Run AI agent tasks in isolated sandboxes with a cost cap, saved workflows and scoped connections.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
An Ephemeral API key as a bearer token, for clients that do not sign in with OAuth (those need only the URL). Create one under Keys in the dashboard; use a member key for agents.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Cancel a run that has not finished. Work already done is billed. Cancelling a finished run changes nothing.
The run's id, as returned by create_run.
The server marks this tool as destructive. Running it may delete or overwrite data on the server or in any account you connected with your headers.
Cancel a run that has not finished. Work already done is billed. Cancelling a finished run changes nothing.
| Argument | Type | Description |
|---|---|---|
| id* | string | The run's id, as returned by create_run. |
{
"type": "object",
"required": [
"id"
],
"properties": {
"id": {
"type": "string",
"description": "The run's id, as returned by create_run."
}
},
"additionalProperties": false
}Start an AI agent run in an isolated sandbox and return the run (status queued) at once. Give a prompt, or the name of a saved workflow. Poll with get_run or block with wait_for_run for the result. Every run has a cost cap (max_cost_micros) and a timeout, and is billed to the organization of the API key. Connections must already be saved in the organization; reference them by name. Use idempotency_key to make a retry safe. A run's cost_micros is provisional (usually above the final cost) until cost_final is true; see get_run. On the hosted service a run costs a run fee once its worker starts, compute per second, model calls at the provider's price plus a percentage, and web requests and searches at flat prices; `GET /v1/me` reports the rates.
| Argument | Type | Description |
|---|---|---|
| web | any | Web access: true, false, or an object limiting it. |
| files | array | Files placed in the sandbox: inline content, or a file saved in the organization. |
| input | any | Any JSON the agent receives as its input. If the workflow has an input_schema, it must match. |
| model | string | A model id from list_models. Omit for the default. |
| shell | boolean | Whether the agent may run shell commands in its sandbox. |
| prompt | string | What the agent should do. Required unless workflow is set. |
| workflow | string | Name of a saved workflow to run instead of a prompt (see list_workflows). |
| connections | object | Saved connections the agent may use, keyed by the name the agent sees. Each refers to a connection saved in the organization and can only narrow it. |
| description | string | What the workflow does and what input it expects, in a sentence or two, for people and agents. At most 500 characters. |
| input_schema | object | A JSON Schema (draft 2020-12 or 7, at most 32 KiB, no references to other documents) that this run's input must match. A run whose input does not match is refused with the path and the reason, such as "input.city: required". |
Start a saved workflow on a timetable. Needs an administrator key. Each start is a run billed to the organization, with the cost cap given here (or the default). Use preview_schedule first to check the timetable. A schedule pauses itself after repeated failed starts. An organization can have 50 schedules.
| Argument | Type | Description |
|---|---|---|
| cron* | string | Five fields (minute hour day-of-month month day-of-week), such as "0 9 * * 1-5", or a descriptor such as @daily or @every 15m. At most once a minute. |
| name | string | A label for the schedule. |
| input | any | Any JSON the agent receives as its input on every start (maximum 1 MiB). |
| enabled | boolean | Whether the schedule starts runs (default true). |
| timezone | string | IANA time zone name, such as Europe/Madrid (default UTC). |
| workflow* | string | Name of the saved workflow to run (see list_workflows). |
| max_cost_micros | integer | Cost cap of each run, in millionths of a dollar. |
| skip_if_running | boolean | Skip a start while the previous run is still going (default true). |
Permanently delete a schedule. Needs an administrator key. Runs it already started are not affected. To stop it for a while, pause it with update_schedule instead.
| Argument | Type | Description |
|---|---|---|
| id* | string | The schedule's id (sch_…), as returned by create_schedule or list_schedules. |
{
"type": "object",
"required": [
"id"
],
"properties": {
"id": {
"type": "string",
"description": "The schedule's id (sch_…), as returned by create_schedule or list_schedules."
}
},
"additionalProperties": false
}Permanently delete a saved workflow. Runs already started are not affected; schedules that use it stop being able to start runs until it is saved again.
| Argument | Type | Description |
|---|---|---|
| name* | string | The workflow's name. |
{
"type": "object",
"required": [
"name"
],
"properties": {
"name": {
"type": "string",
"description": "The workflow's name."
}
},
"additionalProperties": false
}Read a run: status, output, error, cost and billing_pending. COST: while billing_pending is true (or the run is still going), cost_micros is PROVISIONAL and usually higher than the final cost; the result then has cost_final:false and a cost_note. Quote a cost only when cost_final is true (the run is finished and billing_pending is false); otherwise call get_run again in a few seconds. For a zero-data-retention run the first read of a finished run returns the output and then deletes it. On the hosted service a run costs a run fee once its worker starts, compute per second, model calls at the provider's price plus a percentage, and web requests and searches at flat prices; `GET /v1/me` reports the rates.
| Argument | Type | Description |
|---|---|---|
| id* | string | The run's id, as returned by create_run. |
{
"type": "object",
"required": [
"id"
],
"properties": {
"id": {
"type": "string",
"description": "The run's id, as returned by create_run."
}
},
"additionalProperties": false
}Read a schedule: timetable, time zone, input, cost cap, whether it is enabled, its next start and the outcome of its last start.
| Argument | Type | Description |
|---|---|---|
| id* | string | The schedule's id (sch_…), as returned by create_schedule or list_schedules. |
{
"type": "object",
"required": [
"id"
],
"properties": {
"id": {
"type": "string",
"description": "The schedule's id (sch_…), as returned by create_schedule or list_schedules."
}
},
"additionalProperties": false
}Read a saved workflow's definition: description, prompt, model, files, connections, limits and its input_schema and output_schema. Credentials are never included.
| Argument | Type | Description |
|---|---|---|
| name* | string | The workflow's name. |
{
"type": "object",
"required": [
"name"
],
"properties": {
"name": {
"type": "string",
"description": "The workflow's name."
}
},
"additionalProperties": false
}The organization's saved connections that a run may use, with type, allowed methods and tools. No URLs or secrets are returned. Reference one in create_run by name.
No arguments.
{
"type": "object",
"properties": {},
"additionalProperties": false
}List the files saved in the organization: id, name, size, content type and creation time. Reference a file by id in a run's or workflow's files. Read-only; upload and delete files through the REST API.
No arguments.
{
"type": "object",
"properties": {},
"additionalProperties": false
}Find models. Returns a compact list (id, name, context_length, input and output USD per million tokens, zero_data_retention where known), the total count and the default model. There are hundreds of models, so filter with query (case-insensitive part of the id or name, e.g. "claude", "gpt") and read the hint when the list is truncated (default 25, at most 100). Pass model for one model's full details. Use an id from it as create_run's model.
| Argument | Type | Description |
|---|---|---|
| id | string | Same as model. |
| limit | integer | How many models to return (default 25). |
| model | string | A model id: return the full details of exactly that model. |
| query | string | Case-insensitive text to find in the model id or name, e.g. "claude". |
| zero_data_retention | boolean | true: only models that have a zero-data-retention endpoint. |
{
"type": "object",
"properties": {
"id": {
"type": "string",
"description": "Same as model."
},
"limit": {
"type": "integer",
"maximum": 100,
"minimum": 1,
"description": "How many models to return (default 25)."
},
"model": {
"type": "string",
"description": "A model id: return the full details of exactly that model."
},
"query": {
"type": "string",
"description": "Case-insensitive text to find in the model id or name, e.g. \"claude\"."
},
"zero_data_retention": {
"type": "boolean",
"description": "true: only models that have a zero-data-retention endpoint."
}
},
"additionalProperties": false
}List the organization's runs, newest first, with a cursor for the next page. Each run has cost_final: when false, cost_micros is provisional (usually above the final cost) and billing is still settling.
| Argument | Type | Description |
|---|---|---|
| limit | integer | Page size (default 20). |
| cursor | string | next_cursor from the previous page. |
| status | string |
{
"type": "object",
"properties": {
"limit": {
"type": "integer",
"maximum": 100,
"minimum": 1,
"description": "Page size (default 20)."
},
"cursor": {
"type": "string",
"description": "next_cursor from the previous page."
},
"status": {
"enum": [
"queued",
"reserving",
"starting",
"running",
"succeeded",
"failed",
"cancelled",
"interrupted",
"timed_out"
],
"type": "string"
}
},
"additionalProperties": false
}List the organization's schedules: each starts a saved workflow on a cron timetable. Includes the next start, the last run and the last error.
| Argument | Type | Description |
|---|---|---|
| workflow | string | Only the schedules of this workflow. |
{
"type": "object",
"properties": {
"workflow": {
"type": "string",
"description": "Only the schedules of this workflow."
}
},
"additionalProperties": false
}List the organization's saved workflows (reusable run definitions). Each entry has the workflow's name and, when set, its description, input_schema (the shape of the input create_run expects) and output_schema (the shape of the JSON it returns), so you can call a workflow without reading its prompt. Run one with create_run and its name.
No arguments.
{
"type": "object",
"properties": {},
"additionalProperties": false
}Check a cron expression and time zone and return the next five start times (UTC), without saving anything.
| Argument | Type | Description |
|---|---|---|
| cron* | string | Five fields (minute hour day-of-month month day-of-week) or a descriptor such as @daily or @every 15m. |
| timezone | string | IANA time zone name, such as Europe/Madrid (default UTC). |
{
"type": "object",
"required": [
"cron"
],
"properties": {
"cron": {
"type": "string",
"description": "Five fields (minute hour day-of-month month day-of-week) or a descriptor such as @daily or @every 15m."
},
"timezone": {
"type": "string",
"description": "IANA time zone name, such as Europe/Madrid (default UTC)."
}
},
"additionalProperties": false
}Start the schedule's workflow now, outside its timetable, with the schedule's input and cost cap. Returns the queued run (follow it with wait_for_run); each call starts another run and is billed like any run.
| Argument | Type | Description |
|---|---|---|
| id* | string | The schedule's id (sch_…), as returned by create_schedule or list_schedules. |
{
"type": "object",
"required": [
"id"
],
"properties": {
"id": {
"type": "string",
"description": "The schedule's id (sch_…), as returned by create_schedule or list_schedules."
}
},
"additionalProperties": false
}Create a workflow, or replace the one with this name (saving the same definition again changes nothing more). A workflow is a reusable run definition: start it with create_run and its name, or on a timetable with create_schedule. Connections must already be saved in the organization; reference them by name, never with a URL or a credential. Read the current definition with get_workflow first when you change part of it, because saving replaces the whole definition. Give it a description, and an input_schema and output_schema (JSON Schemas) so that agents can discover and call it: a run's input is checked against input_schema before it starts, and its output must be JSON matching output_schema or the run fails.
| Argument | Type | Description |
|---|---|---|
| web | any | Web access: true, false, or an object limiting it. |
| name* | string | The workflow's name: letters, digits, dots, dashes and underscores. |
| files | array | Files placed in the sandbox (at most 32): inline content, or a file saved in the organization. |
| model | string | A model id from list_models. Omit for the default. |
| shell | boolean | Whether the agent may run shell commands in its sandbox. |
| prompt* | string | What the agent should do (maximum 128 KiB). |
| connections | object |
Change a schedule; only the fields you give change. Needs an administrator key. Set enabled to false to pause it and to true to resume it (resuming clears the failures that paused it). A new timetable counts from now.
| Argument | Type | Description |
|---|---|---|
| id* | string | The schedule's id (sch_…), as returned by create_schedule or list_schedules. |
| cron | string | Five fields (minute hour day-of-month month day-of-week) or a descriptor such as @daily or @every 15m. |
| name | string | A label for the schedule. |
| input | any | Any JSON the agent receives as its input on every start (maximum 1 MiB). |
| enabled | boolean | false pauses the schedule, true resumes it. |
| timezone | string | IANA time zone name, such as Europe/Madrid. |
| workflow | string | Name of the saved workflow to run. |
| max_cost_micros | integer | Cost cap of each run, in millionths of a dollar. |
| skip_if_running | boolean | Skip a start while the previous run is still going. |
Wait until a run finishes (succeeded, failed, cancelled, interrupted or timed_out) or the wait ends, then return the run. After the run finishes it keeps waiting, within the same time, until billing has settled (billing_pending false, normally a few seconds to about 20), so the cost is final. Waits at most 60 seconds; if the run is still going, the returned status says so and you can call it again. COST: if the result has cost_final:false, cost_micros is PROVISIONAL and usually higher than the final cost; do not quote it, call get_run again shortly. Quote the cost only when cost_final is true.
| Argument | Type | Description |
|---|---|---|
| id* | string | The run's id, as returned by create_run. |
| timeout_seconds | integer | How long to wait, 1 to 60 (default 30). |
{
"type": "object",
"required": [
"id"
],
"properties": {
"id": {
"type": "string",
"description": "The run's id, as returned by create_run."
},
"timeout_seconds": {
"type": "integer",
"maximum": 60,
"minimum": 1,
"description": "How long to wait, 1 to 60 (default 30)."
}
},
"additionalProperties": false
}| output_schema |
| object |
| A JSON Schema (draft 2020-12 or 7, at most 32 KiB, no references to other documents) that this run's output must match. The agent is told the schema and asked to reply with JSON only; the output is then checked, and a run whose output does not match fails with the reason. |
| idempotency_key | string | A retry with the same key returns the original run instead of starting another. |
| max_cost_micros | integer | Cost cap in millionths of a dollar. The run stops at the cap. |
| timeout_seconds | integer | Wall-clock limit for the run. |
| zero_data_retention | boolean | Record nothing of the run's content; the output is kept only briefly and released on first retrieval. |
{
"type": "object",
"properties": {
"web": {
"oneOf": [
{
"type": "boolean"
},
{
"type": "object",
"properties": {
"allow": {
"type": "array",
"items": {
"type": "string"
},
"description": "Domains the agent may fetch, such as \"api.github.com\" or \"*.example.com\". Empty allows every public domain."
},
"search": {
"type": "boolean",
"description": "Whether web search is available (default true)."
}
},
"additionalProperties": false
}
],
"description": "Web access: true, false, or an object limiting it."
},
"files": {
"type": "array",
"items": {
"type": "object",
"required": [
"path"
],
"properties": {
"file": {
"type": "string",
"description": "Id of a saved file (instead of content)."
},
"path": {
"type": "string",
"description": "Where the file appears in the sandbox."
},
"content": {
"type": "string",
"description": "Inline text content."
}
},
"additionalProperties": false
},
"description": "Files placed in the sandbox: inline content, or a file saved in the organization."
},
"input": {
"description": "Any JSON the agent receives as its input. If the workflow has an input_schema, it must match."
},
"model": {
"type": "string",
"description": "A model id from list_models. Omit for the default."
},
"shell": {
"type": "boolean",
"description": "Whether the agent may run shell commands in its sandbox."
},
"prompt": {
"type": "string",
"description": "What the agent should do. Required unless workflow is set."
},
"workflow": {
"type": "string",
"description": "Name of a saved workflow to run instead of a prompt (see list_workflows)."
},
"connections": {
"type": "object",
"description": "Saved connections the agent may use, keyed by the name the agent sees. Each refers to a connection saved in the organization and can only narrow it.",
"additionalProperties": {
"type": "object",
"required": [
"ref"
],
"properties": {
"ref": {
"type": "string",
"description": "Name of the saved connection (see list_connections)."
},
"allowed_tools": {
"type": "array",
"items": {
"type": "string"
},
"description": "Tool names allowed on an MCP connection."
},
"allowed_methods": {
"type": "array",
"items": {
"type": "string"
},
"description": "HTTP methods allowed, for example [\"GET\"] for read-only access."
}
},
"additionalProperties": false
}
},
"description": {
"type": "string",
"maxLength": 500,
"description": "What the workflow does and what input it expects, in a sentence or two, for people and agents. At most 500 characters."
},
"input_schema": {
"type": "object",
"description": "A JSON Schema (draft 2020-12 or 7, at most 32 KiB, no references to other documents) that this run's input must match. A run whose input does not match is refused with the path and the reason, such as \"input.city: required\"."
},
"output_schema": {
"type": "object",
"description": "A JSON Schema (draft 2020-12 or 7, at most 32 KiB, no references to other documents) that this run's output must match. The agent is told the schema and asked to reply with JSON only; the output is then checked, and a run whose output does not match fails with the reason."
},
"idempotency_key": {
"type": "string",
"description": "A retry with the same key returns the original run instead of starting another."
},
"max_cost_micros": {
"type": "integer",
"minimum": 1,
"description": "Cost cap in millionths of a dollar. The run stops at the cap."
},
"timeout_seconds": {
"type": "integer",
"minimum": 1,
"description": "Wall-clock limit for the run."
},
"zero_data_retention": {
"type": "boolean",
"description": "Record nothing of the run's content; the output is kept only briefly and released on first retrieval."
}
},
"additionalProperties": false
}{
"type": "object",
"required": [
"workflow",
"cron"
],
"properties": {
"cron": {
"type": "string",
"description": "Five fields (minute hour day-of-month month day-of-week), such as \"0 9 * * 1-5\", or a descriptor such as @daily or @every 15m. At most once a minute."
},
"name": {
"type": "string",
"maxLength": 128,
"description": "A label for the schedule."
},
"input": {
"description": "Any JSON the agent receives as its input on every start (maximum 1 MiB)."
},
"enabled": {
"type": "boolean",
"description": "Whether the schedule starts runs (default true)."
},
"timezone": {
"type": "string",
"description": "IANA time zone name, such as Europe/Madrid (default UTC)."
},
"workflow": {
"type": "string",
"description": "Name of the saved workflow to run (see list_workflows)."
},
"max_cost_micros": {
"type": "integer",
"maximum": 100000000,
"minimum": 1,
"description": "Cost cap of each run, in millionths of a dollar."
},
"skip_if_running": {
"type": "boolean",
"description": "Skip a start while the previous run is still going (default true)."
}
},
"additionalProperties": false
}| Saved connections the agent may use (at most 16), keyed by the name the agent sees. Each refers to a connection saved in the organization and can only narrow it. |
| description | string | What the workflow does and what input it expects, in a sentence or two, for people and agents. At most 500 characters. |
| input_schema | object | A JSON Schema (draft 2020-12 or 7, at most 32 KiB, no references to other documents) that each run of this workflow's input must match. A run whose input does not match is refused with the path and the reason, such as "input.city: required". |
| output_schema | object | A JSON Schema (draft 2020-12 or 7, at most 32 KiB, no references to other documents) that each run of this workflow's output must match. The agent is told the schema and asked to reply with JSON only; the output is then checked, and a run whose output does not match fails with the reason. |
| timeout_seconds | integer | Wall-clock limit for each run. |
| zero_data_retention | boolean | Record nothing of the runs' content; the output is kept only briefly and released on first retrieval. |
{
"type": "object",
"required": [
"name",
"prompt"
],
"properties": {
"web": {
"oneOf": [
{
"type": "boolean"
},
{
"type": "object",
"properties": {
"allow": {
"type": "array",
"items": {
"type": "string"
},
"description": "Domains the agent may fetch, such as \"api.github.com\" or \"*.example.com\". Empty allows every public domain."
},
"search": {
"type": "boolean",
"description": "Whether web search is available (default true)."
}
},
"additionalProperties": false
}
],
"description": "Web access: true, false, or an object limiting it."
},
"name": {
"type": "string",
"description": "The workflow's name: letters, digits, dots, dashes and underscores."
},
"files": {
"type": "array",
"items": {
"type": "object",
"required": [
"path"
],
"properties": {
"file": {
"type": "string",
"description": "Id of a saved file (see list_files), instead of content."
},
"path": {
"type": "string",
"description": "Where the file appears in the sandbox, a relative path."
},
"content": {
"type": "string",
"description": "Inline text content (maximum 1 MiB)."
}
},
"additionalProperties": false
},
"description": "Files placed in the sandbox (at most 32): inline content, or a file saved in the organization."
},
"model": {
"type": "string",
"description": "A model id from list_models. Omit for the default."
},
"shell": {
"type": "boolean",
"description": "Whether the agent may run shell commands in its sandbox."
},
"prompt": {
"type": "string",
"description": "What the agent should do (maximum 128 KiB)."
},
"connections": {
"type": "object",
"description": "Saved connections the agent may use (at most 16), keyed by the name the agent sees. Each refers to a connection saved in the organization and can only narrow it.",
"additionalProperties": {
"type": "object",
"required": [
"ref"
],
"properties": {
"ref": {
"type": "string",
"description": "Name of the saved connection (see list_connections)."
},
"allowed_tools": {
"type": "array",
"items": {
"type": "string"
},
"description": "Tool names allowed on an MCP connection."
},
"allowed_methods": {
"type": "array",
"items": {
"type": "string"
},
"description": "HTTP methods allowed, for example [\"GET\"] for read-only access."
}
},
"additionalProperties": false
}
},
"description": {
"type": "string",
"maxLength": 500,
"description": "What the workflow does and what input it expects, in a sentence or two, for people and agents. At most 500 characters."
},
"input_schema": {
"type": "object",
"description": "A JSON Schema (draft 2020-12 or 7, at most 32 KiB, no references to other documents) that each run of this workflow's input must match. A run whose input does not match is refused with the path and the reason, such as \"input.city: required\"."
},
"output_schema": {
"type": "object",
"description": "A JSON Schema (draft 2020-12 or 7, at most 32 KiB, no references to other documents) that each run of this workflow's output must match. The agent is told the schema and asked to reply with JSON only; the output is then checked, and a run whose output does not match fails with the reason."
},
"timeout_seconds": {
"type": "integer",
"maximum": 3600,
"minimum": 1,
"description": "Wall-clock limit for each run."
},
"zero_data_retention": {
"type": "boolean",
"description": "Record nothing of the runs' content; the output is kept only briefly and released on first retrieval."
}
},
"additionalProperties": false
}{
"type": "object",
"required": [
"id"
],
"properties": {
"id": {
"type": "string",
"description": "The schedule's id (sch_…), as returned by create_schedule or list_schedules."
},
"cron": {
"type": "string",
"description": "Five fields (minute hour day-of-month month day-of-week) or a descriptor such as @daily or @every 15m."
},
"name": {
"type": "string",
"maxLength": 128,
"description": "A label for the schedule."
},
"input": {
"description": "Any JSON the agent receives as its input on every start (maximum 1 MiB)."
},
"enabled": {
"type": "boolean",
"description": "false pauses the schedule, true resumes it."
},
"timezone": {
"type": "string",
"description": "IANA time zone name, such as Europe/Madrid."
},
"workflow": {
"type": "string",
"description": "Name of the saved workflow to run."
},
"max_cost_micros": {
"type": "integer",
"maximum": 100000000,
"minimum": 1,
"description": "Cost cap of each run, in millionths of a dollar."
},
"skip_if_running": {
"type": "boolean",
"description": "Skip a start while the previous run is still going."
}
},
"additionalProperties": false
}