Valet

Reliability

Status and outage history · Atom feed · Watch with other listings

How to connect

Add it to any MCP client that supports remote servers.

{
  "mcpServers": {
    "valet": {
      "type": "http",
      "url": "https://api.valet.dev/mcp"
    }
  }
}

62 tools

• attach_channel

  Attach an existing organization channel to an agent, so the channel's events wake it. Find the channel with list_channels. A webhook channel lets callers outside Valet reach the agent. Attaching a channel that is already attached reports it and changes nothing. Slack needs a…

• attach_connector

  Attach an organization connector to a website or agent so it can call the connector's tools with the credential Valet holds. Attaching is a grant, and it is wider than it looks: for a website, every person who can open the page can call every tool the connector exposes. On a…

• attach_resource

  Attach a resource to an app: a named set of environment variables, such as a database's connection string, that the app reads as secrets. Name the resource. When the organization has none by that name, pass a provider from list_catalog_resources and the first call creates it…

• attach_skill

  Attach a skill to an agent so the agent can use it. Give skill as org:<name> or a bare name for a skill the organization published. The agent always follows the skill's latest version; a version pin such as @v2 is ignored, and the answer says so. An org skill must already exist…

• call_connector

  Run one tool on a connector attached to a website and return what the connector answered. It is the sampling step of building a page that calls live data: discover, attach, read the schemas, then call one tool for real before you write any page code. Call it because a schema is…

• claim_site

  Move a site published anonymously into one of the caller's Valet organizations, making it permanent. Takes the claim_token, the last part of the claim URL that the anonymous publish_site returned, not the site_token: the site_token republishes the site and can never claim it…

• create_channel

  Create a channel on an agent: a cron or heartbeat channel that wakes it on a schedule, a webhook channel that lets callers outside Valet reach it, or an mcp channel that serves it as an MCP server. The channel starts the agent's work; what the agent does when it fires is the…

• create_connector

  Create an organization connector from a Valet catalog entry. It is the step after list_catalog_connectors found the entry for the product the user named; attach_connector then lets a website's pages call it. It creates an entry whose credential is a secret. Pass each slot the…

• create_push

  Open a Git push on a website, app, agent, or skill that exists, named by name: a branch of its repository, writable for one hour, that you push source to before you publish. Use it when you can run git with network access; it sends only what changed, so a large service publishes…

• create_service

  Create an empty website, app, agent, or skill in an organization, before publishing to it. This is the first step for anything new: publish_site, publish_app, publish_agent, and publish_skill change a service that exists and refuse a name that does not. Pass kind to say which…

• destroy_channel

  Destroy a channel and its routes. This cannot be undone, so confirm with the user first. Without name, it destroys an organization channel found with list_channels; an organization channel that any agent still holds is refused, and the answer names each holder: free each with…

• destroy_checker

  Destroy one of an organization's own checkers by name. Valet stops sending release files to its URL. Confirm with the user first. A checker that a release policy names is refused: the answer names the policies, so destroy_policy them first, or point them at another checker with…

• destroy_connector

  Destroy an organization connector and its stored credential. This cannot be undone, so confirm with the user first. A connector that any website, app, or agent still holds is refused, and the answer names each holder: free each with detach_connector, then destroy it. A connector…

• destroy_memory

  Destroy one of an agent's durable memories, named by its key or by its id as list_memories shows them. The agent no longer recalls it or sees it pinned. This cannot be undone, so confirm with the user first, naming the memory. Pass exactly one of key and memory. A memory already…

• destroy_policy

  Destroy one of an organization's release policies by name. A change to a policy applies to releases not yet decided. Changing a policy's enforcement or settings never changes a decided evaluation, and a running policy evaluation keeps the checker and enforcement it started with…

• destroy_resource

  Destroy a resource and all of its data, such as every table and row in a database. This cannot be undone, so confirm with the user first. A resource attached to any app is refused, and the answer names those apps: detach it from each with detach_resource, then destroy it. The…

• destroy_service

  Permanently destroy a website, app, agent, or skill. This cannot be undone, so confirm with the user first. Pass kind to say which you mean; a name holding another kind is then refused rather than destroyed. Destroying a website or app stops serving it. Destroying an app stops…

• destroy_session

  Destroy one of an agent's conversation sessions: it leaves list_sessions and cannot be resumed, though its transcript is kept. This cannot be undone, so confirm with the user first, naming the session. A session that is running is refused; wait for it to finish. A session…

• detach_channel

  Detach a channel from an agent, ending the binding attach_channel made. The channel itself stays in the organization for other agents. The agent stops receiving the channel's events, which is the intended outcome. Detaching a channel that is not attached changes nothing. Slack…

• detach_connector

  Detach a connector from a website or agent, ending the grant attach_connector made. The connector itself stays in the organization. A page or agent that still calls it starts getting an error, which is the intended outcome. While a connector is attached to a website, everyone…

• detach_resource

  Detach a resource from an app: remove the environment variables it set and, if the app is running, ask for a restart so its next process starts without them. The state is detached when that is done, and detaching while Valet still owes the restart or the removal, which it keeps…

• detach_skill

  Detach a skill from an agent. The skill stays in the organization for other agents, including an organization copy installed from the catalog. Give a built-in's name to detach Valet's default of it. The agent is rebuilt so it stops carrying the skill. Detaching a skill that is…

• get_build

  Follow a build publish_app started: its state, the log it has written so far, and, once it succeeds, the release it produced, the URL that serves it, and its deploy: deploy_state and every process with the release it targets and the release it runs. Poll every ten to fifteen…

• get_connector

  Read one organization connector: its kind, transport, catalog entry, credential state (none, pending, active, needs reauthorization, or revoked), and the websites, apps, and agents that hold it. Use it when a connector's calls fail, or before destroying one. It never returns a…

• get_evaluation

  Follow the release evaluation of a publish: its status, each policy's evaluation with its checker, enforcement, and status, each blocking finding with the file and line or package, the rule, and how to fix it, each finding of a monitor policy the same way (monitor findings never…

• get_logs

  Read an app's or agent's recent log lines, oldest first: time, source (app or agent for the service's own output, valet for control-plane lines), process, level, and message, plus any structured attributes. It reads what Valet has buffered and returns; it never follows. Only the…

• get_service

  Get one website, app, agent, or skill by name. The result carries the fields every kind has, then a section for its kind. A website: access mode, the people it is shared with, and attached connectors. An app: each process type with its scale and current state, attached resources…

• get_session

  Read one of an agent's conversation sessions: its status, title, channel, message count, and when it started and last changed. Pass events: true for the transcript, the session's first events up to limit (default 50, at most 200). A transcript holds what users said to the agent…

• get_skill

  Get one skill by name: the organization's own when it has published one under that name, otherwise the default Valet supplies for a well-known name. Call it with governance before any work and again before any publish; that skill says what the organization expects and names the…

• get_source

  Read what is published: the files of a website, app, agent, or skill's active release. Without path it lists them; with path it returns one file's text. Pass release, a version from list_releases, to read an earlier release instead; publishing its files again rolls back. Read…

• list_catalog_channels

  List the channel kinds an agent can have and what each needs before it works: a schedule, a webhook secret, or a browser authorization. The built-in kinds come first (cron, heartbeat, webhook, mcp, slack, telegram), then the catalog entries Valet curates for services that send…

• list_catalog_connectors

  List the connectors Valet curates — the catalog an organization creates a connector from. Reach for it when list_connectors returned nothing that serves the data a page needs: the organization has no connector for it yet, and this says whether Valet has an entry for the product…

• list_catalog_resources

  List the resource providers this server can provision from, such as a PostgreSQL database or an AI model: what each one is for, its plans, the first being the default, the environment variables an attachment sets, and a guide to using it from an app. Read it before choosing a…

• list_channels

  List channels. Without name, it lists the organization's channels, each with the agents that hold it: how to find a channel to attach, or one no agent holds. With name, it lists that agent's channels, both the ones it owns and the organization channels attached to it. Each row…

• list_connector_tools

  List the connectors attached to a website, each with the tools a page served from that site can call. Read it before writing a page that calls one: the tool names and argument schemas it returns are what the page's own calls have to match, and guessing them produces a page that…

• list_connectors

  List the organization's connectors: each one's name, kind, transport, and catalog entry. It is the discovery step before attach_connector. Pass name to judge each connector against one website, app, or agent: every row then says whether that service can hold the connector and…

• list_env_vars

  List the environment variables an app or agent receives: each one's name, whether it is a secret, its scope (service for its own, org for one it inherits), and whether a service variable overrides an org one. A plain variable's value is shown; a secret's value never is…

• list_memories

  List an agent's durable memories, newest first: each one's id, key, content, whether it is pinned, and when it expires, with how many memories and pinned memories the agent holds against its limits. Pass a key to set_memory to replace a memory, or a key or id to destroy_memory…

• list_orgs

  List the Valet organizations the account belongs to, sorted by name, with the one every tool uses when you omit org_name marked as the default. Each organization lists its members (email, name, and when they joined) and its pending invitations (email, when sent, and when they…

• list_policies

  List the release policies that evaluate every publish of an organization, and the checkers it can configure: Valet's own, and the organization's, which set_checker adds. An organization checker shows its URL, its headers as written, the release files it was approved to receive…

Security scan

Recent checks