action-catalog

September 9, 2026 · View on GitHub

Generated by labby docs generate. Do not edit by hand.

This is a global inventory, not the active runtime exposure. Admin and Required scopes are transport gates; Authorization, Capability, and Resource family describe per-action shared-dispatch checks where the action has structured authority metadata.

Service	Action	Built-in	Destructive	Admin	Required scopes	Authorization	Capability	Resource family	Params	Returns	Surfaces
`access`	`access.gateway_credential.bind`	false	false	false		`resource_capability`	`scope.manage`	`platform`	`team_id: string` `upstream_name: string` `binding_id*: string`	`object`	mcp, api
`access`	`access.gateway_credential.list`	false	false	false		`resource_capability`	`scope.read`	`platform`	`team_id*: string`	`object`	mcp, api
`access`	`access.gateway_credential.revoke`	false	false	false		`resource_capability`	`scope.manage`	`platform`	`team_id: string` `upstream_name: string`	`object`	mcp, api
`access`	`access.platform_admin.grant`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`platform`	`principal_id*: string`	`object`	mcp, api
`access`	`access.platform_admin.revoke`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`platform`	`principal_id*: string`	`object`	mcp, api
`access`	`access.project.effective.list`	false	false	false		`caller_membership_projection`	`-`	`-`		`object`	mcp, api
`access`	`access.team.activate`	false	false	false		`resource_capability`	`membership.manage`	`platform`	`team_id*: string`	`object`	mcp, api
`access`	`access.team.create`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`platform`	`team_id: string` `name: string`	`object`	mcp, api
`access`	`access.team.list`	false	false	false		`caller_membership_projection`	`-`	`-`		`object`	mcp, api
`access`	`access.team.member.add`	false	false	false		`resource_capability`	`membership.manage`	`platform`	`team_id: string` `principal_id: string` `role*: string`	`object`	mcp, api
`access`	`access.team.member.remove`	false	false	false		`resource_capability`	`membership.manage`	`platform`	`team_id: string` `principal_id: string`	`object`	mcp, api
`access`	`access.team.member.role.set`	false	false	false		`resource_capability`	`membership.manage`	`platform`	`team_id: string` `principal_id: string` `role*: string`	`object`	mcp, api
`access`	`access.team.member.suspend`	false	false	false		`resource_capability`	`membership.manage`	`platform`	`team_id: string` `principal_id: string`	`object`	mcp, api
`access`	`access.team.suspend`	false	false	false		`resource_capability`	`membership.manage`	`platform`	`team_id*: string`	`object`	mcp, api
`access`	`access.team_invitation.accept`	false	false	false		`resource_capability`	`scope.operate`	`platform`	`token*: string`	`object`	mcp, api
`access`	`access.team_invitation.create`	false	false	false		`resource_capability`	`membership.manage`	`platform`	`team_id: string` `principal_id: string` `role: string` `token: string` `ttl_seconds*: integer`	`object`	mcp, api
`access`	`access.team_project.assign`	false	false	false		`resource_capability`	`scope.manage`	`platform`	`team_id: string` `project_id: string` `role*: string`	`object`	mcp, api
`access`	`help`	true	false	false		`transport`	`-`	`-`		`HelpPayload`	mcp, api
`access`	`schema`	true	false	false		`transport`	`-`	`-`	`action*: string`	`ActionSpec`	mcp, api
`agents`	`agents.create`	false	false	false		`resource_capability`	`scope.create`	`agent`	`agent_id: string` `owner_kind: string` `owner_id: string` `content_digest: string` `repository_digest: string` `image_digest: string` `harness_digest: string` `loadout_digest: string` `catalog_generation*: string`	`object`	mcp, api
`agents`	`agents.delete`	false	false	false		`resource_capability`	`scope.delete`	`agent`	`agent_id*: string`	`object`	mcp, api
`agents`	`agents.get`	false	false	false		`resource_capability`	`scope.read`	`agent`	`agent_id*: string`	`object`	mcp, api
`agents`	`agents.list`	false	false	false		`resource_capability`	`scope.read`	`agent`	`cursor: string` `limit: string`	`object`	mcp, api
`agents`	`agents.run`	false	false	false		`resource_capability`	`scope.operate`	`agent`	`agent_id*: string`	`object`	mcp, api
`agents`	`agents.session.status`	false	false	false		`resource_capability`	`scope.read`	`agent`	`agent_id: string` `session_id: string`	`object`	mcp, api
`agents`	`agents.suspend`	false	false	false		`resource_capability`	`scope.manage`	`agent`	`agent_id*: string`	`object`	mcp, api
`agents`	`agents.update`	false	false	false		`resource_capability`	`scope.manage`	`agent`	`agent_id*: string`	`object`	mcp, api
`agents`	`help`	true	false	false		`transport`	`-`	`-`		`HelpPayload`	mcp, api
`agents`	`schema`	true	false	false		`transport`	`-`	`-`	`action*: string`	`ActionSpec`	mcp, api
`artifacts`	`artifacts.activate`	false	false	false		`transport`	`-`	`-`	`artifact_id: string` `expected_revision_id: string` `expected_library_version: integer` `idempotency_key: string`	`SkillMutationReceipt`	mcp, api, web
`artifacts`	`artifacts.archive`	false	false	false		`transport`	`-`	`-`	`artifact_id: string` `expected_library_version: integer` `idempotency_key*: string`	`SkillMutationReceipt`	mcp, api, web
`artifacts`	`artifacts.authority_status`	false	false	false		`transport`	`-`	`-`	`connection_id: string`	`ArtifactAuthorityStatus`	mcp, api, web
`artifacts`	`artifacts.create`	false	false	false		`transport`	`-`	`-`	`name: string` `files: array` `visibility: string` `expected_library_version: integer` `idempotency_key: string`	`SkillMutationReceipt`	mcp, api, web
`artifacts`	`artifacts.deactivate`	false	false	false		`transport`	`-`	`-`	`artifact_id: string` `expected_library_version: integer` `idempotency_key*: string`	`SkillMutationReceipt`	mcp, api
`artifacts`	`artifacts.follow`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`connection_id: string` `id*: string` `upstream_artifact_id: string` `upstream_revision_id: string` `following: boolean`	`RemoteArtifact`	mcp, api, web
`artifacts`	`artifacts.fork`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`connection_id: string` `source_artifact_id: string` `revision_id: string` `namespace: string` `name*: string` `following: boolean`	`RemoteArtifact`	mcp, api, web
`artifacts`	`artifacts.get`	false	false	false		`transport`	`-`	`-`	`artifact_id*: string`	`VersionedSkillLibrarySummary`	mcp, api
`artifacts`	`artifacts.get_remote`	false	false	false		`transport`	`-`	`-`	`connection_id: string` `id*: string`	`RemoteArtifact`	mcp, api, web
`artifacts`	`artifacts.history`	false	false	false		`transport`	`-`	`-`	`artifact_id*: string` `cursor: string` `limit: integer`	`VersionedRevisionPage`	mcp, api
`artifacts`	`artifacts.import`	false	false	false		`transport`	`-`	`-`	`source: object` `expected_library_version: integer` `idempotency_key*: string`	`SkillMutationReceipt`	mcp, api, web
`artifacts`	`artifacts.import_batch`	false	false	false		`transport`	`-`	`-`	`sources: array` `expected_library_version: integer` `idempotency_key*: string`	`ArtifactImportBatchReceipt`	mcp, api
`artifacts`	`artifacts.intake_candidate`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`connection_id: string` `candidate*: object`	`ArtifactCandidate`	mcp, api, web
`artifacts`	`artifacts.list`	false	false	false		`transport`	`-`	`-`	`cursor: string` `limit: integer`	`VersionedSkillLibraryPage`	mcp, api, web
`artifacts`	`artifacts.list_acp_registry`	false	false	false		`transport`	`-`	`-`	`connection_id: string`	`AcpRegistryPage`	mcp, api, web
`artifacts`	`artifacts.list_candidates`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`connection_id: string` `cursor: string` `limit: integer`	`ArtifactCandidatePage`	mcp, api, web
`artifacts`	`artifacts.list_connections`	false	false	false		`transport`	`-`	`-`		`ArtifactAuthorityConnectionPage`	mcp, api, web
`artifacts`	`artifacts.list_mcp_registry`	false	false	false		`transport`	`-`	`-`	`connection_id: string` `query: string` `category: string` `tag: string` `version: string` `updated_since: string` `include_deleted: boolean` `cursor: string` `limit: integer`	`McpRegistryPage`	mcp, api, web
`artifacts`	`artifacts.list_remote`	false	false	false		`transport`	`-`	`-`	`connection_id: string` `cursor: string` `limit: integer`	`RemoteArtifactPage`	mcp, api, web
`artifacts`	`artifacts.read`	false	false	false		`transport`	`-`	`-`	`artifact_id: string` `revision_id: string` `path*: string`	`VersionedRevisionFile`	mcp, api, web
`artifacts`	`artifacts.refresh`	false	false	false		`transport`	`-`	`-`	`expected_library_version: integer` `idempotency_key: string`	`SkillMutationReceipt`	mcp, api
`artifacts`	`artifacts.rollback`	false	false	false		`transport`	`-`	`-`	`artifact_id: string` `expected_revision_id: string` `expected_library_version: integer` `idempotency_key: string`	`SkillMutationReceipt`	mcp, api
`artifacts`	`artifacts.save`	false	false	false		`transport`	`-`	`-`	`artifact_id: string` `expected_revision_id: string` `files: array` `expected_library_version: integer` `idempotency_key*: string`	`SkillMutationReceipt`	mcp, api, web
`artifacts`	`artifacts.search`	false	false	false		`transport`	`-`	`-`	`query*: string` `cursor: string` `limit: integer`	`VersionedArtifactPage`	mcp, api, web
`artifacts`	`artifacts.search_ard`	false	false	false		`transport`	`-`	`-`	`connection_id: string` `registry: string` `query: string` `page_token: string`	`RemoteArtifactSearch`	mcp, api, web
`artifacts`	`artifacts.search_marketplace`	false	false	false		`transport`	`-`	`-`	`connection_id: string` `source*: string` `ref: string` `only: array`	`RemoteArtifactSearch`	mcp, api, web
`artifacts`	`artifacts.search_remote`	false	false	false		`transport`	`-`	`-`	`connection_id: string` `query*: string` `limit: integer`	`RemoteArtifactSearch`	mcp, api, web
`artifacts`	`artifacts.search_skills_sh`	false	false	false		`transport`	`-`	`-`	`connection_id: string` `query*: string` `limit: integer`	`RemoteArtifactSearch`	mcp, api, web
`artifacts`	`artifacts.set_license`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`connection_id: string` `id*: string` `declared: string\|null` `detected: array` `notices: array` `redistribution: string` `review_state: unreviewed\|reviewed\|disputed` `takedown_state: none\|requested\|restricted\|removed` `evidence_at: string` `metadata: object`	`RemoteArtifact`	mcp, api, web
`artifacts`	`artifacts.set_publication`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`connection_id: string` `id*: string` `state: draft\|listed\|published\|withdrawn` `visibility: private\|unlisted\|public` `distribution: metadata\|bytes`	`RemoteArtifact`	mcp, api, web
`artifacts`	`artifacts.validate`	false	false	false		`transport`	`-`	`-`	`name: string` `files: array`	`SkillValidation`	mcp, api, web
`artifacts`	`help`	true	false	false		`transport`	`-`	`-`		`HelpPayload`	mcp, api
`artifacts`	`schema`	true	false	false		`transport`	`-`	`-`	`action*: string`	`ActionSpec`	mcp, api
`browser`	`browser.call`	false	true	true	lab:admin	`transport_admin`	`-`	`-`	`browser_id: string` `tab_id: integer` `document_id: string` `catalog_revision: integer` `catalog_digest: string` `tool_name: string` `arguments: object` `timeout_ms: integer`	`PageToolResult`	mcp, api
`browser`	`browser.list`	false	false	true	lab:admin	`transport_admin`	`-`	`-`		`BrowserList`	mcp, api
`browser`	`browser.pairing.approve`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`pairing_id*: string`	`Browser`	mcp, api
`browser`	`browser.pairing.list`	false	false	true	lab:admin	`transport_admin`	`-`	`-`		`BrowserPairingList`	mcp, api
`browser`	`browser.revoke`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`browser_id*: string`	`Browser`	mcp, api
`browser`	`browser.session.enable`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`session_id: string` `catalog_digest: string` `enabled*: boolean`	`BrowserSession`	mcp, api
`browser`	`browser.session.get`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`session_id*: string`	`BrowserSession`	mcp, api
`browser`	`browser.sessions`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`cursor: string` `limit: integer`	`BrowserSessionList`	mcp, api
`browser`	`browser.status`	false	false	false		`transport`	`-`	`-`		`BrowserBridgeStatus`	mcp, api
`browser`	`help`	true	false	false		`transport`	`-`	`-`		`HelpPayload`	mcp, api
`browser`	`schema`	true	false	false		`transport`	`-`	`-`	`action*: string`	`ActionSpec`	mcp, api
`bundles`	`bundles.add`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`connection_id: string` `slug: string` `namespace: string` `name*: string`	`Bundle`	mcp, api, web
`bundles`	`bundles.create`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`connection_id: string` `slug*: string` `description: string` `visibility: public\|bearer\|oauth`	`Bundle`	mcp, api, web
`bundles`	`bundles.delete`	false	true	true	lab:admin	`transport_admin`	`-`	`-`	`connection_id: string` `slug*: string`	`DeleteReceipt`	mcp, api
`bundles`	`bundles.get`	false	false	false		`transport`	`-`	`-`	`connection_id: string` `slug*: string`	`Bundle`	mcp, api, web
`bundles`	`bundles.list`	false	false	false		`transport`	`-`	`-`	`connection_id: string`	`Bundle[]`	mcp, api, web
`bundles`	`bundles.publish`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`connection_id: string` `slug*: string`	`BundlePublishReceipt`	mcp, api, web
`bundles`	`bundles.remove`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`connection_id: string` `slug: string` `namespace: string` `name*: string`	`Bundle`	mcp, api, web
`bundles`	`bundles.set_visibility`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`connection_id: string` `slug: string` `visibility: public\|bearer\|oauth`	`Bundle`	mcp, api, web
`bundles`	`help`	true	false	false		`transport`	`-`	`-`		`HelpPayload`	mcp, api
`bundles`	`schema`	true	false	false		`transport`	`-`	`-`	`action*: string`	`ActionSpec`	mcp, api
`depot_publish`	`depot.publish_skill_archive`	false	false	false		`project_artifact_publish`	`-`	`artifact_library`	`filename: string` `archive_base64: string` `namespace: string`	`IngestJobReceipt`	mcp
`depot_publish`	`help`	true	false	false		`transport`	`-`	`-`		`HelpPayload`	mcp
`depot_publish`	`schema`	true	false	false		`transport`	`-`	`-`	`action*: string`	`ActionSpec`	mcp
`dev_containers`	`dev_containers.create`	false	false	false		`resource_capability`	`scope.create`	`dev_container`	`instance_id: string` `template_id: string` `owner_kind: installation\|team\|project\|personal` `owner_id: string` `secret_references: string[]`	`object`	mcp, api
`dev_containers`	`dev_containers.destroy`	false	true	false		`resource_capability`	`scope.delete`	`dev_container`	`instance_id*: string`	`object`	mcp, api
`dev_containers`	`dev_containers.list`	false	false	false		`resource_capability`	`scope.read`	`dev_container`	`cursor: string` `limit: string`	`object`	mcp, api
`dev_containers`	`dev_containers.reconcile`	false	false	false		`resource_capability`	`scope.operate`	`dev_container`	`instance_id*: string`	`object`	mcp, api
`dev_containers`	`dev_containers.start`	false	false	false		`resource_capability`	`scope.operate`	`dev_container`	`instance_id*: string`	`object`	mcp, api
`dev_containers`	`dev_containers.stop`	false	false	false		`resource_capability`	`scope.operate`	`dev_container`	`instance_id*: string`	`object`	mcp, api
`dev_containers`	`help`	true	false	false		`transport`	`-`	`-`		`HelpPayload`	mcp, api
`dev_containers`	`schema`	true	false	false		`transport`	`-`	`-`	`action*: string`	`ActionSpec`	mcp, api
`doctor`	`access.check`	false	false	false		`transport`	`-`	`-`		`DoctorReport`	mcp, api
`doctor`	`audit.full`	false	false	false		`transport`	`-`	`-`		`stream<Finding>`	cli, mcp, api
`doctor`	`auth.check`	false	false	false		`transport`	`-`	`-`	`live: boolean`	`DoctorReport`	cli, mcp, api
`doctor`	`help`	false	false	false		`transport`	`-`	`-`		`Catalog`	mcp, api
`doctor`	`oauth.relay.check`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`probe_targets: boolean`	`DoctorReport`	cli, mcp, api
`doctor`	`proxy.check`	false	false	false		`transport`	`-`	`-`	`app_url: string` `mcp_url: string` `route*: string` `backend_url: string`	`DoctorReport`	cli, mcp, api
`doctor`	`proxy.preflight`	false	false	false		`transport`	`-`	`-`		`DoctorReport`	cli, mcp, api
`doctor`	`schema`	false	false	false		`transport`	`-`	`-`	`action*: string`	`Schema`	mcp, api
`doctor`	`system.checks`	false	false	false		`transport`	`-`	`-`		`DoctorReport`	cli, mcp, api
`fs`	`fs.list`	false	false	false		`transport`	`-`	`-`	`path: string`	`{entries: [{name, path, kind, size, modified, accessible}], truncated: bool}`	mcp, api
`fs`	`fs.preview`	false	false	false		`transport`	`-`	`-`	`path*: string` `max_bytes: integer`	`binary (streamed); mime from safe-MIME whitelist or application/octet-stream`	api, web
`fs`	`help`	true	false	false		`transport`	`-`	`-`		`HelpPayload`	mcp, api
`fs`	`schema`	true	false	false		`transport`	`-`	`-`	`action*: string`	`ActionSpec`	mcp, api
`gateway`	`gateway.add`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`spec*: json` `bearer_token_value: string`	`GatewayView`	cli, mcp, api, web
`gateway`	`gateway.client_config.get`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`name*: string`	`McpClientConfigView`	mcp, api
`gateway`	`gateway.clients.list`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`		`GatewayClientView[]`	cli, mcp, api
`gateway`	`gateway.code_mode.get`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`		`CodeModeConfig`	cli, mcp, api, web
`gateway`	`gateway.code_mode.set`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`enabled: boolean` `trusted_read_only_tools: array` `mcp_ui_enabled: boolean` `trace_params: boolean` `result_shape_policy: string` `timeout_ms: integer` `max_response_bytes: integer` `max_response_tokens: integer` `token_estimate_divisor: integer` `max_log_entries: integer` `max_log_bytes: integer`	`CodeModeConfig`	cli, mcp, api, web
`gateway`	`gateway.discover`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`clients: string[]` `include_existing: boolean`	`DiscoveredServerView[]`	cli, mcp, api, web
`gateway`	`gateway.discovered_prompts`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`name*: string`	`string[]`	mcp, api, web
`gateway`	`gateway.discovered_resources`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`name*: string`	`string[]`	mcp, api, web
`gateway`	`gateway.discovered_tools`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`name*: string`	`GatewayToolExposureRowView[]`	mcp, api, web
`gateway`	`gateway.enrich.apply`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`upstream: string` `hint: string` `metadata_hash*: string`	`GatewayHintApplyView`	cli, mcp, api
`gateway`	`gateway.enrich.preview`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`upstreams: string[]` `all: boolean` `provider: string` `max_upstreams: integer` `timeout_ms: integer`	`GatewayEnrichmentPreviewView`	cli, mcp, api
`gateway`	`gateway.get`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`name*: string`	`GatewayView`	cli, mcp, api, web
`gateway`	`gateway.import`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`all: boolean` `names: string[]` `clients: string[]`	`ImportResultView`	cli, mcp, api, web
`gateway`	`gateway.import_pending.approve`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`name*: string`	`PendingImportView`	cli, mcp, api
`gateway`	`gateway.import_pending.list`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`		`PendingImportView[]`	cli, mcp, api
`gateway`	`gateway.import_pending.reject`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`name*: string`	`PendingImportView`	cli, mcp, api
`gateway`	`gateway.import_tombstones.clear`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`name*: string` `source_client: string` `source_path: string` `server_name: string` `transport_fingerprint: string`	`ImportTombstoneView[]`	mcp, api, web
`gateway`	`gateway.import_tombstones.list`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`		`ImportTombstoneView[]`	mcp, api
`gateway`	`gateway.import_tombstones.restore`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`name*: string` `source_client: string` `source_path: string` `server_name: string` `transport_fingerprint: string`	`GatewayView`	mcp, api, web
`gateway`	`gateway.list`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`		`ServerView[]`	cli, mcp, api, web
`gateway`	`gateway.loadout.add`	false	false	false		`resource_capability`	`scope.manage`	`gateway`	`loadout*: json`	`GatewayLoadoutConfig`	cli, mcp, api, web
`gateway`	`gateway.loadout.get`	false	false	false		`resource_capability`	`scope.read`	`gateway`	`name*: string`	`GatewayLoadoutConfig`	cli, mcp, api, web
`gateway`	`gateway.loadout.list`	false	false	false		`resource_capability`	`scope.read`	`gateway`		`GatewayLoadoutConfig[]`	mcp, api
`gateway`	`gateway.loadout.list_state`	false	false	false		`resource_capability`	`scope.read`	`gateway`		`GatewayLoadoutState[]`	cli, mcp, api, web
`gateway`	`gateway.loadout.patch`	false	false	false		`resource_capability`	`scope.manage`	`gateway`	`name: string` `patch: json`	`GatewayLoadoutConfig`	cli, mcp, api, web
`gateway`	`gateway.loadout.remove`	false	false	false		`resource_capability`	`scope.manage`	`gateway`	`name*: string`	`GatewayLoadoutConfig`	cli, mcp, api, web
`gateway`	`gateway.loadout.stage_patch`	false	false	false		`resource_capability`	`scope.manage`	`gateway`	`name: string` `patch: json`	`GatewayLoadoutStageResult`	cli, mcp, api, web
`gateway`	`gateway.loadout.stage_remove`	false	false	false		`resource_capability`	`scope.manage`	`gateway`	`name*: string`	`GatewayLoadoutStageResult`	cli, mcp, api, web
`gateway`	`gateway.loadout.stage_update`	false	false	false		`resource_capability`	`scope.manage`	`gateway`	`name: string` `loadout: json`	`GatewayLoadoutStageResult`	mcp, api, web
`gateway`	`gateway.loadout.update`	false	false	false		`resource_capability`	`scope.manage`	`gateway`	`name: string` `loadout: json`	`GatewayLoadoutConfig`	mcp, api, web
`gateway`	`gateway.mcp.cleanup`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`name*: string` `aggressive: boolean` `dry_run: boolean`	`GatewayCleanupView`	cli, mcp, api, web
`gateway`	`gateway.mcp.disable`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`name*: string` `cleanup: boolean` `aggressive: boolean`	`GatewayView + optional cleanup result`	cli, mcp, api, web
`gateway`	`gateway.mcp.enable`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`name*: string`	`GatewayView`	cli, mcp, api, web
`gateway`	`gateway.mcp.list`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`name: string`	`GatewayMcpRuntimeView[]`	cli, mcp, api, web
`gateway`	`gateway.mcp.restart`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`name*: string` `aggressive: boolean`	`GatewayView + cleanup result`	cli, mcp, api
`gateway`	`gateway.oauth.clear`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`upstream*: string`	`ok`	cli, mcp, api
`gateway`	`gateway.oauth.google_revoke`	false	true	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`upstream: string` `confirm: boolean`	`GoogleProviderInvalidation`	cli, mcp, api
`gateway`	`gateway.oauth.probe`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`url*: string`	`ProbeResult`	mcp, api
`gateway`	`gateway.oauth.resource_lease.create`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`resource: string` `scopes: string[]` `ttl_secs: integer` `owner: string`	`ResourceLease`	mcp, api
`gateway`	`gateway.oauth.resource_lease.release`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`id*: string`	`ResourceLeaseReleaseView`	mcp, api
`gateway`	`gateway.oauth.resource_lease.renew`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`id: string` `ttl_secs: integer`	`ResourceLease`	mcp, api
`gateway`	`gateway.oauth.start`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`upstream*: string`	`BeginAuthorization`	cli, mcp, api
`gateway`	`gateway.oauth.status`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`upstream*: string`	`UpstreamOauthStatusView`	cli, mcp, api
`gateway`	`gateway.oauth.wait`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`upstream*: string` `timeout_secs: integer`	`{authenticated: bool, timed_out: bool}`	cli, mcp, api
`gateway`	`gateway.protected_route.add`	false	false	false		`resource_capability`	`scope.manage`	`gateway`	`route*: json`	`ProtectedMcpRouteConfig`	cli, mcp, api, web
`gateway`	`gateway.protected_route.get`	false	false	false		`resource_capability`	`scope.read`	`gateway`	`name*: string`	`ProtectedMcpRouteConfig`	cli, mcp, api, web
`gateway`	`gateway.protected_route.list`	false	false	false		`resource_capability`	`scope.read`	`gateway`		`ProtectedMcpRouteConfig[]`	mcp, api
`gateway`	`gateway.protected_route.list_state`	false	false	false		`resource_capability`	`scope.read`	`gateway`		`ProtectedMcpRouteState[]`	cli, mcp, api, web
`gateway`	`gateway.protected_route.remove`	false	false	false		`resource_capability`	`scope.manage`	`gateway`	`name*: string`	`ProtectedMcpRouteConfig`	cli, mcp, api, web
`gateway`	`gateway.protected_route.stage_add`	false	false	false		`resource_capability`	`scope.manage`	`gateway`	`route*: json`	`ProtectedMcpRouteStageResult`	cli, mcp, api, web
`gateway`	`gateway.protected_route.stage_remove`	false	false	false		`resource_capability`	`scope.manage`	`gateway`	`name*: string`	`ProtectedMcpRouteStageResult`	cli, mcp, api, web
`gateway`	`gateway.protected_route.stage_update`	false	false	false		`resource_capability`	`scope.manage`	`gateway`	`name: string` `route: json`	`ProtectedMcpRouteStageResult`	cli, mcp, api, web
`gateway`	`gateway.protected_route.test`	false	false	false		`resource_capability`	`scope.manage`	`gateway`	`route*: json`	`ProtectedMcpRouteTestResult`	cli, mcp, api, web
`gateway`	`gateway.protected_route.update`	false	false	false		`resource_capability`	`scope.manage`	`gateway`	`name: string` `route: json`	`ProtectedMcpRouteConfig`	cli, mcp, api, web
`gateway`	`gateway.public_urls.get`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`		`{app: string?, mcp_gateway: string?, effective_mcp_gateway: string?}`	cli, mcp, api
`gateway`	`gateway.reload`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`		`GatewayCatalogDiff`	cli, mcp, api, web
`gateway`	`gateway.remove`	false	true	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`name*: string`	`GatewayView`	cli, mcp, api, web
`gateway`	`gateway.schema`	false	false	false		`transport`	`-`	`-`	`name*: string`	`GatewayServerSchema`	mcp, api
`gateway`	`gateway.server.get`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`id*: string`	`ServerView`	mcp, api, web
`gateway`	`gateway.servers`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`		`GatewayServersDoc`	mcp, api
`gateway`	`gateway.service_actions`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`service*: string`	`ServiceActionView[]`	mcp, api, web
`gateway`	`gateway.service_config.get`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`service*: string`	`ServiceConfigView`	mcp, api, web
`gateway`	`gateway.service_config.set`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`service: string` `values: json`	`ServiceConfigView`	mcp, api, web
`gateway`	`gateway.skills.list`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`upstream: string`	`UpstreamSkillsView[]`	cli, mcp, api
`gateway`	`gateway.status`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`name: string`	`GatewayRuntimeView[]`	mcp, api, web
`gateway`	`gateway.supported_services`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`		`SupportedServiceView[]`	mcp, api, web
`gateway`	`gateway.test`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`name: string` `spec: json`	`GatewayTestResult`	cli, mcp, api, web
`gateway`	`gateway.update`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`name: string` `patch: json` `bearer_token_value: string`	`GatewayView`	cli, mcp, api, web
`gateway`	`gateway.usage.calls`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`since_unix: integer` `until_unix: integer` `upstream: string` `tool: string` `capability: string` `operation: string` `subject_scoped: boolean` `actor: string` `outcome: string` `search: string` `limit: integer` `cursor: string` `include_total: boolean`	`GatewayUsageCallsView`	cli, mcp, api, web
`gateway`	`gateway.usage.metrics`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`since_unix: integer` `until_unix: integer` `upstream: string` `tool: string` `capability: string` `operation: string` `subject_scoped: boolean` `actor: string` `outcome: string` `search: string` `bucket_count: integer` `timezone: string` `timezone_offset_minutes: integer` `include_facets: boolean`	`GatewayUsageMetricsView`	cli, mcp, api, web
`gateway`	`gateway.virtual_server.disable`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`id*: string`	`ServerView`	mcp, api, web
`gateway`	`gateway.virtual_server.enable`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`id*: string`	`ServerView`	mcp, api, web
`gateway`	`gateway.virtual_server.get_mcp_policy`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`id*: string`	`VirtualServerMcpPolicyView`	mcp, api, web
`gateway`	`gateway.virtual_server.quarantine.list`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`		`ServerView[]`	cli, mcp, api
`gateway`	`gateway.virtual_server.quarantine.restore`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`id*: string`	`ServerView`	cli, mcp, api
`gateway`	`gateway.virtual_server.remove`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`id*: string`	`ServerView`	mcp, api, web
`gateway`	`gateway.virtual_server.set_mcp_policy`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`id: string` `allowed_actions: string[]`	`VirtualServerMcpPolicyView`	mcp, api, web
`gateway`	`gateway.virtual_server.set_surface`	false	false	true	lab:admin	`resource_capability`	`platform.manage`	`gateway`	`id: string` `surface: string` `enabled*: boolean`	`ServerView`	mcp, api, web
`gateway`	`help`	false	false	false		`transport`	`-`	`-`		`Catalog`	mcp, api
`gateway`	`schema`	false	false	false		`transport`	`-`	`-`	`action*: string`	`Schema`	mcp, api, web
`jobs`	`help`	true	false	false		`transport`	`-`	`-`		`HelpPayload`	mcp, api
`jobs`	`jobs.cancel`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`connection_id: string` `id*: string`	`IngestJob`	mcp, api, web
`jobs`	`jobs.get`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`connection_id: string` `id*: string`	`IngestJob`	mcp, api, web
`jobs`	`jobs.list`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`connection_id: string` `limit: integer`	`IngestJob[]`	mcp, api, web
`jobs`	`jobs.retry`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`connection_id: string` `id*: string`	`IngestJob`	mcp, api, web
`jobs`	`jobs.start`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`connection_id: string` `kind: string` `arguments: object` `idempotency_key: string`	`IngestJobReceipt`	mcp, api, web
`jobs`	`schema`	true	false	false		`transport`	`-`	`-`	`action*: string`	`ActionSpec`	mcp, api
`lab_admin`	`help`	false	false	false		`transport`	`-`	`-`		`Catalog`	mcp
`lab_admin`	`onboarding.audit`	false	false	false		`transport`	`-`	`-`	`services*: string[]`	`AuditReport`	mcp
`lab_admin`	`schema`	false	false	false		`transport`	`-`	`-`	`action*: string`	`Schema`	mcp
`projects`	`help`	true	false	false		`transport`	`-`	`-`		`HelpPayload`	mcp, api
`projects`	`projects.activate`	false	false	false		`resource_capability`	`scope.manage`	`project`	`team_id: string` `project_id: string`	`object`	mcp, api
`projects`	`projects.archive`	false	false	false		`resource_capability`	`scope.manage`	`project`	`team_id: string` `project_id: string`	`object`	mcp, api
`projects`	`projects.create`	false	false	false		`resource_capability`	`scope.create`	`project`	`team_id: string` `project_id: string` `name*: string`	`object`	mcp, api
`projects`	`projects.get`	false	false	false		`resource_capability`	`scope.read`	`project`	`team_id: string` `project_id: string`	`object`	mcp, api
`projects`	`projects.list`	false	false	false		`team_project_membership`	`-`	`-`		`object`	mcp, api
`projects`	`projects.update`	false	false	false		`resource_capability`	`scope.manage`	`project`	`team_id: string` `project_id: string` `name*: string`	`object`	mcp, api
`projects`	`schema`	true	false	false		`transport`	`-`	`-`	`action*: string`	`ActionSpec`	mcp, api
`server_logs`	`help`	false	false	false		`transport`	`-`	`-`		`Catalog`	mcp, api
`server_logs`	`schema`	false	false	false		`transport`	`-`	`-`	`action*: string`	`Schema`	mcp, api
`server_logs`	`server_logs.query`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`limit: integer` `level: string` `target: string` `service: string` `action: string` `kind: string` `query: string` `file: string` `max_scan_bytes: integer` `stop_after_limit: boolean` `correlated_only: boolean`	`ServerLogsQueryResult`	cli, mcp, api
`setup`	`bootstrap`	false	true	true	lab:admin	`transport_admin`	`-`	`-`		`BootstrapOutcome`	mcp, api
`setup`	`check`	false	false	false		`transport`	`-`	`-`		`SetupReport`	cli, mcp, api
`setup`	`draft.commit`	false	true	true	lab:admin	`transport_admin`	`-`	`-`	`force: boolean`	`CommitOutcome`	mcp, api, web
`setup`	`draft.discard`	false	true	true	lab:admin	`transport_admin`	`-`	`-`		`DraftDiscardOutcome`	cli, mcp, api, web
`setup`	`draft.get`	false	false	true	lab:admin	`transport_admin`	`-`	`-`		`DraftEntry[]`	mcp, api, web
`setup`	`draft.set`	false	true	true	lab:admin	`transport_admin`	`-`	`-`	`entries*: DraftEntry[]` `force: boolean`	`DraftSetOutcome`	mcp, api, web
`setup`	`finalize`	false	true	true	lab:admin	`transport_admin`	`-`	`-`	`force: boolean`	`CommitOutcome`	mcp, api, web
`setup`	`help`	false	false	false		`transport`	`-`	`-`		`Catalog`	mcp, api
`setup`	`install_plugin`	false	true	true	lab:admin	`transport_admin`	`-`	`-`	`service*: string`	`PluginMutationResult`	mcp, api, web
`setup`	`installed_plugins`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`force: boolean`	`InstalledPlugin[]`	mcp, api, web
`setup`	`plugin.install`	false	true	true	lab:admin	`transport_admin`	`-`	`-`	`service*: string`	`PluginMutationResult`	cli, mcp, api
`setup`	`plugin.uninstall`	false	true	true	lab:admin	`transport_admin`	`-`	`-`	`service*: string`	`PluginMutationResult`	cli, mcp, api
`setup`	`plugin_connectivity`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`server_url: string`	`ConnectivityOutcome`	cli, mcp, api
`setup`	`plugin_export`	false	false	true	lab:admin	`transport_admin`	`-`	`-`		`PluginExportOutcome`	cli, mcp, api
`setup`	`plugin_hook`	false	true	true	lab:admin	`transport_admin`	`-`	`-`	`repair: boolean`	`PluginHookReport`	cli, mcp, api
`setup`	`plugin_sync`	false	true	true	lab:admin	`transport_admin`	`-`	`-`		`PluginSyncOutcome`	cli, mcp, api
`setup`	`plugins.installed`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`force: boolean`	`InstalledPlugin[]`	cli, mcp, api
`setup`	`proxy.configure`	false	true	true	lab:admin	`transport_admin`	`-`	`-`	`preferences*: ProxyPreferences` `bearer_token: string` `dry_run: boolean`	`ProxySetupOutcome`	cli, mcp, api
`setup`	`repair`	false	true	true	lab:admin	`transport_admin`	`-`	`-`		`SetupReport`	cli, mcp, api
`setup`	`schema`	false	false	false		`transport`	`-`	`-`	`action*: string`	`Schema`	mcp, api, web
`setup`	`schema.get`	false	false	false		`transport`	`-`	`-`	`services: string[]`	`ServiceSchemaMap`	mcp, api, web
`setup`	`services.status`	false	false	true	lab:admin	`transport_admin`	`-`	`-`		`ServiceStatus[]`	cli, mcp, api
`setup`	`services_status`	false	false	true	lab:admin	`transport_admin`	`-`	`-`		`ServiceStatus[]`	mcp, api, web
`setup`	`settings.advanced_state`	false	false	true	lab:admin	`transport_admin`	`-`	`-`		`SettingsState`	mcp, api
`setup`	`settings.config.update`	false	true	true	lab:admin	`transport_admin`	`-`	`-`	`entries*: SettingsUpdateEntry[]`	`SettingsMutationOutcome`	mcp, api, web
`setup`	`settings.env.update`	false	true	true	lab:admin	`transport_admin`	`-`	`-`	`entries*: SettingsUpdateEntry[]`	`SettingsState`	mcp, api, web
`setup`	`settings.env_schema`	false	false	false		`transport`	`-`	`-`		`EnvSettingSpec[]`	mcp, api, web
`setup`	`settings.schema`	false	false	false		`transport`	`-`	`-`		`SettingsSchema`	mcp, api, web
`setup`	`settings.state`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`section: string`	`SettingsState`	mcp, api, web
`setup`	`settings.update`	false	true	true	lab:admin	`transport_admin`	`-`	`-`	`services.built_in_upstream_apis_enabled*: boolean`	`SettingsState`	mcp, api, web
`setup`	`state`	false	false	true	lab:admin	`transport_admin`	`-`	`-`		`SetupSnapshot`	cli, mcp, api, web
`setup`	`uninstall_plugin`	false	true	true	lab:admin	`transport_admin`	`-`	`-`	`service*: string`	`PluginMutationResult`	mcp, api, web
`snippets`	`help`	false	false	false		`transport`	`-`	`-`		`Catalog`	mcp, api
`snippets`	`schema`	false	false	false		`transport`	`-`	`-`	`action*: string`	`Schema`	mcp, api
`snippets`	`snippets.create`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`name: string` `body: string` `description: string` `force: boolean`	`SnippetInfo`	cli, mcp, api
`snippets`	`snippets.exec`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`name*: string` `params: object`	`CodeModeExecutionResponse`	cli, mcp, api
`snippets`	`snippets.get`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`name*: string`	`ResolvedSnippet`	cli, mcp, api
`snippets`	`snippets.list`	false	false	false		`transport`	`-`	`-`		`SnippetList`	cli, mcp, api
`snippets`	`snippets.promote`	false	true	true	lab:admin	`transport_admin`	`-`	`-`	`execution_id: string` `name: string` `description: string` `force: boolean` `shadow_builtin: boolean`	`SnippetPromotionResult`	mcp, api
`snippets`	`snippets.remove`	false	true	true	lab:admin	`transport_admin`	`-`	`-`	`name*: string`	`SnippetRemoveResult`	cli, mcp, api
`snippets`	`snippets.test`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`name: string` `params: object` `all: boolean`	`SnippetTestResult`	cli, mcp, api
`snippets`	`snippets.validate`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`name: string` `body: string`	`SnippetValidation`	cli, mcp, api
`sources`	`help`	true	false	false		`transport`	`-`	`-`		`HelpPayload`	mcp, api
`sources`	`schema`	true	false	false		`transport`	`-`	`-`	`action*: string`	`ActionSpec`	mcp, api
`sources`	`sources.configure`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`connection_id: string` `id*: string` `enabled: boolean` `interval_seconds: integer`	`Source`	mcp, api, web
`sources`	`sources.delete`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`connection_id: string` `id*: string`	`DeleteReceipt`	mcp, api
`sources`	`sources.list`	false	false	false		`transport`	`-`	`-`	`connection_id: string`	`Source[]`	mcp, api, web
`sources`	`sources.refresh`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`connection_id: string` `id*: string`	`SourceRefreshReceipt`	mcp, api, web
`stash`	`help`	true	false	false		`transport`	`-`	`-`		`HelpPayload`	mcp, api
`stash`	`schema`	true	false	false		`transport`	`-`	`-`	`action*: string`	`ActionSpec`	mcp, api
`stash`	`stash.delete`	false	true	false		`resource_capability`	`scope.delete`	`stash`	`file_id*: string` `owner_kind: personal\|team` `owner_id: string`	`Deleted`	mcp, api, web
`stash`	`stash.grants.create`	false	false	false		`resource_capability`	`scope.manage`	`stash`	`file_id: string` `grantee_principal_id: string` `owner_kind: personal\|team` `owner_id: string`	`StashGrant`	mcp, api, web
`stash`	`stash.grants.list`	false	false	false		`resource_capability`	`scope.manage`	`stash`	`file_id*: string` `cursor: string` `limit: integer` `owner_kind: personal\|team` `owner_id: string`	`GrantPage`	mcp, api, web
`stash`	`stash.grants.revoke`	false	false	false		`resource_capability`	`scope.manage`	`stash`	`file_id: string` `grant_id: string` `owner_kind: personal\|team` `owner_id: string`	`Revoked`	mcp, api, web
`stash`	`stash.list`	false	false	false		`resource_capability`	`scope.read`	`stash`	`cursor: string` `limit: integer` `owner_kind: personal\|team` `owner_id: string`	`FilePage`	mcp, api, web
`stash`	`stash.metadata`	false	false	false		`resource_capability`	`scope.read`	`stash`	`file_id*: string` `owner_kind: personal\|team` `owner_id: string`	`StashFile`	mcp, api
`stash`	`stash.rename`	false	false	false		`resource_capability`	`scope.manage`	`stash`	`file_id: string` `display_name: string` `owner_kind: personal\|team` `owner_id: string`	`StashFile`	mcp, api, web
`stash`	`stash.search`	false	false	false		`resource_capability`	`scope.read`	`stash`	`query*: string` `cursor: string` `limit: integer` `owner_kind: personal\|team` `owner_id: string`	`FilePage`	mcp, api, web
`stash`	`stash.stats`	false	false	false		`resource_capability`	`scope.read`	`stash`	`owner_kind: personal\|team` `owner_id: string`	`StashStats`	mcp, api, web
`tasks`	`help`	true	false	false		`transport`	`-`	`-`		`HelpPayload`	mcp, api
`tasks`	`schema`	true	false	false		`transport`	`-`	`-`	`action*: string`	`ActionSpec`	mcp, api
`tasks`	`tasks.cancel`	false	false	false		`resource_capability`	`scope.operate`	`task`	`task_id*: string`	`object`	mcp, api
`tasks`	`tasks.create`	false	false	false		`resource_capability`	`scope.create`	`task`	`task_id: string` `idempotency_key: string` `owner_kind: string` `owner_id: string` `agent_id: string` `input_digest: string`	`object`	mcp, api
`tasks`	`tasks.get`	false	false	false		`resource_capability`	`scope.read`	`task`	`task_id*: string`	`object`	mcp, api
`tasks`	`tasks.list`	false	false	false		`resource_capability`	`scope.read`	`task`	`cursor: string` `limit: string`	`object`	mcp, api
`tasks`	`tasks.queue`	false	false	false		`resource_capability`	`scope.operate`	`task`	`task_id*: string`	`object`	mcp, api
`tasks`	`tasks.result`	false	false	false		`resource_capability`	`scope.read`	`task`	`task_id*: string`	`object`	mcp, api
`uploads`	`help`	true	false	false		`transport`	`-`	`-`		`HelpPayload`	mcp, api
`uploads`	`schema`	true	false	false		`transport`	`-`	`-`	`action*: string`	`ActionSpec`	mcp, api
`uploads`	`uploads.create`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`connection_id: string` `filename*: string`	`Upload`	mcp, api, web
`uploads`	`uploads.delete`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`connection_id: string` `id*: string`	`DeleteReceipt`	mcp, api
`uploads`	`uploads.get`	false	false	true	lab:admin	`transport_admin`	`-`	`-`	`connection_id: string` `id*: string`	`Upload`	mcp, api, web