MCP tools
Everything a connected agent can do, and the two things it cannot.
The tools
Moving an app
Rarely needed — a crash restarts on its own, and a machine that fails is evacuated automatically. But if an app is on a machine that is misbehaving, it can be moved:
The app is rebuilt from its current version somewhere with room, and the old container is removed only once the new one exists — so a failed move leaves it exactly where it was.
What agents cannot do
- Read an environment value back. Write-only, with no exception for automated callers.
- Delete an app. Deletion is permanent, so it stays a human decision in the panel.
- See anything about the machines beyond which ones your own apps are on — not how many exist, nor how full they are.
- Choose which machine an app is deployed or moved to.
Both limits hold regardless of what the agent is asked to do.
Revoking access
Every connected tool is listed in Settings with when it last called us. Revoking one takes effect immediately — the token stops working on the next request, and reconnecting requires your approval again.