Tools

Everything your assistant can do in your workspace over MCP. Explore tools are available to anyone you invite; Build & manage tools are owner/admin only.

Explore

read-only

get_platform_conventions: Return the Croft golden-path rules every app must follow. Read this first.
list_apps: List the apps in this workspace with their URLs, status, and last release.
get_app: Get an app's file manifest, recent releases, and secret key names.
read_file: Read a file from an app's repo.
status: Deploy + health status for an app. Use this to VERIFY a deploy finished before telling the user it's live: `live` is true only when the latest deploy has fully succeeded.
logs: Recent runtime logs for an app (relayed from its box).
list_secret_keys: List an app's secret key names (never values).
list_users: List the people in this workspace and which apps they can access.

Build & manage

owner / admin

create_app: Provisions an EMPTY app: a git repo, subdomain, port, and golden-path scaffold files ONLY. It does NOT implement the feature the user asked for and does NOT make the app live. After this you MUST write_files (the real implementation) then deploy — an app with only scaffold files is empty.
write_files: Write files into an app's repo (commits as 'Claude via Croft'). files is a list of {path, content}. This only stages code — the app stays offline until you call `deploy` next.
deploy: Commit, build (Nixpacks), and deploy the app. Returns a deploy job id; the build runs in the background. You MUST then poll status(app) until deploy_state is 'succeeded' before telling the user it's live — the job passes through queued/running first.
rollback: Re-deploy the previous release of an app.
delete_app: Permanently delete an app: removes its containers, data, and source code from the server, then deletes it. Irreversible and does NOT affect other apps or the server. Requires confirm: true — always ask the user to confirm first.
set_secret: Set (or replace) an env secret for an app. Value is stored encrypted and injected at deploy.
invite_user: Invite someone by email and grant app access. apps is 'all' or a list of app names.
grant_access: Grant an existing user access to an app.
revoke_access: Revoke a user's access to an app.
add_custom_domain: Attach a custom domain to an app. Returns the DNS records to add and verification status.

Members get the Explore tools; owners and admins get everything. Every call is scoped to your workspace and written to your activity log.