (content/blocks are added later in the editor). Optional: parentId, pageType, multilingual displayName/seoTitle/seoDescription, customFields. Only call AFTER the user explicitly agreed. |
create_page_type | page:types:manage | Create a page type (template) with a custom-field schema. Pages of this type carry these custom fields. Only call after the user confirms. |
create_record | models:edit | Add a record (entry) to a data model. Pass the model id or slug and a `data` object whose keys are the model's field keys (use get_model first if unsure). Only call AFTER you described the record and the user explicitly agreed; never create without that go-ahead. |
create_webhook | webhooks:manage | Create a webhook endpoint subscribed to one or more events. The URL must be a public https endpoint. Returns the endpoint AND its signing secret (shown only once). Only call after the user confirms. |
delete_form | forms:delete | Permanently delete a form and all its submissions. Only call after the user explicitly confirms. |
delete_form_submission | forms:submissions:manage | Permanently delete a form submission. Only call after the user explicitly confirms. |
delete_media_folder | media:upload | Delete a media folder. By default only empty folders are removed; pass deleteContents to also delete the assets inside, and force to override the refusal that protects assets still in use. Only call after the user explicitly confirmed the deletion. |
delete_model | models:delete | Delete a data model. WARNING: this cascades - ALL records of the model are permanently deleted. Only call after the user explicitly confirms. |
delete_page | pages:delete | Permanently delete a page and all its descendants. Cannot delete the homepage. Only call after the user explicitly confirms. |
delete_page_type | page:types:manage | Delete a page type. Refused for system types and for a type any page still uses - move or delete those pages first. Only call after the user explicitly confirms. |
delete_record | models:delete | Permanently delete one record (entry) by its id. Only call after the user explicitly confirms. A record still used by page blocks is refused: report the listed pages back to the user and retry with force: true only once they confirm the reference may go stale. |
delete_webhook | webhooks:manage | Delete a webhook endpoint permanently. Only call after the user explicitly confirms. |
edit_order | orders:manage | Replace an order's line items (full replace of the items array). Recomputes totals. Only call after the user confirms. |
get_discount | discounts:view | Get one discount's full details (type, value, usage limits, validity window) by id or code. |
get_form | forms:view | Get one form's full details (fields, settings, submission count) by id or slug. |
get_form_submission | forms:submissions:view | Get one form submission's full details by its id. |
get_model | models:view | Get the full details of one data model by id or slug: complete field definitions (type, options, relations, validation) and the product capability config (enabled, price/sku/inventory field mapping, variantAxes). Use before update_model and when the user asks about a model's structure. |
get_order | orders:view | Get one order's full details by its id: items, the full money column (subtotal, discount, shipping, tax, total - all minor units), the frozen discount code, PO number, shipping address and payment/fulfillment status. |
get_order_pipeline | orders:view | Get the workspace order pipeline (the configurable stages orders move through). |
get_page | pages:view | Get one page's full details (blocks, layout, page type, custom fields, and the SEO title/description/display name per language) by id or slug. Use when the user asks about a specific page's content, structure or SEO. |
get_page_type | page:types:view | Get one page type with its full custom-field schema - the field keys, types and options that pages of this type carry in customFields, and for relation fields their relationTo / relationType. Use before writing customFields on a page, because list_page_types does not return the fields. |
get_record | models:view | Get one record (entry) of a data model by its id, including all its field values and status. |
get_site_config | aucune | Get the workspace's site configuration: languages, site name, enabled features, and the cart/commerce settings (currency, tax rates, shipping methods). |
get_workspace_info | aucune | Get the current workspace's info: name, slug, plan and limits (max pages, users, storage, AI tokens). |
import_records | models:edit | Bulk-import records into a data model (up to 1000 rows). Each row CREATES a record. A translatable field takes a language map ({ title: { en: '...', no: '...' } }); a language the workspace has not enabled is rejected. Returns the imported count and any per-row errors. |
list_block_types | aucune | List the block types available on the workspace's site, each with its content field schema and default values. Use a block type's `schema` to shape `content` for add_block_to_page / update_block_content / patch_block_content - content is language-keyed ({ en: { fieldKey: value } }), and a relation field stores record id(s) per its relationTo/relationType. A non-empty `layoutRegions` marks a layout block (header/footer) managed via update_page_layout, not page body blocks. |
list_carts | carts:view | List shopping carts (admin view) with optional status filter and pagination. totalValue is in minor units. |
list_discounts | discounts:view | List discount codes in the workspace. Filter by enabled, type, or a code search; paginated. |
list_form_submissions | forms:submissions:view | List form submissions, optionally filtered by form and status; paginated. Returns submission rows with their data and status. |
list_forms | forms:view | List the forms in the workspace. Filter by status; paginated. |
list_media | media:view | List media files (images and files) in the workspace; paginated. |
list_media_folders | media:view | List media folders in the workspace (optionally under a parent folder). Use this to discover a folderId before uploading or moving assets. |
list_members | users:view | List the people in this workspace with their role and status (active, suspended, or a pending invitation). Read-only; filter by status or a search string; paginated. |
list_models | models:view | List the data models (content types) defined in the current workspace. Use to answer 'do we have models / a Product model?' or to see what data structures already exist. |
list_orders | orders:view | List orders in the workspace. Filter by payment/fulfillment status, customer, pipeline stage, a search string, or a date range; paginated. |
list_page_types | page:types:view | List the workspace's page types (templates) with their id, name, slug and url prefix. |
list_pages | pages:view | List the workspace's pages (id, name, slug, published), optionally filtered by a search string. |
list_products | models:view | List a product model's catalog with stock and variant info (onHand/reserved/available per record and variant). |
list_records | models:view | List the records (entries) of a data model, by the model's id or slug. Supports filtering (per key: scalar equality, $in, $gte/$lte, $regex), sort, and pagination. Each record includes its full data, so you can find a record by a field value (e.g. sku) without extra lookups. |
list_roles | roles:view | List the roles defined in this workspace and the permissions each one grants. Read-only. Useful for understanding who can do what. |
list_webhook_deliveries | webhooks:view | List recent webhook delivery attempts (status: pending/success/failed) for debugging. |
list_webhook_event_types | webhooks:view | List the event types a webhook can subscribe to (the authoritative allowlist). |
list_webhooks | webhooks:view | List the workspace's webhook endpoints (signing secrets are never returned here). |
mark_order_paid | orders:manage | Record a full payment for an order (manual reconciliation - does NOT verify with a payment provider). amount is in minor units. Only call after the user confirms. |
move_media | media:upload | Move one or more media assets into a folder (or to the root with folderId: null). Use list_media_folders to find the destination folderId. |
patch_block_content | pages:edit | Apply surgical HTML edits (insert_before/insert_after/replace_section) to a block's localized content string without re-sending the full content. Each op's marker must match exactly once. Only call after the user confirms. If the result includes blockWarnings, the saved content violates the workspace block manifest (unknown block type, unknown field or wrong value shape) - correct the content and save again. |
promote_dev_draft | pages:edit | Promote YOUR per-user dev draft overlay onto the page's shared draft (replaces the shared draft blocks; the overlay belongs to the token's user). Do this after the block code for the composed types is deployed to the site. Fails when you have no dev draft for the page. If the result includes blockWarnings, the promoted content violates the workspace block manifest - correct the content and save again. Only call after the user confirms. |
publish_page | pages:publish | Publish a page (or re-publish with the latest draft changes). Publishes both content and layout. Only call after the user confirms. |
record_order_invoice | orders:manage | Attach an invoice (number, optional URL and provider) to an order. |
record_order_payment | orders:manage | Record a (possibly partial) payment against an order's outstanding balance. amount is in minor units and capped at the balance due. Only call after the user confirms. |
refund_order | orders:manage | Refund an order. Omit amount for a full refund; pass amount (minor units) for a partial refund. Only call after the user confirms. |
remove_block_from_page | pages:edit | Remove a specific block from a page by its instance id. Works for content and layout blocks. Only call after the user confirms. |
revert_to_published | pages:edit | Discard all draft changes and revert a page to its last published version. Only call after the user confirms. |
rotate_webhook_secret | webhooks:manage | Rotate a webhook endpoint's signing secret. Returns the endpoint and the NEW secret (shown only once). Only call after the user confirms. |
set_discount_enabled | discounts:manage | Enable or disable a discount code. |
set_order_pipeline_stage | orders:manage | Move an order to a pipeline stage (use get_order_pipeline for valid stage ids). |
set_product_tiers | models:edit | Set the record-level volume price breaks on a product (B2B quantity discounts). They price the product and every variant that defines no breaks of its own; a variant's own breaks are part of its definition, so set those with the variants payload. A line's unit price steps down to the highest break its quantity reaches, and the cart and the order both charge that price. Prices are minor units. Passing an empty array removes the breaks. |
take_over_page_lock | pages:publish | Take over the edit lock on a page another editor is holding open, so the next write (publish_page, update_page_blocks, update_page_layout, ...) is not refused with PAGE_LOCKED. The previous holder is bounced to read-only and may lose unsaved work, so only call after the user confirms. Needs pages:edit or pages:publish on the page. |
transition_order_fulfillment | orders:manage | Move an order to a new fulfillment status. Optionally attach tracking when marking fulfilled. Only call after the user confirms. |
unpublish_page | pages:publish | Unpublish a published page (toggles its published state off). Only call after the user confirms. |
update_block_content | pages:edit | Update a specific block's content on a page. Defaults to merging with existing content; pass mode: 'replace' to overwrite the block's whole content. Works for content and layout blocks. Only call after the user confirms. If the result includes blockWarnings, the saved content violates the workspace block manifest (unknown block type, unknown field or wrong value shape) - correct the content and save again. |
update_cart_config | site:config:edit | Configure the workspace's commerce settings: currency, whether prices include tax, tax rates, shipping methods and stock thresholds. Only provided fields change; arrays replace the whole list. |
update_discount | discounts:manage | Update a discount (partial). code/type/currency become immutable once the discount has been used. Only call after the user confirms. |
update_form | forms:edit | Update an existing form's name, slug, status, fields or settings (partial). Only call after the user describes the change and confirms. |
update_form_submission_status | forms:submissions:manage | Update a form submission's status (pending, processed, spam, archived). |
update_media_folder | media:upload | Rename a media folder and/or move it under a different parent folder. Only call after the user agreed to the change. |
update_model | models:edit | Update a data model by id or slug: name, slug, description, icon, color, displayField, defaultSort, statusField, fields, product capability config, or deliveryAccess ("public" lets the user's app read the model through the delivery API; "none" is admin only). `fields` is a PATCH - listed fields are added or replaced by key, unlisted fields stay untouched; use `removeFields` to delete fields. `product` is also a PATCH of the commerce capability config (enabled, priceField, skuField, inventoryField, variantAxes) - omitted keys keep their stored values. Only call AFTER the user explicitly agreed to the change. |
update_order_details | orders:manage | Update order metadata: customer email, internal notes, shipment tracking, PO number and delivery address. Only provided fields change. |
update_page_blocks | pages:edit | Set the full content blocks array on a page (replaces all existing content blocks). Blocks with matching ids keep their existing content when not provided. Only call after the user confirms. If the result includes blockWarnings, the saved content violates the workspace block manifest (unknown block type, unknown field or wrong value shape) - correct the content and save again. |
update_page_layout | pages:edit | Update page-level layout: inheritance, overrides, or replace all layout blocks. Only call after the user confirms. If the result includes blockWarnings, the saved content violates the workspace block manifest (unknown block type, unknown field or wrong value shape) - correct the content and save again. |
update_page_settings | pages:edit | Update page metadata: name, slug, display name, SEO fields and custom fields. Only the languages and fields you pass change - the ones you omit keep their current values. Only call after the user confirms. |
update_page_type | page:types:manage | Update a page type: name, slug, icon, url prefix, allowChildren, or its custom-field schema. Fields you omit keep their current value, EXCEPT `fields`, which replaces the whole schema. Only call after the user confirms. |
update_record | models:edit | Update an existing record by id (from list_records). Pass `data` to merge field values (fields you don't pass are unchanged), and/or `status` to transition the record's lifecycle state. At least one of data/status is required. Only call AFTER you described the change and the user explicitly agreed. |
update_region_settings | pages:edit | Set the settings of one layout region on a page, e.g. a sidebar's width or a header's variant. Reads the page's current region settings, replaces only the named region and writes the whole list back (page.updateLayout with layoutRegionSettings, one version-guarded write); entries for regions or keys the manifest no longer declares are pruned on the way. Values are validated against the workspace layout manifest's region settings schema: an unknown region, an unknown key, or non-empty values on a region that declares no settings (such a region accepts {} only) is rejected with the backend's BAD_USER_INPUT message. Child pages inherit the region's settings unless they set their own (see get_page.resolvedRegions). |
update_webhook | webhooks:manage | Update a webhook endpoint (partial). Pass enabled to enable/disable. Pass description=null to clear it. The signing secret is not returned. |
upload_media | media:upload | Upload a file to the workspace media library from a local path or a remote URL (max 50MB; images, video, audio, PDF and common office documents). Returns the stored asset whose `url` can be used in block content and record media fields. |