Ambiguous Workspace

Add a new tab to a sheet. Auto-generates the name if not provided.

add_sheet_tab

Use to add a JSON slide with layout/background/elements. Each typed text/image/shape/table/video/group has x, y, w, h and type fields. Give EACH title/bullet/paragraph its own positioned text element, never multiple lines/bullets together. Use • bullets, not Markdown * or -. Set fontSize/fontWeight hierarchy. If viewing a presentation, use its ID from page context.

add_slide

Copy a Drive file you can view into a task-owned attachment. The original remains independent. Re-attaching the same source returns the active attachment; a stable idempotency_key prevents replay after removal.

add_task_attachment

Add a user to a team with an optional role (admin or member). Only team admins or workspace admins can add members. Default role is 'member'. Use this when the user asks to add someone to a team or distribution list.

add_team_member

disconnect an integration

admin_integration_delete

update integration config

admin_integration_update

list all integrations for workspace

admin_integrations_list

list Slack channels via bot token

admin_integrations_slack_channels

Revoke (cancel) a pending invite. Pending only — an accepted or expired invite is refused `409 invite_not_pending`; its row is history, not a live grant.

admin_invite_delete

Resend invite email + refresh expiry. The email carries a freshly minted link, so every link sent before for this invite stops working. Pending invites only — an accepted or expired invite is refused `409 invite_not_pending`.

admin_invite_resend

List pending, accepted, and expired workspace invites, pending first and then newest. Paginated; `pending_total` counts invites awaiting acceptance. Each row also carries `delivery` — what the provider said about the latest send of that invite email, so a bounced invite is distinguishable from an ignored one.

admin_invites_list

manually add a suppression

admin_mail_suppression_create

remove a suppression

admin_mail_suppression_delete

list suppressed addresses

admin_mail_suppressions_list

Read workspace-default email notification prefs. Returns sensible defaults (all enabled) when never configured.

admin_notification_defaults_get

Partially update workspace-default email notification prefs. Emits settings.updated audit event.

admin_notification_defaults_update

Export usage stats as CSV

admin_usage_export

Daily creation counts (last 14 days, split into "last 7" + "prior 7" windows) for the four hero metrics on the Overview tab. Returns `{users, documents, messages, emails}` each with `{buckets[7], total, previous_total}` so the UI can draw a sparkline + render a 7...

admin_usage_timeseries

Get one workspace user's full admin record by id.

admin_user_get

Create and email a one-hour password-reset link. On delivery failure, returns `sent: false` with `reset_url`.

admin_user_reset_password

Suspend a user account. Suspended accounts return 403 on all API calls.

admin_user_suspend

Unsuspend a user account. Restores access to all API calls.

admin_user_unsuspend

Remove workspace logo (admin only)

admin_workspace_logo_delete

List every live API key acting as the caller or as an agent the caller manages, classified by how it connects: `connector` (a chat app approved through OAuth), `terminal` (a terminal tool set up from a setup message) or `api_key`. An admin or owner additionally sees every agent's keys; another member's own keys never appear. `setting_up` is true while a terminal tool has not yet redeemed its setup message.

agent_list_connections

Get the active workspace (name, slug, logo). Accessible to any authenticated user.

get_current_workspace

List a project's annotations, oldest date first: each is a date, an optional end date, a short text and its author, drawn on every time-series chart in the project. `from`/`to` keep only annotations overlapping that range.

analytics_annotations_list

List catalog metadata overrides for the workspace.

analytics_catalog_overrides_list

Per-event last_seen_at and 30-day volume for the workspace's tracked events.

analytics_catalog_stats

Create a saved cohort definition.

analytics_cohorts_create

Read a saved cohort's name, stored criteria and member-count snapshot by ID, without recomputing its audience. Use analytics_cohorts_list to find cohort IDs. Requires a role on the report's project; `404` otherwise.

analytics_cohorts_get

List saved cohort reports in the active workspace, including their definitions and stored member counts. Lists one Analytics project (`project_id`) and requires a role on it.

analytics_cohorts_list

Update a saved cohort definition.

analytics_cohorts_update

Create a new analytics dashboard.

analytics_dashboards_create

Read a saved analytics dashboard's name, stored query and tile layout by ID. Requires a role on the dashboard's project; unavailable dashboards return not found. Use analytics_dashboards_list to find accessible IDs. Requires a role on the report's project; `404` otherwise.

analytics_dashboards_get

List the saved analytics dashboards of one Analytics project (`project_id`), including their tile layouts. Everyone who can view the project sees every dashboard in it. Requires a role on the report's project; `404` otherwise.

analytics_dashboards_list

Update an analytics dashboard's name, dashboard query or tile layout; omitted fields are kept. Requires editor on the dashboard's project: a viewer gets 403, and a caller with no role gets 404. Every report tile must come from the same project (`400 project_mismatch`).

analytics_dashboards_update

Read one Analytics evidence event owned by the caller's source workspace. Foreign and missing IDs return 404.

analytics_events_get

List source-owned Analytics evidence with bounded filters and stable pagination. Measured group IDs never grant access.

analytics_events_list

Create a saved funnel report.

analytics_funnels_create

Read a saved funnel report's name and stored conversion query definition by ID, without running the funnel. Use analytics_funnels_list to find report IDs. Requires a role on the report's project; `404` otherwise.

analytics_funnels_get