The tool specification

1 misc_find read

Find a capability by what you want to do, in plain words. The directory holds 1,462 capabilities and you are sent about fifteen; this is how the rest are reached. Returns ranked capabilities, each with its exact key, effect class and argument schema — run one with misc_run, or call it directly if it happens to be loaded as a tool. Use when: you need something you were not handed a tool for. Returns: a ranked list of {key, summary, effects, callable, schema}. Never: guess a key without searching first, and do not use it to browse — a vague query returns noise.

A meta tool, implemented in the server code — not a directory row. DIR_GET misc_find returns 404, and that is correct.

{
  "name": "misc_find",
  "description": "Find a capability by what you want to do, in plain words. The directory holds 1,462 capabilities and you are sent about fifteen; this is how the rest are reached. Returns ranked capabilities, each with its exact key, effect class and argument schema — run one with misc_run, or call it directly if it happens to be loaded as a tool. Use when: you need something you were not handed a tool for. Returns: a ranked list of {key, summary, effects, callable, schema}. Never: guess a key without searching first, and do not use it to browse — a vague query returns noise.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "query": {
        "type": "string",
        "description": "What you are trying to do, in ordinary words: \"send a text\", \"screenshot a page\", \"stripe refund\". Not a key, not SQL."
      },
      "limit": {
        "type": "integer",
        "description": "How many capabilities to return. Default 6.",
        "default": 6
      }
    },
    "required": [
      "query"
    ]
  }
}

{
  "type": "function",
  "function": {
    "name": "misc_find",
    "description": "Find a capability by what you want to do, in plain words. The directory holds 1,462 capabilities and you are sent about fifteen; this is how the rest are reached. Returns ranked capabilities, each with its exact key, effect class and argument schema — run one with misc_run, or call it directly if it happens to be loaded as a tool. Use when: you need something you were not handed a tool for. Returns: a ranked list of {key, summary, effects, callable, schema}. Never: guess a key without searching first, and do not use it to browse — a vague query returns noise.",
    "parameters": {
      "type": "object",
      "properties": {
        "query": {
          "type": "string",
          "description": "What you are trying to do, in ordinary words: \"send a text\", \"screenshot a page\", \"stripe refund\". Not a key, not SQL."
        },
        "limit": {
          "type": "integer",
          "description": "How many capabilities to return. Default 6.",
          "default": 6
        }
      },
      "required": [
        "query"
      ]
    }
  }
}

{
  "name": "misc_find",
  "arguments": {
    "query": "send a text",
    "limit": 6
  }
}

misc find "send a text"

2 misc_run varies by key

Run one capability by the exact key misc_find gave you, with named arguments. The server resolves account, device and authority; if something is ambiguous it does not guess — it answers with the exact fact to supply (ambiguous_account, ambiguous_device) and you retry with that added. Use when: you know the key. Returns: the result plus a receipt URL recording what was sent and what came back — accepted or queued is not delivered, so read the receipt before reporting success. Never: run a destroy-effect key without _confirm:true; that refusal is the safety boundary working, not an error to route around.

A meta tool, implemented in the server code — not a directory row. DIR_GET misc_find returns 404, and that is correct.

{
  "name": "misc_run",
  "description": "Run one capability by the exact key misc_find gave you, with named arguments. The server resolves account, device and authority; if something is ambiguous it does not guess — it answers with the exact fact to supply (ambiguous_account, ambiguous_device) and you retry with that added. Use when: you know the key. Returns: the result plus a receipt URL recording what was sent and what came back — accepted or queued is not delivered, so read the receipt before reporting success. Never: run a destroy-effect key without _confirm:true; that refusal is the safety boundary working, not an error to route around.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "key": {
        "type": "string",
        "description": "The capability key exactly as misc_find returned it, uppercase with underscores, e.g. SEND_BY_CHANNEL."
      },
      "args": {
        "type": "object",
        "description": "The capability's named arguments, using the property names from the schema misc_find returned. Not positional, not a string.",
        "additionalProperties": true
      },
      "account": {
        "type": "string",
        "description": "Only after a call answered ambiguous_account: the identity to act as."
      },
      "device": {
        "type": "string",
        "description": "Only after a call answered ambiguous_device: the machine to act on."
      },
      "_confirm": {
        "type": "boolean",
        "description": "Must be true to run a destroy-effect key. Ignored by every other key."
      },
      "dry_run": {
        "type": "boolean",
        "description": "Shape the outbound call and return it without firing it."
      }
    },
    "required": [
      "key"
    ]
  }
}

{
  "type": "function",
  "function": {
    "name": "misc_run",
    "description": "Run one capability by the exact key misc_find gave you, with named arguments. The server resolves account, device and authority; if something is ambiguous it does not guess — it answers with the exact fact to supply (ambiguous_account, ambiguous_device) and you retry with that added. Use when: you know the key. Returns: the result plus a receipt URL recording what was sent and what came back — accepted or queued is not delivered, so read the receipt before reporting success. Never: run a destroy-effect key without _confirm:true; that refusal is the safety boundary working, not an error to route around.",
    "parameters": {
      "type": "object",
      "properties": {
        "key": {
          "type": "string",
          "description": "The capability key exactly as misc_find returned it, uppercase with underscores, e.g. SEND_BY_CHANNEL."
        },
        "args": {
          "type": "object",
          "description": "The capability's named arguments, using the property names from the schema misc_find returned. Not positional, not a string.",
          "additionalProperties": true
        },
        "account": {
          "type": "string",
          "description": "Only after a call answered ambiguous_account: the identity to act as."
        },
        "device": {
          "type": "string",
          "description": "Only after a call answered ambiguous_device: the machine to act on."
        },
        "_confirm": {
          "type": "boolean",
          "description": "Must be true to run a destroy-effect key. Ignored by every other key."
        },
        "dry_run": {
          "type": "boolean",
          "description": "Shape the outbound call and return it without firing it."
        }
      },
      "required": [
        "key"
      ]
    }
  }
}

{
  "name": "misc_run",
  "arguments": {
    "key": "SEND_BY_CHANNEL",
    "args": {
      "channel": "blooio",
      "to": "redacted",
      "text": "hi"
    }
  }
}

misc run SEND_BY_CHANNEL channel="blooio" to="redacted" text="hi"

3 WEB_SEARCH read

Give a query, get back ranked results with title, url, snippet AND the actual page text of the top results (contents), fetched live from the operator's residential connection (this Mac on Starlink) — so a model can read real pages, not just snippets, and sites that block datacenters still answer. This is the on-hand web tool.

Use it when

any time you need live web information, real-time data, or the contents of pages

It returns

{ok, query, count, results:[{title, url, snippet, engines, contents}], engines_used, egress}

{
  "name": "WEB_SEARCH",
  "description": "Give a query, get back ranked results with title, url, snippet AND the actual page text of the top results (contents), fetched live from the operator's residential connection (this Mac on Starlink) — so a model can read real pages, not just snippets, and sites that block datacenters still answer. This is the on-hand web tool.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "query": {
        "type": "string"
      }
    },
    "required": []
  }
}

{
  "type": "function",
  "function": {
    "name": "WEB_SEARCH",
    "description": "Give a query, get back ranked results with title, url, snippet AND the actual page text of the top results (contents), fetched live from the operator's residential connection (this Mac on Starlink) — so a model can read real pages, not just snippets, and sites that block datacenters still answer. This is the on-hand web tool.",
    "parameters": {
      "type": "object",
      "properties": {
        "query": {
          "type": "string"
        }
      },
      "required": []
    }
  }
}

{
  "key": "WEB_SEARCH",
  "args": {}
}

misc run WEB_SEARCH 

4 NET_SEARCH read

Search the web and get back titles, urls and snippets. The request leaves from the operator's residential IP and bandwidth (this Mac on Starlink), not a datacenter, so results are not shaped by a cloud IP and sites that block datacenters still answer.

Use it when

you need live web results and want them fetched from a real residential connection

It returns

{ok, query, count, results:[{title, url, snippet}], egress}

{
  "name": "NET_SEARCH",
  "description": "Search the web and get back titles, urls and snippets. The request leaves from the operator's residential IP and bandwidth (this Mac on Starlink), not a datacenter, so results are not shaped by a cloud IP and sites that block datacenters still answer.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "query": {
        "type": "string"
      }
    },
    "required": []
  }
}

{
  "type": "function",
  "function": {
    "name": "NET_SEARCH",
    "description": "Search the web and get back titles, urls and snippets. The request leaves from the operator's residential IP and bandwidth (this Mac on Starlink), not a datacenter, so results are not shaped by a cloud IP and sites that block datacenters still answer.",
    "parameters": {
      "type": "object",
      "properties": {
        "query": {
          "type": "string"
        }
      },
      "required": []
    }
  }
}

{
  "key": "NET_SEARCH",
  "args": {}
}

misc run NET_SEARCH 

5 NET_LINE write

Reads the line the tools run on: the egress IP and network, and when the machine sits behind a Starlink terminal, the dish itself over its local API: uptime, latency to the point of presence, ping drop rate, downlink and uplink throughput, obstruction fraction, GPS lock, hardware and software version, alerts. Read-only. Location is refused by Starlink policy on consumer plans and is reported as such.

Use it when

before promising a job that needs the line, or to explain a slow or failed web call

It returns

{ok, egress:{ip, org, city}, dish:{available, uptime_s, pop_ping_latency_ms, pop_ping_drop_rate, downlink_mbps, uplink_mbps, fraction_obstructed, hardware, software, alerts}}

{
  "name": "NET_LINE",
  "description": "Reads the line the tools run on: the egress IP and network, and when the machine sits behind a Starlink terminal, the dish itself over its local API: uptime, latency to the point of presence, ping drop rate, downlink and uplink throughput, obstruction fraction, GPS lock, hardware and software version, alerts. Read-only. Location is refused by Starlink policy on consumer plans and is reported as such.",
  "inputSchema": {
    "type": "object",
    "properties": {},
    "required": []
  }
}

{
  "type": "function",
  "function": {
    "name": "NET_LINE",
    "description": "Reads the line the tools run on: the egress IP and network, and when the machine sits behind a Starlink terminal, the dish itself over its local API: uptime, latency to the point of presence, ping drop rate, downlink and uplink throughput, obstruction fraction, GPS lock, hardware and software version, alerts. Read-only. Location is refused by Starlink policy on consumer plans and is reported as such.",
    "parameters": {
      "type": "object",
      "properties": {},
      "required": []
    }
  }
}

{
  "key": "NET_LINE",
  "args": {}
}

misc run NET_LINE 

6 SURFACE_SEARCH read

Find a verb the owner's Mac or iPhone can do. Every hit carries an id and a run block: pass the id to SURFACE_EXECUTE. Layers: app scripting dictionaries, App Intents, Shortcuts actions and triggers, every CLI tool, preference domains, live menus and windows (iPhone Mirroring included), phone protocols, private iMessage verbs, Continuity, the build's own rows, and what compose made.

Use it when

before any action on the Mac or the phone that has no row of its own: find the verb first

It returns

{q, count, verbs:[{id, layer, device, app, verb, description, ontology, run:{kind, command, args, example}, status}]}

{
  "name": "SURFACE_SEARCH",
  "description": "Find a verb the owner's Mac or iPhone can do. Every hit carries an id and a run block: pass the id to SURFACE_EXECUTE. Layers: app scripting dictionaries, App Intents, Shortcuts actions and triggers, every CLI tool, preference domains, live menus and windows (iPhone Mirroring included), phone protocols, private iMessage verbs, Continuity, the build's own rows, and what compose made.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "q": {
        "type": "string"
      }
    },
    "required": []
  }
}

{
  "type": "function",
  "function": {
    "name": "SURFACE_SEARCH",
    "description": "Find a verb the owner's Mac or iPhone can do. Every hit carries an id and a run block: pass the id to SURFACE_EXECUTE. Layers: app scripting dictionaries, App Intents, Shortcuts actions and triggers, every CLI tool, preference domains, live menus and windows (iPhone Mirroring included), phone protocols, private iMessage verbs, Continuity, the build's own rows, and what compose made.",
    "parameters": {
      "type": "object",
      "properties": {
        "q": {
          "type": "string"
        }
      },
      "required": []
    }
  }
}

{
  "key": "SURFACE_SEARCH",
  "args": {}
}

misc run SURFACE_SEARCH 

7 SURFACE_EXECUTE write

Run any encyclopedia verb on the owner's Mac or paired iPhone by the id SURFACE_SEARCH returned, with args shaped as that verb's run.args. Kinds: shell, defaults, jxa, menu, ax, mirror, phone, intent, shortcut_action, continuity, dispatch, composed shortcut/automation/chain. Receipted on the ledger.

Use it when

after SURFACE_SEARCH gave you the id, to do the thing

It returns

{ok, id, layer, app, verb, kind, args, result:{exit, stdout, stderr, ms} | {result} | {steps, output}, ms, receipt}

{
  "name": "SURFACE_EXECUTE",
  "description": "Run any encyclopedia verb on the owner's Mac or paired iPhone by the id SURFACE_SEARCH returned, with args shaped as that verb's run.args. Kinds: shell, defaults, jxa, menu, ax, mirror, phone, intent, shortcut_action, continuity, dispatch, composed shortcut/automation/chain. Receipted on the ledger.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "id": {
        "type": "string"
      },
      "args_json": {
        "type": "string"
      }
    },
    "required": []
  }
}

{
  "type": "function",
  "function": {
    "name": "SURFACE_EXECUTE",
    "description": "Run any encyclopedia verb on the owner's Mac or paired iPhone by the id SURFACE_SEARCH returned, with args shaped as that verb's run.args. Kinds: shell, defaults, jxa, menu, ax, mirror, phone, intent, shortcut_action, continuity, dispatch, composed shortcut/automation/chain. Receipted on the ledger.",
    "parameters": {
      "type": "object",
      "properties": {
        "id": {
          "type": "string"
        },
        "args_json": {
          "type": "string"
        }
      },
      "required": []
    }
  }
}

{
  "key": "SURFACE_EXECUTE",
  "args": {}
}

misc run SURFACE_EXECUTE 

8 BRIDGE_REGISTER write

Turn any controllable surface into a durable, dispatchable object. controller = browser (a site or web app, driven by Playwright over a persistent session) | surface (any of the 8,764 Apple-surface verbs: apps, clicks, the phone) | adspower (your own AdsPower profile) | phone. Then drive it with its act door and record/compile flows into BRIDGE_* capabilities.

Use it when

you want a site/app/session/device to become one callable capability

It returns

{ok, id, controller, act, record}

{
  "name": "BRIDGE_REGISTER",
  "description": "Turn any controllable surface into a durable, dispatchable object. controller = browser (a site or web app, driven by Playwright over a persistent session) | surface (any of the 8,764 Apple-surface verbs: apps, clicks, the phone) | adspower (your own AdsPower profile) | phone. Then drive it with its act door and record/compile flows into BRIDGE_* capabilities.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "name": {
        "type": "string"
      },
      "controller": {
        "type": "string"
      },
      "surface": {
        "type": "string"
      }
    },
    "required": []
  }
}

{
  "type": "function",
  "function": {
    "name": "BRIDGE_REGISTER",
    "description": "Turn any controllable surface into a durable, dispatchable object. controller = browser (a site or web app, driven by Playwright over a persistent session) | surface (any of the 8,764 Apple-surface verbs: apps, clicks, the phone) | adspower (your own AdsPower profile) | phone. Then drive it with its act door and record/compile flows into BRIDGE_* capabilities.",
    "parameters": {
      "type": "object",
      "properties": {
        "name": {
          "type": "string"
        },
        "controller": {
          "type": "string"
        },
        "surface": {
          "type": "string"
        }
      },
      "required": []
    }
  }
}

{
  "key": "BRIDGE_REGISTER",
  "args": {}
}

misc run BRIDGE_REGISTER 

9 BRIDGE_ACT write

Runs one step on a bridge's controller. Browser steps: goto (url), click (selector or text), fill (selector, value), type (selector, text), press (text = the key), wait (selector), screenshot, snapshot (title, visible text, links, form fields). The bridge id comes from BRIDGE_REGISTER. Runs on the tenant's own device when one is registered, otherwise on the build's endpoint. Receipted.

Use it when

you want to look at or act on a site or app through a bridge right now (record→compile for anything you will repeat)

It returns

{ok, bridge, controller, result, receipt}

{
  "name": "BRIDGE_ACT",
  "description": "Runs one step on a bridge's controller. Browser steps: goto (url), click (selector or text), fill (selector, value), type (selector, text), press (text = the key), wait (selector), screenshot, snapshot (title, visible text, links, form fields). The bridge id comes from BRIDGE_REGISTER. Runs on the tenant's own device when one is registered, otherwise on the build's endpoint. Receipted.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "bridge_id": {
        "type": "string"
      },
      "action": {
        "type": "string",
        "enum": [
          "goto",
          "click",
          "fill",
          "type",
          "press",
          "wait",
          "screenshot",
          "snapshot",
          "eval"
        ]
      },
      "url": {
        "type": "string"
      },
      "selector": {
        "type": "string"
      },
      "value": {
        "type": "string"
      },
      "text": {
        "type": "string"
      }
    },
    "required": [
      "bridge_id",
      "action"
    ]
  }
}

{
  "type": "function",
  "function": {
    "name": "BRIDGE_ACT",
    "description": "Runs one step on a bridge's controller. Browser steps: goto (url), click (selector or text), fill (selector, value), type (selector, text), press (text = the key), wait (selector), screenshot, snapshot (title, visible text, links, form fields). The bridge id comes from BRIDGE_REGISTER. Runs on the tenant's own device when one is registered, otherwise on the build's endpoint. Receipted.",
    "parameters": {
      "type": "object",
      "properties": {
        "bridge_id": {
          "type": "string"
        },
        "action": {
          "type": "string",
          "enum": [
            "goto",
            "click",
            "fill",
            "type",
            "press",
            "wait",
            "screenshot",
            "snapshot",
            "eval"
          ]
        },
        "url": {
          "type": "string"
        },
        "selector": {
          "type": "string"
        },
        "value": {
          "type": "string"
        },
        "text": {
          "type": "string"
        }
      },
      "required": [
        "bridge_id",
        "action"
      ]
    }
  }
}

{
  "key": "BRIDGE_ACT",
  "args": {}
}

misc run BRIDGE_ACT 

10 ONBOARD write

Creates an account (tenant) for a person: one key that opens every door (net, surface, bridges, text) for ten years, their own Worker inside the build's Workers for Platforms namespace (one URL of their own, one MCP URL of their own), and the one-line command that attaches their own Mac as their device. The key is shown once.

Use it when

someone wants to use the build with their own key and their own device

It returns

{ok, tenant_id, key, worker:{url, mcp}, device:{install}, doors, guide}

{
  "name": "ONBOARD",
  "description": "Creates an account (tenant) for a person: one key that opens every door (net, surface, bridges, text) for ten years, their own Worker inside the build's Workers for Platforms namespace (one URL of their own, one MCP URL of their own), and the one-line command that attaches their own Mac as their device. The key is shown once.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "name": {
        "type": "string"
      },
      "email": {
        "type": "string"
      }
    },
    "required": [
      "name"
    ]
  }
}

{
  "type": "function",
  "function": {
    "name": "ONBOARD",
    "description": "Creates an account (tenant) for a person: one key that opens every door (net, surface, bridges, text) for ten years, their own Worker inside the build's Workers for Platforms namespace (one URL of their own, one MCP URL of their own), and the one-line command that attaches their own Mac as their device. The key is shown once.",
    "parameters": {
      "type": "object",
      "properties": {
        "name": {
          "type": "string"
        },
        "email": {
          "type": "string"
        }
      },
      "required": [
        "name"
      ]
    }
  }
}

{
  "key": "ONBOARD",
  "args": {}
}

misc run ONBOARD 

11 CF_MAIN_SEARCH read

Find the exact Cloudflare API endpoint for something, by running JavaScript over Cloudflare's own OpenAPI document. This is the first half of Cloudflare Code Mode: rather than publish 2,165 separate tools — one per endpoint — Cloudflare hands you the specification as a value and a sandbox to interrogate it in. You write a function; it runs server-side; you get back whatever you returned.

The sandbox. The sandbox exposes the OpenAPI document as the bare global `spec` (verified 2026-09-06; re-measured 2026-09-13: spec.paths holds 2,165 endpoints). There is no `cloudflare` global in THIS tool — that one lives in CF_MAIN_EXECUTE. Your code cannot reach the network and cannot reach this build.

Use it when

You need the precise path or shape of a Cloudflare operation before calling it. Run this first, then CF_MAIN_EXECUTE with the path you found.

It returns

Whatever your function returns, serialised as JSON.

Do not

Not for prose questions about how a Cloudflare product works — that is CF_MAIN_DOCS. This tool searches paths, not explanations.

{
  "name": "CF_MAIN_SEARCH",
  "description": "Find the exact Cloudflare API endpoint for something, by running JavaScript over Cloudflare's own OpenAPI document. This is the first half of Cloudflare Code Mode: rather than publish 2,165 separate tools — one per endpoint — Cloudflare hands you the specification as a value and a sandbox to interrogate it in. You write a function; it runs server-side; you get back whatever you returned.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "code": {
        "type": "string",
        "description": "An async arrow function, as a string, that reads the global `spec` and returns your answer. Example: async () => Object.keys(spec.paths).filter(p => p.includes(\"/zones\")).slice(0, 6)"
      }
    },
    "required": [
      "code"
    ]
  }
}

{
  "type": "function",
  "function": {
    "name": "CF_MAIN_SEARCH",
    "description": "Find the exact Cloudflare API endpoint for something, by running JavaScript over Cloudflare's own OpenAPI document. This is the first half of Cloudflare Code Mode: rather than publish 2,165 separate tools — one per endpoint — Cloudflare hands you the specification as a value and a sandbox to interrogate it in. You write a function; it runs server-side; you get back whatever you returned.",
    "parameters": {
      "type": "object",
      "properties": {
        "code": {
          "type": "string",
          "description": "An async arrow function, as a string, that reads the global `spec` and returns your answer. Example: async () => Object.keys(spec.paths).filter(p => p.includes(\"/zones\")).slice(0, 6)"
        }
      },
      "required": [
        "code"
      ]
    }
  }
}

{
  "key": "CF_MAIN_SEARCH",
  "args": {
    "code": "async () => Object.keys(spec.paths).filter(p => p.includes(\"/zones\")).slice(0, 6)"
  }
}

misc run CF_MAIN_SEARCH code="async () => Object.keys(spec.paths).filter(p => p.includes(\"/zones\")).slice(0, 6)"

12 CF_MAIN_DOCS read

Search Cloudflare's written documentation and get back the passages that answer your question. Covers every product: Workers, Pages, R2, D1, KV, Durable Objects, Images, Stream, Workers AI, Queues, Hyperdrive, Zero Trust.

Use it when

A question about how a Cloudflare product behaves, what a setting means, or which approach is correct.

It returns

Matching documentation passages with their source URLs.

Do not

Not for finding an endpoint path (CF_MAIN_SEARCH) and not for making a change (CF_MAIN_EXECUTE).

{
  "name": "CF_MAIN_DOCS",
  "description": "Search Cloudflare's written documentation and get back the passages that answer your question. Covers every product: Workers, Pages, R2, D1, KV, Durable Objects, Images, Stream, Workers AI, Queues, Hyperdrive, Zero Trust.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "query": {
        "type": "string",
        "description": "A plain-language documentation question, e.g. \"durable objects alarms\", \"how do I bind R2 to a Worker\", \"D1 batch limits\"."
      }
    },
    "required": [
      "query"
    ]
  }
}

{
  "type": "function",
  "function": {
    "name": "CF_MAIN_DOCS",
    "description": "Search Cloudflare's written documentation and get back the passages that answer your question. Covers every product: Workers, Pages, R2, D1, KV, Durable Objects, Images, Stream, Workers AI, Queues, Hyperdrive, Zero Trust.",
    "parameters": {
      "type": "object",
      "properties": {
        "query": {
          "type": "string",
          "description": "A plain-language documentation question, e.g. \"durable objects alarms\", \"how do I bind R2 to a Worker\", \"D1 batch limits\"."
        }
      },
      "required": [
        "query"
      ]
    }
  }
}

{
  "key": "CF_MAIN_DOCS",
  "args": {
    "query": "durable objects alarms"
  }
}

misc run CF_MAIN_DOCS query="durable objects alarms"

13 CF_MAIN_EXECUTE write

Perform any Cloudflare API operation on this account by writing JavaScript that calls it. This is the second half of Cloudflare Code Mode and the widest single capability in the directory: one tool that reaches all 2,165 endpoints of the Cloudflare API, already authenticated as this account. Reads and writes both — listing zones, creating a KV namespace, editing a DNS record, deploying a Worker are all the same shape of call.

The sandbox. The sandbox exposes exactly one global, `cloudflare`, called as cloudflare.request({ method, path }). It is NOT `request`, `codemode`, `cf` or `fetch` — those are undefined here and will throw ReferenceError. Paths are relative to the v4 API root, so write "/zones", never "https://api.cloudflare.com/client/v4/zones". Authentication is applied for you; never put a token in your code.

Use it when

A Cloudflare read or change that has no dedicated CF_* row of its own. Find the path with CF_MAIN_SEARCH first — guessing a path costs a round trip.

It returns

Whatever your function returns, serialised as JSON. A Cloudflare response is normally {result, success, errors, messages}; return the part you want rather than the whole envelope.

Do not

Do not use it to reach anything that is not Cloudflare. The sandbox has no general network access, no filesystem, and no access to this build's database.

{
  "name": "CF_MAIN_EXECUTE",
  "description": "Perform any Cloudflare API operation on this account by writing JavaScript that calls it. This is the second half of Cloudflare Code Mode and the widest single capability in the directory: one tool that reaches all 2,165 endpoints of the Cloudflare API, already authenticated as this account. Reads and writes both — listing zones, creating a KV namespace, editing a DNS record, deploying a Worker are all the same shape of call.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "code": {
        "type": "string",
        "description": "An async arrow function, as a string, that calls cloudflare.request({ method, path }) and returns your answer. Both an expression body and a { return … } block body are accepted, and the code may contain || and | freely."
      },
      "account_id": {
        "type": "string",
        "description": "A Cloudflare account id, to scope execution to one account. Omit for account-independent calls; this build has one account, so omitting it is normal."
      }
    },
    "required": [
      "code"
    ]
  }
}

{
  "type": "function",
  "function": {
    "name": "CF_MAIN_EXECUTE",
    "description": "Perform any Cloudflare API operation on this account by writing JavaScript that calls it. This is the second half of Cloudflare Code Mode and the widest single capability in the directory: one tool that reaches all 2,165 endpoints of the Cloudflare API, already authenticated as this account. Reads and writes both — listing zones, creating a KV namespace, editing a DNS record, deploying a Worker are all the same shape of call.",
    "parameters": {
      "type": "object",
      "properties": {
        "code": {
          "type": "string",
          "description": "An async arrow function, as a string, that calls cloudflare.request({ method, path }) and returns your answer. Both an expression body and a { return … } block body are accepted, and the code may contain || and | freely."
        },
        "account_id": {
          "type": "string",
          "description": "A Cloudflare account id, to scope execution to one account. Omit for account-independent calls; this build has one account, so omitting it is normal."
        }
      },
      "required": [
        "code"
      ]
    }
  }
}

{
  "key": "CF_MAIN_EXECUTE",
  "args": {
    "code": "async () => (await cloudflare.request({ method: \"GET\", path: \"/zones\" })).result.map(z => z.name)"
  }
}

misc run CF_MAIN_EXECUTE code="async () => (await cloudflare.request({ method: \"GET\", path: \"/zones\" })).result.map(z => z.name)"

14 D1_QUERY read

Run one read-only SQL SELECT against this build's D1 database — the same database that holds the capability directory, the work tasks, the event ledger, the leads, the pages and every other row the build operates on.

Use it when

Any read of build state: what capabilities exist, what a task says, what the ledger recorded, how many of something there are.

It returns

A JSON array of row objects, one per result row. An empty array means the query was valid and matched nothing.

Do not

SELECT only — INSERT, UPDATE, DELETE and DDL are refused. There are no bound parameters: put literal values in the SQL. Double any single quote inside a literal ('it''s'). Underscore is a LIKE wildcard, so escape it (LIKE 'CF\_%' ESCAPE '\') when you mean a literal underscore.

{
  "name": "D1_QUERY",
  "description": "Run one read-only SQL SELECT against this build's D1 database — the same database that holds the capability directory, the work tasks, the event ledger, the leads, the pages and every other row the build operates on.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "sql_select": {
        "type": "string",
        "description": "The complete SQL SELECT statement, with literal values inlined. Pipes and || are preserved. Example: SELECT key, type FROM directory WHERE key = 'ROUTER'"
      }
    },
    "required": [
      "sql_select"
    ]
  }
}

{
  "type": "function",
  "function": {
    "name": "D1_QUERY",
    "description": "Run one read-only SQL SELECT against this build's D1 database — the same database that holds the capability directory, the work tasks, the event ledger, the leads, the pages and every other row the build operates on.",
    "parameters": {
      "type": "object",
      "properties": {
        "sql_select": {
          "type": "string",
          "description": "The complete SQL SELECT statement, with literal values inlined. Pipes and || are preserved. Example: SELECT key, type FROM directory WHERE key = 'ROUTER'"
        }
      },
      "required": [
        "sql_select"
      ]
    }
  }
}

{
  "key": "D1_QUERY",
  "args": {
    "sql_select": "SELECT key, type FROM directory WHERE category = 'cf_main'"
  }
}

misc run D1_QUERY sql_select="SELECT key, type FROM directory WHERE category = 'cf_main'"

15 OBJECT_READ read

Read one mutable object and the hash of its current content. The hash is how concurrent agents avoid overwriting each other: you read a hash, you submit a change against that hash, and the write is accepted only if nothing moved in between. There is no lock anywhere in this system — the hash is the whole mechanism.

Use it when

Immediately before changing any shared object. Read, then mutate against what you read.

It returns

{ ok, path, content, current_hash, exists }. A path that has never been written returns exists:false with the sha256 of the empty string.

Do not

Do not hold a hash across a long gap and then write — read again. Do not treat the hash as a claim on the object; it grants you nothing, it only detects that someone else moved first.

{
  "name": "OBJECT_READ",
  "description": "Read one mutable object and the hash of its current content. The hash is how concurrent agents avoid overwriting each other: you read a hash, you submit a change against that hash, and the write is accepted only if nothing moved in between. There is no lock anywhere in this system — the hash is the whole mechanism.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "path": {
        "type": "string",
        "description": "The object path, e.g. \"functions/_lib/object_mutate.js\". Exactly as it is stored — there is no search here."
      }
    },
    "required": [
      "path"
    ]
  }
}

{
  "type": "function",
  "function": {
    "name": "OBJECT_READ",
    "description": "Read one mutable object and the hash of its current content. The hash is how concurrent agents avoid overwriting each other: you read a hash, you submit a change against that hash, and the write is accepted only if nothing moved in between. There is no lock anywhere in this system — the hash is the whole mechanism.",
    "parameters": {
      "type": "object",
      "properties": {
        "path": {
          "type": "string",
          "description": "The object path, e.g. \"functions/_lib/object_mutate.js\". Exactly as it is stored — there is no search here."
        }
      },
      "required": [
        "path"
      ]
    }
  }
}

{
  "key": "OBJECT_READ",
  "args": {
    "path": "functions/_lib/object_mutate.js"
  }
}

misc run OBJECT_READ path=functions/_lib/object_mutate.js

16 OBJECT_MUTATE write

Write to a mutable object, but only if nobody has changed it since you read it. Compare-and-swap: you send the hash you read, and the server applies your change only if that hash is still current. If it is not, your write is refused and you are handed the new hash and the new content so you can redo the change on top of it.

Use it when

After OBJECT_READ, to submit the change you prepared.

It returns

On success, the new current_hash. On conflict, STALE together with current_hash and current_content.

Do not

STALE is not an error and not a reason to wait. Re-apply your change to the content you were just handed and submit again immediately. Never sleep, never retry the identical base_hash, and never treat a claim on a file as a lock — it is not one.

{
  "name": "OBJECT_MUTATE",
  "description": "Write to a mutable object, but only if nobody has changed it since you read it. Compare-and-swap: you send the hash you read, and the server applies your change only if that hash is still current. If it is not, your write is refused and you are handed the new hash and the new content so you can redo the change on top of it.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "task_id": {
        "type": "string",
        "description": "The work task this change belongs to, e.g. \"WT-1\". Every mutation is attributed to a task."
      },
      "path": {
        "type": "string",
        "description": "The object path to write, identical to the one you passed to OBJECT_READ."
      },
      "base_hash": {
        "type": "string",
        "description": "The current_hash OBJECT_READ returned to you. The write is refused if this is no longer current."
      },
      "mutation": {
        "type": "object",
        "description": "What to change, as an object. Either { \"content\": \"<the whole new text>\" } to replace the object, or { \"old_string\": \"…\", \"new_string\": \"…\" } to replace one exact span inside it.",
        "properties": {
          "content": {
            "type": "string",
            "description": "The complete new text of the object. Use this OR the old_string/new_string pair, never both."
          },
          "old_string": {
            "type": "string",
            "description": "An exact span that appears once in the current content. Use with new_string to change part of the object."
          },
          "new_string": {
            "type": "string",
            "description": "What that span becomes."
          }
        }
      }
    },
    "required": [
      "task_id",
      "path",
      "base_hash",
      "mutation"
    ]
  }
}

{
  "type": "function",
  "function": {
    "name": "OBJECT_MUTATE",
    "description": "Write to a mutable object, but only if nobody has changed it since you read it. Compare-and-swap: you send the hash you read, and the server applies your change only if that hash is still current. If it is not, your write is refused and you are handed the new hash and the new content so you can redo the change on top of it.",
    "parameters": {
      "type": "object",
      "properties": {
        "task_id": {
          "type": "string",
          "description": "The work task this change belongs to, e.g. \"WT-1\". Every mutation is attributed to a task."
        },
        "path": {
          "type": "string",
          "description": "The object path to write, identical to the one you passed to OBJECT_READ."
        },
        "base_hash": {
          "type": "string",
          "description": "The current_hash OBJECT_READ returned to you. The write is refused if this is no longer current."
        },
        "mutation": {
          "type": "object",
          "description": "What to change, as an object. Either { \"content\": \"<the whole new text>\" } to replace the object, or { \"old_string\": \"…\", \"new_string\": \"…\" } to replace one exact span inside it.",
          "properties": {
            "content": {
              "type": "string",
              "description": "The complete new text of the object. Use this OR the old_string/new_string pair, never both."
            },
            "old_string": {
              "type": "string",
              "description": "An exact span that appears once in the current content. Use with new_string to change part of the object."
            },
            "new_string": {
              "type": "string",
              "description": "What that span becomes."
            }
          }
        }
      },
      "required": [
        "task_id",
        "path",
        "base_hash",
        "mutation"
      ]
    }
  }
}

{
  "key": "OBJECT_MUTATE",
  "args": {
    "task_id": "WT-1",
    "path": "functions/a.js",
    "base_hash": "<the hash OBJECT_READ gave you>",
    "mutation": {
      "content": "ok"
    }
  }
}

misc run OBJECT_MUTATE task_id=WT-1 path=functions/a.js base_hash="<the hash OBJECT_READ gave you>" mutation={"content":"ok"}

17 DIR_GET read

Read one directory row whole, by its exact key — its type, its target, its documentation, its argument schema, its effect class, its price, and the record of its last live test.

Use it when

You know the key and you want everything about it, including fields no tool list carries.

It returns

The complete row as JSON, including row_num and the REST calls that read, patch and invoke it.

Do not

Not for finding a key you do not know — that is misc_find. A wrong key returns 404, not a suggestion.

{
  "name": "DIR_GET",
  "description": "Read one directory row whole, by its exact key — its type, its target, its documentation, its argument schema, its effect class, its price, and the record of its last live test.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "row_key": {
        "type": "string",
        "description": "The exact capability key, uppercase with underscores, e.g. \"ROUTER\", \"CF_MAIN_EXECUTE\"."
      }
    },
    "required": [
      "row_key"
    ]
  }
}

{
  "type": "function",
  "function": {
    "name": "DIR_GET",
    "description": "Read one directory row whole, by its exact key — its type, its target, its documentation, its argument schema, its effect class, its price, and the record of its last live test.",
    "parameters": {
      "type": "object",
      "properties": {
        "row_key": {
          "type": "string",
          "description": "The exact capability key, uppercase with underscores, e.g. \"ROUTER\", \"CF_MAIN_EXECUTE\"."
        }
      },
      "required": [
        "row_key"
      ]
    }
  }
}

{
  "key": "DIR_GET",
  "args": {
    "row_key": "ROUTER"
  }
}

misc run DIR_GET row_key=ROUTER

18 WORK_APPEND write

Append one entry to the shared, append-only work thread. Models here have short memories and there are many of them; this thread is how the next one continues from what you did instead of rediscovering it. Nothing in the thread is ever edited or deleted — a correction is a new entry that names what it supersedes.

Use it when

After you do, propose, or audit anything. Always append — a change nobody recorded is a change the next agent will undo.

It returns

The id of the appended entry.

Do not

Do not use it to hold a conversation, and do not append a plan you have not executed. It is a record of what happened.

{
  "name": "WORK_APPEND",
  "description": "Append one entry to the shared, append-only work thread. Models here have short memories and there are many of them; this thread is how the next one continues from what you did instead of rediscovering it. Nothing in the thread is ever edited or deleted — a correction is a new entry that names what it supersedes.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "model_agent": {
        "type": "string",
        "description": "Who is writing, e.g. \"claude-code\", \"grok-web\", \"kimi\". Your own name, not the owner's."
      },
      "kind": {
        "type": "string",
        "description": "What kind of entry this is.",
        "enum": [
          "note",
          "edit",
          "proposal",
          "audit",
          "question",
          "done"
        ]
      },
      "entry": {
        "type": "string",
        "description": "What happened, in plain sentences. Begin with \"ref:task:12\", \"ref:lead:49\" or \"ref:gh:7\" to link the entry to that object."
      }
    },
    "required": [
      "model_agent",
      "kind",
      "entry"
    ]
  }
}

{
  "type": "function",
  "function": {
    "name": "WORK_APPEND",
    "description": "Append one entry to the shared, append-only work thread. Models here have short memories and there are many of them; this thread is how the next one continues from what you did instead of rediscovering it. Nothing in the thread is ever edited or deleted — a correction is a new entry that names what it supersedes.",
    "parameters": {
      "type": "object",
      "properties": {
        "model_agent": {
          "type": "string",
          "description": "Who is writing, e.g. \"claude-code\", \"grok-web\", \"kimi\". Your own name, not the owner's."
        },
        "kind": {
          "type": "string",
          "description": "What kind of entry this is.",
          "enum": [
            "note",
            "edit",
            "proposal",
            "audit",
            "question",
            "done"
          ]
        },
        "entry": {
          "type": "string",
          "description": "What happened, in plain sentences. Begin with \"ref:task:12\", \"ref:lead:49\" or \"ref:gh:7\" to link the entry to that object."
        }
      },
      "required": [
        "model_agent",
        "kind",
        "entry"
      ]
    }
  }
}

{
  "key": "WORK_APPEND",
  "args": {
    "model_agent": "claude-code",
    "kind": "done",
    "entry": "ref:task:4032 repaired the MCP argument splitter"
  }
}

misc run WORK_APPEND model_agent=claude-code kind=done entry="ref:task:4032 repaired the MCP argument splitter"

19 AGENT_SPAWN_CLI writealias

Start a coding CLI agent on the owner's Mac and give it a task, or resume a conversation you started earlier. The agent runs on the real machine with the real repository; this is how one model hands work to another model that has a shell.

CLI_SPAWN — identical behaviour, identical arguments.

Use it when

Work that needs a shell, a working tree and many turns — a refactor, a long investigation, a build.

It returns

A session id and the agent's output. Keep the session id to continue the same conversation.

Do not

If you already are a CLI with a shell, do not call this on yourself: use your own shell. This tool is for one model to start a different one.

{
  "name": "AGENT_SPAWN_CLI",
  "description": "Start a coding CLI agent on the owner's Mac and give it a task, or resume a conversation you started earlier. The agent runs on the real machine with the real repository; this is how one model hands work to another model that has a shell.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "agent": {
        "type": "string",
        "description": "Which CLI to start.",
        "enum": [
          "kimi",
          "gemini",
          "codex",
          "grok",
          "grok-sa",
          "claude",
          "aider"
        ]
      },
      "prompt": {
        "type": "string",
        "description": "The task, written so the agent can act with no other context. It does not see this conversation."
      },
      "cwd": {
        "type": "string",
        "description": "The working directory on the Mac. Leave it empty: the agent resolves the build's own repository. An absolute path here is only for work outside it."
      },
      "mode": {
        "type": "string",
        "description": "\"readonly\" plans and inspects but writes nothing; \"auto\" is allowed to change files.",
        "enum": [
          "readonly",
          "auto"
        ],
        "default": "auto"
      },
      "delivery": {
        "type": "string",
        "description": "\"headless\" runs it in the background and returns the output; \"terminal\" opens a visible Terminal.app tab on the owner's screen.",
        "enum": [
          "headless",
          "terminal"
        ],
        "default": "headless"
      },
      "model": {
        "type": "string",
        "description": "A specific model id for that CLI. Empty uses the CLI's own default."
      },
      "session": {
        "type": "string",
        "description": "A session id from an earlier spawn, to continue that conversation. Empty starts a new one and returns its id."
      }
    },
    "required": [
      "agent",
      "prompt"
    ]
  }
}

{
  "type": "function",
  "function": {
    "name": "AGENT_SPAWN_CLI",
    "description": "Start a coding CLI agent on the owner's Mac and give it a task, or resume a conversation you started earlier. The agent runs on the real machine with the real repository; this is how one model hands work to another model that has a shell.",
    "parameters": {
      "type": "object",
      "properties": {
        "agent": {
          "type": "string",
          "description": "Which CLI to start.",
          "enum": [
            "kimi",
            "gemini",
            "codex",
            "grok",
            "grok-sa",
            "claude",
            "aider"
          ]
        },
        "prompt": {
          "type": "string",
          "description": "The task, written so the agent can act with no other context. It does not see this conversation."
        },
        "cwd": {
          "type": "string",
          "description": "The working directory on the Mac. Leave it empty: the agent resolves the build's own repository. An absolute path here is only for work outside it."
        },
        "mode": {
          "type": "string",
          "description": "\"readonly\" plans and inspects but writes nothing; \"auto\" is allowed to change files.",
          "enum": [
            "readonly",
            "auto"
          ],
          "default": "auto"
        },
        "delivery": {
          "type": "string",
          "description": "\"headless\" runs it in the background and returns the output; \"terminal\" opens a visible Terminal.app tab on the owner's screen.",
          "enum": [
            "headless",
            "terminal"
          ],
          "default": "headless"
        },
        "model": {
          "type": "string",
          "description": "A specific model id for that CLI. Empty uses the CLI's own default."
        },
        "session": {
          "type": "string",
          "description": "A session id from an earlier spawn, to continue that conversation. Empty starts a new one and returns its id."
        }
      },
      "required": [
        "agent",
        "prompt"
      ]
    }
  }
}

{
  "key": "AGENT_SPAWN_CLI",
  "args": {
    "agent": "claude",
    "prompt": "review the traffic engine",
    "cwd": "/Users/the owner/miscsubjects-pages",
    "mode": "readonly",
    "delivery": "headless"
  }
}

misc run AGENT_SPAWN_CLI agent=claude prompt="review the traffic engine" cwd=/Users/the owner/miscsubjects-pages mode=readonly delivery=headless

20 LOCAL_EXEC write

Run one shell command on the owner's Mac and get its output back. A real machine with the real repository, the real credentials and the real network — not a sandbox.

Use it when

Any file operation, git command, system check or script run that must happen on that machine.

It returns

stdout, stderr and the exit code. Timeout is 600 seconds.

Do not

If you already have a shell of your own, use it — do not route through this. Never run a command whose effect you cannot state in one sentence, and never send credentials through it in plain text.

{
  "name": "LOCAL_EXEC",
  "description": "Run one shell command on the owner's Mac and get its output back. A real machine with the real repository, the real credentials and the real network — not a sandbox.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "shell_command": {
        "type": "string",
        "description": "The complete command line, run through sh -lc. Pipes, redirects, && and || are preserved. Example: ls -la ~/Desktop"
      }
    },
    "required": [
      "shell_command"
    ]
  }
}

{
  "type": "function",
  "function": {
    "name": "LOCAL_EXEC",
    "description": "Run one shell command on the owner's Mac and get its output back. A real machine with the real repository, the real credentials and the real network — not a sandbox.",
    "parameters": {
      "type": "object",
      "properties": {
        "shell_command": {
          "type": "string",
          "description": "The complete command line, run through sh -lc. Pipes, redirects, && and || are preserved. Example: ls -la ~/Desktop"
        }
      },
      "required": [
        "shell_command"
      ]
    }
  }
}

{
  "key": "LOCAL_EXEC",
  "args": {
    "shell_command": "ls -la ~/Desktop"
  }
}

misc run LOCAL_EXEC shell_command="ls -la ~/Desktop"

21 SEND_BY_CHANNEL send

Send a text message. This is the single canonical way to text anyone from this build; every other send row is a lower-level variant of it.

Use it when

Any request to text, message, notify, DM or SMS a person.

It returns

A delivery record and a receipt URL. Accepted is not delivered — check the record before reporting a send.

Do not

Never send a test message to a real person. "blooio" is iMessage, not WhatsApp — WhatsApp is TWOCHAT_SEND. Do not reach for BLOOIO_SEND_MESSAGE instead; this row is the one.

{
  "name": "SEND_BY_CHANNEL",
  "description": "Send a text message. This is the single canonical way to text anyone from this build; every other send row is a lower-level variant of it.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "channel": {
        "type": "string",
        "description": "Which network to send on. \"blooio\" is iMessage — that is how the owner is texted. \"2chat\" is WhatsApp.",
        "enum": [
          "blooio",
          "2chat"
        ]
      },
      "to": {
        "type": "string",
        "description": "The recipient: a phone number in +E.164 form, or a chat id. The owner is redacted."
      },
      "text": {
        "type": "string",
        "description": "The message body, exactly as it should arrive."
      }
    },
    "required": [
      "channel",
      "to",
      "text"
    ]
  }
}

{
  "type": "function",
  "function": {
    "name": "SEND_BY_CHANNEL",
    "description": "Send a text message. This is the single canonical way to text anyone from this build; every other send row is a lower-level variant of it.",
    "parameters": {
      "type": "object",
      "properties": {
        "channel": {
          "type": "string",
          "description": "Which network to send on. \"blooio\" is iMessage — that is how the owner is texted. \"2chat\" is WhatsApp.",
          "enum": [
            "blooio",
            "2chat"
          ]
        },
        "to": {
          "type": "string",
          "description": "The recipient: a phone number in +E.164 form, or a chat id. The owner is redacted."
        },
        "text": {
          "type": "string",
          "description": "The message body, exactly as it should arrive."
        }
      },
      "required": [
        "channel",
        "to",
        "text"
      ]
    }
  }
}

{
  "key": "SEND_BY_CHANNEL",
  "args": {
    "channel": "blooio",
    "to": "redacted",
    "text": "Woof woof."
  }
}

misc run SEND_BY_CHANNEL channel=blooio to=redacted text="Woof woof."

22 CAP_MINT write

Mint a scoped, short-lived, self-describing capability URL — delegated authority over exactly one row, or over a read or act tier, bounded by a lifetime, a use count, a stated purpose and a risk ceiling. Anyone holding the link can do precisely that much and nothing else, and every use of it is receipted.

Use it when

Giving another model or another person bounded access to something, without giving them a credential.

It returns

invoke_url, explain_url and a fingerprint. Opening explain_url shows the holder exactly what the token permits.

Do not

Never reuse or re-send an old token; mint a fresh one each time. Never paste a token into a public surface.

{
  "name": "CAP_MINT",
  "description": "Mint a scoped, short-lived, self-describing capability URL — delegated authority over exactly one row, or over a read or act tier, bounded by a lifetime, a use count, a stated purpose and a risk ceiling. Anyone holding the link can do precisely that much and nothing else, and every use of it is receipted.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "scope": {
        "type": "string",
        "description": "How wide the token is. \"row\" is one capability, named in row_key. \"read\" is every read-effect capability. \"act\" is full authority — mint it rarely.",
        "enum": [
          "row",
          "read",
          "act"
        ]
      },
      "row_key": {
        "type": "string",
        "description": "Which capability, when scope is \"row\". Leave empty for read and act."
      },
      "ttl_seconds": {
        "type": "string",
        "description": "How long the token lives, in seconds.",
        "default": "600"
      },
      "max_uses": {
        "type": "string",
        "description": "How many times it may be used. \"0\" means unlimited.",
        "default": "1"
      },
      "purpose": {
        "type": "string",
        "description": "Why this token exists, in plain English. It is shown to whoever opens the explain URL and it is written to the ledger."
      },
      "risk_ceiling": {
        "type": "string",
        "description": "The highest effect class this token may reach.",
        "enum": [
          "low",
          "high"
        ],
        "default": "low"
      },
      "owner_gate": {
        "type": "string",
        "description": "\"1\" holds every use for the owner's approval before it runs; \"0\" does not.",
        "enum": [
          "0",
          "1"
        ],
        "default": "0"
      }
    },
    "required": [
      "scope"
    ]
  }
}

{
  "type": "function",
  "function": {
    "name": "CAP_MINT",
    "description": "Mint a scoped, short-lived, self-describing capability URL — delegated authority over exactly one row, or over a read or act tier, bounded by a lifetime, a use count, a stated purpose and a risk ceiling. Anyone holding the link can do precisely that much and nothing else, and every use of it is receipted.",
    "parameters": {
      "type": "object",
      "properties": {
        "scope": {
          "type": "string",
          "description": "How wide the token is. \"row\" is one capability, named in row_key. \"read\" is every read-effect capability. \"act\" is full authority — mint it rarely.",
          "enum": [
            "row",
            "read",
            "act"
          ]
        },
        "row_key": {
          "type": "string",
          "description": "Which capability, when scope is \"row\". Leave empty for read and act."
        },
        "ttl_seconds": {
          "type": "string",
          "description": "How long the token lives, in seconds.",
          "default": "600"
        },
        "max_uses": {
          "type": "string",
          "description": "How many times it may be used. \"0\" means unlimited.",
          "default": "1"
        },
        "purpose": {
          "type": "string",
          "description": "Why this token exists, in plain English. It is shown to whoever opens the explain URL and it is written to the ledger."
        },
        "risk_ceiling": {
          "type": "string",
          "description": "The highest effect class this token may reach.",
          "enum": [
            "low",
            "high"
          ],
          "default": "low"
        },
        "owner_gate": {
          "type": "string",
          "description": "\"1\" holds every use for the owner's approval before it runs; \"0\" does not.",
          "enum": [
            "0",
            "1"
          ],
          "default": "0"
        }
      },
      "required": [
        "scope"
      ]
    }
  }
}

{
  "key": "CAP_MINT",
  "args": {
    "scope": "row",
    "row_key": "NOW",
    "ttl_seconds": "600",
    "max_uses": "1",
    "purpose": "demo for a cold model",
    "risk_ceiling": "low",
    "owner_gate": "0"
  }
}

misc run CAP_MINT scope=row row_key=NOW ttl_seconds=600 max_uses=1 purpose="demo for a cold model" risk_ceiling=low owner_gate=0

23 GROK_IMAGE write

Generate an image from a written description, using xAI's grok-imagine-image-quality model. Costs $0.05 per image.

Use it when

Any request to make, generate, create or draw an image, picture, photo or piece of art.

It returns

A JSON object containing the URL of the generated image.

Do not

Not for editing an image that already exists — that is GROK_IMAGE_EDIT.

{
  "name": "GROK_IMAGE",
  "description": "Generate an image from a written description, using xAI's grok-imagine-image-quality model. Costs $0.05 per image.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "prompt": {
        "type": "string",
        "description": "The whole description of the image, as free text. Example: a golden retriever in an astronaut suit, studio lighting"
      }
    },
    "required": [
      "prompt"
    ]
  }
}

{
  "type": "function",
  "function": {
    "name": "GROK_IMAGE",
    "description": "Generate an image from a written description, using xAI's grok-imagine-image-quality model. Costs $0.05 per image.",
    "parameters": {
      "type": "object",
      "properties": {
        "prompt": {
          "type": "string",
          "description": "The whole description of the image, as free text. Example: a golden retriever in an astronaut suit, studio lighting"
        }
      },
      "required": [
        "prompt"
      ]
    }
  }
}

{
  "key": "GROK_IMAGE",
  "args": {
    "prompt": "a golden retriever in an astronaut suit, studio lighting"
  }
}

misc run GROK_IMAGE prompt="a golden retriever in an astronaut suit, studio lighting"

24 GROK_IMAGE_EDIT write

Change an existing image by describing the change in words. The original is fetched from the URL you give; the edit is returned as a new image.

Use it when

An image exists and needs altering rather than replacing.

It returns

A JSON object containing the URL of the edited image. The original is not modified.

Do not

The image URL must be publicly reachable — a local path or an authenticated URL will fail.

{
  "name": "GROK_IMAGE_EDIT",
  "description": "Change an existing image by describing the change in words. The original is fetched from the URL you give; the edit is returned as a new image.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "prompt": {
        "type": "string",
        "description": "The change to make, in words. Describe the result you want, not the editing steps."
      },
      "image_url": {
        "type": "string",
        "description": "A publicly reachable https URL of the image to edit."
      }
    },
    "required": [
      "prompt",
      "image_url"
    ]
  }
}

{
  "type": "function",
  "function": {
    "name": "GROK_IMAGE_EDIT",
    "description": "Change an existing image by describing the change in words. The original is fetched from the URL you give; the edit is returned as a new image.",
    "parameters": {
      "type": "object",
      "properties": {
        "prompt": {
          "type": "string",
          "description": "The change to make, in words. Describe the result you want, not the editing steps."
        },
        "image_url": {
          "type": "string",
          "description": "A publicly reachable https URL of the image to edit."
        }
      },
      "required": [
        "prompt",
        "image_url"
      ]
    }
  }
}

{
  "key": "GROK_IMAGE_EDIT",
  "args": {
    "prompt": "put it on a beach at sunset",
    "image_url": "https://miscsubjects.com/img/gen/example.png"
  }
}

misc run GROK_IMAGE_EDIT prompt="put it on a beach at sunset" image_url=https://miscsubjects.com/img/gen/example.png

25 SEND_IMAGE_BLOOIO send

Send an image, with a line of text, into an iMessage conversation over Blooio.

Use it when

Delivering a generated or fetched image to a person on iMessage.

It returns

The created message record and a receipt URL.

Do not

The attachment URL must be publicly reachable. Accepted is not delivered.

{
  "name": "SEND_IMAGE_BLOOIO",
  "description": "Send an image, with a line of text, into an iMessage conversation over Blooio.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "chat": {
        "type": "string",
        "description": "Where to send: a phone number in +E.164 form, or a Blooio chat id (chat_…). The owner is redacted."
      },
      "text": {
        "type": "string",
        "description": "The message that accompanies the image."
      },
      "attachment_url": {
        "type": "string",
        "description": "A publicly reachable https URL of the image to attach."
      }
    },
    "required": [
      "chat",
      "text",
      "attachment_url"
    ]
  }
}

{
  "type": "function",
  "function": {
    "name": "SEND_IMAGE_BLOOIO",
    "description": "Send an image, with a line of text, into an iMessage conversation over Blooio.",
    "parameters": {
      "type": "object",
      "properties": {
        "chat": {
          "type": "string",
          "description": "Where to send: a phone number in +E.164 form, or a Blooio chat id (chat_…). The owner is redacted."
        },
        "text": {
          "type": "string",
          "description": "The message that accompanies the image."
        },
        "attachment_url": {
          "type": "string",
          "description": "A publicly reachable https URL of the image to attach."
        }
      },
      "required": [
        "chat",
        "text",
        "attachment_url"
      ]
    }
  }
}

{
  "key": "SEND_IMAGE_BLOOIO",
  "args": {
    "chat": "redacted",
    "text": "the new version:",
    "attachment_url": "https://miscsubjects.com/img/gen/example.png"
  }
}

misc run SEND_IMAGE_BLOOIO chat=redacted text="the new version:" attachment_url=https://miscsubjects.com/img/gen/example.png

26 GROK_VOICE_SEND send

Speak a line in the xAI Ara voice and deliver it as an audio message into an iMessage conversation over Blooio.

Use it when

The owner asked for audio rather than text.

It returns

A queue record. HTTP 202 or a queued status means it was accepted for sending — it does NOT mean it arrived.

Do not

Never report an audio message as delivered on the strength of a 202. Send the same words as text alongside it and check the delivery status before claiming it landed.

{
  "name": "GROK_VOICE_SEND",
  "description": "Speak a line in the xAI Ara voice and deliver it as an audio message into an iMessage conversation over Blooio.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "chat": {
        "type": "string",
        "description": "The Blooio chat id (chat_…) or phone number in +E.164 form to speak into."
      },
      "text": {
        "type": "string",
        "description": "The words to speak, exactly."
      },
      "voice_id": {
        "type": "string",
        "description": "Which voice to use.",
        "default": "ara"
      }
    },
    "required": [
      "chat",
      "text"
    ]
  }
}

{
  "type": "function",
  "function": {
    "name": "GROK_VOICE_SEND",
    "description": "Speak a line in the xAI Ara voice and deliver it as an audio message into an iMessage conversation over Blooio.",
    "parameters": {
      "type": "object",
      "properties": {
        "chat": {
          "type": "string",
          "description": "The Blooio chat id (chat_…) or phone number in +E.164 form to speak into."
        },
        "text": {
          "type": "string",
          "description": "The words to speak, exactly."
        },
        "voice_id": {
          "type": "string",
          "description": "Which voice to use.",
          "default": "ara"
        }
      },
      "required": [
        "chat",
        "text"
      ]
    }
  }
}

{
  "key": "GROK_VOICE_SEND",
  "args": {
    "chat": "chat_xxx",
    "text": "hey the owner",
    "voice_id": "ara"
  }
}

misc run GROK_VOICE_SEND chat=chat_xxx text="hey the owner" voice_id=ara

27 GSHEETS_VALUES_GET read

Read a rectangular range of cells out of a Google Sheet, over the connected Google account's OAuth grant.

Use it when

Reading cells from a spreadsheet the connected account can open.

It returns

{ range, majorDimension, values } where values is an array of rows. Trailing empty cells and trailing empty rows are omitted by Google, so rows can be short.

Do not

This is the OAuth path, not the Apps Script web app. Writing is a different capability (GSHEETS_VALUES_UPDATE).

{
  "name": "GSHEETS_VALUES_GET",
  "description": "Read a rectangular range of cells out of a Google Sheet, over the connected Google account's OAuth grant.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "spreadsheet_id": {
        "type": "string",
        "description": "The id from the sheet URL — the long token between /d/ and /edit, e.g. 1AbC…"
      },
      "a1_range": {
        "type": "string",
        "description": "The range in A1 notation, including the tab name, e.g. Sheet1!A1:D20. A bare tab name reads the whole tab."
      }
    },
    "required": [
      "spreadsheet_id",
      "a1_range"
    ]
  }
}

{
  "type": "function",
  "function": {
    "name": "GSHEETS_VALUES_GET",
    "description": "Read a rectangular range of cells out of a Google Sheet, over the connected Google account's OAuth grant.",
    "parameters": {
      "type": "object",
      "properties": {
        "spreadsheet_id": {
          "type": "string",
          "description": "The id from the sheet URL — the long token between /d/ and /edit, e.g. 1AbC…"
        },
        "a1_range": {
          "type": "string",
          "description": "The range in A1 notation, including the tab name, e.g. Sheet1!A1:D20. A bare tab name reads the whole tab."
        }
      },
      "required": [
        "spreadsheet_id",
        "a1_range"
      ]
    }
  }
}

{
  "key": "GSHEETS_VALUES_GET",
  "args": {
    "spreadsheet_id": "1AbC",
    "a1_range": "Sheet1!A1:D20"
  }
}

misc run GSHEETS_VALUES_GET spreadsheet_id=1AbC a1_range=Sheet1!A1:D20

28 GSHEETS_VALUES_UPDATE write

Write a rectangular range of cells into a Google Sheet over the connected Google account's OAuth grant. The write twin of GSHEETS_VALUES_GET, which existed on its own: the build could read cells through the OAuth path and could not write them, so every write had to detour through the Apps Script web app (GOOGLE_SHEETS_APPEND, APPS_SCRIPT_RUN), which appends rows and cannot set a specific range. Added 2026-09-13.

Use it when

Setting the contents of a known range — writing a header row, replacing a block of values, filling one cell.

It returns

{ spreadsheetId, updatedRange, updatedRows, updatedColumns, updatedCells }.

Do not

This overwrites whatever is in the range; it does not insert rows. To add rows at the end without overwriting, use GOOGLE_SHEETS_APPEND. Values are entered as if a person typed them (USER_ENTERED), so "=SUM(A1:A9)" becomes a formula and "1/2" may become a date.

{
  "name": "GSHEETS_VALUES_UPDATE",
  "description": "Write a rectangular range of cells into a Google Sheet over the connected Google account's OAuth grant. The write twin of GSHEETS_VALUES_GET, which existed on its own: the build could read cells through the OAuth path and could not write them, so every write had to detour through the Apps Script web app (GOOGLE_SHEETS_APPEND, APPS_SCRIPT_RUN), which appends rows and cannot set a specific range. Added 2026-09-13.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "spreadsheet_id": {
        "type": "string",
        "description": "The id from the sheet URL — the long token between /d/ and /edit."
      },
      "a1_range": {
        "type": "string",
        "description": "The range to write, in A1 notation including the tab name, e.g. Sheet1!A1:D20. It must be at least as large as the values you send."
      },
      "values": {
        "type": "array",
        "description": "The cells, as an array of rows, each row an array of cell values: [[\"name\",\"email\"],[\"Ada\",\"ada@x.com\"]].",
        "items": {
          "type": "array"
        }
      }
    },
    "required": [
      "spreadsheet_id",
      "a1_range",
      "values"
    ]
  }
}

{
  "type": "function",
  "function": {
    "name": "GSHEETS_VALUES_UPDATE",
    "description": "Write a rectangular range of cells into a Google Sheet over the connected Google account's OAuth grant. The write twin of GSHEETS_VALUES_GET, which existed on its own: the build could read cells through the OAuth path and could not write them, so every write had to detour through the Apps Script web app (GOOGLE_SHEETS_APPEND, APPS_SCRIPT_RUN), which appends rows and cannot set a specific range. Added 2026-09-13.",
    "parameters": {
      "type": "object",
      "properties": {
        "spreadsheet_id": {
          "type": "string",
          "description": "The id from the sheet URL — the long token between /d/ and /edit."
        },
        "a1_range": {
          "type": "string",
          "description": "The range to write, in A1 notation including the tab name, e.g. Sheet1!A1:D20. It must be at least as large as the values you send."
        },
        "values": {
          "type": "array",
          "description": "The cells, as an array of rows, each row an array of cell values: [[\"name\",\"email\"],[\"Ada\",\"ada@x.com\"]].",
          "items": {
            "type": "array"
          }
        }
      },
      "required": [
        "spreadsheet_id",
        "a1_range",
        "values"
      ]
    }
  }
}

{
  "key": "GSHEETS_VALUES_UPDATE",
  "args": {
    "spreadsheet_id": "1AbC",
    "a1_range": "Sheet1!A1:B2",
    "values": [
      [
        "name",
        "email"
      ],
      [
        "Ada",
        "ada@x.com"
      ]
    ]
  }
}

misc run GSHEETS_VALUES_UPDATE spreadsheet_id=1AbC a1_range=Sheet1!A1:B2 values=[["name","email"],["Ada","ada@x.com"]]

29 STRIPE_READ read

Read anything from Stripe through one door. Twenty-four read operations — balance, charges, customers, invoices, payouts, payment intents, prices, products, subscriptions, refunds, events — selected by the op argument. This account is in live mode.

Use it when

Any Stripe read.

It returns

The Stripe object or list, verbatim, as Stripe returns it.

Do not

Read only. There is no write, no refund and no charge on this row, and an unknown op is refused with ERR:target_map:unknown_op rather than guessed.

{
  "name": "STRIPE_READ",
  "description": "Read anything from Stripe through one door. Twenty-four read operations — balance, charges, customers, invoices, payouts, payment intents, prices, products, subscriptions, refunds, events — selected by the op argument. This account is in live mode.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "op": {
        "type": "string",
        "description": "Which read to perform.",
        "enum": [
          "account",
          "balance",
          "balance_tx_list",
          "charges_list",
          "charge_get",
          "customers_list",
          "customer_get",
          "customer_search",
          "events_list",
          "invoices_list",
          "invoice_get",
          "invoice_items_list",
          "payment_links_list",
          "payouts_list",
          "payout_get",
          "pi_get",
          "pi_list",
          "prices_list",
          "price_get",
          "products_list",
          "product_get",
          "refunds_list",
          "subscriptions_list",
          "subscription_get"
        ]
      },
      "selector": {
        "type": "string",
        "description": "The op's first argument. For a *_get op, the Stripe object id (cus_…, ch_…, in_…, po_…, pi_…, price_…, prod_…). For a *_list op, the page size, 1 to 100. For customer_search, a Stripe search query. For invoice_items_list, the customer id. Omit entirely for account and balance."
      },
      "limit": {
        "type": "string",
        "description": "invoice_items_list only: the page size, 1 to 100."
      }
    },
    "required": [
      "op"
    ]
  }
}

{
  "type": "function",
  "function": {
    "name": "STRIPE_READ",
    "description": "Read anything from Stripe through one door. Twenty-four read operations — balance, charges, customers, invoices, payouts, payment intents, prices, products, subscriptions, refunds, events — selected by the op argument. This account is in live mode.",
    "parameters": {
      "type": "object",
      "properties": {
        "op": {
          "type": "string",
          "description": "Which read to perform.",
          "enum": [
            "account",
            "balance",
            "balance_tx_list",
            "charges_list",
            "charge_get",
            "customers_list",
            "customer_get",
            "customer_search",
            "events_list",
            "invoices_list",
            "invoice_get",
            "invoice_items_list",
            "payment_links_list",
            "payouts_list",
            "payout_get",
            "pi_get",
            "pi_list",
            "prices_list",
            "price_get",
            "products_list",
            "product_get",
            "refunds_list",
            "subscriptions_list",
            "subscription_get"
          ]
        },
        "selector": {
          "type": "string",
          "description": "The op's first argument. For a *_get op, the Stripe object id (cus_…, ch_…, in_…, po_…, pi_…, price_…, prod_…). For a *_list op, the page size, 1 to 100. For customer_search, a Stripe search query. For invoice_items_list, the customer id. Omit entirely for account and balance."
        },
        "limit": {
          "type": "string",
          "description": "invoice_items_list only: the page size, 1 to 100."
        }
      },
      "required": [
        "op"
      ]
    }
  }
}

{
  "key": "STRIPE_READ",
  "args": {
    "op": "balance"
  }
}

misc run STRIPE_READ op=balance

30 TWOCHAT_SEND send

Send a WhatsApp message through 2chat. The WhatsApp counterpart of the Blooio/iMessage send.

Use it when

The recipient is on WhatsApp rather than iMessage.

It returns

The 2chat send record and a receipt URL.

Do not

Messaging a number that has not written first risks the sending number being banned. Warm follow-ups only, never cold outreach.

{
  "name": "TWOCHAT_SEND",
  "description": "Send a WhatsApp message through 2chat. The WhatsApp counterpart of the Blooio/iMessage send.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "from_number": {
        "type": "string",
        "description": "The WhatsApp number to send from, in +E.164 form. This build's number is +13104069604."
      },
      "to_number": {
        "type": "string",
        "description": "The recipient's WhatsApp number, in +E.164 form."
      },
      "text": {
        "type": "string",
        "description": "The message body."
      }
    },
    "required": [
      "from_number",
      "to_number",
      "text"
    ]
  }
}

{
  "type": "function",
  "function": {
    "name": "TWOCHAT_SEND",
    "description": "Send a WhatsApp message through 2chat. The WhatsApp counterpart of the Blooio/iMessage send.",
    "parameters": {
      "type": "object",
      "properties": {
        "from_number": {
          "type": "string",
          "description": "The WhatsApp number to send from, in +E.164 form. This build's number is +13104069604."
        },
        "to_number": {
          "type": "string",
          "description": "The recipient's WhatsApp number, in +E.164 form."
        },
        "text": {
          "type": "string",
          "description": "The message body."
        }
      },
      "required": [
        "from_number",
        "to_number",
        "text"
      ]
    }
  }
}

{
  "key": "TWOCHAT_SEND",
  "args": {
    "from_number": "+13104069604",
    "to_number": "redacted",
    "text": "hi"
  }
}

misc run TWOCHAT_SEND from_number=+13104069604 to_number=redacted text=hi

31 CLI_WRANGLER write

Run any wrangler command (Wrangler 4.103.0) on the owner Mac, with the credentials already logged in there.

Use it when

any wrangler read or change; the arguments are passed verbatim after `wrangler`.

It returns

{ok, exit, stdout, stderr, duration_ms, cmd, args, cwd, execution_substrate} — the process record from the Mac bridge.

{
  "name": "CLI_WRANGLER",
  "description": "Run any wrangler command (Wrangler 4.103.0) on the owner Mac, with the credentials already logged in there.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "arg1": {
        "type": "string",
        "description": "positional argument 1 (pipe position 1): the arguments after wrangler"
      }
    },
    "required": [
      "arg1"
    ]
  }
}

{
  "type": "function",
  "function": {
    "name": "CLI_WRANGLER",
    "description": "Run any wrangler command (Wrangler 4.103.0) on the owner Mac, with the credentials already logged in there.",
    "parameters": {
      "type": "object",
      "properties": {
        "arg1": {
          "type": "string",
          "description": "positional argument 1 (pipe position 1): the arguments after wrangler"
        }
      },
      "required": [
        "arg1"
      ]
    }
  }
}

{
  "key": "CLI_WRANGLER",
  "args": {}
}

misc run CLI_WRANGLER 

32 EMAIL_SEND_TRACKED send

Send an email with an open pixel and rewritten click links, and record it so opens and clicks come back as events.

Use it when

An owner-authorised email where you want to know whether it was opened and what was clicked.

It returns

The send record including the tracking id, and a receipt URL.

Do not

Outbound email to a real person needs explicit approval first. Never send a test to a real address.

{
  "name": "EMAIL_SEND_TRACKED",
  "description": "Send an email with an open pixel and rewritten click links, and record it so opens and clicks come back as events.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "message": {
        "type": "object",
        "description": "The email as an object: { to, subject, body } are required; kind, lead_id, from, from_name and reply_to are optional. body may be plain text or HTML.",
        "properties": {
          "to": {
            "type": "string",
            "description": "The recipient's email address."
          },
          "subject": {
            "type": "string",
            "description": "The subject line."
          },
          "body": {
            "type": "string",
            "description": "The email body. Plain text or HTML."
          },
          "kind": {
            "type": "string",
            "description": "Optional. A label for this send, recorded with it, e.g. \"outreach\" or \"receipt\"."
          },
          "lead_id": {
            "type": "string",
            "description": "Optional. The lead this send belongs to, so opens and clicks attach to that lead."
          },
          "from": {
            "type": "string",
            "description": "Optional. The From address. Defaults to the build's sending identity."
          },
          "from_name": {
            "type": "string",
            "description": "Optional. The display name shown beside the From address."
          },
          "reply_to": {
            "type": "string",
            "description": "Optional. Where a reply should go, if not the From address."
          }
        },
        "required": [
          "to",
          "subject",
          "body"
        ]
      }
    },
    "required": [
      "message"
    ]
  }
}

{
  "type": "function",
  "function": {
    "name": "EMAIL_SEND_TRACKED",
    "description": "Send an email with an open pixel and rewritten click links, and record it so opens and clicks come back as events.",
    "parameters": {
      "type": "object",
      "properties": {
        "message": {
          "type": "object",
          "description": "The email as an object: { to, subject, body } are required; kind, lead_id, from, from_name and reply_to are optional. body may be plain text or HTML.",
          "properties": {
            "to": {
              "type": "string",
              "description": "The recipient's email address."
            },
            "subject": {
              "type": "string",
              "description": "The subject line."
            },
            "body": {
              "type": "string",
              "description": "The email body. Plain text or HTML."
            },
            "kind": {
              "type": "string",
              "description": "Optional. A label for this send, recorded with it, e.g. \"outreach\" or \"receipt\"."
            },
            "lead_id": {
              "type": "string",
              "description": "Optional. The lead this send belongs to, so opens and clicks attach to that lead."
            },
            "from": {
              "type": "string",
              "description": "Optional. The From address. Defaults to the build's sending identity."
            },
            "from_name": {
              "type": "string",
              "description": "Optional. The display name shown beside the From address."
            },
            "reply_to": {
              "type": "string",
              "description": "Optional. Where a reply should go, if not the From address."
            }
          },
          "required": [
            "to",
            "subject",
            "body"
          ]
        }
      },
      "required": [
        "message"
      ]
    }
  }
}

{
  "key": "EMAIL_SEND_TRACKED",
  "args": {
    "message": {
      "to": "x@y.com",
      "subject": "hi",
      "body": "see https://leoresearch.com"
    }
  }
}

misc run EMAIL_SEND_TRACKED message={"to":"x@y.com","subject":"hi","body":"see https://leoresearch.com"}

33 META write

Read the Meta Marketing API through one door — ad accounts, campaigns, ad sets, ads, creatives, images and insights — instead of fifty separate META_ADS_* rows.

Use it when

Any read of Meta advertising state.

It returns

The Graph API response verbatim: { data: [...], paging: {...} }.

Do not

The access token expires and Meta answers HTTP 400 OAuthException code 190 when it has. That is a credential to refresh, not a call to retry. Conversions API posting is a separate row, META_CAPI_POST.

{
  "name": "META",
  "description": "Read the Meta Marketing API through one door — ad accounts, campaigns, ad sets, ads, creatives, images and insights — instead of fifty separate META_ADS_* rows.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "op": {
        "type": "string",
        "description": "Which read to perform.",
        "enum": [
          "me",
          "ad_accounts",
          "owned_ad_accounts",
          "client_ad_accounts",
          "campaigns",
          "adsets",
          "ads",
          "adcreatives",
          "ad_images",
          "insights"
        ]
      },
      "node": {
        "type": "string",
        "description": "The Graph node the op reads. Use \"me\" for ad_accounts, owned_ad_accounts and client_ad_accounts. Use act_<AD_ACCOUNT_ID> for campaigns, adsets, ads, adcreatives, ad_images and insights; a campaign or ad set id also works for ads and insights. Omit for the me op."
      },
      "level": {
        "type": "string",
        "description": "insights only: the row grain to report at.",
        "enum": [
          "account",
          "campaign",
          "adset",
          "ad"
        ]
      },
      "since": {
        "type": "string",
        "description": "insights only: first day of the reporting window, YYYY-MM-DD."
      },
      "until": {
        "type": "string",
        "description": "insights only: last day of the reporting window, YYYY-MM-DD."
      }
    },
    "required": [
      "op"
    ]
  }
}

{
  "type": "function",
  "function": {
    "name": "META",
    "description": "Read the Meta Marketing API through one door — ad accounts, campaigns, ad sets, ads, creatives, images and insights — instead of fifty separate META_ADS_* rows.",
    "parameters": {
      "type": "object",
      "properties": {
        "op": {
          "type": "string",
          "description": "Which read to perform.",
          "enum": [
            "me",
            "ad_accounts",
            "owned_ad_accounts",
            "client_ad_accounts",
            "campaigns",
            "adsets",
            "ads",
            "adcreatives",
            "ad_images",
            "insights"
          ]
        },
        "node": {
          "type": "string",
          "description": "The Graph node the op reads. Use \"me\" for ad_accounts, owned_ad_accounts and client_ad_accounts. Use act_<AD_ACCOUNT_ID> for campaigns, adsets, ads, adcreatives, ad_images and insights; a campaign or ad set id also works for ads and insights. Omit for the me op."
        },
        "level": {
          "type": "string",
          "description": "insights only: the row grain to report at.",
          "enum": [
            "account",
            "campaign",
            "adset",
            "ad"
          ]
        },
        "since": {
          "type": "string",
          "description": "insights only: first day of the reporting window, YYYY-MM-DD."
        },
        "until": {
          "type": "string",
          "description": "insights only: last day of the reporting window, YYYY-MM-DD."
        }
      },
      "required": [
        "op"
      ]
    }
  }
}

{
  "key": "META",
  "args": {
    "op": "ad_accounts",
    "node": "me"
  }
}

misc run META op=ad_accounts node=me

34 META_CAPI_POST send

Post one server-side conversion event to Meta's Conversions API, so a conversion that happened off the browser still reaches the ad account's optimisation and reporting. Split out of the META row on 2026-09-13: META is a read door with ten read operations whose arguments line up, and capi_post is a write with six completely different arguments, so it could not be described in the same argument list without making both of them ambiguous.

Use it when

Recording a conversion the pixel could not see — a server-side purchase, a lead captured off-site, an offline event.

It returns

{ events_received, messages, fbtrace_id }. events_received: 1 means Meta accepted it.

Do not

This writes to the live ad account and feeds optimisation. Never fire it with test data. event_id must be the same id the browser pixel would have used for the same conversion, or Meta counts it twice.

{
  "name": "META_CAPI_POST",
  "description": "Post one server-side conversion event to Meta's Conversions API, so a conversion that happened off the browser still reaches the ad account's optimisation and reporting. Split out of the META row on 2026-09-13: META is a read door with ten read operations whose arguments line up, and capi_post is a write with six completely different arguments, so it could not be described in the same argument list without making both of them ambiguous.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "event_name": {
        "type": "string",
        "description": "The standard Meta event name, e.g. Purchase, Lead, CompleteRegistration, AddToCart, PageView."
      },
      "event_time": {
        "type": "integer",
        "description": "When the conversion happened, as a Unix timestamp in whole seconds. Meta rejects anything older than seven days."
      },
      "event_id": {
        "type": "string",
        "description": "A stable id for this conversion, used to deduplicate against the browser pixel. The same conversion must carry the same id on both paths."
      },
      "event_source_url": {
        "type": "string",
        "description": "The full URL where the conversion happened."
      },
      "client_ip_address": {
        "type": "string",
        "description": "The end user's IP address, for attribution matching."
      },
      "client_user_agent": {
        "type": "string",
        "description": "The end user's browser user-agent string, for attribution matching."
      }
    },
    "required": [
      "event_name",
      "event_time",
      "event_id",
      "event_source_url"
    ]
  }
}

{
  "type": "function",
  "function": {
    "name": "META_CAPI_POST",
    "description": "Post one server-side conversion event to Meta's Conversions API, so a conversion that happened off the browser still reaches the ad account's optimisation and reporting. Split out of the META row on 2026-09-13: META is a read door with ten read operations whose arguments line up, and capi_post is a write with six completely different arguments, so it could not be described in the same argument list without making both of them ambiguous.",
    "parameters": {
      "type": "object",
      "properties": {
        "event_name": {
          "type": "string",
          "description": "The standard Meta event name, e.g. Purchase, Lead, CompleteRegistration, AddToCart, PageView."
        },
        "event_time": {
          "type": "integer",
          "description": "When the conversion happened, as a Unix timestamp in whole seconds. Meta rejects anything older than seven days."
        },
        "event_id": {
          "type": "string",
          "description": "A stable id for this conversion, used to deduplicate against the browser pixel. The same conversion must carry the same id on both paths."
        },
        "event_source_url": {
          "type": "string",
          "description": "The full URL where the conversion happened."
        },
        "client_ip_address": {
          "type": "string",
          "description": "The end user's IP address, for attribution matching."
        },
        "client_user_agent": {
          "type": "string",
          "description": "The end user's browser user-agent string, for attribution matching."
        }
      },
      "required": [
        "event_name",
        "event_time",
        "event_id",
        "event_source_url"
      ]
    }
  }
}

{
  "key": "META_CAPI_POST",
  "args": {
    "event_name": "Lead",
    "event_time": 1789000000,
    "event_id": "lead_8814",
    "event_source_url": "https://loop.health/apply",
    "client_ip_address": "203.0.113.7",
    "client_user_agent": "Mozilla/5.0"
  }
}

misc run META_CAPI_POST event_name=Lead event_time=1789000000 event_id=lead_8814 event_source_url=https://loop.health/apply client_ip_address=203.0.113.7 client_user_agent=Mozilla/5.0

35 DIR_SEARCH read

Find directory rows by words, when you know the capability you want but not its key. The directory-row twin of misc_find: same job, reachable from surfaces that can only dispatch rows.

Use it when

You are on a surface that has no misc_find and you need a key you do not know.

It returns

A short list of matches: key, type, category, and what each one does.

Do not

Do not load both this and misc_find into one model's tool list — they answer the same question and a model will flip between them. Do not reach for DIR_LIST instead; it returns every one of the 1,459 rows and buries the answer.

{
  "name": "DIR_SEARCH",
  "description": "Find directory rows by words, when you know the capability you want but not its key. The directory-row twin of misc_find: same job, reachable from surfaces that can only dispatch rows.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "query": {
        "type": "string",
        "description": "What you want to do, in ordinary words, e.g. \"new sheet\", \"refund a charge\"."
      }
    },
    "required": [
      "query"
    ]
  }
}

{
  "type": "function",
  "function": {
    "name": "DIR_SEARCH",
    "description": "Find directory rows by words, when you know the capability you want but not its key. The directory-row twin of misc_find: same job, reachable from surfaces that can only dispatch rows.",
    "parameters": {
      "type": "object",
      "properties": {
        "query": {
          "type": "string",
          "description": "What you want to do, in ordinary words, e.g. \"new sheet\", \"refund a charge\"."
        }
      },
      "required": [
        "query"
      ]
    }
  }
}

{
  "key": "DIR_SEARCH",
  "args": {
    "query": "new sheet"
  }
}

misc run DIR_SEARCH query="new sheet"

36 PHONE_APP_LAUNCH write

Launch an app on the owner's iPhone, over the Mac bridge.

Use it when

Starting or stopping the Console on the phone without touching the phone.

It returns

The script's output, including which bundle it acted on. Timeout is 120 seconds.

Do not

The default target is the home-screen web clip of /console, whose bundle id is com.apple.webapp — NOT com.llmasos.console, which is the native app. Naming the wrong one silently acts on the wrong thing. Developer Mode must already be on.

{
  "name": "PHONE_APP_LAUNCH",
  "description": "Launch an app on the owner's iPhone, over the Mac bridge.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "bundle_id": {
        "type": "string",
        "description": "Which app to act on: the literal word \"console\" for the home-screen web clip of https://miscsubjects.com/console, or a full bundle id such as com.llmasos.console for the native app.",
        "default": "console"
      }
    },
    "required": []
  }
}

{
  "type": "function",
  "function": {
    "name": "PHONE_APP_LAUNCH",
    "description": "Launch an app on the owner's iPhone, over the Mac bridge.",
    "parameters": {
      "type": "object",
      "properties": {
        "bundle_id": {
          "type": "string",
          "description": "Which app to act on: the literal word \"console\" for the home-screen web clip of https://miscsubjects.com/console, or a full bundle id such as com.llmasos.console for the native app.",
          "default": "console"
        }
      },
      "required": []
    }
  }
}

{
  "key": "PHONE_APP_LAUNCH",
  "args": {
    "bundle_id": "console"
  }
}

misc run PHONE_APP_LAUNCH bundle_id=console

37 PHONE_APP_RESTART write

Quit and relaunch an app on the owner's iPhone, over the Mac bridge. Use this after deploying a change the running app has cached.

Use it when

Starting or stopping the Console on the phone without touching the phone.

It returns

The script's output, including which bundle it acted on. Timeout is 120 seconds.

Do not

The default target is the home-screen web clip of /console, whose bundle id is com.apple.webapp — NOT com.llmasos.console, which is the native app. Naming the wrong one silently acts on the wrong thing. Developer Mode must already be on.

{
  "name": "PHONE_APP_RESTART",
  "description": "Quit and relaunch an app on the owner's iPhone, over the Mac bridge. Use this after deploying a change the running app has cached.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "bundle_id": {
        "type": "string",
        "description": "Which app to act on: the literal word \"console\" for the home-screen web clip of https://miscsubjects.com/console, or a full bundle id such as com.llmasos.console for the native app.",
        "default": "console"
      }
    },
    "required": []
  }
}

{
  "type": "function",
  "function": {
    "name": "PHONE_APP_RESTART",
    "description": "Quit and relaunch an app on the owner's iPhone, over the Mac bridge. Use this after deploying a change the running app has cached.",
    "parameters": {
      "type": "object",
      "properties": {
        "bundle_id": {
          "type": "string",
          "description": "Which app to act on: the literal word \"console\" for the home-screen web clip of https://miscsubjects.com/console, or a full bundle id such as com.llmasos.console for the native app.",
          "default": "console"
        }
      },
      "required": []
    }
  }
}

{
  "key": "PHONE_APP_RESTART",
  "args": {
    "bundle_id": "console"
  }
}

misc run PHONE_APP_RESTART bundle_id=console