Tools and extensions

The agent’s tools, and the hooks, MCP servers, plugins, skills and forged tools of a project, with their trust. Paths are relative to /api/v1.

GET /tools

The tools an agent is offered before any session exists (per-tool permissions are null until a session chooses them).

Answers The JSON envelope.

Errors2

Code	Status	Meaning
QUERY_INVALID	400	The request is not valid: a query parameter or a body field is missing, unknown or malformed.
REPORT_UNAVAILABLE	404	The report or service asked for is not available on this server yet.

Any operation can also answer the common errors.

GET /sessions/{sessionId}/hooks

The hooks the session’s project declares, with their real trust state.

Path

sessionId

The session.

Answers The JSON envelope.

Errors2

Code	Status	Meaning
NOT_FOUND	404	Nothing answers at this address, or the resource it names does not exist.
QUERY_INVALID	400	The request is not valid: a query parameter or a body field is missing, unknown or malformed.

Any operation can also answer the common errors.

GET /sessions/{sessionId}/tools

The tools actually offered to the model in this session, with their permissions.

Path

sessionId

The session.

Answers The JSON envelope.

Errors2

Code	Status	Meaning
NOT_FOUND	404	Nothing answers at this address, or the resource it names does not exist.
QUERY_INVALID	400	The request is not valid: a query parameter or a body field is missing, unknown or malformed.

Any operation can also answer the common errors.

GET /sessions/{sessionId}/mcp

The MCP servers the session’s project declares, with their real trust state.

Path

sessionId

The session.

Answers The JSON envelope.

Errors2

Code	Status	Meaning
NOT_FOUND	404	Nothing answers at this address, or the resource it names does not exist.
QUERY_INVALID	400	The request is not valid: a query parameter or a body field is missing, unknown or malformed.

Any operation can also answer the common errors.

GET /sessions/{sessionId}/skills

The skills the session’s project declares.

Path

sessionId

The session.

Answers The JSON envelope.

Errors2

Code	Status	Meaning
NOT_FOUND	404	Nothing answers at this address, or the resource it names does not exist.
QUERY_INVALID	400	The request is not valid: a query parameter or a body field is missing, unknown or malformed.

Any operation can also answer the common errors.

GET /sessions/{sessionId}/plugins

The plugins the session’s project declares, with their real trust state (a plugin runs code; a skill does not).

Path

sessionId

The session.

Answers The JSON envelope.

Errors2

Code	Status	Meaning
NOT_FOUND	404	Nothing answers at this address, or the resource it names does not exist.
QUERY_INVALID	400	The request is not valid: a query parameter or a body field is missing, unknown or malformed.

Any operation can also answer the common errors.

GET /sessions/{sessionId}/tool-forge

The forged tools installed (tools the agent wrote and you enabled), global to you.

Path

sessionId

The session.

Answers The JSON envelope.

Errors2

Code	Status	Meaning
NOT_FOUND	404	Nothing answers at this address, or the resource it names does not exist.
QUERY_INVALID	400	The request is not valid: a query parameter or a body field is missing, unknown or malformed.

Any operation can also answer the common errors.

POST /sessions/{sessionId}/mcp-elicitation

Not yet described in this reference: the parameters, fields and errors below are read from the release.

Path

sessionId

The session.

Body

requestId

Not yet described.

risposta

Not yet described.

Answers The JSON envelope.

Errors2

Code	Status	Meaning
NOT_FOUND	404	Nothing answers at this address, or the resource it names does not exist.
QUERY_INVALID	400	The request is not valid: a query parameter or a body field is missing, unknown or malformed.

Any operation can also answer the common errors.

POST /sessions/{sessionId}/hooks/{hookId}/trust

Trust a hook of the project: the only way it becomes able to run. The server reads its fingerprint from disk; nothing comes from the client.

Path

sessionId

The session.

hookId

The hook.

Body

None: the body is empty.

Answers The JSON envelope.

Errors2

Code	Status	Meaning
NOT_FOUND	404	Nothing answers at this address, or the resource it names does not exist.
QUERY_INVALID	400	The request is not valid: a query parameter or a body field is missing, unknown or malformed.

Any operation can also answer the common errors.

POST /sessions/{sessionId}/tool-forge/{toolId}/enable

Enable or disable a forged tool.

Path

sessionId

The session.

toolId

The forged tool.

Body

abilitatorequired

true or false.

Answers The JSON envelope.

Errors2

Code	Status	Meaning
NOT_FOUND	404	Nothing answers at this address, or the resource it names does not exist.
QUERY_INVALID	400	The request is not valid: a query parameter or a body field is missing, unknown or malformed.

Any operation can also answer the common errors.

POST /sessions/{sessionId}/mcp/{serverId}/trust

Trust an MCP server of the project (its fingerprint is read from disk, as for hooks).

Path

sessionId

The session.

serverId

The MCP server.

Body

None: the body is empty.

Answers The JSON envelope.

Errors2

Code	Status	Meaning
NOT_FOUND	404	Nothing answers at this address, or the resource it names does not exist.
QUERY_INVALID	400	The request is not valid: a query parameter or a body field is missing, unknown or malformed.

Any operation can also answer the common errors.

POST /sessions/{sessionId}/plugins/{pluginId}/trust

Trust a plugin of the project (its fingerprint is read from disk, as for hooks).

Path

sessionId

The session.

pluginId

The plugin.

Body

None: the body is empty.

Answers The JSON envelope.

Errors2

Code	Status	Meaning
NOT_FOUND	404	Nothing answers at this address, or the resource it names does not exist.
QUERY_INVALID	400	The request is not valid: a query parameter or a body field is missing, unknown or malformed.

Any operation can also answer the common errors.