Capability namespace cap.a_customer.
writes- Create a customer, creates, create1 vendors
reads- Get a customer, reads, get1 vendors
Capability namespace cap.a_subscription.
reads- Get a subscription, reads, get1 vendors
Capability namespace cap.an_invoice.
writes- Refund an invoice, creates, refund1 vendors
reads- Get an invoice, reads, get1 vendors
Capability namespace cap.api_key.
writes- Delete API key, deletes, delete1 vendors
reads- Get API key, reads, get1 vendors
Capability namespace cap.app.
writes- Create app, creates, create1 vendors
- Update app, updates, update1 vendors
- Delete app, deletes, delete1 vendors
reads- Get app, reads, get1 vendors
Capability namespace cap.board.
writes- Create board, creates, create1 vendors
- Delete board, deletes, delete1 vendors
reads- Get board, reads, get1 vendors
Capability namespace cap.browser.
writes- Create browser session, creates, create3 vendors
- Close browser session, deletes, close3 vendors
- Act in browser, acts outside the vendor, act2 vendors, evidence ceiling untrusted
- Navigate browser, acts outside the vendor, navigate2 vendors, evidence ceiling untrusted
reads- Extract from browser, reads, extract2 vendors, evidence ceiling untrusted
Capability namespace cap.build.
writes- Create build, creates, create1 vendors
- Cancel build, updates, cancel1 vendors
reads- Get build, reads, get1 vendors
Capability namespace cap.call.
writes- Create voice call, acts outside the vendor, create1 vendors, evidence ceiling untrusted
Capability namespace cap.cluster.
writes- Create cluster, creates, create1 vendors
- Delete cluster, deletes, delete1 vendors
reads- Get cluster, reads, get1 vendors
Capability namespace cap.cohort.
writes- Create cohort, creates, create1 vendors
- Update cohort, updates, update1 vendors
reads- Get cohort, reads, get1 vendors
Capability namespace cap.commit.
writes- Create commit, creates, create1 vendors
Capability namespace cap.company.
reads- Enrich company, reads, enrich3 vendors, evidence ceiling untrusted
Capability namespace cap.connector.
writes- Delete connector, deletes, delete1 vendors
Container image
2 of 2 write
Capability namespace cap.container_image.
writes- Push container image, creates, push1 vendors, evidence ceiling untrusted
- Delete container image, deletes, delete2 vendors
Capability namespace cap.content.
reads- Get content, reads, get1 vendors
Capability namespace cap.dashboard.
writes- Create dashboard, creates, create1 vendors
- Delete dashboard, deletes, delete1 vendors
reads- Get dashboard, reads, get1 vendors
Capability namespace cap.database.
writes- Delete database, deletes, delete1 vendors
reads- Get database, reads, get1 vendors
Capability namespace cap.dns_record.
writes- Create DNS record, creates, create1 vendors
- Delete DNS record, deletes, delete1 vendors
reads- Get DNS record, reads, get1 vendors
Capability namespace cap.dns_zone.
writes- Create DNS zone, creates, create1 vendors
- Delete DNS zone, deletes, delete1 vendors
reads- Get DNS zone, reads, get1 vendors
Capability namespace cap.docs.
reads- Search package docs, reads, search3 vendors, evidence ceiling untrusted
Capability namespace cap.embedding.
reads- Generate embeddings, reads, create3 vendors, evidence ceiling untrusted
Capability namespace cap.envelope.
writes- Create signature envelope, creates, create2 vendors, evidence ceiling untrusted
- Cancel envelope, updates, cancel1 vendors
- Void signature envelope, updates, void2 vendors, evidence ceiling untrusted
- Send signature envelope, acts outside the vendor, send2 vendors, evidence ceiling untrusted
reads- Get envelope, reads, get1 vendors
Capability namespace cap.event.
writes- Cancel event, updates, cancel1 vendors
reads- Get event, reads, get1 vendors
- List event, reads, list1 vendors
Guild channel
1 of 1 write
Capability namespace cap.guild_channel.
writes- Create guild channel, creates, create1 vendors
Capability namespace cap.iac_run.
writes- Apply infrastructure, updates, apply4 vendors
reads- Plan infrastructure, reads, plan2 vendors, evidence ceiling untrusted
Capability namespace cap.ignore.
writes- Create ignore rule, creates, create1 vendors
- Delete ignore rule, deletes, delete1 vendors
reads- Get ignore rule, reads, get1 vendors
Capability namespace cap.image.
writes- Create image, creates, create4 vendors, evidence ceiling untrusted
- Edit image, creates, edit4 vendors, evidence ceiling untrusted
reads- Analyze image, reads, analyze4 vendors, evidence ceiling untrusted
Capability namespace cap.index.
writes- Create vector index, creates, create1 vendors, evidence ceiling untrusted
- Delete vector index, deletes, delete1 vendors, evidence ceiling untrusted
Capability namespace cap.mandate.
writes- Cancel mandate, updates, cancel1 vendors
reads- Get mandate, reads, get1 vendors
Capability namespace cap.maps.
reads- Geocode address, reads, geocode2 vendors, evidence ceiling untrusted
Capability namespace cap.member.
writes- Delete member, deletes, delete1 vendors
reads- Get member, reads, get1 vendors
Capability namespace cap.membership.
writes- Create membership, creates, create1 vendors
- Deactivate membership, updates, deactivate1 vendors
reads- Get membership, reads, get1 vendors
Capability namespace cap.moderation.
reads- Classify content, reads, classify4 vendors, evidence ceiling untrusted
Capability namespace cap.note.
writes- Create note, creates, create1 vendors
- Delete note, deletes, delete1 vendors
reads- Get note, reads, get1 vendors
Capability namespace cap.notification.
writes- Send notification, creates, send1 vendors
Capability namespace cap.object.
writes- Put object, creates, put4 vendors, evidence ceiling untrusted
- Delete object, deletes, delete4 vendors, evidence ceiling untrusted
- Presign object URL, acts outside the vendor, presign4 vendors, evidence ceiling untrusted
reads- Get object, reads, get4 vendors, evidence ceiling untrusted
Capability namespace cap.person.
reads- Enrich person, reads, enrich3 vendors, evidence ceiling untrusted
Quality gate by project
read-only
Capability namespace cap.quality_gate_by_project.
reads- Get quality gate by project, reads, get1 vendors
Capability namespace cap.query.
reads- Execute query, reads, execute3 vendors, evidence ceiling untrusted
Capability namespace cap.ref.
writes- Create ref, creates, create1 vendors
reads- Get ref, reads, get1 vendors
Capability namespace cap.release.
writes- Create release, creates, create1 vendors
reads- Get release, reads, get1 vendors
Capability namespace cap.reply.
writes- Send reply, creates, send1 vendors
Capability namespace cap.rerank.
reads- Rerank documents, reads, create2 vendors, evidence ceiling untrusted
Capability namespace cap.research.
reads- Deep research, reads, run5 vendors, evidence ceiling untrusted
Capability namespace cap.run.
writes- Create run, creates, create1 vendors
- Update run, updates, update1 vendors
reads- Get run, reads, get1 vendors
Capability namespace cap.sandbox.
writes- Create code sandbox, creates, create2 vendors, evidence ceiling untrusted
- Destroy code sandbox, deletes, destroy2 vendors, evidence ceiling untrusted
- Run command in sandbox, acts outside the vendor, exec2 vendors, evidence ceiling untrusted
- Expose sandbox port, acts outside the vendor, expose_port2 vendors, evidence ceiling untrusted
- Run code in sandbox, acts outside the vendor, run_code1 vendors, evidence ceiling untrusted
reads- Get sandbox, reads, get1 vendors
Capability namespace cap.sandbox_file.
writes- Write sandbox file, creates, write2 vendors, evidence ceiling untrusted
reads- Read sandbox file, reads, read2 vendors, evidence ceiling untrusted
Capability namespace cap.site.
writes- Create site, creates, create1 vendors
- Delete site, deletes, delete1 vendors
reads- Get site, reads, get1 vendors
Capability namespace cap.slo.
writes- Create SLO, creates, create1 vendors
- Delete SLO, deletes, delete1 vendors
reads- Get SLO, reads, get1 vendors
Capability namespace cap.sms.
writes- Send SMS, acts outside the vendor, send1 vendors
Capability namespace cap.speech.
writes- Text-to-speech, creates, create3 vendors, evidence ceiling untrusted
Capability namespace cap.stack.
writes- Create stack, creates, create1 vendors
- Delete stack, deletes, delete1 vendors
reads- Get stack, reads, get1 vendors
Capability namespace cap.stored_message.
reads- Get stored message, reads, get1 vendors
Subscription for item
2 of 2 write
Capability namespace cap.subscription_for_item.
writes- Create subscription for item, creates, create1 vendors
- Cancel subscription for item, updates, cancel1 vendors
Capability namespace cap.tag.
writes- Delete tag, deletes, delete1 vendors
reads- Get tag, reads, get1 vendors
Capability namespace cap.template.
writes- Create template, creates, create1 vendors
- Delete template, deletes, delete1 vendors
reads- Get template, reads, get1 vendors
Capability namespace cap.transcript.
reads- Speech-to-text, reads, create3 vendors, evidence ceiling untrusted
Capability namespace cap.tree.
writes- Create tree, creates, create1 vendors
Capability namespace cap.update.
writes- Create update, creates, create1 vendors
Capability namespace cap.user_statu.
writes- Update user status, updates, update1 vendors
Capability namespace cap.vault.
reads- Get vault, reads, get1 vendors
- List vault, reads, list1 vendors
Capability namespace cap.vector.
writes- Upsert vectors, updates, upsert1 vendors, evidence ceiling untrusted
- Delete vectors, deletes, delete1 vendors, evidence ceiling untrusted
reads- Query vectors, reads, query1 vendors, evidence ceiling untrusted
Capability namespace cap.video.
writes- Create video, creates, create4 vendors, evidence ceiling untrusted
reads- Get video, reads, get4 vendors, evidence ceiling untrusted
Capability namespace cap.workspace.
writes- Create workspace, creates, create1 vendors
- Delete workspace, deletes, delete1 vendors
reads- Get workspace, reads, get1 vendors