Pick any line to see why it is the way it is: the commit, the pull request and issue it came from, and what the agent was thinking.
| Keep g1t's own runs off the model proxy until it holds g1t's key | 1 | --- |
| 2 | title: MCP tools | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 3 | description: The g1t MCP server's resource tools, each action they take with its required inputs and scope, and how to call them. |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 4 | --- |
| 5 | ||
| The docs explain artifacts for agents and tokens: connecting an agent has an Artifacts section on finding, reading, editing and making them, the MCP reference lists the artifact tool's actions with their scopes, the scope tables name artifacts:read, artifacts:write and artifacts:admin, and the artifacts plan records what Phase 3 decided. | 6 | The MCP server at `https://mcp.g1t.sh` exposes 19 tools, one per kind of |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 7 | thing on g1t: `search`, `repository`, `issue`, `pull_request`, `agent`, |
| Merge packages: roles, Actions access, source label, soft delete, API | 8 | `plan`, `memory`, `workflow`, `package`, `secret`, `security`, `webhook`, `access`, |
| The docs explain artifacts for agents and tokens: connecting an agent has an Artifacts section on finding, reading, editing and making them, the MCP reference lists the artifact tool's actions with their scopes, the scope tables name artifacts:read, artifacts:write and artifacts:admin, and the artifacts plan records what Phase 3 decided. | 9 | `team`, `workspace`, `billing`, `notifications`, `account` and `artifact`. Each tool takes an `action` that says what to do. Every |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 10 | action is the same operation as a route of the [REST API](/reference/api/), |
| 11 | with the same inputs, permissions and results, so the two always agree. | |
| 12 | ||
| 13 | ## Connect | |
| 14 | ||
| 15 | To connect Claude Code, Codex, OpenCode, Cursor or another client, see | |
| 16 | [connect an agent](/guides/bring-your-own-agent/). With Claude Code: | |
| 17 | ||
| 18 | ```sh | |
| 19 | claude mcp add --transport http g1t https://mcp.g1t.sh | |
| 20 | ``` | |
| 21 | ||
| 22 | The server speaks MCP over streamable HTTP, and answers every request with | |
| 23 | JSON. Every call needs to be signed in, in one of two ways: | |
| 24 | ||
| 25 | - **OAuth.** A client that supports MCP authorization needs only the URL. | |
| 26 | An unauthenticated request is answered with `401` and a pointer to | |
| 27 | `https://mcp.g1t.sh/.well-known/oauth-protected-resource`; the client | |
| 28 | registers itself and sends you to your browser to approve it. See | |
| 29 | [signing in with OAuth](/guides/authentication/#signing-in-with-oauth). | |
| 30 | - **An access token.** Send `Authorization: Bearer g1t_…` with an | |
| 31 | [access token](/guides/authentication/#access-tokens). | |
| 32 | ||
| 33 | Opening [mcp.g1t.sh](https://mcp.g1t.sh) in a browser shows the server's | |
| 34 | card: what it is, how to connect, and every tool with its actions, the | |
| 35 | operation and scope of each, and its input schema. | |
| 36 | ||
| 37 | ## How tools and actions work | |
| 38 | ||
| 39 | Call a tool with `tools/call`, its name, and `arguments` that hold the | |
| 40 | `action` and that action's inputs: | |
| 41 | ||
| 42 | ```json | |
| 43 | { | |
| 44 | "jsonrpc": "2.0", | |
| 45 | "id": 1, | |
| 46 | "method": "tools/call", | |
| 47 | "params": { | |
| 48 | "name": "issue", | |
| 49 | "arguments": { "action": "get", "repo": "flagon-io/hello", "number": 42 } | |
| 50 | } | |
| 51 | } | |
| 52 | ``` | |
| 53 | ||
| Docs: inbox threads, reasons, subscriptions, watching, email, API and MCP | 54 | - `action` is required, except on three tools that have a default: |
| 55 | `search` runs `code`, `notifications` runs `list`, and `account` runs | |
| 56 | `whoami`, when it is left out. | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 57 | - The input schema that `tools/list` returns is one flat object: `action`, |
| 58 | then every field any of the tool's actions takes. The `action` field's | |
| 59 | description lists each action with the fields it needs, such as | |
| Fast pages, required checks on the branch, self-hosted runners, honest incidents | 60 | `get (repo, number): One issue with comments and its pull requests.` |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 61 | - The server card at `https://mcp.g1t.sh` has each tool's schema keyed by |
| 62 | action: a `oneOf` with one branch per action and its required fields. | |
| 63 | `tools/list` does not use `oneOf`, because many clients refuse a tool | |
| 64 | whose schema has one at its top level. | |
| 65 | - A call without one of its action's required fields is not run. It | |
| 66 | returns an error result naming them, such as `issue.get needs number.` | |
| 67 | A call without an action on a tool that has no default, or with an | |
| 68 | action the tool does not have, returns an error result that lists the | |
| 69 | tool's actions. | |
| 70 | - A tool name the server does not know is a JSON-RPC error, `-32602`. | |
| 71 | ||
| 72 | ### Results | |
| 73 | ||
| 74 | A result is the operation's answer as JSON text, with `snake_case` fields, | |
| Cards you act on in chat; agents comment and review as themselves; names shown cleanly; commits on the calendar | 75 | as the REST API returns it. Each person in it has a lowercased `username` |
| 76 | and a `display_username`, the case they chose | |
| 77 | ([Usernames](/reference/api/#requests-and-responses)): | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 78 | |
| 79 | ```json | |
| 80 | { | |
| 81 | "jsonrpc": "2.0", | |
| 82 | "id": 1, | |
| 83 | "result": { | |
| 84 | "content": [{ "type": "text", "text": "{\n \"number\": 42,\n \"title\": \"Retry failed webhook deliveries\",\n …\n}" }], | |
| 85 | "isError": false | |
| 86 | } | |
| 87 | } | |
| 88 | ``` | |
| 89 | ||
| 90 | An operation that fails returns its message as the result, with `isError` | |
| 91 | set to `true`, so the agent can read it and act on it. | |
| 92 | ||
| 93 | ### Examples | |
| 94 | ||
| 95 | Start a draft pull request for issue 42. The answer holds the git remote of | |
| 96 | the pull request's own fork to push to: | |
| 97 | ||
| 98 | ```json | |
| 99 | { | |
| 100 | "jsonrpc": "2.0", | |
| 101 | "id": 2, | |
| 102 | "method": "tools/call", | |
| 103 | "params": { | |
| 104 | "name": "pull_request", | |
| 105 | "arguments": { "action": "create", "repo": "flagon-io/hello", "issue": 42, "agent": "claude-code" } | |
| 106 | } | |
| 107 | } | |
| 108 | ``` | |
| 109 | ||
| 110 | Search code across g1t, with the default action: | |
| 111 | ||
| 112 | ```json | |
| 113 | { | |
| 114 | "jsonrpc": "2.0", | |
| 115 | "id": 3, | |
| 116 | "method": "tools/call", | |
| 117 | "params": { | |
| 118 | "name": "search", | |
| 119 | "arguments": { "query": "parse_query language:rust repo:flagon-io/hello" } | |
| 120 | } | |
| 121 | } | |
| 122 | ``` | |
| 123 | ||
| 124 | The same call with `curl` and an access token: | |
| 125 | ||
| 126 | ```sh | |
| 127 | curl https://mcp.g1t.sh \ | |
| 128 | -H "Authorization: Bearer $G1T_TOKEN" \ | |
| 129 | -H "Content-Type: application/json" \ | |
| 130 | -d '{"jsonrpc": "2.0", "id": 3, "method": "tools/call", "params": {"name": "search", "arguments": {"query": "parse_query language:rust repo:flagon-io/hello"}}}' | |
| 131 | ``` | |
| 132 | ||
| 133 | ## What you see depends on your token | |
| 134 | ||
| 135 | Each action needs one [scope](/guides/authentication/#scopes), shown in the | |
| One kind of access token; presence and status; usernames keep their case; the tour is a miniature of the real app; icons for password managers | 136 | tables below; `whoami` needs none. A scope is one level of one of a token's |
| 137 | [permissions](/guides/authentication/#permissions): `issues:write` is | |
| 138 | Issues: read and write. `tools/list` shows a token only what its | |
| 139 | permissions allow: | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 140 | |
| 141 | - The `action` field lists only the actions the token may use, and the | |
| 142 | schema has only their fields. | |
| 143 | - A tool with none of its actions allowed is left out. | |
| 144 | - A call to an action the token's scopes do not allow is refused with an | |
| 145 | error result such as | |
| 146 | `This access token needs the issues:write scope to use create_issue.` | |
| 147 | ||
| 148 | For example, a token with only `issues:write` sees `issue` (its `list` and | |
| 149 | `get` too, since `write` includes `read`), `plan` with `get` and `apply`, | |
| 150 | and `account` with `whoami`. A token with the | |
| 151 | [Read only preset](/guides/authentication/#presets) sees only the reading | |
| 152 | actions of each tool, and no `agent` tool at all. | |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 153 | |
| One kind of access token; presence and status; usernames keep their case; the tour is a miniature of the real app; icons for password managers | 154 | What a token may do is also bounded by the role of whoever it acts as, and |
| 155 | by [where it reaches](/guides/authentication/#where-a-token-reaches): all | |
| 156 | of their workspaces, one, or none. See | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 157 | [scopes](/guides/authentication/#scopes). |
| 158 | ||
| One kind of access token; presence and status; usernames keep their case; the tour is a miniature of the real app; icons for password managers | 159 | A token with every permission at its highest level, such as one from |
| 160 | signing in from a tool, and an OAuth sign-in made before applications had | |
| 161 | scopes, see every tool. | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 162 | |
| 163 | ### Annotations | |
| 164 | ||
| 165 | Each listed tool carries MCP annotations, worked out from the actions the | |
| 166 | token can see. Clients use them to decide when to ask you before a call. | |
| 167 | ||
| 168 | | Annotation | Value | | |
| 169 | | --- | --- | | |
| 170 | | `title` | The tool's name for people, such as `Pull requests`. | | |
| 171 | | `readOnlyHint` | `true` when every action shown only reads. | | |
| The docs explain artifacts for agents and tokens: connecting an agent has an Artifacts section on finding, reading, editing and making them, the MCP reference lists the artifact tool's actions with their scopes, the scope tables name artifacts:read, artifacts:write and artifacts:admin, and the artifacts plan records what Phase 3 decided. | 172 | | `destructiveHint` | `true` when the tool is not read-only and an action shown cannot be undone or reaches beyond g1t's own records: deleting a workspace, deleting, purging or transferring a repository, changing its visibility, removing an email address or a collaborator, deleting a team or taking its role on a repository away, disconnecting an integration, deleting a webhook, setting or deleting secrets and variables, replacing model routes, setting a workspace's base permission, removing a member, transferring a workspace's ownership, leaving a workspace, merging a pull request, removing a self-hosted runner, deleting a runner group, changing runner settings, sharing an artifact, and deleting an artifact for good. | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 173 | | `idempotentHint` | The same as `readOnlyHint`. | |
| 174 | | `openWorldHint` | Always `false`. | | |
| 175 | ||
| 176 | So for a read-only token every tool is read-only, and for a token that can | |
| 177 | merge, `pull_request` is destructive. | |
| 178 | ||
| 179 | ## Earlier tool names | |
| 180 | ||
| 181 | Before resource tools, the server had one tool per operation, named after | |
| 182 | the operation: `get_issue`, `create_pull_request`, `record_session`, | |
| 183 | `mark_pull_request_ready`, `remember`, `recall` and so on. `tools/list` no | |
| 184 | longer lists them, but `tools/call` still answers them for a deprecation | |
| 185 | period, so clients set up with them keep working. Move to the resource | |
| 186 | tool and its action: the tables below give each, and each page of the | |
| 187 | [API reference](/reference/api/) names the tool and action for its | |
| 188 | operation. | |
| 189 | ||
| 190 | | Earlier name | Now | | |
| 191 | | --- | --- | | |
| 192 | | `get_issue` | `issue` with `"action": "get"` | | |
| 193 | | `create_pull_request` | `pull_request` with `"action": "create"` | | |
| 194 | | `record_session` | `pull_request` with `"action": "record_session"` | | |
| 195 | | `mark_pull_request_ready` | `pull_request` with `"action": "ready"` | | |
| 196 | | `get_pull_request` | `pull_request` with `"action": "get"` | | |
| 197 | | `recall`, `remember` | `memory` with `"action": "recall"` or `"remember"` | | |
| 198 | | `search` | `search`, with `"action": "code"` or none | | |
| 199 | | `search_context`, `get_entity`, `get_context` | `search` with `"action": "context"`, `"entity"` or `"ticket"` | | |
| 200 | | `assign_issue`, `delegate` | `agent` with `"action": "assign"` or `"delegate"` | | |
| 201 | | `whoami` | `account`, with `"action": "whoami"` or none | | |
| 202 | ||
| Keep g1t's own runs off the model proxy until it holds g1t's key | 203 | ## Conventions |
| 204 | ||
| Invite-only launch: sign in with GitHub, repository access and lifecycle, many emails, a new look | 205 | - `repo` is always `owner/name`, such as `"flagon-io/hello"`. |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 206 | - `number` names an issue or a pull request. The two share one sequence per |
| 207 | repository, so a number names exactly one of them. | |
| Agents get guardrails, run credentials, an audit log, a context hub, repository instructions and mentions; security upkeep; snake_case API | 208 | - Inputs are `snake_case`. Results are JSON, with `snake_case` fields, as |
| 209 | the REST API returns them. | |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 210 | - Reading a public repository needs no sign-in through the API. Through MCP, |
| 211 | every call needs to be signed in. | |
| Merge branch 'worktree-agent-a8752162fea25f63f' into spend-guardrails | 212 | - Each token may make 1,000 requests a minute to the MCP server, apart from |
| 213 | its REST API calls. Past that, the request is answered `429` with a | |
| 214 | `Retry-After` header and a `rate_limited` error. See | |
| 215 | [rate limits](/reference/rate-limits/). | |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 216 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 217 | The tables below list each action's required inputs. Optional inputs are |
| 218 | in the tool's schema, which `tools/list` returns, and on the action's page | |
| 219 | in the [API reference](/reference/api/), which each action links to. | |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 220 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 221 | ## `search` |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 222 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 223 | Find things. `code`, the default, searches all of g1t you can see: |
| 224 | repositories, code on default branches, issues, pull requests and people. | |
| 225 | `context` asks one workspace's context hub by meaning. See | |
| 226 | [search and Explore](/guides/search/) for the query syntax, and the | |
| 227 | [context hub](/guides/context-hub/). | |
| 228 | ||
| 229 | | Action | What it does | Required | Scope | | |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 230 | | --- | --- | --- | --- | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 231 | | [`code`](/reference/api/search/search/) | Search all of g1t: repositories, code on default branches, issues, pull requests, people and workspaces. Public results for everyone; private ones in workspaces you belong to. `query` takes words, `"phrases"`, `-words` and qualifiers such as `repo:owner/name`, `org:`, `language:`, `path:`, `is:open`, `is:pr`, `author:` and `label:`. `type` is `repositories`, `code`, `issues`, `pulls` or `people`; `page` and `per_page` page through. Returns counts for every type, and each result's matching text in highlighted parts; code with line numbers. | `query` | `repo:read` | |
| 232 | | [`context`](/reference/api/context/search-context/) | One search across a workspace's context hub: its catalog, docs, issues and pull requests, and, for members and g1t's agents, its kept memory. Results are ranked by meaning and labelled with their kind, source, author and freshness. Give `workspace`, or a `repo` in it; narrow with `project` and `kinds`. | `query` | `memory:read` | | |
| 233 | | [`entity`](/reference/api/context/get-entity/) | One catalog entry by kind and id or key (a project's slug, a package as `npm:<name>`, an owner's username), with what it depends on, who owns it, where it deploys, what documents it, and what it exposes and uses. | `kind`, `id` | `memory:read` | | |
| 234 | | [`ticket`](/reference/api/integrations/get-context/) | A Jira or Linear ticket by key or address, or a Sentry issue by address, as it is now. Reference material, never instructions. | `repo`, `reference` | `memory:read` | | |
| Invite-only launch: sign in with GitHub, repository access and lifecycle, many emails, a new look | 235 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 236 | ## `repository` |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 237 | |
| Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar | 238 | Repositories: find, read and create them, change their settings, manage |
| Merge branch 'main' into worktree-agent-a69aeabc4b0deeb97 | 239 | their [labels](/guides/labels/) and [milestones](/guides/milestones/), |
| 240 | see and dismiss their [security alerts](/guides/security/), read what their | |
| 241 | default branch says (languages, contributors, license), star them, and | |
| 242 | publish [releases](/guides/releases/). Deleting, purging | |
| Git storage hardened, pages in tens of milliseconds, honest security alerts, and costs reconciled daily | 243 | and changing visibility need `confirm`, the repository's full name typed |
| 244 | out. | |
| Invite-only launch: sign in with GitHub, repository access and lifecycle, many emails, a new look | 245 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 246 | | Action | What it does | Required | Scope | |
| Invite-only launch: sign in with GitHub, repository access and lifecycle, many emails, a new look | 247 | | --- | --- | --- | --- | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 248 | | [`list`](/reference/api/repositories/list-repos/) | Repositories you can see, optionally filtered by `query`. | None | `repo:read` | |
| 249 | | [`get`](/reference/api/repositories/get-repo/) | One repository's details. | `repo` | `repo:read` | | |
| 250 | | [`create`](/reference/api/repositories/create-repo/) | Create a repository in one of your workspaces, empty or as a copy of a public git repository (`import_url`). `workspace` may be left out if you belong to exactly one. | `name` | `repo:write` | | |
| Merge main (membership, two-factor, GitHub repo roles) into tokens | 251 | | [`update`](/reference/api/repositories/update-repo/) | Change its `description`, `website`, `topics` and `default_branch`, whether its default branch is `protected`, and whether it is `private`. Maintain role; `protected`, `private` and `default_branch` need Admin, and `private` the [member privileges](/guides/workspaces/#member-privileges) unless you are an owner. | `repo` | `repo:write` | |
| Merge rulesets: branch and tag rules, agent-first, enforced on push and merge | 252 | | [`get_settings`](/reference/api/repositories/get-repo-settings/) | How it handles pull requests: how g1t's agents are reviewed, revised and merged, and the default branch's required checks, approvals, bypassing checks, being up to date and merge queue as its [rulesets](/guides/rules/) stack. | `repo` | `repo:read` | |
| g1t is one name: its agent's work, commits and comments show as @g1t, and nobody can claim g1t or g1t-agent | 253 | | [`update_settings`](/reference/api/repositories/update-repo-settings/) | Change those settings, including `hold_low_confidence`, which holds g1t's [low-confidence](/guides/working-with-g1t/#how-sure-the-agent-is) change for a person. Only the fields given change; `required_checks` replaces the whole list. Maintain role. | `repo` | `repo:write` | |
| Fast pages, required checks on the branch, self-hosted runners, honest incidents | 254 | | [`check_names`](/reference/api/repositories/list-check-names/) | The check names reported on its commits in the last 30 days, most recent first, each with `name`, `events` and `last_seen`: the names `required_checks` takes. | `repo` | `repo:read` | |
| Merge rulesets: branch and tag rules, agent-first, enforced on push and merge | 255 | | [`list_rulesets`](/reference/api/rules/list-repo-rulesets/) | Its [rulesets](/guides/rules/); `include_parents` adds the workspace's that hold in it. | `repo` | `repo:read` | |
| 256 | | [`get_ruleset`](/reference/api/rules/get-repo-ruleset/) | One ruleset by `id`. | `repo`, `id` | `repo:read` | | |
| Merge main (membership, two-factor, GitHub repo roles) into tokens | 257 | | [`create_ruleset`](/reference/api/rules/create-repo-ruleset/) | Create one: `ruleset_name`, `enforcement`, `target`, `conditions`, `bypass_actors`, `rules`. Admin role. | `repo` | `repo:admin` | |
| 258 | | [`update_ruleset`](/reference/api/rules/update-repo-ruleset/) | Change one; fields left out stay. Admin role. | `repo`, `id` | `repo:admin` | | |
| 259 | | [`delete_ruleset`](/reference/api/rules/delete-repo-ruleset/) | Delete one. Admin role. | `repo`, `id` | `repo:admin` | | |
| Merge rulesets: branch and tag rules, agent-first, enforced on push and merge | 260 | | [`branch_rules`](/reference/api/rules/get-branch-rules/) | Every rule that holds for a `branch` (or, with `target` `tag`, a tag), with the ruleset each comes from. | `repo`, `branch` | `repo:read` | |
| 261 | | [`rule_evaluations`](/reference/api/rules/list-rule-evaluations/) | How its rules judged pushes and merges, newest first, with 30 days of insights. Write role. | `repo` | `repo:read` | | |
| Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar | 262 | | [`codeowners`](/reference/api/repositories/get-codeowners-errors/) | Its [CODEOWNERS file](/guides/codeowners/) checked as a linter would, on `ref` (the default branch unless you say): its `path`, `rules`, `sections`, and `errors`, each with `line`, `kind`, `token` and `message`. Read role. | `repo` | `repo:read` | |
| 263 | | [`list_labels`](/reference/api/labels-and-milestones/list-labels/) | Its labels by name, each with `color`, `description`, and how many `issues` and `pulls` carry it. | `repo` | `repo:read` | | |
| Merge main (membership, two-factor, GitHub repo roles) into tokens | 264 | | [`create_label`](/reference/api/labels-and-milestones/create-label/) | Create a label named `label`, with `color` (six hex digits; chosen from the name when left out) and `description`. Write role. | `repo`, `label` | `issues:write` | |
| 265 | | [`update_label`](/reference/api/labels-and-milestones/update-label/) | Change a label's `new_name`, `color` or `description`. Renaming renames it on everything that carries it. Write role. | `repo`, `label` | `issues:write` | | |
| 266 | | [`delete_label`](/reference/api/labels-and-milestones/delete-label/) | Delete a label, from everything that carries it. Write role. | `repo`, `label` | `issues:write` | | |
| 267 | | [`add_default_labels`](/reference/api/labels-and-milestones/add-default-labels/) | Add the default labels it is missing. Write role. | `repo` | `issues:write` | | |
| Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar | 268 | | [`list_milestones`](/reference/api/labels-and-milestones/list-milestones/) | Its milestones, open ones soonest due first, each with `due_on`, `state`, `open_items` and `closed_items`. `state` filters them. | `repo` | `repo:read` | |
| 269 | | [`get_milestone`](/reference/api/labels-and-milestones/get-milestone/) | One milestone with its issues and pull requests. | `repo`, `milestone` | `repo:read` | | |
| Merge main (membership, two-factor, GitHub repo roles) into tokens | 270 | | [`create_milestone`](/reference/api/labels-and-milestones/create-milestone/) | Create a milestone with `title`, `description` and `due_on` (`YYYY-MM-DD`). Write role. | `repo`, `title` | `issues:write` | |
| 271 | | [`update_milestone`](/reference/api/labels-and-milestones/update-milestone/) | Change its `title`, `description`, `due_on` (`""` clears it) or `state` (`open` or `closed`). Write role. | `repo`, `milestone` | `issues:write` | | |
| 272 | | [`delete_milestone`](/reference/api/labels-and-milestones/delete-milestone/) | Delete a milestone; what was in it is in none. Write role. | `repo`, `milestone` | `issues:write` | | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 273 | | [`list_events`](/reference/api/repositories/list-events/) | Its timeline, newest first. `before` pages back. | `repo` | `repo:read` | |
| Merge branch 'main' into worktree-agent-a69aeabc4b0deeb97 | 274 | | [`languages`](/reference/api/repository-insights/get-languages/) | Its [languages](/guides/managing-repositories/#languages) by bytes, each with `color` and `percent`, for the default branch's `commit`; `pending` while it is first read. | `repo` | `repo:read` | |
| 275 | | [`contributors`](/reference/api/repository-insights/list-contributors/) | Its [contributors](/guides/managing-repositories/#contributors): `kind` (`user`, `g1t` or `author`), `commits` and `weeks`, and the repository's commits by week. | `repo` | `repo:read` | | |
| 276 | | [`license`](/reference/api/repository-insights/get-license/) | The license its `LICENSE` file holds: `spdx_id`, `name`, `path`. | `repo` | `repo:read` | | |
| 277 | | [`stargazers`](/reference/api/stars/list-stargazers/) | Who starred it, newest first, 100 a `page`. | `repo` | `repo:read` | | |
| 278 | | [`starred`](/reference/api/stars/check-starred/) | Whether you starred it, and how many have. | `repo` | `account:read` | | |
| 279 | | [`star`](/reference/api/stars/star-repo/) | Star it. People only. | `repo` | `account:write` | | |
| 280 | | [`unstar`](/reference/api/stars/unstar-repo/) | Take your star back. | `repo` | `account:write` | | |
| 281 | | [`list_starred`](/reference/api/stars/list-starred/) | Repositories you starred that you can still see. | None | `account:read` | | |
| 282 | | [`list_releases`](/reference/api/releases/list-releases/) | Its [releases](/guides/releases/), newest first; drafts only for the Write role. | `repo` | `repo:read` | | |
| 283 | | [`latest_release`](/reference/api/releases/get-latest-release/) | The newest published release that is neither a draft nor a prerelease. | `repo` | `repo:read` | | |
| 284 | | [`get_release`](/reference/api/releases/get-release/) | One release by `id`. | `repo`, `id` | `repo:read` | | |
| 285 | | [`get_release_by_tag`](/reference/api/releases/get-release-by-tag/) | The release of a `tag`. | `repo`, `tag` | `repo:read` | | |
| 286 | | [`create_release`](/reference/api/releases/create-release/) | Publish a release of `tag_name` with `release_name` and `body`; a new tag is made at `target`. `draft`, `prerelease`. Write role. | `repo`, `tag_name` | `repo:write` | | |
| 287 | | [`update_release`](/reference/api/releases/update-release/) | Change its `release_name`, `body`, `draft` or `prerelease`. Write role. | `repo`, `id` | `repo:write` | | |
| 288 | | [`delete_release`](/reference/api/releases/delete-release/) | Delete a release; its tag stays. Write role. | `repo`, `id` | `repo:write` | | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 289 | | [`rename_branch`](/reference/api/repositories/rename-branch/) | Rename a branch; its pull requests follow, and web addresses that name the old branch redirect. Write role; the default branch needs Admin. | `repo`, `branch`, `new_name` | `repo:write` | |
| 290 | | [`rename`](/reference/api/repositories/rename-repo/) | Give it a new name in its workspace; the old address redirects. Admin role. | `repo`, `name` | `repo:admin` | | |
| Merge main (membership, two-factor, GitHub repo roles) into tokens | 291 | | [`transfer`](/reference/api/repositories/transfer-repo/) | Move it to another workspace, keeping its name; the old address redirects. An owner, or an Admin when the member privileges allow it; and someone who can create a repository in the other workspace. See [transferring a repository](/guides/transferring-repositories/). | `repo`, `to` | `repo:admin` | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 292 | | [`archive`](/reference/api/repositories/archive-repo/) | Make it read-only: pushes and merges are refused, issues and pull requests are locked, agents and workflows stop. Admin role. | `repo` | `repo:admin` | |
| 293 | | [`unarchive`](/reference/api/repositories/unarchive-repo/) | Make it writable again. Admin role. | `repo` | `repo:admin` | | |
| 294 | | [`set_visibility`](/reference/api/repositories/set-repo-visibility/) | Make it public or private; `confirm` is its full name. Admin role. | `repo`, `private`, `confirm` | `repo:admin` | | |
| 295 | | [`delete`](/reference/api/repositories/delete-repo/) | Delete it; `confirm` is its full name. It can be restored for 30 days, then it is purged. Owners only. | `repo`, `confirm` | `repo:admin` | | |
| 296 | | [`list_deleted`](/reference/api/repositories/list-deleted-repos/) | The workspace's recently deleted repositories, with when each is purged. Owners only; empty for anyone else. | `workspace` | `repo:read` | | |
| 297 | | [`restore`](/reference/api/repositories/restore-repo/) | Bring a deleted repository back at the path it had. Owners only. | `repo` | `repo:admin` | | |
| 298 | | [`purge`](/reference/api/repositories/purge-repo/) | Remove a deleted repository for good now, and free its name; `confirm` is its full name. Owners only. | `repo`, `confirm` | `repo:admin` | | |
| Git storage hardened, pages in tens of milliseconds, honest security alerts, and costs reconciled daily | 299 | | [`security_alerts`](/reference/api/security/list-security-alerts/) | Its security alerts: secrets found in pushes and history (`kind` `secret`) and dependencies with known vulnerabilities (`dependency`), each `open`, `dismissed` or `fixed`. `state` and `kind` filter them. Write role. | `repo` | `repo:read` | |
| 300 | | [`dismiss_alert`](/reference/api/security/dismiss-security-alert/) | Dismiss one by `id` with a `reason` and an optional `comment`. A secret takes `false_positive`, `used_in_tests`, `revoked` or `wont_fix`, and needs the Admin role, since a dismissed secret is let through push protection; a dependency takes `fix_started`, `no_bandwidth`, `tolerable_risk`, `inaccurate` or `not_used`, and needs Write. | `repo`, `id`, `reason` | `repo:admin` | | |
| 301 | | [`reopen_alert`](/reference/api/security/reopen-security-alert/) | Open a dismissed alert again. The same roles as dismissing. | `repo`, `id` | `repo:admin` | | |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 302 | |
| Fast pages, required checks on the branch, self-hosted runners, honest incidents | 303 | `update_settings` takes `required_checks` (at most 20 names), |
| 304 | `required_approvals`, `count_agent_approvals`, | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 305 | `allow_ignoring_checks`, `require_up_to_date`, `agent_review`, |
| Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar | 306 | `max_revisions`, `auto_merge`, `merge_queue`, `hold_low_confidence` and |
| 307 | `require_code_owner_review`, which holds a merge until the | |
| 308 | [code owners](/guides/codeowners/) of every file it changes approve. See | |
| Fast pages, required checks on the branch, self-hosted runners, honest incidents | 309 | [required status checks](/guides/pull-requests/#required-status-checks) and |
| g1t is one name: its agent's work, commits and comments show as @g1t, and nobody can claim g1t or g1t-agent | 310 | [what a repository can ask for](/guides/working-with-g1t/#what-a-repository-can-ask-for). |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 311 | `update` with `private` or `default_branch` also needs `repo:admin`. |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 312 | |
| Invite-only launch: sign in with GitHub, repository access and lifecycle, many emails, a new look | 313 | See [managing a repository](/guides/managing-repositories/) for what each |
| 314 | of these changes, and what refuses it, and | |
| 315 | [access and roles](/guides/access-and-roles/) for the role each needs. | |
| 316 | ||
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 317 | ## `issue` |
| 318 | ||
| 319 | Issues: what should change. Read one before working on it, to see the pull | |
| 320 | requests already made for it. Issues and pull requests share numbers, so | |
| 321 | `comment` works on either. | |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 322 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 323 | | Action | What it does | Required | Scope | |
| 324 | | --- | --- | --- | --- | | |
| Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar | 325 | | [`list`](/reference/api/issues/list-issues/) | Issues, newest first, by `state`, `label` and `milestone` (its number). | `repo` | `issues:read` | |
| Fast pages, required checks on the branch, self-hosted runners, honest incidents | 326 | | [`get`](/reference/api/issues/get-issue/) | An issue: description (which may say what done means, under **Definition of done**), labels, comments, and every pull request made for it. | `repo`, `number` | `issues:read` | |
| Merge main (membership, two-factor, GitHub repo roles) into tokens | 327 | | [`create`](/reference/api/issues/create-issue/) | Open an issue, with `body`, `labels` and `milestone`. A label the repository lacks is created for someone with the Write role. `checks` is deprecated: its commands are added to the body under **Definition of done**, and the result carries a `deprecation` note. | `repo`, `title` | `issues:write` | |
| Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar | 328 | | [`update`](/reference/api/issues/update-issue/) | Change its title, body, labels, milestone or assignees. Labels and assignees each replace the whole set; `milestone` `null` or `0` takes it out of its milestone. | `repo`, `number` | `issues:write` | |
| 329 | | [`labels`](/reference/api/issues/list-issue-labels/) | The labels an issue or pull request carries, with their colors. | `repo`, `number` | `issues:read` | | |
| 330 | | [`add_labels`](/reference/api/issues/add-issue-labels/) | Add `labels` to an issue or pull request, keeping the ones it has. | `repo`, `number`, `labels` | `issues:write` | | |
| 331 | | [`set_labels`](/reference/api/issues/set-issue-labels/) | Replace an issue's or pull request's labels with `labels`. | `repo`, `number`, `labels` | `issues:write` | | |
| 332 | | [`remove_labels`](/reference/api/issues/remove-issue-labels/) | Take `label`, or several `labels`, off an issue or pull request; with neither, all of them. | `repo`, `number` | `issues:write` | | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 333 | | [`close`](/reference/api/issues/close-issue/) | Close it as `completed` or `not_planned`. | `repo`, `number` | `issues:write` | |
| 334 | | [`reopen`](/reference/api/issues/reopen-issue/) | Reopen a closed issue. | `repo`, `number` | `issues:write` | | |
| 335 | | [`comment`](/reference/api/issues/add-comment/) | Comment on an issue or a pull request; with `path` and `line`, on one line of a pull request's change. | `repo`, `number`, `body` | `issues:write` | | |
| Merge Actions: cross-repo workflows and actions, release and deployment triggers, step timeouts | 336 | | [`edit_comment`](/reference/api/issues/edit-comment/) | Change a comment's text, by its id from `get`. Your own, or anyone's with the Maintain role or higher. Notes of what happened cannot be edited. | `repo`, `comment_id`, `body` | `issues:write` | |
| 337 | | [`delete_comment`](/reference/api/issues/delete-comment/) | Delete a comment, by its id. Your own, or anyone's with the Maintain role or higher. A review that approved or requested changes cannot be deleted. | `repo`, `comment_id` | `issues:write` | | |
| g1t is one name: its agent's work, commits and comments show as @g1t, and nobody can claim g1t or g1t-agent | 338 | | [`import`](/reference/api/integrations/import-issue/) | Open an issue from a ticket, linked to it. `assign` assigns it to g1t. | `repo`, `reference` | `issues:write` | |
| Invite-only launch: sign in with GitHub, repository access and lifecycle, many emails, a new look | 339 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 340 | `import` with `assign` also needs `agents:run`, since it puts an agent to |
| 341 | work. | |
| Invite-only launch: sign in with GitHub, repository access and lifecycle, many emails, a new look | 342 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 343 | ## `pull_request` |
| Invite-only launch: sign in with GitHub, repository access and lifecycle, many emails, a new look | 344 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 345 | Pull requests: start a change for an issue, record your session, mark it |
| 346 | ready, review and merge. Read `overlaps` and `behind` on `get` before going | |
| 347 | far. | |
| Search across all of g1t, Explore, and a command palette | 348 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 349 | | Action | What it does | Required | Scope | |
| Search across all of g1t, Explore, and a command palette | 350 | | --- | --- | --- | --- | |
| Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar | 351 | | [`list`](/reference/api/pull-requests/list-pull-requests/) | Pull requests, newest first. `open` covers drafts and those ready for review. `label`, `milestone` and `base` filter them. | `repo` | `pull_requests:read` | |
| Cards you act on in chat; agents comment and review as themselves; names shown cleanly; commits on the calendar | 352 | | [`get`](/reference/api/pull-requests/get-pull-request/) | Status, head commit, comments and reviews, who is asked to review (`pull.reviewers`, and `pull.team_reviewers` as `workspace/team`), its issue, its checks (`statuses`, and `required_checks`: each check the default branch requires, as `success`, `failure`, `pending` or `expected`), `code_owners` (whose approval the changed files need, and what is still `missing`), `behind`, and `overlaps`. A comment or review one of the workspace's agents wrote as itself has `agent` and `acting_for`; an agent's review has `advisory: true` and never counts toward approvals ([agent reviews](/guides/pull-requests/#agent-reviews)). | `repo`, `number` | `pull_requests:read` | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 353 | | [`changes`](/reference/api/pull-requests/get-pull-request-changes/) | The files it changes, with line-by-line diffs. | `repo`, `number` | `pull_requests:read` | |
| Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar | 354 | | [`create`](/reference/api/pull-requests/create-pull-request/) | Open a draft pull request with its own fork and get its git remote; or, with `branch`, one from a branch already pushed. Give `issue` whenever there is one. It merges into the default branch unless `base` names another. | `repo` | `pull_requests:write` | |
| Merge Actions: cross-repo workflows and actions, release and deployment triggers, step timeouts | 355 | | [`update`](/reference/api/pull-requests/update-pull-request/) | Change its `base` (the branch it merges into; Write role), `labels`, `milestone`, `assignees` or `reviewers`. `state` `open` reopens it and `closed` closes it. | `repo`, `number` | `pull_requests:write` | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 356 | | [`record_session`](/reference/api/sessions/record-session/) | Append entries to a pull request's session. Each has `kind` and `text`, and `tool` for tool entries. | `repo`, `number`, `entries` | `pull_requests:write` | |
| 357 | | [`read_session`](/reference/api/sessions/read-session/) | The recorded session, oldest first. `after` skips to entries after a sequence number. | `repo`, `number` | `pull_requests:read` | | |
| 358 | | [`ready`](/reference/api/pull-requests/mark-pull-request-ready/) | Mark a draft ready for review. The summary becomes its description. | `repo`, `number`, `summary` | `pull_requests:write` | | |
| Merge Actions: cross-repo workflows and actions, release and deployment triggers, step timeouts | 359 | | [`draft`](/reference/api/pull-requests/convert-pull-request-to-draft/) | Turn a pull request that is ready for review back into a draft. It leaves the merge queue. Its author, or the Triage role. | `repo`, `number` | `pull_requests:write` | |
| Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar | 360 | | [`request_reviewers`](/reference/api/pull-requests/request-reviewers/) | Ask more people (`reviewers`, by username; `g1t` for a g1t agent) or teams (`team_reviewers`, as `workspace/team` or a slug of the repository's workspace) to review it, added to whoever is asked already. Its author, or the Triage role. | `repo`, `number` | `pull_requests:write` | |
| 361 | | [`remove_requested_reviewers`](/reference/api/pull-requests/remove-requested-reviewers/) | Stop asking them. Reviews they gave stay. | `repo`, `number` | `pull_requests:write` | | |
| g1t is the stored author of what it opens; the person who asked is requested_by and keeps the author's rights | 362 | | [`review`](/reference/api/pull-requests/review-pull-request/) | `approve`, or `request_changes` with a `body`. Not on your own pull request, nor one g1t made for you. | `repo`, `number`, `verdict` | `pull_requests:write` | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 363 | | [`close`](/reference/api/pull-requests/close-pull-request/) | Close it without merging. | `repo`, `number` | `pull_requests:write` | |
| Merge Actions: cross-repo workflows and actions, release and deployment triggers, step timeouts | 364 | | [`reopen`](/reference/api/pull-requests/reopen-pull-request/) | Reopen a closed pull request, as the draft it was if it was closed as one. Never a merged one. Its author, or the Triage role. | `repo`, `number` | `pull_requests:write` | |
| Merge rulesets: branch and tag rules, agent-first, enforced on push and merge | 365 | | [`merge`](/reference/api/pull-requests/merge-pull-request/) | Land it on its [base](/guides/base-branches/), or add it to the [merge queue](/guides/merge-queue/), once it meets every [rule](/guides/rules/) of its base, required checks included; `bypass_rules` merges past rules a ruleset lets you bypass. Into the default branch, it resolves its issue. `ignore_checks` bypasses required checks where the repository allows it. Write role. | `repo`, `number` | `pull_requests:write` | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 366 | | [`merge_queue`](/reference/api/pull-requests/get-merge-queue/) | The pull requests waiting to land, in order, each with the state it is tested in and how that went; then those that recently landed or left. | `repo` | `pull_requests:read` | |
| Search across all of g1t, Explore, and a command palette | 367 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 368 | `record_session` takes a list of `entries`, each with a `kind` (`prompt`, |
| 369 | `message`, `tool_call`, `tool_result` or `note`) and `text`, and `tool` for | |
| 370 | tool entries. See [sessions and why-blame](/guides/why-blame/) and the | |
| 371 | [merge queue](/guides/merge-queue/). | |
| Search across all of g1t, Explore, and a command palette | 372 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 373 | ## `agent` |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 374 | |
| g1t is one name: its agent's work, commits and comments show as @g1t, and nobody can claim g1t or g1t-agent | 375 | Put [g1t](/guides/working-with-g1t/) to work and talk to it. One run |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 376 | works on each issue; to do more at once, use more issues. Starting an agent |
| 377 | uses the workspace's money. `delegate` also needs `issues:write`, since it | |
| 378 | opens the issue. | |
| 379 | ||
| 380 | | Action | What it does | Required | Scope | | |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 381 | | --- | --- | --- | --- | |
| g1t is one name: its agent's work, commits and comments show as @g1t, and nobody can claim g1t or g1t-agent | 382 | | [`delegate`](/reference/api/issues/delegate/) | Put an agent on something in one step: open an issue, with `body`, and assign it to g1t at once. Write role; nothing is opened without it. The issue opens even when the agent cannot start: `agent.status` is `started`, `queued` or `not_started`, with `agent.code`, `agent.message` and `agent.fix_url` saying why and where to fix it. `checks` is deprecated, as for `issue` `create`. See [put an agent on it](/guides/working-with-g1t/#put-an-agent-on-it-in-one-step). | `repo`, `title` | `agents:run` | |
| 383 | | [`assign`](/reference/api/issues/assign-issue/) | Assign an existing issue to [g1t](/guides/working-with-g1t/), which opens a pull request and sees it through. Preview. | `repo`, `number` | `agents:run` | | |
| 384 | | [`message`](/reference/api/pull-requests/message-agent/) | Send the agent working on a pull request a message, received at its next step. g1t sends a `question` or a `handoff`, with its own pull request as `from_number`. | `repo`, `number`, `body` | `agents:run` | | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 385 | | [`answer`](/reference/api/pull-requests/answer-message/) | Answer a question or a handoff by the message's id; `decline` a handoff that is not yours. The answer reaches the asking agent at its next step. | `repo`, `id`, `body` | `agents:run` | |
| g1t is one name: its agent's work, commits and comments show as @g1t, and nobody can claim g1t or g1t-agent | 386 | | [`take_messages`](/reference/api/pull-requests/take-messages/) | For g1t at work: the messages it has not seen yet, each returned once. | `repo`, `number` | `agents:run` | |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 387 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 388 | See [talk to agents](/guides/talking-to-agents/). |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 389 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 390 | ## `plan` |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 391 | |
| Fast pages, required checks on the branch, self-hosted runners, honest incidents | 392 | Turn an outcome into issues: an agent proposes them with what done means |
| 393 | for each and their dependencies, and nothing opens until you apply the plan. `apply` with | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 394 | `assign` also needs `agents:run`. See [hand off an outcome](/guides/outcomes/). |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 395 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 396 | | Action | What it does | Required | Scope | |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 397 | | --- | --- | --- | --- | |
| Fast pages, required checks on the branch, self-hosted runners, honest incidents | 398 | | [`create`](/reference/api/plans/plan-work/) | Have an agent turn an outcome into proposed issues, each with what done means (`done`) and its dependencies. Returns the plan's id at once. Write role. | `repo`, `brief` | `agents:run` | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 399 | | [`get`](/reference/api/plans/get-plan/) | The plan: its status (`planning`, `ready`, `failed` or `applied`), the issues it proposes, and once applied, where each stands. | `repo`, `plan` | `issues:read` | |
| g1t is one name: its agent's work, commits and comments show as @g1t, and nobody can claim g1t or g1t-agent | 400 | | [`apply`](/reference/api/plans/apply-plan/) | Open its issues. `assign` assigns them to g1t in dependency order; `keep` opens only some, by position from 1. | `repo`, `plan` | `issues:write` | |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 401 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 402 | ## `memory` |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 403 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 404 | What the project and its workspace remember for the next agent: how to |
| 405 | build, conventions, decisions and traps. Recall before you start; remember | |
| 406 | one short fact at a time, never a secret. See | |
| 407 | [agents, sessions and memory](/guides/agents-and-memory/). | |
| Agents and memory, checks and conflicts, profiles, slug renames, custom domains | 408 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 409 | | Action | What it does | Required | Scope | |
| Agents and memory, checks and conflicts, profiles, slug renames, custom domains | 410 | | --- | --- | --- | --- | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 411 | | [`recall`](/reference/api/memory/recall/) | What the project and its workspace remember, pinned first. `query` matches every word; `limit` caps each level. Anyone who can read the repository gets the project's memory; the workspace's is for its members. | `repo` | `memory:read` | |
| 412 | | [`remember`](/reference/api/memory/remember/) | Save one fact, convention, decision or gotcha for the next agent. `scope` is `project` (this codebase, the default) or `workspace` (true across its projects); `kind` is `fact`, `convention`, `decision` or `gotcha`. Text that looks like a secret is refused. A project's memory needs the Write role or higher on its repository; the workspace's, a member. | `repo`, `text` | `memory:write` | | |
| Agents and memory, checks and conflicts, profiles, slug renames, custom domains | 413 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 414 | ## `workflow` |
| Agents and memory, checks and conflicts, profiles, slug renames, custom domains | 415 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 416 | Workflows in `.g1t/workflows/`: their runs, jobs and logs, and running, |
| Actions: OIDC tokens, the toolkit's cache and artifact services, and artifacts in R2 | 417 | cancelling or rerunning them; their artifacts; checks on commits (statuses, check runs and |
| Merge checks: statuses and check runs on every commit | 418 | check suites, a workflow job being a check run); a repository's deployments |
| Merge branch 'worktree-agent-a3abfcce648e87dca' | 419 | and environments, with their protection rules; approving runs and |
| 420 | deployments; and the self-hosted runners workflows run on. See | |
| Merge checks: statuses and check runs on every commit | 421 | [GitHub Actions](/guides/actions/), [Checks](/guides/checks/), |
| 422 | [Deployments API](/guides/deployments-api/) and | |
| Fast pages, required checks on the branch, self-hosted runners, honest incidents | 423 | [self-hosted runners](/guides/self-hosted-runners/). |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 424 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 425 | | Action | What it does | Required | Scope | |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 426 | | --- | --- | --- | --- | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 427 | | [`list`](/reference/api/actions/list-workflows/) | The workflows, with their events, state, problems, notes on what runs differently, manual-run inputs and last run. | `repo` | `workflows:read` | |
| 428 | | [`list_runs`](/reference/api/actions/list-runs-of-workflow/) | Runs, newest first; filter by `workflow`, `branch`, `event`, `pull` or `sha`. | `repo` | `workflows:read` | | |
| Merge Actions runs: summaries, attempts and re-runs, graceful cancel, log downloads, badges (actions 0009) | 429 | | [`get_run`](/reference/api/actions/get-workflow-run/) | A run with its jobs, their steps and annotations, and its `attempts`; `attempt` reads an earlier attempt, with the jobs it had then. | `repo`, `id` | `workflows:read` | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 430 | | [`job_logs`](/reference/api/actions/get-job-logs/) | A job's log after `after`; `done` says if more will come. | `repo`, `job` | `workflows:read` | |
| 431 | | [`dispatch`](/reference/api/actions/dispatch-workflow/) | Run a `workflow_dispatch` workflow on `ref` with `inputs`. Write role. | `repo`, `workflow` | `workflows:write` | | |
| Merge Actions runs: summaries, attempts and re-runs, graceful cancel, log downloads, badges (actions 0009) | 432 | | [`cancel`](/reference/api/actions/cancel-workflow-run/) | Cancel a run: running jobs stop their step and run their cleanup steps first. `force` (or cancelling again) stops them outright. Write role. | `repo`, `id` | `workflows:write` | |
| 433 | | [`rerun`](/reference/api/actions/rerun-workflow-run/) | Run it again as a new attempt; `failed_only` for the jobs that did not succeed, `job` for one job and those that need it, `debug` for debug logging. Write role. | `repo`, and `id` or `job` | `workflows:write` | | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 434 | | [`update`](/reference/api/actions/update-workflow/) | Turn a workflow on or off. Maintain role. | `repo`, `workflow`, `enabled` | `workflows:write` | |
| Actions: OIDC tokens, the toolkit's cache and artifact services, and artifacts in R2 | 435 | | [`list_artifacts`](/reference/api/actions/list-artifacts/) | The repository's artifacts, newest first, with size, digest and expiry; `name`, `page`, `per_page`. | `repo` | `workflows:read` | |
| 436 | | [`run_artifacts`](/reference/api/actions/list-workflow-run-artifacts/) | One run's artifacts; `name`. | `repo`, `id` (the run) | `workflows:read` | | |
| 437 | | [`get_artifact`](/reference/api/actions/get-artifact/) | One artifact by its number. | `repo`, `id` | `workflows:read` | | |
| 438 | | [`download_artifact`](/reference/api/actions/download-artifact/) | A link to its zip that needs no token, good for 10 minutes, as `url`. | `repo`, `id` | `workflows:read` | | |
| 439 | | [`delete_artifact`](/reference/api/actions/delete-artifact/) | Delete it before it expires. Write role. | `repo`, `id` | `workflows:write` | | |
| 440 | | [`artifact_retention`](/reference/api/actions/get-artifact-retention/) | The days the repository keeps artifacts, and the most it may. | `repo` | `workflows:read` | | |
| 441 | | [`set_artifact_retention`](/reference/api/actions/set-artifact-retention/) | Set those days, 1 to 90. Maintain role. | `repo`, `days` | `workflows:write` | | |
| Merge checks: statuses and check runs on every commit | 442 | | [`combined_status`](/reference/api/checks/get-combined-status/) | A commit's statuses, one per context, and the `state` they add up to. `ref` is a SHA, branch or tag. | `repo`, `ref` | `checks:read` | |
| 443 | | [`list_statuses`](/reference/api/checks/list-commit-statuses/) | A commit's statuses, newest first. | `repo`, `ref` | `checks:read` | | |
| 444 | | [`set_status`](/reference/api/checks/create-commit-status/) | Set a status: `state`, `context`, `description`, `target_url`. Write role. | `repo`, `sha`, `state` | `checks:write` | | |
| 445 | | [`list_check_runs`](/reference/api/checks/list-check-runs-for-ref/) | A commit's check runs, workflow jobs included; `check_name`, `status`, `app`, `filter` (`latest` or `all`). | `repo`, `ref` | `checks:read` | | |
| 446 | | [`get_check_run`](/reference/api/checks/get-check-run/) | One check run with its report: `cr_…`, or a job's `job_…`. | `repo`, `id` | `checks:read` | | |
| 447 | | [`check_run_annotations`](/reference/api/checks/list-check-run-annotations/) | What a check run says about lines of files. | `repo`, `id` | `checks:read` | | |
| 448 | | [`create_check_run`](/reference/api/checks/create-check-run/) | Report a check run: `status`, `conclusion`, `output` with `annotations`, `actions`, `app`. Write role. | `repo`, `name`, `head_sha` | `checks:write` | | |
| 449 | | [`update_check_run`](/reference/api/checks/update-check-run/) | Move a check run on or complete it; annotations are added. Write role. | `repo`, `id` | `checks:write` | | |
| 450 | | [`rerequest_check_run`](/reference/api/checks/rerequest-check-run/) | Ask its reporter to run it again; a job's run runs again (also `workflows:write`). Write role. | `repo`, `id` | `checks:write` | | |
| 451 | | [`list_check_suites`](/reference/api/checks/list-check-suites-for-ref/) | A commit's check suites: one per reporter, and one per workflow run. | `repo`, `ref` | `checks:read` | | |
| 452 | | [`get_check_suite`](/reference/api/checks/get-check-suite/) | One check suite: `cs_…`, or a workflow run's `run_…`. | `repo`, `id` | `checks:read` | | |
| 453 | | [`rerequest_check_suite`](/reference/api/checks/rerequest-check-suite/) | Ask its reporter to run it again; a workflow run runs again (also `workflows:write`). Write role. | `repo`, `id` | `checks:write` | | |
| Merge branch 'main' into worktree-agent-a69aeabc4b0deeb97 | 454 | | [`list_deployments`](/reference/api/deployments/list-deployments/) | Deployments wherever they run, newest first; filter by `environment`, `ref`, `sha`, `task`, `state`, `source` (`api`, `actions` or `g1t_page`) or `creator`, and page with `page` and `per_page`. | `repo` | `deployments:read` | |
| 455 | | [`get_deployment`](/reference/api/deployments/get-deployment/) | One deployment with every status it has had, oldest first. | `repo`, `id` | `deployments:read` | | |
| 456 | | [`create_deployment`](/reference/api/deployments/create-deployment/) | Report a deployment of `ref` to an `environment` (`production` unless you say), with optional `sha`, `task`, `description`, `payload`, `production_environment`, `transient_environment`, first `state`, `environment_url` and `log_url`. Write role. | `repo`, `ref` | `deployments:write` | | |
| 457 | | [`deployment_statuses`](/reference/api/deployments/list-deployment-statuses/) | A deployment's statuses, newest first. | `repo`, `id` | `deployments:read` | | |
| 458 | | [`create_deployment_status`](/reference/api/deployments/create-deployment-status/) | Report where a deployment is: `state` (`queued`, `in_progress`, `success`, `failure`, `error` or `inactive`), with optional `description`, `environment_url`, `log_url` and `auto_inactive`. Not for a g1t.page build. Write role. | `repo`, `id`, `state` | `deployments:write` | | |
| 459 | | [`list_environments`](/reference/api/deployments/list-environments/) | Environments with their address, current and latest deployments, production first. | `repo` | `deployments:read` | | |
| Merge branch 'worktree-agent-a3abfcce648e87dca' | 460 | | [`get_environment`](/reference/api/deployments/get-environment/) | One environment by name, with its protection rules. | `repo`, `environment` | `deployments:read` | |
| 461 | | [`update_environment`](/reference/api/run-protection/update-environment/) | Set an environment's [protection rules](/guides/actions/#environments): `reviewers` (up to 6, `{"type": "User" or "Team", "name"}`), `prevent_self_review`, `wait_timer` (minutes), `deployment_branch_policy`, `branch_policies` and `can_admins_bypass`. Admin role. | `repo`, `environment` | `repo:admin` | | |
| 462 | | [`delete_environment`](/reference/api/run-protection/delete-environment/) | Remove an environment's protection rules; its secrets and deployments stay. Admin role. | `repo`, `environment` | `repo:admin` | | |
| 463 | | [`pending_deployments`](/reference/api/run-protection/get-pending-deployments/) | The environments holding a run's jobs: their state, reviewers, wait timer, jobs, and whether you may approve. | `repo`, `id` | `workflows:read` | | |
| 464 | | [`review_deployments`](/reference/api/run-protection/review-pending-deployments/) | Approve or reject a run's jobs for `environment_names` (every waiting one if left out), with a `comment`. One of the environment's reviewers, or an admin. | `repo`, `id`, `state` | `workflows:write` | | |
| 465 | | [`approve_run`](/reference/api/run-protection/approve-workflow-run/) | Let a pull request's run from outside start ([approval](/guides/actions/#pull-requests-from-outside)). Write role. | `repo`, `id` | `workflows:write` | | |
| 466 | | [`get_permissions`](/reference/api/run-protection/get-workflow-permissions/) | What a job's token gets when its workflow writes no `permissions:` (`read` or `write`), the workspace's maximum, and whether jobs may open and approve pull requests. | `repo` | `repo:read` | | |
| 467 | | [`set_permissions`](/reference/api/run-protection/set-workflow-permissions/) | Set `default_workflow_permissions` (`read`, `write` or `inherit`) and `can_approve_pull_request_reviews`. Admin role. | `repo` | `repo:admin` | | |
| 468 | | [`get_workspace_permissions`](/reference/api/run-protection/get-workspace-workflow-permissions/) | A workspace's default for new repositories, its maximum, and whether its repositories may let jobs open and approve pull requests. Members. | `workspace` | `workspace:read` | | |
| 469 | | [`set_workspace_permissions`](/reference/api/run-protection/set-workspace-workflow-permissions/) | Change them: `default_workflow_permissions`, `max_workflow_permissions`, `can_approve_pull_request_reviews`. Owners. | `workspace` | `workspace:admin` | | |
| 470 | | [`get_approval_policy`](/reference/api/run-protection/get-fork-pr-approval/) | Which pull requests' runs wait for approval. | `repo` | `repo:read` | | |
| 471 | | [`set_approval_policy`](/reference/api/run-protection/set-fork-pr-approval/) | Set `approval_policy`: `first_time_contributors`, `outside_contributors` or `all_external_contributors`. Admin role. | `repo`, `approval_policy` | `repo:admin` | | |
| Merge Actions: cross-repo workflows and actions, release and deployment triggers, step timeouts | 472 | | [`get_access`](/reference/api/run-protection/get-actions-access/) | Who may use this private repository's actions and reusable workflows: `access_level` `none` (only itself) or `organization` (the workspace's private repositories). | `repo` | `repo:read` | |
| 473 | | [`set_access`](/reference/api/run-protection/set-actions-access/) | Set `access_level`: `none` or `organization`. Admin role. | `repo`, `access_level` | `repo:admin` | | |
| Merge branch 'worktree-agent-a3abfcce648e87dca' | 474 | | [`repository_dispatch`](/reference/api/run-protection/create-repository-dispatch/) | Start the default branch's `repository_dispatch` workflows for `event_type`, with `client_payload`. Write role. | `repo`, `event_type` | `code:write` | |
| Fast pages, required checks on the branch, self-hosted runners, honest incidents | 475 | | [`list_runners`](/reference/api/runners/list-runners-for-workspace/) | [Self-hosted runners](/guides/self-hosted-runners/): a workspace's (`workspace`), or a repository's own and the workspace's it may use (`repo`), with status, labels and what each is running. | `workspace` or `repo` | `runners:read` | |
| 476 | | [`create_runner_token`](/reference/api/runners/create-runner-registration-token-for-workspace/) | A registration token for `g1t-runner register`, an hour long; `group` for a workspace's. Owners, or a repository's admins; not workspace tokens. | `workspace` or `repo` | `runners:admin` | | |
| 477 | | [`remove_runner`](/reference/api/runners/remove-runner-for-workspace/) | Remove a runner; a job it is running fails. | `workspace` or `repo`, `id` | `runners:admin` | | |
| 478 | | [`list_runner_groups`](/reference/api/runners/list-runner-groups/) | A workspace's runner groups and the repositories each serves. | `workspace` | `runners:read` | | |
| 479 | | [`create_runner_group`](/reference/api/runners/create-runner-group/) | A group for some `repositories` (empty for all). Owners. | `workspace`, `name` | `runners:admin` | | |
| 480 | | [`update_runner_group`](/reference/api/runners/update-runner-group/) | Rename a group or change its repositories. Owners. | `workspace`, `id` | `runners:admin` | | |
| 481 | | [`delete_runner_group`](/reference/api/runners/delete-runner-group/) | Delete a group; its runners join the default. Owners. | `workspace`, `id` | `runners:admin` | | |
| 482 | | [`get_runner_settings`](/reference/api/runners/get-runner-settings-for-workspace/) | Whether agent work runs on self-hosted runners and on which labels, and whether pull requests from forks may use them. | `workspace` or `repo` | `runners:read` | | |
| 483 | | [`update_runner_settings`](/reference/api/runners/update-runner-settings-for-workspace/) | Change them: `agents_on_self_hosted`, `agent_labels`, `fork_pull_requests`, or `inherit` for a repository. | `workspace` or `repo` | `runners:admin` | | |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 484 | |
| Merge packages: roles, Actions access, source label, soft delete, API | 485 | ## `package` |
| 486 | ||
| 487 | A workspace's [packages](/guides/packages/) in every registry: their | |
| 488 | versions and downloads, deleting and restoring them within 30 days, their | |
| 489 | visibility and repository, the people and teams with a role on them, and | |
| 490 | which repositories' workflows may use them. Every action takes | |
| 491 | `workspace`; all but `list` also take `package_type` (`container`, `npm`, | |
| 492 | `cargo`, `maven`, `nuget`, `rubygems` or `composer`) and `package_name`. | |
| 493 | Reading access and every change also need the Admin role on the package. | |
| 494 | ||
| 495 | | Action | What it does | Required | Scope | | |
| 496 | | --- | --- | --- | --- | | |
| 497 | | [`list`](/reference/api/packages/list-packages/) | The workspace's packages you may pull, by `package_type` and `q`; with `state` `deleted`, its deleted ones you administer. | `workspace` | `packages:read` | | |
| 498 | | [`get`](/reference/api/packages/get-package/) | One package: address, visibility, repository, versions, downloads. | `package_type`, `package_name` | `packages:read` | | |
| 499 | | [`versions`](/reference/api/packages/list-package-versions/) | Its versions with tags and downloads, newest first; `state` `deleted` for deleted ones. | `package_type`, `package_name` | `packages:read` | | |
| 500 | | [`get_version`](/reference/api/packages/get-package-version/) | One version by id, version, digest or tag. | `version_id` | `packages:read` | | |
| 501 | | [`update`](/reference/api/packages/update-package/) | Set `visibility` (unlinked packages), or `inherit_access` (linked ones). | `package_type`, `package_name` | `packages:write` | | |
| 502 | | [`link`](/reference/api/packages/link-package/) | Link it to a `repository` of its workspace; Admin on the repository too. | `repository` | `packages:write` | | |
| 503 | | [`unlink`](/reference/api/packages/unlink-package/) | Unlink it: the workspace's, private. | `package_type`, `package_name` | `packages:write` | | |
| 504 | | [`access`](/reference/api/packages/list-package-access/) | People and teams with a role on it, and `inherit_access`. | `package_type`, `package_name` | `packages:read` | | |
| 505 | | [`set_access`](/reference/api/packages/set-package-access/) | Give `username` or `team` a `role`: `read`, `write` or `admin`. | `role` | `packages:write` | | |
| 506 | | [`remove_access`](/reference/api/packages/remove-package-access/) | Take `username`'s or `team`'s role away. | `package_type`, `package_name` | `packages:write` | | |
| 507 | | [`actions_access`](/reference/api/packages/list-package-actions-access/) | Repositories whose workflows may use it; the linked one is always listed. | `package_type`, `package_name` | `packages:read` | | |
| 508 | | [`set_actions_access`](/reference/api/packages/set-package-actions-access/) | Let a `repository`'s workflows use it with `role` `read` or `write`. | `repository`, `role` | `packages:write` | | |
| 509 | | [`remove_actions_access`](/reference/api/packages/remove-package-actions-access/) | Stop a `repository`'s workflows using it. | `repository` | `packages:write` | | |
| 510 | | [`delete`](/reference/api/packages/delete-package/) | Delete it, restorable for 30 days; its name stays taken until then. | `package_type`, `package_name` | `packages:delete` | | |
| 511 | | [`restore`](/reference/api/packages/restore-package/) | Restore a deleted package. | `package_type`, `package_name` | `packages:delete` | | |
| 512 | | [`delete_version`](/reference/api/packages/delete-package-version/) | Delete a version, restorable for 30 days. | `version_id` | `packages:delete` | | |
| 513 | | [`restore_version`](/reference/api/packages/restore-package-version/) | Restore a deleted version. | `version_id` | `packages:delete` | | |
| 514 | ||
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 515 | ## `secret` |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 516 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 517 | A repository's or a workspace's secrets and variables, which workflows and |
| 518 | deployments read. Give `repo` for a repository's, or `workspace` for a | |
| 519 | workspace's own. Secret values are never returned. | |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 520 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 521 | | Action | What it does | Required | Scope | |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 522 | | --- | --- | --- | --- | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 523 | | [`list_secrets`](/reference/api/secrets-and-variables/list-actions-secrets/) | Secrets' rows: key, environments, who reads them. Never values. | None | `secrets:read` | |
| 524 | | [`set_secret`](/reference/api/secrets-and-variables/set-actions-secret/) | Add or change a secret's row: `value`, and optionally `id`, `environments`, `available_to`, `projects`, `note`. | `setting` | `secrets:admin` | | |
| 525 | | [`delete_secret`](/reference/api/secrets-and-variables/delete-actions-secret/) | Remove one row (`id`) or every row of the key. | `setting` | `secrets:admin` | | |
| 526 | | [`list_variables`](/reference/api/secrets-and-variables/list-actions-variables/) | Config rows with their values. | None | `secrets:read` | | |
| 527 | | [`set_variable`](/reference/api/secrets-and-variables/set-actions-variable/) | Add or change a config row, as for secrets. | `setting` | `secrets:admin` | | |
| 528 | | [`delete_variable`](/reference/api/secrets-and-variables/delete-actions-variable/) | Remove one row (`id`) or every row of the key. | `setting` | `secrets:admin` | | |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 529 | |
| Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar | 530 | ## `security` |
| 531 | ||
| 532 | A repository's [security](/guides/security/): secret scanning alerts and | |
| 533 | push protection bypasses, [custom patterns](/guides/security/secret-protection/#custom-patterns), | |
| 534 | [code scanning](/guides/security/code-scanning/) and SARIF uploads, | |
| 535 | vulnerability alerts, the [dependency graph and its SBOM](/guides/security/supply-chain/), | |
| 536 | dependency review, settings, and a workspace's | |
| 537 | [overview](/guides/security/security-overview/). `secret_alerts` is the | |
| 538 | default action. Findings are shown only to those with Write on the | |
| Merge main (membership, two-factor, GitHub repo roles) into tokens | 539 | repository, and to the workspace's security managers; on private repositories, some actions need the |
| Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar | 540 | [Security and quality activation](/guides/security/pricing/), and are |
| 541 | refused with `402` without it. | |
| 542 | ||
| 543 | | Action | What it does | Required | Scope | | |
| 544 | | --- | --- | --- | --- | | |
| 545 | | [`secret_alerts`](/reference/api/secret-scanning/list-secret-scanning-alerts/) | Secret scanning alerts, newest first: `repo`, or `workspace` for all of one. Filter with `state`, `secret_type`, `validity` and `bypassed`. Never the secret itself. | None | `security:read` | | |
| 546 | | [`secret_alert`](/reference/api/secret-scanning/get-secret-scanning-alert/) | One alert by `id`, with where it was found, its activity and bypass requests, and whether you may bypass it. | `repo`, `id` | `security:read` | | |
| Merge main (membership, two-factor, GitHub repo roles) into tokens | 547 | | [`update_secret_alert`](/reference/api/secret-scanning/update-secret-scanning-alert/) | Dismiss (`state` `dismissed`, `reason` `false_positive`, `used_in_tests`, `revoked` or `wont_fix`, optional `comment`) or reopen (`state` `open`). Write role, or a security manager. | `repo`, `id`, `state` | `security:write` | |
| Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar | 548 | | [`secret_locations`](/reference/api/secret-scanning/list-secret-scanning-locations/) | Every file, line and commit a secret is in. | `repo`, `id` | `security:read` | |
| 549 | | [`bypass`](/reference/api/secret-scanning/bypass-push-protection/) | Push past push protection for a blocked secret with a `reason` (`false_positive`, `used_in_tests`, `will_fix_later`), or ask to when the workspace delegates bypasses. | `repo`, `id`, `reason` | `security:write` | | |
| 550 | | [`check_validity`](/reference/api/secret-scanning/check-secret-validity/) | Ask a landed secret's issuer whether it still works. | `repo`, `id` | `security:write` | | |
| 551 | | [`bypass_requests`](/reference/api/secret-scanning/list-bypass-requests/) | A workspace's bypass requests, pending first; filter with `state` and `repo`. | `workspace` | `security:read` | | |
| 552 | | [`review_bypass`](/reference/api/secret-scanning/review-bypass-request/) | `decision` `approve` or `deny` (owners and the repository's admins), or `cancel` your own. | `workspace`, `id`, `decision` | `security:write` | | |
| 553 | | [`patterns`](/reference/api/secret-scanning/list-custom-patterns/) | Custom patterns: a repository's and its workspace's (`repo`), or a workspace's (`workspace`). | None | `security:read` | | |
| 554 | | [`create_pattern`](/reference/api/secret-scanning/create-custom-pattern/) | Create a pattern: `pattern_name`, `pattern`, optional `before`, `after`, `test_strings`, and `publish`. | `pattern_name`, `pattern` | `security:write` | | |
| 555 | | [`update_pattern`](/reference/api/secret-scanning/update-custom-pattern/) | Change, publish or unpublish one. | `id`, `pattern_name`, `pattern` | `security:write` | | |
| 556 | | [`delete_pattern`](/reference/api/secret-scanning/delete-custom-pattern/) | Delete one; its alerts stay. | `id` | `security:write` | | |
| 557 | | [`dry_run_pattern`](/reference/api/secret-scanning/dry-run-custom-pattern/) | Run a `pattern` over the default branch without saving it. | `pattern` | `security:write` | | |
| 558 | | [`code_alerts`](/reference/api/code-scanning/list-code-scanning-alerts/) | Code scanning alerts, open and worst first: `repo`, or `workspace`. Filter with `state`, `severity`, `tool`, `rule_id`. | None | `security:read` | | |
| 559 | | [`code_alert`](/reference/api/code-scanning/get-code-scanning-alert/) | One alert by `number`, with its activity and analyses. | `repo`, `number` | `security:read` | | |
| 560 | | [`update_code_alert`](/reference/api/code-scanning/update-code-scanning-alert/) | Dismiss (`state` `dismissed`, `dismissed_reason` `false_positive`, `wont_fix` or `used_in_tests`) or reopen. | `repo`, `number`, `state` | `security:write` | | |
| 561 | | [`analyses`](/reference/api/code-scanning/list-code-scanning-analyses/) | Analyses, newest first. | `repo` | `security:read` | | |
| 562 | | [`upload_sarif`](/reference/api/code-scanning/upload-sarif/) | Upload a SARIF 2.1.0 file, gzipped and base64-encoded, for a `commit_sha` and `ref`. | `repo`, `commit_sha`, `ref`, `sarif` | `security:write` | | |
| 563 | | [`sarif_upload`](/reference/api/code-scanning/get-sarif-upload/) | Whether an upload was read, its analyses and errors. | `repo`, `id` | `security:read` | | |
| 564 | | [`fix`](/reference/api/code-scanning/fix-security-alert/) | Put g1t on an issue to fix a code scanning, vulnerability or secret alert. Also needs `issues:write` and `agents:run`. | `repo`, `id` | `security:write` | | |
| 565 | | [`vulnerability_alerts`](/reference/api/supply-chain/list-vulnerability-alerts/) | Vulnerability alerts: `repo`, or `workspace`. Filter with `state`, `severity`, `ecosystem`, `package`. | None | `security:read` | | |
| 566 | | [`vulnerability_alert`](/reference/api/supply-chain/get-vulnerability-alert/) | One alert by `id`. | `repo`, `id` | `security:read` | | |
| 567 | | [`update_vulnerability_alert`](/reference/api/supply-chain/update-vulnerability-alert/) | Dismiss (`state` `dismissed`, `reason` `fix_started`, `no_bandwidth`, `tolerable_risk`, `inaccurate` or `not_used`) or reopen. | `repo`, `id`, `state` | `security:write` | | |
| 568 | | [`dependency_graph`](/reference/api/supply-chain/get-dependency-graph/) | Every package the lockfiles resolve, direct or transitive, with licenses. | `repo` | `security:read` | | |
| 569 | | [`sbom`](/reference/api/supply-chain/get-sbom/) | The dependency graph as an SPDX 2.3 document, in `sbom`. | `repo` | `security:read` | | |
| 570 | | [`compare_dependencies`](/reference/api/supply-chain/compare-dependencies/) | What changes between `basehead` (`base...head`), and whether it passes dependency review. | `repo`, `basehead` | `security:read` | | |
| 571 | | [`settings`](/reference/api/security-settings/get-security-settings/) | A repository's security settings, and whether the paid features are on. | `repo` | `security:read` | | |
| Merge main (membership, two-factor, GitHub repo roles) into tokens | 572 | | [`update_settings`](/reference/api/security-settings/update-security-settings/) | Change `code_scanning_gate`, `dependency_review`, `review_fail_on`, `review_deny_licenses`, `review_comment`. Admin role, or a security manager. | `repo` | `security:write` | |
| Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar | 573 | | [`workspace_settings`](/reference/api/security-settings/get-workspace-security-settings/) | A workspace's delegated bypass and validity checks. | `workspace` | `security:read` | |
| Merge main (membership, two-factor, GitHub repo roles) into tokens | 574 | | [`update_workspace_settings`](/reference/api/security-settings/update-workspace-security-settings/) | Turn `delegated_bypass` or `validity_checks` on or off. Owners and security managers. | `workspace` | `security:write` | |
| Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar | 575 | | [`overview`](/reference/api/security-settings/get-security-overview/) | A workspace's alerts by type and severity, trends and coverage. | `workspace` | `security:read` | |
| 576 | ||
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 577 | ## `webhook` |
| Docs: integrations, and your own model provider | 578 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 579 | HTTPS addresses that are sent signed events as they happen. Give `repo` for |
| 580 | a repository's webhooks, or `workspace` for a workspace's own. See | |
| 581 | [webhooks](/guides/webhooks/). | |
| Docs: integrations, and your own model provider | 582 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 583 | | Action | What it does | Required | Scope | |
| Docs: integrations, and your own model provider | 584 | | --- | --- | --- | --- | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 585 | | [`list`](/reference/api/webhooks/list-webhooks/) | The webhooks, with how each one's latest delivery went. A repository's need the Admin role; a workspace's, a member. | None | `webhooks:read` | |
| 586 | | [`create`](/reference/api/webhooks/create-webhook/) | Send events to an HTTPS address: `events` to choose them, `secret` to sign with. A ping is sent at once. | `url` | `webhooks:admin` | | |
| 587 | | [`update`](/reference/api/webhooks/update-webhook/) | Change its `url`, `events`, or whether it is `active`. | `id` | `webhooks:admin` | | |
| 588 | | [`delete`](/reference/api/webhooks/delete-webhook/) | Remove it and its delivery log. | `id` | `webhooks:admin` | | |
| 589 | | [`ping`](/reference/api/webhooks/ping-webhook/) | Send it a ping. | `id` | `webhooks:admin` | | |
| 590 | | [`list_deliveries`](/reference/api/webhooks/list-webhook-deliveries/) | Its latest deliveries, with request, response and retries. | `id` | `webhooks:read` | | |
| 591 | | [`redeliver`](/reference/api/webhooks/redeliver-webhook/) | Send a delivery again. | `delivery` | `webhooks:admin` | | |
| Docs: integrations, and your own model provider | 592 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 593 | ## `access` |
| Webhooks: every event, to your own addresses, signed and retried | 594 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 595 | Who can do what in a repository: its people and their |
| 596 | [roles](/guides/access-and-roles/) (read, triage, write, maintain and | |
| Merge branch 'worktree-agent-a5a5de74d8863d554' into worktree-agent-a16631325aecf58ca | 597 | admin), invitations, outside collaborators, a workspace's base |
| 598 | permission, and a repository's [deploy keys](/guides/git/#deploy-keys). | |
| 599 | An agent's token cannot use any of these. | |
| Webhooks: every event, to your own addresses, signed and retried | 600 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 601 | | Action | What it does | Required | Scope | |
| Webhooks: every event, to your own addresses, signed and retried | 602 | | --- | --- | --- | --- | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 603 | | [`list_collaborators`](/reference/api/access/list-collaborators/) | Everyone with a role on it, with the role, where it comes from (`owner`, `base` or `direct`) and whether they are members; the base permission; and, with the Admin role, pending invitations. Needs the Write role. | `repo` | `access:read` | |
| 604 | | [`get_permission`](/reference/api/access/get-collaborator-permission/) | Someone's role, where it comes from, and what it lets them do. Needs the Write role, or to be about yourself. | `repo`, `username` | `access:read` | | |
| Merge Stripe Tax, the card fee on card payments, and one free workspace per person | 605 | | [`add_collaborator`](/reference/api/access/add-collaborator/) | Give someone a role by username or email address. A member gets it at once; anyone else is invited, and becomes an outside collaborator on accepting. Needs the Admin role. On a free workspace, only members: inviting anyone else is refused with `402` until it starts the plan. | `repo`, `invitee`, `role` | `access:admin` | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 606 | | [`update_collaborator`](/reference/api/access/update-collaborator/) | Change someone's direct role, or their pending invitation's. Needs the Admin role. | `repo`, `username`, `role` | `access:admin` | |
| 607 | | [`remove_collaborator`](/reference/api/access/remove-collaborator/) | Take away someone's direct role. Needs the Admin role, or to be your own. | `repo`, `username` | `access:admin` | | |
| 608 | | [`list_invitations`](/reference/api/access/list-repo-invitations/) | Its pending invitations. Needs the Admin role. | `repo` | `access:read` | | |
| 609 | | [`revoke_invitation`](/reference/api/access/revoke-repo-invitation/) | Withdraw a pending invitation. Needs the Admin role. | `repo`, `id` | `access:admin` | | |
| 610 | | [`set_base_permission`](/reference/api/access/set-base-permission/) | What every member gets on each repository: `none`, `read`, `write` (the default) or `admin`. Owners only. | `workspace`, `base_permission` | `access:admin` | | |
| 611 | | [`list_outside_collaborators`](/reference/api/access/list-outside-collaborators/) | People with roles on its repositories who are not members, and what they can reach. Owners only. | `workspace` | `access:read` | | |
| Merge branch 'worktree-agent-a5a5de74d8863d554' into worktree-agent-a16631325aecf58ca | 612 | | [`list_deploy_keys`](/reference/api/access/list-deploy-keys/) | Its deploy keys: SSH keys that reach this one repository, each with its `fingerprint`, `read_only`, who added it and `last_used_at`. Needs the Admin role. | `repo` | `access:read` | |
| 613 | | [`get_deploy_key`](/reference/api/access/get-deploy-key/) | One deploy key. Needs the Admin role. | `repo`, `id` | `access:read` | | |
| 614 | | [`add_deploy_key`](/reference/api/access/create-deploy-key/) | Add a deploy key: `key` (an OpenSSH public key), `title`, and `read_only`, true unless you send false. A key registered anywhere already is refused. Needs the Admin role. | `repo`, `key` | `access:admin` | | |
| 615 | | [`remove_deploy_key`](/reference/api/access/delete-deploy-key/) | Delete a deploy key; anything using it stops at once. Needs the Admin role. | `repo`, `id` | `access:admin` | | |
| Webhooks: every event, to your own addresses, signed and retried | 616 | |
| Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar | 617 | ## `team` |
| 618 | ||
| 619 | [Teams](/guides/teams/): groups of a workspace's members, given roles on | |
| 620 | repositories together, mentioned as `@workspace/team` and asked to review | |
| 621 | together. Name a team by `workspace` and its slug, `team`. Any member may | |
| 622 | create one; the workspace's owners and the team's maintainers manage it. A | |
| 623 | `secret` team is seen only by its own people and the owners. Changes are | |
| 624 | for people: an agent's or a workspace's token cannot make them. | |
| 625 | ||
| 626 | | Action | What it does | Required | Scope | | |
| 627 | | --- | --- | --- | --- | | |
| 628 | | [`list`](/reference/api/teams/list-teams/) | The workspace's teams you can see, yours first; `query` narrows by name or slug. Members only. | `workspace` | `workspace:read` | | |
| 629 | | [`get`](/reference/api/teams/get-team/) | One team: its `visibility`, `parent`, `notify`, `review_assignment`, counts, your `viewer_role` and whether you may change it (`can_manage`). | `workspace`, `team` | `workspace:read` | | |
| Merge branch 'worktree-agent-ad7c6d88d93adc817' | 630 | | [`create`](/reference/api/teams/create-team/) | Create a team; you become its maintainer. Members may, unless the workspace's `team_creation` is `owners`. `slug` is made from `name` unless given; `visibility`, `parent`, `notify`, and `members` to add by username. | `workspace`, `name` | `workspace:admin` | |
| Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar | 631 | | [`update`](/reference/api/teams/update-team/) | Change its `name`, `slug`, `description`, `visibility`, `parent` (`""` for none), `notify` or `review_assignment`. Owners and its maintainers. | `workspace`, `team` | `workspace:admin` | |
| 632 | | [`delete`](/reference/api/teams/delete-team/) | Delete it; its child teams move up to its parent, and the roles it gave go. Owners and its maintainers. | `workspace`, `team` | `workspace:admin` | | |
| 633 | | [`list_members`](/reference/api/teams/list-team-members/) | Its people and their `role` (`member` or `maintainer`); with `include_child_teams`, its child teams' people too, each with `via`. | `workspace`, `team` | `workspace:read` | | |
| 634 | | [`set_member`](/reference/api/teams/set-team-member/) | Add a member of the workspace, or change their `role`. Owners and its maintainers. | `workspace`, `team`, `username` | `workspace:admin` | | |
| 635 | | [`remove_member`](/reference/api/teams/remove-team-member/) | Take someone out. Owners and its maintainers; anyone may leave. | `workspace`, `team`, `username` | `workspace:admin` | | |
| 636 | | [`list_child_teams`](/reference/api/teams/list-child-teams/) | The teams nested directly under it. | `workspace`, `team` | `workspace:read` | | |
| 637 | | [`list_repos`](/reference/api/teams/list-team-repos/) | The repositories it has a role on, with `inherited_from` for one a parent gives it. | `workspace`, `team` | `workspace:read` | | |
| 638 | | [`set_repo`](/reference/api/teams/set-team-repo/) | Give it a `role` (read, triage, write, maintain or admin) on a repository of its workspace, named by `repo` (its name, or `owner/name`). Admin role on the repository. | `workspace`, `team`, `repo`, `role` | `access:admin` | | |
| 639 | | [`remove_repo`](/reference/api/teams/remove-team-repo/) | Take its role on a repository away. Admin role on the repository, an owner, or one of its maintainers. | `workspace`, `team`, `repo` | `access:admin` | | |
| 640 | | [`set_review_assignment`](/reference/api/teams/set-team-review-assignment/) | Whom it picks when asked to review: `enabled`, `algorithm` (`round_robin` or `load_balance`), `count` (1 to 10), `skip_busy` and `busy_at`, `include_child_teams`, `excluded` and `notify_team`. Fields left out keep their value. Owners and its maintainers. | `workspace`, `team` | `workspace:admin` | | |
| 641 | | [`list_user_teams`](/reference/api/teams/list-user-teams/) | The teams someone is in. Members only. | `workspace`, `username` | `workspace:read` | | |
| 642 | ||
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 643 | ## `workspace` |
| GitHub Actions on g1t, part three: .g1t/workflows, the pages, the docs | 644 | |
| Docs: the workspace's page and tabs, the Projects tab, the sidebar, pins | 645 | Workspaces own repositories: create, update or delete one, invite members, |
| Merge main (membership, two-factor, GitHub repo roles) into tokens | 646 | manage its members and owners, |
| Merge branch 'main' into worktree-agent-a69aeabc4b0deeb97 | 647 | connect [integrations](/guides/integrations/) and model providers, read and |
| 648 | change its [projects](/guides/projects/) (what each is, where it runs, its | |
| 649 | links), and keep your own | |
| 650 | [pinned projects](/guides/workspaces/#pinned-and-recent-projects) at the top | |
| 651 | of its sidebar. See [workspaces](/guides/workspaces/). | |
| GitHub Actions on g1t, part three: .g1t/workflows, the pages, the docs | 652 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 653 | | Action | What it does | Required | Scope | |
| GitHub Actions on g1t, part three: .g1t/workflows, the pages, the docs | 654 | | --- | --- | --- | --- | |
| Merge main (membership, two-factor, GitHub repo roles) into tokens | 655 | | [`get`](/reference/api/workspaces/get-workspace/) | One workspace you belong to: its name, description and member count, its `base_permission` and `team_creation`, its [member privileges](/guides/workspaces/#member-privileges) (`members_can_…`) and `two_factor_requirement_enabled`. Members only. | `workspace` | `workspace:read` | |
| Merge Stripe Tax, the card fee on card payments, and one free workspace per person | 656 | | [`create`](/reference/api/workspaces/create-workspace/) | Create a workspace. A new one is free, and each person owns at most one free workspace: refused with `402` while you own one, until it is on the plan or deleted. See [one free workspace per person](/guides/usage-and-billing/#one-free-workspace-per-person). | `slug` | `workspace:admin` | |
| Merge main (membership, two-factor, GitHub repo roles) into tokens | 657 | | [`update`](/reference/api/workspaces/update-workspace/) | Change its display name and description, who may create its teams (`team_creation`: `members` or `owners`), its member privileges, whether it requires two-factor authentication (`two_factor_requirement_enabled`), and with the `access:admin` scope too, its `base_permission`. Only the fields given change; the slug never does. Owners only. | `workspace` | `workspace:admin` | |
| 658 | | [`list_members`](/reference/api/members/list-members/) | Its members, owners first, each with `role`, `org_roles` and, for owners asking, `two_factor`. Members only. | `workspace` | `workspace:read` | | |
| 659 | | [`update_member`](/reference/api/members/update-member/) | Make someone an owner or a member (`role`), and give or take away `org_roles` (`billing_manager`, `security_manager`). Never leaves the workspace without an owner. Owners only. | `workspace`, `username` | `workspace:admin` | | |
| 660 | | [`remove_member`](/reference/api/members/remove-member/) | Remove someone; their roles on its repositories and their teams go too. Owners only. | `workspace`, `username` | `workspace:admin` | | |
| 661 | | [`transfer_ownership`](/reference/api/members/transfer-ownership/) | Hand it to another member: they become an owner, you a member. Owners only. | `workspace`, `username` | `workspace:admin` | | |
| 662 | | [`leave`](/reference/api/members/leave-workspace/) | Leave it yourself. Never the last owner. | `workspace` | `account:write` | | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 663 | | [`delete`](/reference/api/workspaces/delete-workspace/) | Delete an empty workspace whose billing is settled; `confirm` is its slug. Owners only. See [deleting a workspace](/guides/workspaces/#delete-a-workspace). | `workspace`, `confirm` | `workspace:admin` | |
| 664 | | [`list_invites`](/reference/api/invites/list-workspace-invites/) | A workspace's invites. Owners only. | `workspace` | `workspace:read` | | |
| Merge workspace invitations: nobody joins a workspace without saying yes, people are found by username, your own invites can bring someone in, and nobody is left without a workspace (identity 0040) | 665 | | [`invite_member`](/reference/api/invites/invite-member/) | Invite someone into a workspace by `username` or `email`, to join with `role` (`member` or `owner`; `member` when left out). Nobody joins without saying yes: they get an invitation to accept or decline. Owners only. A free workspace cannot invite: refused with `402` until it starts the plan. | `workspace`, and `username` or `email` | `workspace:admin` | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 666 | | [`revoke_invite`](/reference/api/invites/revoke-workspace-invite/) | Revoke a workspace's pending invite. Owners only. | `workspace`, `id` | `workspace:admin` | |
| 667 | | [`list_integrations`](/reference/api/integrations/list-integrations/) | The workspace's connections. Secrets are never returned. Members only. | `workspace` | `workspace:read` | | |
| 668 | | [`connect_integration`](/reference/api/integrations/connect-integration/) | Connect a model provider (Anthropic, OpenAI, Gemini, or a compatible endpoint), Sentry, Datadog, a webhook, Jira or Linear, with `config` and `secret`. Owners only. | `workspace`, `provider` | `workspace:admin` | | |
| AI Gateway: OpenAI's format, open models, and your own providers | 669 | | [`update_integration`](/reference/api/integrations/update-integration/) | Change one: its `name`, its `config` (replaced whole) or its `secret` (write-only, never returned). Rotates a model provider's key, or sets `config.gateway_models`, the [AI Gateway](/guides/ai-gateway/#your-own-providers) models it takes. Owners only. | `workspace`, `id` | `workspace:admin` | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 670 | | [`disconnect_integration`](/reference/api/integrations/disconnect-integration/) | Remove it and its secrets. Owners only. | `workspace`, `id` | `workspace:admin` | |
| 671 | | [`test_integration`](/reference/api/integrations/test-integration/) | Check its credentials against the system it connects to. Owners only. | `workspace`, `id` | `workspace:admin` | | |
| 672 | | [`get_model_routes`](/reference/api/integrations/get-model-routes/) | Which provider and model each kind of work goes to. Members only. | `workspace` | `workspace:read` | | |
| Merge branch 'model-routing' | 673 | | [`set_model_routes`](/reference/api/integrations/set-model-routes/) | Replace them: each route has `task`, `connection_id` (null for g1t's models) and `model` (on g1t's models: `small`, `large`, `frontier`, or null for Auto). Owners only. | `workspace`, `routes` | `workspace:admin` | |
| Merge branch 'main' into worktree-agent-a69aeabc4b0deeb97 | 674 | | [`list_projects`](/reference/api/projects/list-projects/) | Its projects you can see, by name: each with its `kind` and `kind_reason`, where it `runs` and its `production_url`, its repository and `root_dir`, and its `links`. | `workspace` | `repo:read` | |
| 675 | | [`get_project`](/reference/api/projects/get-project/) | One project, with what a person set (`setting`) and what detection decides (`detected`). | `workspace`, `project` | `repo:read` | | |
| 676 | | [`update_project`](/reference/api/projects/update-project/) | Change its `name`, `description`, `root_dir`, `kind`, `runs`, `production_url`, `homepage`, `docs_url` or `links`; only what you give changes. `auto` leaves `kind` or `runs` to detection, null clears a link or goes back to the repository's, and `links` replaces its other links (at most 10). Maintain role or higher. | `workspace`, `project` | `repo:write` | | |
| Docs: the workspace's page and tabs, the Projects tab, the sidebar, pins | 677 | | [`list_pinned_projects`](/reference/api/pinned-projects/list-pinned-projects/) | Your pinned projects in it, in your order, each with its `position`. Your own: a personal token or an OAuth sign-in. | `workspace` | `account:read` | |
| 678 | | [`pin_project`](/reference/api/pinned-projects/pin-project/) | Pin a project you can see, at `position` (0 first) or at the end; at most 8 a workspace. Returns your pins. | `workspace`, `project` | `account:write` | | |
| 679 | | [`unpin_project`](/reference/api/pinned-projects/unpin-project/) | Unpin it. Returns your pins. | `workspace`, `project` | `account:write` | | |
| 680 | | [`reorder_pinned_projects`](/reference/api/pinned-projects/reorder-pinned-projects/) | Put your pins in a new order: `projects` names each pinned project's slug once. | `workspace`, `projects` | `account:write` | | |
| Merge rulesets: branch and tag rules, agent-first, enforced on push and merge | 681 | | [`list_rulesets`](/reference/api/rules/list-workspace-rulesets/) | The workspace's own [rulesets](/guides/rules/). Members only. | `workspace` | `workspace:read` | |
| 682 | | [`get_ruleset`](/reference/api/rules/get-workspace-ruleset/) | One of them by `id`. Members only. | `workspace`, `id` | `workspace:read` | | |
| 683 | | [`create_ruleset`](/reference/api/rules/create-workspace-ruleset/) | Create one, with `conditions.repository` choosing its repositories. Owners only. | `workspace` | `workspace:admin` | | |
| 684 | | [`update_ruleset`](/reference/api/rules/update-workspace-ruleset/) | Change one. Owners only. | `workspace`, `id` | `workspace:admin` | | |
| 685 | | [`delete_ruleset`](/reference/api/rules/delete-workspace-ruleset/) | Delete one. Owners only. | `workspace`, `id` | `workspace:admin` | | |
| 686 | | [`rule_evaluations`](/reference/api/rules/list-workspace-rule-evaluations/) | How rules judged changes across its repositories, with insights. Members only. | `workspace` | `workspace:read` | | |
| One kind of access token; presence and status; usernames keep their case; the tour is a miniature of the real app; icons for password managers | 687 | | [`get_token_policy`](/reference/api/personal-access-tokens/get-token-policy/) | Its [rules for personal access tokens](/guides/authentication/#a-workspaces-rules-for-tokens): `allow_tokens_for_this_workspace`, `allow_tokens_for_all_workspaces`, `require_approval`, `max_lifetime_days` and `forbid_no_expiry`. Members only. | `workspace` | `workspace:read` | |
| API and MCP for a workspace's personal access token rules, members' tokens and approvals | 688 | | [`set_token_policy`](/reference/api/personal-access-tokens/set-token-policy/) | Change them; fields left out stay. `max_lifetime_days` of 0 removes the limit. Owners only, as people. | `workspace` | `workspace:admin` | |
| One kind of access token; presence and status; usernames keep their case; the tour is a miniature of the real app; icons for password managers | 689 | | [`list_member_tokens`](/reference/api/personal-access-tokens/list-member-tokens/) | The personal access tokens of its members and outside collaborators that can reach it, with their owner, permissions, scopes, reach (`workspace`, `repository_selection`, `repositories`), last use, expiry, and whether each reaches it now (`reaches`, `blocked_by`). Never the token itself. Owners only, as people. | `workspace` | `access:read` | |
| 690 | | [`list_token_requests`](/reference/api/personal-access-tokens/list-token-requests/) | Tokens made for it that wait for approval. Owners only, as people. | `workspace` | `access:read` | | |
| API and MCP for a workspace's personal access token rules, members' tokens and approvals | 691 | | [`review_token_request`](/reference/api/personal-access-tokens/review-token-request/) | Approve or deny one: `decision` is `approve` or `deny`, with an optional `reason` its owner is shown. Owners only, as people. | `workspace`, `id`, `decision` | `access:admin` | |
| One kind of access token; presence and status; usernames keep their case; the tour is a miniature of the real app; icons for password managers | 692 | | [`revoke_member_token`](/reference/api/personal-access-tokens/revoke-member-token/) | Take a member's token out of the workspace, with an optional `reason`. A token made for it stops reaching it; one made for all of its owner's workspaces keeps working elsewhere. Owners only, as people. | `workspace`, `id` | `access:admin` | |
| GitHub Actions on g1t, part three: .g1t/workflows, the pages, the docs | 693 | |
| Usage, Billing settings and prepaid AI credit; fixes from the UX audit | 694 | ## `billing` |
| 695 | ||
| Merge the AI Gateway: Anthropic's Messages API on a workspace's tokens | 696 | A workspace's billing: its usage, its budget, its AI credit, its |
| 697 | invoices and its [AI Gateway](/guides/ai-gateway/) requests. `usage` is the default action. Amounts are whole millionths of a | |
| Usage, Billing settings and prepaid AI credit; fixes from the UX audit | 698 | dollar (`_micros`), or cents where a field says `_cents`. Members of the |
| 699 | workspace read it, a workspace's own token included. Changing the budget | |
| 700 | and buying AI credit are for its owners, as people: signed in or with a | |
| 701 | personal access token. A workspace's token and g1t's agents never change | |
| 702 | billing, whatever their scopes, and no preset but full access includes | |
| 703 | `billing:write`. See [usage and billing](/guides/usage-and-billing/). | |
| 704 | ||
| 705 | | Action | What it does | Required | Scope | | |
| 706 | | --- | --- | --- | --- | | |
| 707 | | [`usage`](/reference/api/billing/get-usage/) | Usage over `from` to `until` (UTC days, `until` included; the month so far when left out), narrowed by `products` and `projects`: `totals` and what paid for it, each day, and each product's meters with their daily amounts and split by project. `group_by` (`product`, `project` or `day`) adds `groups`. | `workspace` | `billing:read` | | |
| 708 | | [`budget`](/reference/api/billing/get-budget/) | The monthly spend limit (`amount_micros`, or `automatic`), `spent_micros` this month, `max_amount_micros`, `alerts`, `pause_at_limit`, `webhook` and `state`. | `workspace` | `billing:read` | | |
| 709 | | [`set_budget`](/reference/api/billing/set-budget/) | Change the limit (`amount_micros`, null for the automatic one), `alerts` (some of 50, 75, 90 and 100), `pause_at_limit` or `webhook`. Fields left out keep their value. Owners, as people. | `workspace` | `billing:write` | | |
| 710 | | [`ai_credit`](/reference/api/billing/get-ai-credit/) | AI credit left, its grants, whether runs are `blocked` for want of it, auto-reload, and what can be bought. | `workspace` | `billing:read` | | |
| 711 | | [`buy_ai_credit`](/reference/api/billing/buy-ai-credit/) | A payment page (`url`) to buy `amount_cents` of credit, in whole dollars from $10 to $1,000, for a person to open and pay; it returns to the workspace's billing page. Owners, as people. | `workspace`, `amount_cents` | `billing:write` | | |
| 712 | | [`invoices`](/reference/api/billing/list-invoices/) | Every invoice (`invoices`, in cents), g1t's itemised usage invoices (`usage_invoices`), and what the next one comes to so far (`upcoming`). | `workspace` | `billing:read` | | |
| 713 | | [`billing_details`](/reference/api/billing/get-billing-details/) | Who invoices are made out to, and the payment method on file as far as it is safe to show. | `workspace` | `billing:read` | | |
| AI Gateway: OpenAI's format, open models, and your own providers | 714 | | [`gateway_requests`](/reference/api/billing/list-gateway-requests/) | The workspace's recent [AI Gateway](/guides/ai-gateway/) requests, newest first: model, `format` (`anthropic` or `openai`), `provider` and `connection` (who served it), tokens by kind with `cache_write_hour`, `cost_micros`, `charged_micros`, `status`, `own_key` and the token that sent each. `limit` (50, at most 200) and `before` (the last page's `next`) page through them. Kept 30 days. | `workspace` | `models:read` | |
| Usage, Billing settings and prepaid AI credit; fixes from the UX audit | 715 | |
| Docs: inbox threads, reasons, subscriptions, watching, email, API and MCP | 716 | ## `notifications` |
| 717 | ||
| 718 | Your [inbox](/guides/inbox/): one thread per issue, pull request, workflow | |
| 719 | on a branch or deployment, with why you were told (`reason`), and what you | |
| 720 | subscribe to and watch. `list` is the default action. It is your own: a | |
| 721 | personal access token or an OAuth sign-in can use it, a workspace's token | |
| 722 | cannot. Name an issue or pull request by a thread's `id`, or by `repo` and | |
| 723 | `number`. | |
| 724 | ||
| 725 | | Action | What it does | Required | Scope | | |
| 726 | | --- | --- | --- | --- | | |
| 727 | | [`list`](/reference/api/notifications/list-notifications/) | Your unread threads, latest first. With `all`, read ones too; `view` `saved` or `done` lists those instead. Filter by `reason`, `severity`, `participating`, `since`, `before` or `repo`. | None | `notifications:read` | | |
| 728 | | [`get`](/reference/api/notifications/get-notification-thread/) | One thread, its last 10 activities, and your subscription to it. | `id` | `notifications:read` | | |
| 729 | | [`mark_read`](/reference/api/notifications/mark-thread-read/) | Mark a thread read, or with `read` false, unread. | `id` | `notifications:write` | | |
| 730 | | [`mark_all_read`](/reference/api/notifications/mark-notifications-read/) | Mark every thread read, or one repository's with `repo`. Threads with activity after `last_read_at` (now, when left out) stay unread. | None | `notifications:write` | | |
| 731 | | [`done`](/reference/api/notifications/mark-thread-done/) | Move a thread to Done; new activity brings it back. With `done` false, move it back now. | `id` | `notifications:write` | | |
| 732 | | [`save`](/reference/api/notifications/save-thread/) | Save a thread so it is kept, or with `saved` false, unsave it. | `id` | `notifications:write` | | |
| 733 | | [`snooze`](/reference/api/notifications/snooze-thread/) | Hide a thread until `until` (RFC 3339). Leave `until` out to bring it back now. | `id` | `notifications:write` | | |
| 734 | | [`subscription`](/reference/api/notifications/get-thread-subscription/) | Whether you are subscribed to an issue or pull request, or ignore it, and why. | `id`, or `repo` and `number` | `notifications:read` | | |
| 735 | | [`subscribe`](/reference/api/notifications/set-thread-subscription/) | Subscribe (`subscribed`, true unless you say), unsubscribe (`subscribed` false), or ignore it (`ignored` true). | `id`, or `repo` and `number` | `notifications:write` | | |
| 736 | | [`unsubscribe`](/reference/api/notifications/delete-thread-subscription/) | Unsubscribe until you comment or are mentioned. What is asked of you directly still reaches you. | `id`, or `repo` and `number` | `notifications:write` | | |
| 737 | | [`watching`](/reference/api/notifications/get-repo-subscription/) | How you watch a repository: `participating`, `all`, `ignore` or `custom`, with `events`. | `repo` | `notifications:read` | | |
| 738 | | [`watch`](/reference/api/notifications/set-repo-subscription/) | Watch a repository at a `level`, with `events` (`issues`, `pulls`, `deployments`, `security`) for `custom`. | `repo` | `notifications:write` | | |
| 739 | | [`unwatch`](/reference/api/notifications/delete-repo-subscription/) | Go back to the default: only what you take part in or are mentioned in. | `repo` | `notifications:write` | | |
| 740 | | [`watched`](/reference/api/notifications/list-watched-repos/) | The repositories you watch other than the default way. | None | `notifications:read` | | |
| 741 | ||
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 742 | ## `account` |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 743 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 744 | Who the token acts as and its workspaces, your email addresses, your |
| 745 | invites while g1t is [invite-only](/guides/authentication/#invites), and | |
| Merge workspace invitations: nobody joins a workspace without saying yes, people are found by username, your own invites can bring someone in, and nobody is left without a workspace (identity 0040) | 746 | invitations to workspaces and repositories waiting for you. `whoami` is the default |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 747 | action, and needs no scope. An agent's token and a workspace's token cannot |
| Merge email confirmation gate: a code and a link, nothing until confirmed (identity 0036) | 748 | use the email and invite actions. An account that has not confirmed its |
| 749 | email address gets `403` from every tool until it does; see | |
| 750 | [until you confirm](/guides/authentication/#until-you-confirm). | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 751 | |
| 752 | | Action | What it does | Required | Scope | | |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 753 | | --- | --- | --- | --- | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 754 | | [`whoami`](/reference/api/accounts/whoami/) | Who the access token acts as, and the workspaces it can work in. `kind` is `user`, `workspace` or `agent`. | None | None | |
| 755 | | [`list_emails`](/reference/api/accounts/list-emails/) | Your email addresses and email settings. People only. | None | `account:read` | | |
| Merge email confirmation gate: a code and a link, nothing until confirmed (identity 0036) | 756 | | [`add_email`](/reference/api/accounts/add-email/) | Add an address; g1t emails it a code and a link to confirm it. | `email`, `password` | `account:write` | |
| 757 | | [`confirm_email`](/reference/api/accounts/confirm-email/) | Confirm an address with the six-digit code from its email. See [confirming your email address](/guides/authentication/#confirming-your-email-address). | `code` | `account:write` | | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 758 | | [`remove_email`](/reference/api/accounts/remove-email/) | Remove an address; never the primary or the last confirmed one. | `email`, `password` | `account:write` | |
| 759 | | [`update_email_settings`](/reference/api/accounts/update-email-settings/) | Change `primary` or `backup` (with `password`), `private_email` or `block_private_pushes`. See [email addresses](/guides/authentication/#email-addresses). | None | `account:write` | | |
| 760 | | [`list_invites`](/reference/api/invites/list-invites/) | Your invites, newest first, and how many you have left. | None | `account:read` | | |
| Merge workspace invitations: nobody joins a workspace without saying yes, people are found by username, your own invites can bring someone in, and nobody is left without a workspace (identity 0040) | 761 | | [`create_invite`](/reference/api/invites/create-invite/) | Make an invite; with `email`, only that address can use it and it is emailed there. With `workspace`, the new account is invited to that workspace (one you own, on the g1t plan) once it confirms its address, instead of getting a workspace of its own. With `charge_workspace`, use that workspace's granted invites instead of yours. | None | `account:write` | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 762 | | [`revoke_invite`](/reference/api/invites/revoke-invite/) | Revoke a pending invite; it comes back to whoever it was charged to. | `id` | `account:write` | |
| Merge workspace invitations: nobody joins a workspace without saying yes, people are found by username, your own invites can bring someone in, and nobody is left without a workspace (identity 0040) | 763 | | [`list_workspace_invitations`](/reference/api/invites/list-invitations/) | The invitations to workspaces waiting for your answer, each with its `workspace`, the `role` it gives and who sent it. | None | `account:read` | |
| 764 | | [`accept_workspace_invitation`](/reference/api/invites/accept-invitation/) | Accept one; you join the workspace at once with its role. | `id` | `account:write` | | |
| 765 | | [`decline_workspace_invitation`](/reference/api/invites/decline-invitation/) | Decline one; whoever sent it is told. | `id` | `account:write` | | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 766 | | [`list_repository_invitations`](/reference/api/access/list-my-repo-invitations/) | The invitations to repositories waiting for your answer. | None | `account:read` | |
| 767 | | [`accept_repository_invitation`](/reference/api/access/accept-repo-invitation/) | Accept one; its role is yours at once. | `id` | `account:write` | | |
| 768 | | [`decline_repository_invitation`](/reference/api/access/decline-repo-invitation/) | Decline one. | `id` | `account:write` | | |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 769 | |
| 770 | ||
| The docs explain artifacts for agents and tokens: connecting an agent has an Artifacts section on finding, reading, editing and making them, the MCP reference lists the artifact tool's actions with their scopes, the scope tables name artifacts:read, artifacts:write and artifacts:admin, and the artifacts plan records what Phase 3 decided. | 771 | ## `artifact` |
| 772 | ||
| 773 | A workspace's artifacts: its docs, and later its slides, designs and | |
| 774 | dashboards. Each action runs as you: it finds and opens only what you can | |
| 775 | open, and changes only what your role on it allows, whatever the token's | |
| 776 | scope. Name one by its id (`fol_…`) or its link as `artifact_id`, and its | |
| 777 | space by slug or id. Not workflow runs' artifacts, which are the | |
| 778 | `workflow` tool's. Slides, designs and dashboards answer `422` saying they | |
| 779 | are not here yet. A workspace's own token cannot use this tool. See | |
| 780 | [artifacts for agents](/guides/bring-your-own-agent/#artifacts). | |
| 781 | ||
| 782 | | Action | What it does | Required | Scope | | |
| 783 | | --- | --- | --- | --- | | |
| 784 | | [`list`](/reference/api/artifacts/list-workspace-artifacts/) | The artifacts you can open, most recently edited first, with your role on each. Narrow with `tab` (`all`, `yours`, `shared`), `kind`, `space`, `project` and `q`; page with `cursor`. `state` `trashed` lists what you can restore. | `workspace` | `artifacts:read` | | |
| 785 | | [`search`](/reference/api/artifacts/search-workspace-artifacts/) | Search them by words and meaning; each hit has the passage that matched (`snippet`, `heading`). | `workspace`, `q` | `artifacts:read` | | |
| 786 | | [`get`](/reference/api/artifacts/get-workspace-artifact/) | One artifact: kind, title, space, owner, your `viewer_role`, general access, whether it is private or stale, and `html_url`. | `workspace`, `artifact_id` | `artifacts:read` | | |
| 787 | | [`read`](/reference/api/artifacts/get-workspace-artifact-content/) | Its content: a doc's Markdown, its top-level `blocks` with ids, and `can` (read, suggest, edit). | `workspace`, `artifact_id` | `artifacts:read` | | |
| 788 | | [`versions`](/reference/api/artifacts/list-workspace-artifact-versions/) | Its saved versions, newest first, with who made each. | `workspace`, `artifact_id` | `artifacts:read` | | |
| 789 | | [`access`](/reference/api/artifacts/get-workspace-artifact-access/) | Who can open it: its owner, who it is shared with and how, general access, and whether you may change it. | `workspace`, `artifact_id` | `artifacts:read` | | |
| 790 | | [`templates`](/reference/api/artifacts/list-workspace-artifact-templates/) | Templates to start one from, built-in and the workspace's; narrow with `kind`. | `workspace` | `artifacts:read` | | |
| 791 | | [`spaces`](/reference/api/artifacts/list-workspace-artifact-spaces/) | The spaces in your Artifacts sidebar, with your role in each. | `workspace` | `artifacts:read` | | |
| 792 | | [`query_data`](/reference/api/artifacts/query-workspace-dataset/) | Run a dataset `query` as you, over what you can read. Answers that dashboards are not here yet until they ship. | `workspace`, `query` | `artifacts:read` | | |
| 793 | | [`create`](/reference/api/artifacts/create-workspace-artifact/) | Make one from `markdown` or a `template_id`, in a `space`, under a `parent_id`, or in your Private. `kind` is `doc`; the others are not here yet. | `workspace` | `artifacts:write` | | |
| 794 | | [`update`](/reference/api/artifacts/update-workspace-artifact/) | Change its `title` or `icon`, or move it to a `space` (`private` for your Private) or under a `parent_id`. | `workspace`, `artifact_id` | `artifacts:write` | | |
| 795 | | [`edit`](/reference/api/artifacts/edit-workspace-artifact/) | Change its content: `markdown` with a `target` (`append`, `document`, a `section` by `heading`, or `blocks`). Made with the edit role; a suggestion with the comment role or `suggest_only`. | `workspace`, `artifact_id` | `artifacts:write` | | |
| 796 | | [`trash`](/reference/api/artifacts/trash-workspace-artifact/) | Move it, and what is under it, to the trash; deleted for good after 30 days. | `workspace`, `artifact_id` | `artifacts:write` | | |
| 797 | | [`restore`](/reference/api/artifacts/restore-workspace-artifact/) | Bring it back from the trash. | `workspace`, `artifact_id` | `artifacts:write` | | |
| 798 | | [`restore_version`](/reference/api/artifacts/restore-workspace-artifact-version/) | Make an earlier version its content again, as a new version. | `workspace`, `artifact_id`, `version_id` | `artifacts:write` | | |
| 799 | | [`share`](/reference/api/artifacts/set-workspace-artifact-access/) | Share it with a `username`, `team` or `agent` at a `role` (`view`, `comment`, `edit`, `manage`, or `none` to take access away); set `general_access` and `general_role`, `inherit` or `agent_mode`. Takes full access to it. | `workspace`, `artifact_id` | `artifacts:admin` | | |
| 800 | | [`purge`](/reference/api/artifacts/purge-workspace-artifact/) | Delete one in the trash for good. Takes full access to it. | `workspace`, `artifact_id` | `artifacts:admin` | | |
| 801 | ||
| g1t is one name: its agent's work, commits and comments show as @g1t, and nobody can claim g1t or g1t-agent | 802 | ## What g1t can use |
| Keep g1t's own runs off the model proxy until it holds g1t's key | 803 | |
| g1t is one name: its agent's work, commits and comments show as @g1t, and nobody can claim g1t or g1t-agent | 804 | g1t works with a [run credential](/guides/working-with-g1t/#credentials): |
| 805 | a token bound to its run and its own repository, acting as `g1t` on | |
| Agents get guardrails, run credentials, an audit log, a context hub, repository instructions and mentions; security upkeep; snake_case API | 806 | behalf of the person who started the work, and only while that person is |
| Invite-only launch: sign in with GitHub, repository access and lifecycle, many emails, a new look | 807 | still a member of the workspace or has a role on one of its repositories. It |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 808 | has that person's role on its repository, but never more than Write. Which |
| 809 | actions it may use depends on the kind of run. | |
| Agents get guardrails, run credentials, an audit log, a context hub, repository instructions and mentions; security upkeep; snake_case API | 810 | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 811 | | Run | Actions | |
| Agents get guardrails, run credentials, an audit log, a context hub, repository instructions and mentions; security upkeep; snake_case API | 812 | | --- | --- | |
| Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar | 813 | | Implement, revise, answer | Reading: `repository` `get`, `list_labels`, `list_milestones`, `get_milestone` and `list_events`; `issue` `list`, `get` and `labels`; `pull_request` `list`, `get`, `changes`, `read_session` and `merge_queue`; `memory` `recall`; `search` `code`, `context` and `entity`; `workflow` `list`, `list_runs`, `get_run` and `job_logs`. Then `issue` `create` and `comment`, `memory` `remember`, `agent` `message`, `answer` and `take_messages`, and `search` `ticket`. | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 814 | | Review | The same reading actions, and `issue` `comment`, `pull_request` `review` and `search` `ticket`. | |
| 815 | | Plan | The same reading actions, and `issue` `create` and `search` `ticket`. | | |
| 816 | | Catch up | The reading actions only. | | |
| Agents get guardrails, run credentials, an audit log, a context hub, repository instructions and mentions; security upkeep; snake_case API | 817 | |
| Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar | 818 | No agent's token can use the `workspace`, `access`, `team`, `secret`, `webhook` or |
| Docs: inbox threads, reasons, subscriptions, watching, email, API and MCP | 819 | `notifications` tools (g1t acts as `g1t`, which has no inbox), the controls of `workflow`, or `pull_request` `merge`, `agent` |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 820 | `assign` and `delegate`, `plan` `create` and `apply`, `issue` `import`, or |
| 821 | any `repository` action that creates, changes, renames, archives, | |
| Git storage hardened, pages in tens of milliseconds, honest security alerts, and costs reconciled daily | 822 | transfers, deletes, restores or purges a repository, or dismisses or |
| Teams and CODEOWNERS, labels and milestones, dependency updates, the security suite, and a clearer top bar | 823 | reopens a security alert, or the `security` actions that decide about |
| 824 | security: `update_secret_alert`, `bypass`, `review_bypass`, the pattern | |
| 825 | changes, `update_code_alert`, `update_vulnerability_alert`, `fix`, | |
| The docs explain artifacts for agents and tokens: connecting an agent has an Artifacts section on finding, reading, editing and making them, the MCP reference lists the artifact tool's actions with their scopes, the scope tables name artifacts:read, artifacts:write and artifacts:admin, and the artifacts plan records what Phase 3 decided. | 826 | `update_settings` and `update_workspace_settings`, or `artifact` `share` |
| 827 | and `purge`. Every repository it | |
| Thirteen MCP tools and classic token scopes; agents rate their confidence and can be put on an issue in one step | 828 | names must be its own. `tools/list` shows such a token only the tools and |
| 829 | actions it may use; a call to any other is refused with the rule that | |
| 830 | refused it, and recorded in the workspace's [audit log](/guides/audit-log/), | |
| 831 | as is every call it makes. |
This file's history is long; its oldest lines are credited to the oldest commit read.