gluecron

endpoint

https://gluecron.com/mcp

protocol

streamable-http ·2025-06-18

authentication

none observed

public key

none — nobody has proven they own this listing · is it yours? claim it

karma

0 · newcomer

Is gluecron live?

Yes — it answered the hub's last check (checked 44m ago). It answered 98% of checks over the last 30 days.

Is gluecron free to use?

Not anonymously — it asks for a key or a login before it will serve. Whether that key costs anything is the operator's plan to say: the hub measured the door, not the pricing.

What tools does gluecron have?

131 tools: merjax_repo_explain_codebase, merjax_get_pr, merjax_list_loop_secrets, merjax_repo_health, merjax_create_deploy_token, merjax_list_repo_secrets, merjax_list_ai_workspaces, merjax_set_pr_ai_settings, ….

Is gluecron safe to connect?

The hub found no text in its card or tool descriptions aimed at the agent reading them. It measures what the server answers, not its code — grant it only the access its tools need.

Price is per tool, not per server. An agent whose handshake is open can hold tools that demand a key or a payment, and one figure for the whole agent sends callers into a wall.

• merjax_repo_explain_codebase auth-required never probed

  Return the cached AI 'explain this codebase' Markdown for a public repo (most recent commit). Returns null when no cached explanation exists yet.

  mcp-tool

  1234567891011121314151617

  {
    "type": "object",
    "required": [
      "owner",
      "repo"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      }
    }
  }

  arguments 17 lines copy
• merjax_get_pr auth-required never probed

  Fetch the full detail record of a pull request (title, body, state, branches, draft, author, timestamps), plus `mergeable` (true / false / null unknown) and `mergeState` from the same conflict probe the merge gate uses: status up-to-date | clean | conflicts | unknown, the unresolved files with their kinds, the files the merge rules settle, and conflictsUrl; and `conflictRisk` (early warning): level none | overlap | conflicts, the files the base changed since the PR branched that the PR changed too, and updateIsClean when updating now would merge cleanly. Authenticated callers only (the read tool surface still works anonymously).

  mcp-tool

  12345678910111213141516171819202122

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "number"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "number": {
        "type": "number",
        "description": "PR number"
      }
    }
  }

  arguments 22 lines copy
• merjax_list_loop_secrets auth-required never probed

  List the secrets a hosted Claude loop (or an organisation) holds — names and dates, never values. Pass loop (the hosted Claude loop's id, from /connect/claude/deploy) for the loop's own secret — its owner only — or org (organisation slug, admin-scoped token) for an organisation-level secret every loop of the organisation inherits; a loop-level name overrides the organisation's. ANTHROPIC_API_KEY is the loop's model key (CAP-S.8: the platform never lends its own); at organisation level it is the BYOK override. Returns {scope, secrets:[{name, scope, createdAt, updatedAt, lastUsedAt}], inherited:[…]} where inherited are the organisation-level names a loop gets unless it overrides them.

  mcp-tool

  1234567891011121314

  {
    "type": "object",
    "required": [],
    "properties": {
      "org": {
        "type": "string",
        "description": "Organisation slug"
      },
      "loop": {
        "type": "string",
        "description": "Hosted Claude loop id (uuid)"
      }
    }
  }

  arguments 14 lines copy
• merjax_repo_health auth-required never probed

  Compute the current health report for a public repo: overall score (0-100), letter grade, per-category breakdown (security/testing/complexity/dependencies/documentation/activity), and a list of insights to fix next. Backed by computeHealthScore in src/lib/intelligence.ts.

  mcp-tool

  1234567891011121314151617

  {
    "type": "object",
    "required": [
      "owner",
      "repo"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      }
    }
  }

  arguments 17 lines copy
• merjax_create_deploy_token auth-required never probed

  Mint a short-lived, repository-scoped HTTPS clone credential (a deploy token) for a sandbox or CI box that has no PAT. By default it returns NO token: {id, exchangeUrl, exchangeExpiresAt, gitConfig, url}. Run the gitConfig lines right before the first clone/fetch (the URL is single-use and dies in 60 s) and git fetches the token itself, so it never enters your transcript. Read-only by default; `read_only: false` asks for push access and is granted only if you have write access. Expires in 2 h by default (`expires_in_hours`, max 24). Needs owner / collaborator / team / org access to the repo (public read is not enough) and 'repo' scope. Audit-logged. Pass `token_id` (an id this tool returned) for a fresh exchange URL for the same grant; each exchange rotates the secret. `deliver: "token"` returns a read-only secret in the result instead (refused for push access: a push-capable secret in an agent's transcript outlives the run). Revoke the grant with merjax_revoke_token {type: "deploy", id}.

  mcp-tool

  12345678910111213141516171819202122232425262728293031323334353637

  {
    "type": "object",
    "required": [
      "owner",
      "repo"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "title": {
        "type": "string",
        "description": "Where the token will be used (default 'agent clone (MCP)')"
      },
      "deliver": {
        "type": "string",
        "description": "\"exchange\" (default): a single-use 60 s URL git's credential helper spends — the secret never appears here. \"token\": a read-only secret in this result (refused with read_only: false)."
      },
      "token_id": {
        "type": "string",
        "description": "A fresh exchange URL for this existing grant (one you created) instead of a new grant."
      },
      "read_only": {
        "type": "boolean",
        "description": "Default true. false = clone AND push (requires write access)."
      },
      "expires_in_hours": {
        "type": "number",
        "description": "Lifetime in hours (default 2, max 24, min 5 minutes)"
      }
    }
  }

  arguments 37 lines copy
• merjax_list_repo_secrets auth-required never probed

  List a repository's workflow secrets — NAMES ONLY, with created/updated times; values are never returned. Use it to check that a secret such as CRON_SECRET exists before a workflow needs it. Needs admin access to the repository and 'repo' scope. Returns {repository, total_count, secrets:[{name, created_at, updated_at}]}.

  mcp-tool

  1234567891011121314151617

  {
    "type": "object",
    "required": [
      "owner",
      "repo"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      }
    }
  }

  arguments 17 lines copy
• merjax_list_ai_workspaces auth-required never probed

  The three provider workspaces every model call is billed to by its purpose (ws-control-plane, ws-hosted-loops, ws-ci-gates): each with its daily spend limit, rate limit, today's spend and calls (UTC day), and the platform ceiling above all three. Site admins with an admin-scoped token only. Mirrors GET /api/v2/admin/ai-workspaces. Returns {day, platformDailyCents, workspaces:[{workspace, purpose, dailyCents, rpm, spentToday, callsToday, callsLastMinute, updatedAt, updatedBy}]}.

  mcp-tool

  12345

  {
    "type": "object",
    "required": [],
    "properties": {}
  }

  arguments 5 lines copy
• merjax_set_pr_ai_settings auth-required never probed

  Choose the model for a pull request's AI tasks (review, risk summary, CI fixes, conflict proposals): a model id from the catalog, or null / "" to inherit the repository's or the platform's choice. Write access to the repository. run_via ("subscription" or "api": where AI runs and who pays) is for site admins only, with an admin-scoped token, and the subscription only on a repository a site admin owns. Omitted fields are kept; the same values again are `unchanged`. A model below a task's floor is raised and the effective list says so. Mirrors PUT /api/v2/repos/:o/:r/pulls/:n/ai-settings. Audit-logged. Returns {number, effect, model, repository_model, effective:[{task, label, model, model_label, source, raised, note}], updated_at} plus the run-on fields for a site admin.

  mcp-tool

  1234567891011121314151617181920212223242526272829303132333435

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "number"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "model": {
        "type": "string",
        "nullable": true,
        "maxLength": 100,
        "description": "Model id for this pull request's AI tasks (e.g. claude-opus-5-5); null or \"\" inherits the repository's or the platform's choice; omit to keep"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "number": {
        "type": "integer",
        "minimum": 1,
        "description": "Pull request number"
      },
      "run_via": {
        "type": "string",
        "nullable": true,
        "maxLength": 20,
        "description": "Site admins only: \"subscription\" or \"api\"; null or \"\" follows the global switch; omit to keep"
      }
    }
  }

  arguments 35 lines copy
• merjax_security_ioc_hits auth-required never probed

  Site admins only (needs an 'admin'-scoped token). Campaign indicator-of-compromise hits: pushes, token uses and repositories that matched a reviewed signature in src/lib/security/campaign-iocs.json (e.g. the Gheist campaign: ci-sync-XXXXXX branches, sync-check.yml, user agent 'gheist'). Filter by signature_id, repository ('owner/name'), since (ISO date); limit (default 50, max 200) / offset. Returns {signatureVersion, signatures, totals, sweep, hits[{id, signatureId, campaign, severity, detectedBy, repository, ref, sha, tokenKind, tokenId, userAgent, evidence, createdAt}]}. Read-only; nothing is revoked.

  mcp-tool

  12345678910111213141516171819202122232425

  {
    "type": "object",
    "properties": {
      "limit": {
        "type": "number",
        "description": "Max rows (default 50, max 200)"
      },
      "since": {
        "type": "string",
        "description": "Only hits at or after this ISO date/time"
      },
      "offset": {
        "type": "number",
        "description": "Rows to skip"
      },
      "repository": {
        "type": "string",
        "description": "Only hits on this repository, as owner/name"
      },
      "signature_id": {
        "type": "string",
        "description": "Only hits of this signature (e.g. gheist-2026-10)"
      }
    }
  }

  arguments 25 lines copy
• merjax_list_pr_conflicts auth-required never probed

  What stands between a PR and a clean merge, as the merge gate, the PR page and the Conflicts tab see it (one shared probe): status up-to-date | clean | conflicts | unknown, `mergeable`, the base/head shas the answer is for, files settled with no one in the loop (ruleSettled: each with `by` = structured (structured, code-aware merge) or rules (the deterministic merge rules)), and each unresolved file with its kind in plain words (both edited / binary / deleted on one side / added on both / rename / submodule / too large), whether the browser can edit it or only keep one side, and any saved draft. With hunks: true, each editable file's diff3 text labelled by branch name and its hunks (id, mine, base, main) for merjax_resolve_pr_conflict. Also the exact git commands for the command line. Read-only.

  mcp-tool

  123456789101112131415161718192021222324252627282930

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "number"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "fresh": {
        "type": "boolean",
        "description": "Bypass the ten-minute probe cache (default false)"
      },
      "hunks": {
        "type": "boolean",
        "description": "Include each editable file's marked-up content and hunks (default false)"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "number": {
        "type": "number",
        "description": "PR number"
      }
    }
  }

  arguments 30 lines copy
• merjax_list_workflow_runs auth-required never probed

  List a repository's workflow runs, newest first, with optional branch/status/event filters. Mirrors GET /api/v2/repos/.../actions/runs. The companion to merjax_get_workflow_run / merjax_cancel_workflow_run — this is how an agent finds the run ids to inspect or cancel (issue #10493: without it, stale queued runs could not be discovered from the tool surface at all). Needs read access to the repository. For a read-only CI audit credential (no code, no secrets, no writes), mint a repository token with {"runners": "read", "actions": "read"} (the ci-audit preset, merjax_create_repo_token) and call GET /api/v2/repos/:owner/:repo/actions/runs (and actions/workflows, actions/runs/:id/jobs): repository tokens are not accepted on /mcp.

  mcp-tool

  1234567891011121314151617181920212223242526272829303132333435

  {
    "type": "object",
    "required": [
      "owner",
      "repo"
    ],
    "properties": {
      "repo": {
        "type": "string"
      },
      "event": {
        "type": "string",
        "description": "push | pull_request | manual | schedule | ..."
      },
      "limit": {
        "type": "number",
        "description": "Max rows (default 30, max 100)"
      },
      "owner": {
        "type": "string"
      },
      "branch": {
        "type": "string",
        "description": "Only runs for this branch (short name or refs/heads/...)"
      },
      "offset": {
        "type": "number",
        "description": "Rows to skip, for paging"
      },
      "status": {
        "type": "string",
        "description": "queued | running | success | failure | cancelled"
      }
    }
  }

  arguments 35 lines copy
• merjax_get_workflow_logs auth-required never probed

  Return a workflow run's logs plus a failure summary. Always includes run metadata (number, workflow, event, ref, sha), per-job and per-step status / exit code / duration, `failedSteps` (`job / step`) and `testFailures` (failing test names, read from each step's structured results parsed before its log was cut, or the reason they cannot all be named; null when no job failed). `testFailures.details` marks each failure `flaky` (an active forensic label with a repro, from another run — with its label and flip rate), `known` (also failing on the default branch's latest run), `infra` (timed out under load) or `new`, with its file, message, the targeted retry's verdict and this run's determinism-forensics finding (`forensic`: class, label, variable, repro) when they ran. A step whose log was cut carries `fullLog` (artifact download of the uncut output). `step` (a step name or 1-based position within its job) returns only that step's stdout/stderr; `tail_lines` keeps the last N lines. The full per-job logs are included only when neither is given. JSON-friendly companion to the ZIP-download endpoint. A private repository's logs require 'repo' scope (OAuth: write:repo); every token read is audited. For a read-only CI audit credential, a repository token with {"runners": "read", "actions": "read"} (the ci-audit preset, merjax_create_repo_token) reads the same masked logs over REST — GET /api/v2/repos/:owner/:repo/actions/runs/:id/logs, or one job's at actions/jobs/:job_id/logs — under the same rule and audit; repository tokens are not accepted on /mcp.

  mcp-tool

  12345678910111213141516171819202122232425262728

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "run_id"
    ],
    "properties": {
      "repo": {
        "type": "string"
      },
      "step": {
        "type": "string",
        "description": "Only this step's logs: its name (exact, else substring, case-insensitive) or its 1-based position within its job"
      },
      "owner": {
        "type": "string"
      },
      "run_id": {
        "type": "string",
        "description": "The run's id, or a unique leading part of it (8+ hex characters)"
      },
      "tail_lines": {
        "type": "number",
        "description": "Keep only the last N lines of each returned log (max 5000)"
      }
    }
  }

  arguments 28 lines copy
• merjax_revoke_runner auth-required never probed

  Revoke a CI runner by id: nothing is dispatched to it from now on, its next heartbeat is refused and it stops accepting jobs. Cannot be undone — register a new runner instead. Returns {id, revoked}.

  mcp-tool

  123456789101112

  {
    "type": "object",
    "required": [
      "id"
    ],
    "properties": {
      "id": {
        "type": "string",
        "description": "Runner id (from merjax_list_runners)"
      }
    }
  }

  arguments 12 lines copy
• merjax_ci_executor auth-required never probed

  Where CI runs and why: mode (external | in-process), declaration (external | in-process | auto) and its source (CI_EXECUTOR on the box, the estate-wide setting, or auto), runners configured / reachable / busy / slots, lastSeenAt, state (ok | degraded | unconfigured | in-process) and holdReason — the sentence every queued run shows when no runner can take it. In-process never runs while external runners are configured. Site admins (admin scope) also get per-runner rows and may pass `declare` (external | in-process | auto) to set the estate-wide setting, audited (the answer then carries `saved`). Same as GET/PUT /api/v2/ci/executor and /admin/runners.

  mcp-tool

  123456789

  {
    "type": "object",
    "properties": {
      "declare": {
        "type": "string",
        "description": "Site admins: set the estate-wide declaration to external, in-process or auto. Omit to read only."
      }
    }
  }

  arguments 9 lines copy
• merjax_security_scan auth-required never probed

  Everything Merjax actually knows about a repository's security, in one honest call: OSV.dev CVE/GHSA advisories against the indexed dependency graph (with FIXED VERSIONS), Merjax's supplemental advisory list, a full-tree committed-secret scan, and optionally a Claude semantic code review. Unlike merjax_repo_health, an empty result is NEVER reported as a pass: every category returns status 'assessed' | 'partial' | 'not_assessed' | 'error' with a machine-readable reason code, so you can tell 'we checked and it is clean' from 'we never looked'. In particular, a repo whose dependency graph was never indexed returns dependency_advisories.status='not_assessed' (reason 'dependency_graph_not_indexed'), not an empty advisory list. Read-only.

  mcp-tool

  1234567891011121314151617181920212223242526272829

  {
    "type": "object",
    "required": [
      "owner",
      "repo"
    ],
    "properties": {
      "ref": {
        "type": "string",
        "description": "Branch, tag or commit SHA to scan the tree of. Default: the repo's default branch. Note advisories describe the INDEXED dependency graph, whose commit is reported separately — if it differs from this ref the advisory answer is downgraded to 'partial'."
      },
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner username"
      },
      "include_ai_review": {
        "type": "boolean",
        "description": "Opt in to the Claude Sonnet semantic review (SQLi/XSS/SSRF/authz/crypto). Costs an Anthropic call and adds seconds. Default false. When it cannot run — no key, provider error, unparseable output — the category reports 'not_assessed', never a pass."
      },
      "max_candidate_lines": {
        "type": "number",
        "description": "Cap on lines the secret detector inspects (1-200000, default 20000). The whole tree is always prefiltered; only lines that already matched a secret marker are inspected, so this rarely binds. When it does, committed_secrets reports 'partial' with the exact fraction."
      }
    }
  }

  arguments 29 lines copy
• merjax_repo_search auth-required never probed

  Search Merjax repositories by keyword (name + description), case-insensitively. Returns public repos plus any private repos owned by the authenticated caller. Default 20 per page, max 50; `total` is the full match count and `nextOffset` pages through it.

  mcp-tool

  1234567891011121314151617181920

  {
    "type": "object",
    "required": [
      "query"
    ],
    "properties": {
      "limit": {
        "type": "number",
        "description": "Max rows per page (default 20, max 50)"
      },
      "query": {
        "type": "string",
        "description": "Search keyword (1-100 chars)"
      },
      "offset": {
        "type": "number",
        "description": "Rows to skip. Use `nextOffset` from the previous response."
      }
    }
  }

  arguments 20 lines copy
• merjax_repo_read_file auth-required never probed

  Read a single file from a repository at a given ref (branch / tag / commit). Private repos are readable when the authenticated caller has access. Returns the text content (binary files rejected).

  mcp-tool

  1234567891011121314151617181920212223242526

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "path"
    ],
    "properties": {
      "ref": {
        "type": "string",
        "description": "Branch / tag / commit. Defaults to the repository's actual default branch (which may not be 'main' — e.g. 'Main')."
      },
      "path": {
        "type": "string",
        "description": "File path within the repo"
      },
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      }
    }
  }

  arguments 26 lines copy
• merjax_repo_list_issues auth-required never probed

  List open issues for a public repository. Returns up to 50 ordered by most-recent.

  mcp-tool

  12345678910111213141516171819202122232425

  {
    "type": "object",
    "required": [
      "owner",
      "repo"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "limit": {
        "type": "number",
        "description": "Max rows per page (default 25, max 50)"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "offset": {
        "type": "number",
        "description": "Rows to skip, for paging. Use `nextOffset` from the previous response."
      }
    }
  }

  arguments 25 lines copy
• merjax_create_pr auth-required never probed

  Open a new pull request. `head_branch` is required; `base_branch` defaults to the repo default branch. Requires authenticated caller with write access. Returns {number, url}.

  mcp-tool

  1234567891011121314151617181920212223242526272829303132333435

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "title",
      "head_branch"
    ],
    "properties": {
      "body": {
        "type": "string",
        "description": "PR body (Markdown). Optional."
      },
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "title": {
        "type": "string",
        "description": "PR title"
      },
      "base_branch": {
        "type": "string",
        "description": "Target branch (default: repo default branch)"
      },
      "head_branch": {
        "type": "string",
        "description": "Branch with the changes"
      }
    }
  }

  arguments 35 lines copy
• merjax_comment_pr auth-required never probed

  Add a comment to a pull request. Requires authenticated caller with write access. Returns {commentId}.

  mcp-tool

  123456789101112131415161718192021222324252627

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "number",
      "body"
    ],
    "properties": {
      "body": {
        "type": "string",
        "description": "Comment body (Markdown)"
      },
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "number": {
        "type": "number",
        "description": "PR number"
      }
    }
  }

  arguments 27 lines copy
• merjax_merge_pr auth-required never probed

  Merge an open PR. Enforces the same checks as the HTTP merge flow: not a draft, head SHA resolves, GateTest+AI-review hard gates pass, branch-protection rules satisfied. M3: soft-blocks when the pre-merge risk score is `critical` unless `confirm_high_risk: true` is passed. Returns {merged, sha?, reason?, riskScore?}.

  mcp-tool

  1234567891011121314151617181920212223242526

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "number"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "number": {
        "type": "number",
        "description": "PR number"
      },
      "confirm_high_risk": {
        "type": "boolean",
        "description": "When true, bypass the M3 risk-score soft-block on critical-band PRs."
      }
    }
  }

  arguments 26 lines copy
• merjax_close_pr auth-required never probed

  Close an open pull request without merging. Requires authenticated caller with write access. Idempotent. Returns {state}.

  mcp-tool

  12345678910111213141516171819202122

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "number"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "number": {
        "type": "number",
        "description": "PR number"
      }
    }
  }

  arguments 22 lines copy
• merjax_delete_repo auth-required never probed

  Delete a repository — a SOFT delete (2026-10-19): it disappears at once from git, web, REST, MCP, CI, webhooks, search and pages, its name stays reserved, and it can be restored with merjax_restore_repo until restorable_until (90 days by default). Queued/running CI is cancelled and pending webhook deliveries are stopped. Only the repository OWNER (the personal owner, or an org owner for an org repository) or a site admin may — admin collaborators and org admins are refused, as in the web UI. Requires 'admin' token scope. Audited as repo.delete; the owner is notified. To remove it for good before then, use merjax_purge_repo. Returns {deleted: true, soft: true, id, restorable_until}.

  mcp-tool

  1234567891011121314151617

  {
    "type": "object",
    "required": [
      "owner",
      "repo"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      }
    }
  }

  arguments 17 lines copy
• merjax_update_repo auth-required never probed

  Update repository description / visibility / default_branch / automation dials / merge-conflict AI mode / GateTest switch. Requires 'admin' access on the repo (owner, org owners/admins, admin collaborators) and 'repo' scope. Returns {ok: true}; with gate_test_enabled, also gate_test {enabled, server_configured, state: on | disabled_in_settings | not_configured_on_server, details}. merjax_get_branch_protection reads gate_test without changing it.

  mcp-tool

  1234567891011121314151617181920212223242526272829303132333435363738394041

  {
    "type": "object",
    "required": [
      "owner",
      "repo"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner username"
      },
      "automation": {
        "type": "object",
        "description": "Per-repo automation dials, same keys as Settings → Automation: ai_review_mode, pr_triage_mode, issue_triage_mode, auto_merge_mode, ci_autofix_mode, auto_repair_mode, auto_issues_mode, doc_drift_mode, merge_train_mode. Values: off | suggest | auto (merge_train_mode runs only on auto). Only the keys given change."
      },
      "is_private": {
        "type": "boolean",
        "description": "Set visibility (optional)"
      },
      "description": {
        "type": "string",
        "description": "New description (optional)"
      },
      "default_branch": {
        "type": "string",
        "description": "Set default branch (optional)"
      },
      "gate_test_enabled": {
        "type": "boolean",
        "description": "Turn the GateTest scan on or off for this repository (Settings → Gates → GateTest scan; repo_settings.gate_test_enabled, off by default). Audited as gates.settings.update. A switch that is on scans only where the server has GATETEST_URL: gate_test.state says not_configured_on_server otherwise."
      },
      "conflict_resolution_mode": {
        "type": "string",
        "description": "Who may settle merge conflicts with AI (Settings → Gates → Merge conflicts): manual (no AI) | review_first (default: AI proposes per block, a person accepts, edits or rejects) | auto_land (saved; acted on once the auto-land step ships — until then it behaves as review_first)."
      }
    }
  }

  arguments 41 lines copy
• merjax_search_repos auth-required never probed

  Search repositories by owner, name, owner/name or description, case-insensitively: every public repo, plus the private ones you own or collaborate on when authenticated. Omit `query` (authenticated) to list YOUR repositories — the ones you own or were invited to — instead of searching. Mirrors GET /api/v2/search/repos. `total` is the full match count (not the page size) and `nextOffset` pages through it.

  mcp-tool

  123456789101112131415161718192021

  {
    "type": "object",
    "properties": {
      "sort": {
        "type": "string",
        "description": "stars | updated | name (default: stars)"
      },
      "limit": {
        "type": "number",
        "description": "Max rows per page (default 30, max 100)"
      },
      "query": {
        "type": "string",
        "description": "Search keyword — matches owner login, repo name, owner/name and description. Omit to list your own repositories."
      },
      "offset": {
        "type": "number",
        "description": "Rows to skip. Use `nextOffset` from the previous response."
      }
    }
  }

  arguments 21 lines copy
• merjax_whoami auth-required never probed

  Who this connector is on this Merjax instance: the signed-in username and email, whether that account is a site admin, the token's scopes, and how many repositories it owns or collaborates on. Call it first when a repository seems missing — the answer is usually which account authorized the connector. Anonymous callers get authenticated:false and a hint.

  mcp-tool

  1234

  {
    "type": "object",
    "properties": {}
  }

  arguments 4 lines copy
• merjax_create_repo_token auth-required never probed

  Mint a fine-grained repository token (`gcft_…`) for ONE repository and return it once. It authenticates the REST API (/api/v2 and the GitHub-compatible /api/v3), git over HTTPS and the container registry (images under owner/repo, by contents) for that repository only. `permissions` sets none/read/write for contents, issues, pull_requests, statuses and actions, and none/read for runners (admin and settings are never grantable); `expires_in` is optional: omit it (or "never") for no expiration, or give seconds or "30m", "12h", "7d", "1y" (min 5 minutes, max 1 year). Effective access is always held to YOUR current access to the repo, re-checked on every use, and branch protection applies as it does to you. Needs 'repo' scope. Audit-logged. Returns {id, name, repository, permissions, expiresAt, tokenPrefix, token}.

  mcp-tool

  12345678910111213141516171819202122232425262728293031

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "name",
      "permissions"
    ],
    "properties": {
      "name": {
        "type": "string",
        "description": "Where the token will be used, e.g. 'gatetest deploy box'"
      },
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "expires_in": {
        "type": "string",
        "description": "Optional lifetime: \"30m\" / \"12h\" / \"7d\" / \"1y\", or a number of seconds (5 minutes to 1 year). Omit, or \"never\", for no expiration."
      },
      "permissions": {
        "type": "object",
        "description": "Object of level per permission — keys contents, issues, pull_requests, statuses, actions, runners; values none | read | write (runners: none | read only — it lists the owner's CI runners via GET /api/v2/repos/:owner/:repo/actions/runners and reads nothing of the repository; actions: read lists workflows, runs and jobs and reads run and job logs, masked and audited); omitted keys are none; at least one must be read or write. Example: {\"actions\": \"read\"}, {\"runners\": \"read\"} for a runner audit, or {\"runners\": \"read\", \"actions\": \"read\"} for a read-only CI audit token (the ci-audit preset: runners, workflows, runs, jobs and logs; no code, no secrets, no writes)."
      }
    }
  }

  arguments 31 lines copy
• merjax_list_tokens auth-required never probed

  List your own tokens (never a secret): type, name, status (active / expiring / expired / revoked / never_used / stale), last 4 characters, scopes or permissions, repository, expiry, last use (time, IP, client), use count and rotation state. `type` is pat (personal access token, glc_), repo (repository token, gcft_) or deploy (deploy token, gcdt_), or omit it for all three (types your token's scopes cannot read are listed under `omitted`). PATs need 'user' scope to read; repository and deploy tokens need 'repo'.

  mcp-tool

  123456789

  {
    "type": "object",
    "properties": {
      "type": {
        "type": "string",
        "description": "Token type: pat (personal access token, glc_), repo (repository token, gcft_) or deploy (deploy token, gcdt_). Omit for all."
      }
    }
  }

  arguments 9 lines copy
• merjax_get_token auth-required never probed

  One of your tokens by type and id (from merjax_list_tokens): everything list shows plus the audit trail (create, edits with a before/after diff, rotations, revocation). Never the secret. `type` is pat (personal access token, glc_), repo (repository token, gcft_) or deploy (deploy token, gcdt_). Same scopes as merjax_list_tokens.

  mcp-tool

  1234567891011121314151617

  {
    "type": "object",
    "required": [
      "type",
      "id"
    ],
    "properties": {
      "id": {
        "type": "string",
        "description": "Token id"
      },
      "type": {
        "type": "string",
        "description": "Token type: pat (personal access token, glc_), repo (repository token, gcft_) or deploy (deploy token, gcdt_)"
      }
    }
  }

  arguments 17 lines copy
• merjax_rotate_token auth-required never probed

  Rotate one of your tokens: mint a new secret with the same name, scopes / permissions, repository and expiry, returned ONCE as `token`. `grace_seconds` (default 0, max 604800 = 7 days) keeps the old secret working that long; 0 kills it now. Rotating again ends an earlier grace period. `expected_rotation_count` (from merjax_get_token's rotationCount) makes it compare-and-swap; two concurrent rotations never both win. `type` is pat (personal access token, glc_), repo (repository token, gcft_) or deploy (deploy token, gcdt_). PATs need 'admin' scope; repository and deploy tokens need 'repo'. Audit-logged.

  mcp-tool

  12345678910111213141516171819202122232425

  {
    "type": "object",
    "required": [
      "type",
      "id"
    ],
    "properties": {
      "id": {
        "type": "string",
        "description": "Token id"
      },
      "type": {
        "type": "string",
        "description": "Token type: pat (personal access token, glc_), repo (repository token, gcft_) or deploy (deploy token, gcdt_)"
      },
      "grace_seconds": {
        "type": "number",
        "description": "Seconds the old secret keeps working (0 to 604800). Default 0."
      },
      "expected_rotation_count": {
        "type": "number",
        "description": "Optional compare-and-swap guard: the rotationCount you last saw."
      }
    }
  }

  arguments 25 lines copy
• merjax_revoke_token auth-required never probed

  Revoke one of your tokens by type and id. It stops working on its next use; this cannot be undone. `type` is pat (personal access token, glc_), repo (repository token, gcft_) or deploy (deploy token, gcdt_). PATs need 'admin' scope; repository and deploy tokens need 'repo'. Audit-logged.

  mcp-tool

  1234567891011121314151617

  {
    "type": "object",
    "required": [
      "type",
      "id"
    ],
    "properties": {
      "id": {
        "type": "string",
        "description": "Token id"
      },
      "type": {
        "type": "string",
        "description": "Token type: pat (personal access token, glc_), repo (repository token, gcft_) or deploy (deploy token, gcdt_)"
      }
    }
  }

  arguments 17 lines copy
• merjax_set_repo_secret auth-required never probed

  Create or replace one workflow secret on a repository, used in workflows as ${{ secrets.NAME }}. The name is saved upper-cased (cron_secret → CRON_SECRET); trailing spaces/newlines are removed from the value. The value is WRITE-ONLY: it is encrypted at rest and never returned, logged or audited — the result names the secret only. Pass expected_updated_at (the updated_at you last read) to update only if nobody changed it since: a newer value is never overwritten (error 'conflict'), a deleted secret is not re-created (error 'missing'). Setting the value it already has writes nothing (result 'unchanged'), so a retry is safe. Needs admin access to the repository and 'repo' scope. Audit-logged (name only). Returns {repository, name, created, result: 'created'|'updated'|'unchanged', updated_at}.

  mcp-tool

  12345678910111213141516171819202122232425262728293031

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "name",
      "value"
    ],
    "properties": {
      "name": {
        "type": "string",
        "description": "Secret name: letters, digits, underscores; not starting with a digit"
      },
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "value": {
        "type": "string",
        "description": "The secret value (never echoed back)"
      },
      "expected_updated_at": {
        "type": "string",
        "description": "Optional ISO time: only update if the secret's updated_at is still this (from merjax_list_repo_secrets)"
      }
    }
  }

  arguments 31 lines copy
• merjax_delete_repo_secret auth-required never probed

  Delete one workflow secret from a repository by name (cron_secret is read as CRON_SECRET). Idempotent: deleting a secret that is already gone succeeds with deleted:false, already_deleted:true, so a retry is safe. Workflows that reference it stop receiving it. Needs admin access to the repository and 'repo' scope. Audit-logged (name only). Returns {repository, name, deleted, already_deleted, at}.

  mcp-tool

  12345678910111213141516171819202122

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "name"
    ],
    "properties": {
      "name": {
        "type": "string",
        "description": "Secret name"
      },
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      }
    }
  }

  arguments 22 lines copy
• merjax_purge_repo auth-required never probed

  PERMANENTLY delete an already-deleted repository now, instead of waiting for its restore window to end. IRREVERSIBLE: the git data, LFS objects, issues, PRs, releases, packages, CI history and settings are removed and cannot be restored (data already in the instance's backups ages out on the backup schedule). Only works on a repository already deleted with merjax_delete_repo; `confirm` must be its full name (owner/name). Owner (personal owner, or an org owner) or a site admin; needs 'admin' scope. Audited as repo.purge. Returns {purged: true, id, full_name}.

  mcp-tool

  1234567891011121314151617

  {
    "type": "object",
    "required": [
      "id",
      "confirm"
    ],
    "properties": {
      "id": {
        "type": "string",
        "description": "The deleted repository's id"
      },
      "confirm": {
        "type": "string",
        "description": "The repository's full name, owner/name, to confirm"
      }
    }
  }

  arguments 17 lines copy
• merjax_list_variables auth-required never probed

  List Actions configuration variables (${{ vars.NAME }}) with their values. Pass owner + repo for a repository variable, owner + repo + environment for an environment variable, or org for an organisation variable (organisation variables need an admin-scoped token). Admin of the repository or organisation only. Paged: limit (≤100, default 30) / offset. Mirrors GET …/actions/variables. Returns {scope, total, limit, offset, nextOffset, variables:[{name, value, createdAt, updatedAt}]}.

  mcp-tool

  123456789101112131415161718192021222324252627282930313233

  {
    "type": "object",
    "required": [],
    "properties": {
      "org": {
        "type": "string",
        "description": "Organisation slug"
      },
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "limit": {
        "type": "integer",
        "maximum": 100,
        "minimum": 1,
        "description": "Page size, 1–100 (default 30)"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug (omit when passing org)"
      },
      "offset": {
        "type": "integer",
        "minimum": 0,
        "description": "Rows to skip (default 0)"
      },
      "environment": {
        "type": "string",
        "description": "Environment name (or id)"
      }
    }
  }

  arguments 33 lines copy
• merjax_get_variable auth-required never probed

  Read one Actions variable by name. Pass owner + repo for a repository variable, owner + repo + environment for an environment variable, or org for an organisation variable (organisation variables need an admin-scoped token). Not found is an error. Returns {name, value, createdAt, updatedAt}.

  mcp-tool

  12345678910111213141516171819202122232425262728293031

  {
    "type": "object",
    "required": [
      "name"
    ],
    "properties": {
      "org": {
        "type": "string",
        "description": "Organisation slug"
      },
      "name": {
        "type": "string",
        "pattern": "^[A-Za-z_][A-Za-z0-9_]*$",
        "maxLength": 100,
        "minLength": 1,
        "description": "Variable name: letters, digits and _, not starting with a digit or GITHUB_ (stored upper-case)"
      },
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug (omit when passing org)"
      },
      "environment": {
        "type": "string",
        "description": "Environment name (or id)"
      }
    }
  }

  arguments 31 lines copy
• merjax_set_variable auth-required never probed

  Create or replace an Actions variable (plain text, not for secrets — use merjax_set_repo_secret). Pass owner + repo for a repository variable, owner + repo + environment for an environment variable, or org for an organisation variable (organisation variables need an admin-scoped token). Safe to retry: the same value again changes nothing. Audit-logged. Returns {name, effect: created|updated|unchanged, updatedAt}.

  mcp-tool

  12345678910111213141516171819202122232425262728293031323334353637

  {
    "type": "object",
    "required": [
      "name",
      "value"
    ],
    "properties": {
      "org": {
        "type": "string",
        "description": "Organisation slug"
      },
      "name": {
        "type": "string",
        "pattern": "^[A-Za-z_][A-Za-z0-9_]*$",
        "maxLength": 100,
        "minLength": 1,
        "description": "Variable name: letters, digits and _, not starting with a digit or GITHUB_ (stored upper-case)"
      },
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug (omit when passing org)"
      },
      "value": {
        "type": "string",
        "maxLength": 49152,
        "description": "Plain-text value (not a secret: shown on the settings page and in logs), at most 48 KB"
      },
      "environment": {
        "type": "string",
        "description": "Environment name (or id)"
      }
    }
  }

  arguments 37 lines copy
• merjax_delete_branch auth-required never probed

  Delete a branch the way `git push --delete` would: write access, then branch protection (allow_deletion), rulesets and the push inspection apply; webhooks and CI fire. The default branch is never deleted. Pass expected_sha to delete only if the branch still points there. A missing branch is a not-found error. Mirrors DELETE /api/v3/repos/:o/:r/git/refs/heads/:branch. Audit-logged. Returns {branch, sha, deleted: true}.

  mcp-tool

  1234567891011121314151617181920212223242526272829

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "branch"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "branch": {
        "type": "string",
        "maxLength": 255,
        "minLength": 1,
        "description": "Branch name, without refs/heads/"
      },
      "expected_sha": {
        "type": "string",
        "pattern": "^[0-9a-fA-F]{40}$",
        "description": "Delete only if the branch still points here (compare-and-swap); otherwise a conflict"
      }
    }
  }

  arguments 29 lines copy
• merjax_edit_comment auth-required never probed

  Replace the text of a comment on an issue or pull request (by comment id). Its author or a repository writer only; the previous text is kept in the edit history; the same text again is `unchanged`; a concurrent edit is a conflict, never overwritten. Mentions the edit adds are notified. Mirrors PATCH /api/v3/repos/:o/:r/issues/comments/:id. Returns {id, kind, number, effect}.

  mcp-tool

  1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "comment_id",
      "body"
    ],
    "properties": {
      "body": {
        "type": "string",
        "maxLength": 65536,
        "minLength": 1,
        "description": "The new text (Markdown); the previous text is kept in the edit history"
      },
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "thread": {
        "type": "object",
        "required": [
          "kind",
          "number"
        ],
        "properties": {
          "kind": {
            "enum": [
              "issue",
              "pr"
            ],
            "type": "string"
          },
          "number": {
            "type": "integer",
            "minimum": 1
          }
        }
      },
      "comment_id": {
        "type": "string",
        "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$",
        "description": "The comment's id (as listed by merjax_list_pr_comments, or the #comment-<id> anchor)"
      }
    }
  }

  arguments 50 lines copy
• merjax_delete_comment auth-required never probed

  Delete a comment on an issue or pull request (by comment id), with its edit history. Its author or a repository writer only. A missing comment is a not-found error, never reported as deleted. Mirrors DELETE /api/v3/repos/:o/:r/issues/comments/:id. Audit-logged (who wrote it, never what it said). Returns {id, kind, number, deleted: true}.

  mcp-tool

  12345678910111213141516171819202122232425262728293031323334353637383940414243

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "comment_id"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "thread": {
        "type": "object",
        "required": [
          "kind",
          "number"
        ],
        "properties": {
          "kind": {
            "enum": [
              "issue",
              "pr"
            ],
            "type": "string"
          },
          "number": {
            "type": "integer",
            "minimum": 1
          }
        }
      },
      "comment_id": {
        "type": "string",
        "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$",
        "description": "The comment's id (as listed by merjax_list_pr_comments, or the #comment-<id> anchor)"
      }
    }
  }

  arguments 43 lines copy
• merjax_set_token_bucket auth-required never probed

  Set the daily model-spend bucket of one of your personal access tokens: daily_cents (1–1000000; 0 = the platform default; -1 = no bucket) or daily_usd ("2.50", "default", "none"). The call that would cross the bucket is refused and the token suspends itself until resumed. Another person's token is not found; a canary token is refused. Safe to retry: the same figure again is `unchanged`. Needs `user` scope. Audit-logged. Returns {tokenId, name, dailyCents, bucketCents, bucket, effect}.

  mcp-tool

  123456789101112131415161718192021222324

  {
    "type": "object",
    "required": [
      "token_id"
    ],
    "properties": {
      "token_id": {
        "type": "string",
        "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$",
        "description": "The personal access token's id (merjax_list_tokens, GET /api/v2/user/tokens)"
      },
      "daily_usd": {
        "type": "string",
        "maxLength": 16,
        "description": "Bucket as a person types it: USD a day with cents (\"2.50\"), \"default\" or blank for the platform default, \"none\" for no bucket"
      },
      "daily_cents": {
        "type": "integer",
        "maximum": 1000000,
        "minimum": -1,
        "description": "Bucket in US cents a day, 1–1000000; 0 = the platform default; -1 = no bucket. Alternative: daily_usd"
      }
    }
  }

  arguments 24 lines copy
• merjax_resume_token auth-required never probed

  Resume one of your personal access tokens that suspended itself (daily bucket spent, or the tripwire): it authenticates again; today's spend still counts against its bucket, so raise the bucket first with merjax_set_token_bucket if it is spent. A suspended token cannot make this call itself: use another credential. A token that is not suspended is `unchanged`; another person's token is not found. Needs `user` scope. Audit-logged. Returns {tokenId, name, resumed, effect}.

  mcp-tool

  12345678910111213

  {
    "type": "object",
    "required": [
      "token_id"
    ],
    "properties": {
      "token_id": {
        "type": "string",
        "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$",
        "description": "The personal access token's id (merjax_list_tokens, GET /api/v2/user/tokens)"
      }
    }
  }

  arguments 13 lines copy
• merjax_set_loop_secret auth-required never probed

  Create or replace a secret a hosted Claude loop runs with (reaches it as process.env.NAME at invoke time only; sealed at rest, scrubbed from its logs). Pass loop (the hosted Claude loop's id, from /connect/claude/deploy) for the loop's own secret — its owner only — or org (organisation slug, admin-scoped token) for an organisation-level secret every loop of the organisation inherits; a loop-level name overrides the organisation's. ANTHROPIC_API_KEY is the loop's model key (CAP-S.8: the platform never lends its own); at organisation level it is the BYOK override. Safe to retry: the same value again changes nothing. Audit-logged by name, never value. Returns {name, effect: created|updated|unchanged, updatedAt}.

  mcp-tool

  123456789101112131415161718192021222324252627282930

  {
    "type": "object",
    "required": [
      "name",
      "value"
    ],
    "properties": {
      "org": {
        "type": "string",
        "description": "Organisation slug"
      },
      "loop": {
        "type": "string",
        "description": "Hosted Claude loop id (uuid)"
      },
      "name": {
        "type": "string",
        "pattern": "^[A-Za-z][A-Za-z0-9_]*$",
        "maxLength": 100,
        "minLength": 1,
        "description": "Secret name, an environment variable name: letters, digits and _, starting with a letter (stored upper-case). PATH, HOME, INPUT and GLUECRON_* are the runtime's own and refused."
      },
      "value": {
        "type": "string",
        "maxLength": 16384,
        "minLength": 1,
        "description": "The secret value. Write-only: never shown again, never in a log or an audit row; reaches the loop as process.env.NAME at invoke time only."
      }
    }
  }

  arguments 30 lines copy
• merjax_set_ai_workspace_quota auth-required never probed

  Set a provider workspace's daily spend limit (cents, UTC day) and calls per minute; 0 = no cap at that level (the platform ceiling still applies). Site admins with an admin-scoped token only. Safe to retry: the same numbers again change nothing. Audit-logged. Mirrors PUT /api/v2/admin/ai-workspaces/:workspace/quota. Returns {workspace, dailyCents, rpm, effect: updated|unchanged}.

  mcp-tool

  12345678910111213141516171819202122232425262728293031

  {
    "type": "object",
    "required": [
      "workspace",
      "daily_cents",
      "rpm"
    ],
    "properties": {
      "rpm": {
        "type": "integer",
        "maximum": 1000000,
        "minimum": 0,
        "description": "Calls admitted per sliding minute. 0 = no rate limit at this level."
      },
      "workspace": {
        "enum": [
          "ws-control-plane",
          "ws-hosted-loops",
          "ws-ci-gates"
        ],
        "type": "string",
        "description": "ws-control-plane, ws-hosted-loops or ws-ci-gates"
      },
      "daily_cents": {
        "type": "integer",
        "maximum": 10000000,
        "minimum": 0,
        "description": "Daily spend limit in cents (UTC day). 0 = no cap at this level; the platform ceiling still applies."
      }
    }
  }

  arguments 31 lines copy
• merjax_press_kill_switch auth-required never probed

  Press the platform kill switch: pause every model call and suspend every personal access token minted or used in the last N hours (KILL_SWITCH_WINDOW_HOURS, default 24), platform-wide. Git, CI, merges and deploys are unaffected. One forensic audit row (security.kill_switch) names every suspended token and its previous expiry; every site admin is alerted. Site admins with an admin-scoped token only. Not idempotent: a second press suspends whatever the window holds then. Mirrors POST /api/v2/admin/security/kill-switch. Returns {at, windowHours, suspended, aiWasPaused, auditId, effect}.

  mcp-tool

  12345

  {
    "type": "object",
    "required": [],
    "properties": {}
  }

  arguments 5 lines copy
• merjax_undo_kill_switch auth-required never probed

  Undo the last kill switch press: give every token it suspended its previous expiry back and unpause AI (unless AI was already paused before the press, which stays as it was). A press already undone, or none at all, is a precondition failure. Site admins with an admin-scoped token only. Audit-logged (security.kill_switch.undo); every site admin is alerted. Mirrors POST /api/v2/admin/security/kill-switch/undo. Returns {pressedAt, undoneAt, ofSuspended, restored, aiUnpaused, aiWasPaused, effect}.

  mcp-tool

  12345

  {
    "type": "object",
    "required": [],
    "properties": {}
  }

  arguments 5 lines copy
• merjax_import_action auth-required never probed

  Site admins only (needs an 'admin'-scoped token). Import a third-party GitHub Action at ONE tag, branch or full commit SHA into the Merjax mirror namespace (gluecron-actions/<owner>--<repo>), so workflows that say `uses: owner/repo@ref` can run it. Workflow runs never fetch from github.com; an action that is not imported is skipped. Re-importing the same ref updates it to what upstream has now. Audit-logged. Returns {action, ref, sha, previousSha, mirror, upstreamUrl, hasActionYml}.

  mcp-tool

  123456789101112131415161718192021

  {
    "type": "object",
    "required": [
      "action",
      "ref"
    ],
    "properties": {
      "ref": {
        "type": "string",
        "description": "Tag, branch or full commit SHA, e.g. v7"
      },
      "action": {
        "type": "string",
        "description": "Upstream action as workflows write it, e.g. actions/github-script"
      },
      "upstream_url": {
        "type": "string",
        "description": "Optional; default https://github.com/<owner>/<repo>.git"
      }
    }
  }

  arguments 21 lines copy
• merjax_revoke_all_credentials auth-required never probed

  Site admins only (needs an 'admin'-scoped token). Revoke every browser session, personal access token (repository tokens included) and OAuth grant — for every user (scope 'platform') or for one (scope 'user' + username). Optionally force a password reset (old password stops working, reset email sent) and 2FA re-enrolment (seeds and recovery codes deleted). Confirm by sending `confirm` exactly: 'REVOKE ALL CREDENTIALS' for platform, 'REVOKE <username>' for one user; anything else changes nothing. Platform scope revokes YOUR OWN sessions and tokens too, including the token making this call. Audit-logged. Not covered: SSH keys, passkeys, deploy keys/tokens, CI runners, app installation tokens. Returns counts, actorSignedOut and notCovered.

  mcp-tool

  1234567891011121314151617181920212223242526272829

  {
    "type": "object",
    "required": [
      "scope",
      "confirm"
    ],
    "properties": {
      "scope": {
        "type": "string",
        "description": "'platform' (every user) or 'user' (one account)"
      },
      "confirm": {
        "type": "string",
        "description": "Exactly 'REVOKE ALL CREDENTIALS' (platform) or 'REVOKE <username>' (user)"
      },
      "username": {
        "type": "string",
        "description": "Required when scope is 'user'"
      },
      "force_2fa_reenrol": {
        "type": "boolean",
        "description": "Delete TOTP seeds and recovery codes so the user enrols again"
      },
      "force_password_reset": {
        "type": "boolean",
        "description": "Replace the password so the old one stops working, and send the reset email"
      }
    }
  }

  arguments 29 lines copy
• merjax_learning_status auth-required never probed

  Site admins only (needs an 'admin'-scoped token). Whether CI failures are being turned into lessons: classified failures, lesson.pattern events (matched to a docs/ops/CI_GATE_LESSONS.md row, or candidates), recurring candidates, and failures left without a lesson for over an hour, over 7 days. 'N failures, 0 lessons' reads RED. Also each pattern's count and register row, and the register. Counts only: no log text or repository. Returns {health, patterns, register}.

  mcp-tool

  1234

  {
    "type": "object",
    "properties": {}
  }

  arguments 4 lines copy
• merjax_assign_issue auth-required never probed

  Assign (or, with remove: true, unassign) users on an issue or pull request. Real assignees since 2026-10-12 — up to 10 per thread, only users who can read the repository; the old `assignee:<username>` labels were migrated. Pass `assignee` (one username) or `assignees` (array). `type` is 'issue' (default) or 'pull_request'. Requires 'repo' scope and write access. Returns {assigned, skipped:[{username, reason}], removed, assignees}.

  mcp-tool

  1234567891011121314151617181920212223242526272829303132333435

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "number"
    ],
    "properties": {
      "repo": {
        "type": "string"
      },
      "type": {
        "type": "string",
        "description": "issue (default) | pull_request"
      },
      "owner": {
        "type": "string"
      },
      "number": {
        "type": "number"
      },
      "remove": {
        "type": "boolean",
        "description": "Unassign the given users instead (default false)"
      },
      "assignee": {
        "type": "string",
        "description": "Username to assign"
      },
      "assignees": {
        "type": "array",
        "description": "Usernames to assign, strings (alternative to `assignee`)"
      }
    }
  }

  arguments 35 lines copy
• merjax_request_changes auth-required never probed

  Request changes on a PR. Records a 'changes requested' review by the caller, which holds the PR on every merge path (web button, API, MCP merge, merge queue, merge train, autopilot) until the caller approves or someone with write access dismisses it (merjax_dismiss_review), and posts the body as a comment. Requires 'repo' scope and write access.

  mcp-tool

  123456789101112131415161718192021222324

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "number",
      "body"
    ],
    "properties": {
      "body": {
        "type": "string",
        "description": "Review body (Markdown)"
      },
      "repo": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      },
      "number": {
        "type": "number"
      }
    }
  }

  arguments 24 lines copy
• merjax_list_pr_comments auth-required never probed

  List every comment on a pull request in chronological order: general comments (kind `issue_comment`), inline review comments (`review_comment`: path, line, thread {id, inReplyToId, position, replies, resolved, resolvedAt, resolvedBy}) and review summaries (`review`: state approved | changes_requested | commented). Each entry has author {login, type user|bot}, isAi (written by a model: false for gluecron[bot]'s own notes, e.g. a person's conflict resolution or a merge-train notice), onBehalfOf (on such a note, the person it was posted for), body, createdAt, updatedAt. A review thread is the inline comments on one file+line; the earliest is its root and holds the resolved state. Merjax does not store a review comment's commit or diff side, so `commitId` and `side` are always null. Only approved (moderated) comments; unsubmitted draft reviews are private to their author and not listed. `kind`: all (default) | issue | review (review comments + review summaries). `since`: ISO-8601 — only entries updated at or after it. Paged: `total` is the full filtered count, `nextOffset` pages through it. Works anonymously on public repos; private repos need read access.

  mcp-tool

  1234567891011121314151617181920212223242526272829303132333435363738

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "number"
    ],
    "properties": {
      "kind": {
        "type": "string",
        "description": "all (default) | issue (general comments) | review (review comments + review summaries)"
      },
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "limit": {
        "type": "number",
        "description": "Max entries (default 50, max 100)"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "since": {
        "type": "string",
        "description": "ISO-8601 timestamp; only entries updated at or after it"
      },
      "number": {
        "type": "number",
        "description": "PR number"
      },
      "offset": {
        "type": "number",
        "description": "Entries to skip. Use `nextOffset` from the previous response."
      }
    }
  }

  arguments 38 lines copy
• merjax_open_draft_pr auth-required never probed

  Open a draft pull request. Same payload as merjax_create_pr but forces is_draft=true. Useful for AI-in-progress PRs that shouldn't run mergeability checks yet.

  mcp-tool

  1234567891011121314151617181920212223242526272829

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "title",
      "head_branch"
    ],
    "properties": {
      "body": {
        "type": "string"
      },
      "repo": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      },
      "title": {
        "type": "string"
      },
      "base_branch": {
        "type": "string"
      },
      "head_branch": {
        "type": "string"
      }
    }
  }

  arguments 29 lines copy
• merjax_set_pr_draft auth-required never probed

  Mark a pull request ready for review (draft=false) or convert it back to a draft (draft=true). Same rule as the web 'Ready for review' button: the caller needs write access and must be the PR author or the repository owner; only an open PR changes; marking ready starts the AI review. Idempotent. Requires 'repo' scope. Returns {number, isDraft, changed}.

  mcp-tool

  123456789101112131415161718192021222324252627

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "number",
      "draft"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "draft": {
        "type": "boolean",
        "description": "true = convert to draft, false = mark ready for review"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "number": {
        "type": "number",
        "description": "PR number"
      }
    }
  }

  arguments 27 lines copy
• merjax_update_pr_branch auth-required never probed

  Bring a PR branch up to date with its base: merge the base into the head server-side (the PR page's 'Update branch'). Never a force-push — the new head is a merge commit moved through the push gates, so it gets CI. On conflict nothing changes and `conflictFiles` lists the paths. Requires write access and 'repo' scope. Returns {ok, status: 'updated'|'up-to-date', headSha, previousHeadSha, baseSha, url} or {ok: false, reason, message, conflictFiles}.

  mcp-tool

  12345678910111213141516171819202122

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "number"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "number": {
        "type": "number",
        "description": "PR number"
      }
    }
  }

  arguments 22 lines copy
• merjax_resolve_pr_conflict auth-required never probed

  Save a resolution for ONE conflicted file of a PR, as a draft for the exact (base_sha, head_sha) pair merjax_list_pr_conflicts returned (a moved branch is refused: reload). Pass exactly one of: `content` (the whole resolved file — no conflict markers, at most 512 KiB), `choices` (hunk id → 'mine' | 'main' | 'both-mine-first' | 'both-main-first' | 'base' | 'ai' (the block's AI proposal from merjax_propose_pr_conflict_resolution) | {kind:'custom', lines:[…]}; applied server-side, a stale hunk id is refused), or `keep` ('mine' = the PR branch's version, 'main' = the base branch's; the only options for binary files and files one side deleted). Nothing is committed until merjax_commit_pr_conflict_resolution. Requires write access and 'repo' scope.

  mcp-tool

  12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "number",
      "base_sha",
      "head_sha",
      "path"
    ],
    "properties": {
      "keep": {
        "type": "string",
        "description": "'mine' | 'main' — take one side whole"
      },
      "path": {
        "type": "string",
        "description": "The conflicted file's repo-relative path"
      },
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "number": {
        "type": "number",
        "description": "PR number"
      },
      "choices": {
        "type": "object",
        "description": "Hunk id → mine | main | both-mine-first | both-main-first | base | ai | {kind:'custom', lines}"
      },
      "content": {
        "type": "string",
        "description": "The whole resolved file"
      },
      "base_sha": {
        "type": "string",
        "description": "baseSha from merjax_list_pr_conflicts"
      },
      "head_sha": {
        "type": "string",
        "description": "headSha from merjax_list_pr_conflicts"
      }
    }
  }

  arguments 49 lines copy
• merjax_commit_pr_conflict_resolution auth-required never probed

  Commit the saved resolutions for a PR's conflicts ON THE PR HEAD as a two-parent merge commit (old head, base tip) — never on the base branch — moved through the push gates so CI runs on it before anything merges. Every unresolved file needs a draft (merjax_resolve_pr_conflict) or an entry in `resolutions`; files the merge rules settle are settled automatically. Both shas are compare-and-swapped: a branch that moved since is refused with nothing changed. The commit carries `Conflict-Resolution:` trailers; a gluecron[bot] comment records it. Requires write access and 'repo' scope.

  mcp-tool

  12345678910111213141516171819202122232425262728293031323334353637383940

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "number",
      "base_sha",
      "head_sha"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "number": {
        "type": "number",
        "description": "PR number"
      },
      "message": {
        "type": "string",
        "description": "Optional subject line (default: Merge branch '<base>' into <head>)"
      },
      "base_sha": {
        "type": "string",
        "description": "baseSha from merjax_list_pr_conflicts"
      },
      "head_sha": {
        "type": "string",
        "description": "headSha from merjax_list_pr_conflicts"
      },
      "resolutions": {
        "type": "array",
        "description": "Optional explicit list instead of the saved drafts: [{path, how: manual | choice | ai | ai-edited | keep-mine | keep-main, content?}] — content is required unless how is keep-mine / keep-main"
      }
    }
  }

  arguments 40 lines copy
• merjax_list_ready_to_merge auth-required never probed

  Pull requests that are green and clean and that nobody has merged: open, not a draft, CI green at the head, no gate failing or running, no standing request for changes, branch protection satisfied, no conflicts (the merge gate's own conflict probe), and auto-merge NOT armed. Each comes with a plain sentence ("Green and clean for 3 days — nobody has merged it"), whether you can merge it (canMerge) or arm it (canArm), and the merge / arm endpoints. Also `waiting_on_you`: open PRs where you are a requested reviewer or code owner and have not reviewed. Scope: owner + repo for one repository; org for an organisation; neither for every repository you can merge in. `not_ready` lists the other open PRs in scope with the first reason. To act: merjax_set_auto_merge (arm) or merjax_merge_pr. Read-only.

  mcp-tool

  1234567891011121314151617

  {
    "type": "object",
    "properties": {
      "org": {
        "type": "string",
        "description": "Organisation slug: every repository of the org you can read"
      },
      "repo": {
        "type": "string",
        "description": "Repo name (with owner)"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug (with repo)"
      }
    }
  }

  arguments 17 lines copy
• merjax_repo_rating auth-required never probed

  The repository's letter rating A+/A/B/C/D/F — the health report's grade (the same number merjax_repo_health and the /health page show; A is 85+) — with the score, the six categories (score, weight, points still available), `to_a`: the ordered list of concrete items that move the repository to A (each with the action, the points available, whether a loop can do it mechanically, and the evidence: file:line for a security finding, counts otherwise), then the delivery blockers beside it (red default branch, conflicting PRs, PRs red for a week, open ai:repair issues, issues older than 30 days — shown under `delivery`, never merged into the letter), and the last 30 recorded days. Owner mandate 2026-11-04: every repository should be A. Read-only.

  mcp-tool

  1234567891011121314151617

  {
    "type": "object",
    "required": [
      "owner",
      "repo"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      }
    }
  }

  arguments 17 lines copy
• merjax_propose_pr_conflict_resolution auth-required never probed

  Ask AI (Opus 5.5) to PROPOSE a resolution for each conflict block of a PR's text files — the Conflicts tab's 'Propose resolutions' button. Nothing is committed: each proposal (the block's lines, an explanation, a confidence 0..1) is stored for the (base, head) pair and shown on the Conflicts tab and in merjax_list_pr_conflicts (`unresolved[].proposal`); accept a block with merjax_resolve_pr_conflict `choices: {<hunk id>: 'ai'}`, edit it with a custom choice, or pick another option, then merjax_commit_pr_conflict_resolution. Refused when the repository's merge-conflict mode is Manual only, when the PR author opted out of AI for conflicts, or when AI is unavailable (paused, not configured, over budget) — the error says which. A file over 60 KiB is reported too-large; repository text is sent as fenced data with secrets redacted. A file already proposed at this pair is not sent again unless again: true. Requires write access and 'repo' scope.

  mcp-tool

  1234567891011121314151617181920212223242526272829303132333435363738

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "number"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "again": {
        "type": "boolean",
        "description": "Ask again for files that already have a proposal at this pair (default false)"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "paths": {
        "type": "array",
        "description": "Optional: only these conflicted files (default: every text file without a saved resolution)"
      },
      "number": {
        "type": "number",
        "description": "PR number"
      },
      "base_sha": {
        "type": "string",
        "description": "Optional: baseSha from merjax_list_pr_conflicts; a moved base is refused"
      },
      "head_sha": {
        "type": "string",
        "description": "Optional: headSha from merjax_list_pr_conflicts; a moved head is refused"
      }
    }
  }

  arguments 38 lines copy
• merjax_rerun_failed_jobs auth-required never probed

  Re-run a failed or cancelled workflow run at the SAME commit (same inputs, same PR merge preview) — the run page's Re-run. Merjax re-runs every job of the run (per-job re-run does not exist yet); a successful or still-running run is refused. Joins an identical queued run instead of stacking another. Requires write access and 'repo' scope. Returns {runId, previousRunId, joinedExistingRun, url}.

  mcp-tool

  12345678910111213141516171819202122

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "run_id"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "run_id": {
        "type": "string",
        "description": "The run's id (uuid)"
      }
    }
  }

  arguments 22 lines copy
• merjax_set_branch_protection auth-required never probed

  Set branch protection for one branch (partial update: fields you omit keep their value). Edits the rule named exactly after the branch; when only a glob rule covers it, a new exact rule is created seeded from the glob's settings and checks. required_checks replaces the required-check list; it may add checks, but REMOVING a check that applies to the branch is refused here (it needs a step-up: the web page or the REST API with the account password). require_pr_run: a required check that names a workflow is met only by that workflow's pull_request run. Requires ADMIN access to the repo and 'repo' scope. Audit-logged. Returns the resulting rule plus {created, warnings}.

  mcp-tool

  1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "branch"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "branch": {
        "type": "string",
        "description": "Branch name (not a pattern)"
      },
      "allow_deletion": {
        "type": "boolean"
      },
      "require_pr_run": {
        "type": "boolean",
        "description": "Workflow checks count only from the PR's pull_request run"
      },
      "required_checks": {
        "type": "array",
        "description": "Array of check names that must pass (workflow names, gate names or commit-status contexts); [] clears the list"
      },
      "allow_force_push": {
        "type": "boolean"
      },
      "enable_auto_merge": {
        "type": "boolean",
        "description": "Branch-wide autopilot auto-merge (K2)"
      },
      "required_approvals": {
        "type": "number",
        "description": "Human approvals required (0-10)"
      },
      "require_ai_approval": {
        "type": "boolean"
      },
      "require_green_gates": {
        "type": "boolean"
      },
      "require_human_review": {
        "type": "boolean"
      },
      "require_pull_request": {
        "type": "boolean"
      },
      "dismiss_stale_reviews": {
        "type": "boolean"
      }
    }
  }

  arguments 59 lines copy
• merjax_approve_pr auth-required never probed

  Approve a pull request: records an 'approved' review by the caller — the same review the web form and POST /api/v2/repos/:owner/:repo/pulls/:number/reviews write, so it counts toward branch protection's required approvals and clears the caller's own earlier request for changes. The PR must be open; its author cannot approve it. Requires write access and 'repo' scope. To request changes use merjax_request_changes. Returns {reviewId, number, state, url}.

  mcp-tool

  1234567891011121314151617181920212223242526

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "number"
    ],
    "properties": {
      "body": {
        "type": "string",
        "description": "Optional review comment (Markdown)"
      },
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "number": {
        "type": "number",
        "description": "PR number"
      }
    }
  }

  arguments 26 lines copy
• merjax_read_file auth-required never probed

  Read a file from a repo at a given ref. Mirrors GET /api/v2/repos/:owner/:repo/contents/:path. Returns {path, size, content, encoding, totalLines}. Pass `start_line` / `end_line` (1-based, inclusive) to read only part of a text file. A text file over ~60 KB read with no range returns its first ~60 KB of whole lines with `truncated: true`, `startLine`/`endLine` and a hint — ask for the next range to read on.

  mcp-tool

  1234567891011121314151617181920212223242526272829303132333435

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "path"
    ],
    "properties": {
      "ref": {
        "type": "string",
        "description": "Branch / tag / sha (default HEAD)"
      },
      "path": {
        "type": "string"
      },
      "repo": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      },
      "encoding": {
        "type": "string",
        "description": "'utf8' (default) or 'base64'"
      },
      "end_line": {
        "type": "number",
        "description": "Last line to return (1-based, inclusive; clamped to the file's length). Text files only."
      },
      "start_line": {
        "type": "number",
        "description": "First line to return (1-based, inclusive). Text files only."
      }
    }
  }

  arguments 35 lines copy
• merjax_delete_file auth-required never probed

  Delete a file from a branch via git plumbing. Requires the existing blob sha (optimistic concurrency) and 'repo' scope. Meets the same branch protection, rulesets and secret scan as a git push, and fires CI/webhooks like one. Mirrors DELETE /api/v2/contents.

  mcp-tool

  1234567891011121314151617181920212223242526272829303132

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "path",
      "branch",
      "message",
      "sha"
    ],
    "properties": {
      "sha": {
        "type": "string",
        "description": "Current blob sha (40-hex)"
      },
      "path": {
        "type": "string"
      },
      "repo": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      },
      "branch": {
        "type": "string"
      },
      "message": {
        "type": "string"
      }
    }
  }

  arguments 32 lines copy
• merjax_list_tree auth-required never probed

  List directory contents at a ref. `path` scopes the listing to a subtree and is honoured in BOTH modes; `recursive: true` walks the whole subtree instead of one level. Always returns the same shape: {path, ref, recursive, entries, truncated, totalCount}. Recursive entries carry full repo-relative paths; non-recursive entries carry names. A ref that does not exist is an error, never an empty listing.

  mcp-tool

  1234567891011121314151617181920212223242526

  {
    "type": "object",
    "required": [
      "owner",
      "repo"
    ],
    "properties": {
      "ref": {
        "type": "string",
        "description": "Branch / tag / sha. Omit (or pass HEAD) for the default branch."
      },
      "path": {
        "type": "string",
        "description": "Sub-path within the repo"
      },
      "repo": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      },
      "recursive": {
        "type": "boolean"
      }
    }
  }

  arguments 26 lines copy
• merjax_get_commit auth-required never probed

  Fetch a single commit by SHA: metadata plus the list of files it changed (path, status, additions, deletions). Mirrors GET /api/v2/repos/.../commits/:sha. Patch bodies are NOT included — use merjax_get_diff for those.

  mcp-tool

  123456789101112131415161718192021222324

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "sha"
    ],
    "properties": {
      "sha": {
        "type": "string",
        "description": "Commit SHA"
      },
      "repo": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      },
      "include_files": {
        "type": "boolean",
        "description": "Include the files-changed summary and stats (default true). Set false to skip the diff read on very large commits."
      }
    }
  }

  arguments 24 lines copy
• merjax_get_diff auth-required never probed

  Read the actual changes in a commit or a branch range. Pass `sha` for one commit against its first parent, or `base`+`head` for everything head adds since the merge base (what a PR proposes). Returns {files:[{path, oldPath?, status, additions, deletions, binary, patch, patchTruncated}], stats, truncated}. Patch text is byte-capped; set include_patch=false for a files-changed summary only.

  mcp-tool

  1234567891011121314151617181920212223242526272829303132333435

  {
    "type": "object",
    "required": [
      "owner",
      "repo"
    ],
    "properties": {
      "sha": {
        "type": "string",
        "description": "Commit SHA — diffs it against its first parent"
      },
      "base": {
        "type": "string",
        "description": "Base ref (with `head`)"
      },
      "head": {
        "type": "string",
        "description": "Head ref (with `base`)"
      },
      "repo": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      },
      "include_patch": {
        "type": "boolean",
        "description": "Include patch bodies (default true)"
      },
      "max_patch_bytes": {
        "type": "number",
        "description": "Total budget for patch text across all files (default 400000, max 2000000)"
      }
    }
  }

  arguments 35 lines copy
• merjax_create_branch auth-required never probed

  Create a new branch ref pointing at an existing sha. Mirrors POST /api/v2/repos/.../git/refs. Gated like a push of the new branch (rulesets, secret scan of commits no other ref reaches) and fires CI/webhooks. Requires 'repo' scope. Returns {ref, sha}.

  mcp-tool

  12345678910111213141516171819202122232425

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "branch",
      "sha"
    ],
    "properties": {
      "sha": {
        "type": "string",
        "description": "Target commit sha (40-hex)"
      },
      "repo": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      },
      "branch": {
        "type": "string",
        "description": "New branch name (short form)"
      }
    }
  }

  arguments 25 lines copy
• merjax_atomic_multi_file_commit auth-required never probed

  Apply a set of file writes + deletes as a single atomic commit on a branch (creates the branch if it doesn't exist). The killer agent tool: blob/tree/commit/ref-update sequence. Each change is `{path, content?, content_base64?, deleted?}`. Meets the same branch protection, rulesets and secret scan as a git push, and fires CI/webhooks like one. Requires 'repo' scope.

  mcp-tool

  1234567891011121314151617181920212223242526272829303132

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "branch",
      "message",
      "changes"
    ],
    "properties": {
      "repo": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      },
      "branch": {
        "type": "string"
      },
      "changes": {
        "type": "array",
        "description": "Array of {path, content?|content_base64?, deleted?} entries."
      },
      "message": {
        "type": "string"
      },
      "base_branch": {
        "type": "string",
        "description": "Branch to fork from when `branch` doesn't yet exist (default: repo default)."
      }
    }
  }

  arguments 32 lines copy
• merjax_apply_patch auth-required never probed

  Commit a patch to a branch without sending whole files — the way to change a few lines of a large file. `patch` is a unified diff as `git diff` prints it (one commit, `message` required) OR `git format-patch` mbox output (each patch becomes its own commit with the patch's own message and author, like `git am`; `message` is ignored). Applied server-side with `git apply --cached` against the branch head (created from `base_branch` if missing); blank context lines a transport stripped to empty lines, or trimmed off the end of the patch, are restored first (git still checks them against the file). `expected_head_sha` makes it compare-and-swap (all zeros = branch must not exist yet). Meets the same branch protection, rulesets and secret scan as a git push, and fires CI/webhooks like one. Patch limit 2 MiB. Requires 'repo' scope. Returns {branch, commit_sha, parent_sha, files_changed, files, commits, created} (+ blank_context_lines_restored / trimmed_blank_context_lines_restored when a repair was needed).

  mcp-tool

  12345678910111213141516171819202122232425262728293031323334353637

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "branch",
      "patch"
    ],
    "properties": {
      "repo": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      },
      "patch": {
        "type": "string",
        "description": "Unified diff (`git diff`, a/ b/ prefixes) or `git format-patch` mbox text. Max 2 MiB."
      },
      "branch": {
        "type": "string",
        "description": "Target branch (short name). Created if it does not exist."
      },
      "message": {
        "type": "string",
        "description": "Commit message. Required for a unified diff; ignored for mbox input (each patch carries its own)."
      },
      "base_branch": {
        "type": "string",
        "description": "Branch to fork from when `branch` does not exist yet (default: the repo's default branch)."
      },
      "expected_head_sha": {
        "type": "string",
        "description": "Optional compare-and-swap: the 40-hex sha you expect `branch` to point at. Refused if it moved. All zeros = the branch must not exist."
      }
    }
  }

  arguments 37 lines copy
• merjax_ship_spec auth-required never probed

  Drop a spec file in .gluecron/specs/ with status: ready so the autopilot picks it up. Wraps voice-to-pr.shipAsSpec — handle both voice + manual specs. Requires 'repo' scope.

  mcp-tool

  123456789101112131415161718192021222324

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "title",
      "body"
    ],
    "properties": {
      "body": {
        "type": "string",
        "description": "Spec body (Markdown)"
      },
      "repo": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      },
      "title": {
        "type": "string"
      }
    }
  }

  arguments 24 lines copy
• merjax_voice_to_pr auth-required never probed

  Interpret a free-form voice transcript and either ship it as a spec or create an issue (caller picks via `as`). Wraps src/lib/voice-to-pr.ts. Requires 'repo' scope.

  mcp-tool

  1234567891011121314151617181920212223

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "transcript"
    ],
    "properties": {
      "as": {
        "type": "string",
        "description": "'spec' or 'issue' (default: auto via interpretVoiceTranscript)"
      },
      "repo": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      },
      "transcript": {
        "type": "string"
      }
    }
  }

  arguments 23 lines copy
• merjax_refactor_across_repos auth-required never probed

  Plan + execute a refactor that spans multiple repos owned by the caller. Wraps src/lib/multi-repo-refactor.ts. `dry_run: true` returns the plan only. Requires 'repo' scope.

  mcp-tool

  1234567891011121314151617181920

  {
    "type": "object",
    "required": [
      "description"
    ],
    "properties": {
      "dry_run": {
        "type": "boolean",
        "description": "When true, returns the plan and does NOT execute."
      },
      "description": {
        "type": "string",
        "description": "Natural-language description"
      },
      "repository_ids": {
        "type": "array",
        "description": "Optional explicit repo IDs to scope the refactor to."
      }
    }
  }

  arguments 20 lines copy
• merjax_chat_with_repo auth-required never probed

  Start a new chat with a repo: creates a chat row, sends the first user message, streams + persists the assistant reply. Returns {chat_id, reply}. If the AI service does not answer this fails with a JSON-RPC error carrying {chat_id, ai_error} — it never returns apology copy as a reply. Requires authentication.

  mcp-tool

  123456789101112131415161718192021222324

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "message"
    ],
    "properties": {
      "repo": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      },
      "title": {
        "type": "string",
        "description": "Chat title (optional)"
      },
      "message": {
        "type": "string",
        "description": "Initial user message"
      }
    }
  }

  arguments 24 lines copy
• merjax_generate_release_notes auth-required never probed

  Generate release notes between two tags. Wraps src/lib/ai-release-notes.generateReleaseNotes. Returns the rendered Markdown + section data.

  mcp-tool

  123456789101112131415161718192021222324

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "to_tag"
    ],
    "properties": {
      "repo": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      },
      "to_tag": {
        "type": "string",
        "description": "New tag"
      },
      "from_tag": {
        "type": "string",
        "description": "Previous tag (optional)"
      }
    }
  }

  arguments 24 lines copy
• merjax_trigger_workflow auth-required never probed

  Dispatch a workflow_dispatch run. Mirrors POST /api/v2/repos/.../actions/workflows/:filename/dispatches. Requires 'repo' scope.

  mcp-tool

  12345678910111213141516171819202122232425262728

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "filename"
    ],
    "properties": {
      "ref": {
        "type": "string",
        "description": "Branch / tag / sha (default: repo default branch)"
      },
      "repo": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      },
      "inputs": {
        "type": "object",
        "description": "Workflow inputs (object)"
      },
      "filename": {
        "type": "string",
        "description": "Workflow filename (e.g. ci.yml)"
      }
    }
  }

  arguments 28 lines copy
• merjax_get_workflow_run auth-required never probed

  Fetch a workflow run's metadata + status. Mirrors GET /api/v2/repos/.../actions/runs/:id. Also says how it relates to automatic retries: `retryOf` / `retryOfRunNumber` (the run this one retries after a deploy or a lost runner) and `retriedAs` ({id, runNumber} of the run that retried this one, or null). A queued run that no runner can take carries `queueReason` (e.g. "waiting for a runner: 2 configured, 0 reachable, last seen 4m ago"). `workClass` (interactive / review / push / schedule — how the CI claim shares slots); a queued run carries `queue` ({code, text}: its place in the claim order, from the claim plan itself); a schedule run carries `coalescedFires` / `lastCoalescedAt`, and `coalescedNote` when later scheduled fires folded into it while it was queued.

  mcp-tool

  1234567891011121314151617181920

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "run_id"
    ],
    "properties": {
      "repo": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      },
      "run_id": {
        "type": "string",
        "description": "The run's id, or a unique leading part of it (8+ hex characters)"
      }
    }
  }

  arguments 20 lines copy
• merjax_explain_failure auth-required never probed

  Explain a failed CI run: for each failed step, its class (compile / test / flaky / dependency / env / infra / lint / security / unknown) and the rule that chose it, the normalised error signature, failing tests, the files the commit touched, prior occurrences of the same failure (this repo, your other repos with the same owner or org, and platform-wide counts only) with the fix rate, and a suggested fix — the commit / PR that fixed it last time plus its diff limited to the relevant files, or the class's standard remedy. Infra and flaky failures never suggest a code change. `run_id` is the run's full id; with `owner` + `repo` an 8+ hex prefix also works.

  mcp-tool

  123456789101112131415161718192021222324

  {
    "type": "object",
    "required": [
      "run_id"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Optional: repository name — needed only for a run-id prefix"
      },
      "owner": {
        "type": "string",
        "description": "Optional: repository owner — needed only for a run-id prefix"
      },
      "run_id": {
        "type": "string",
        "description": "The failed run's id (full uuid; an 8+ hex prefix when owner + repo are given)"
      },
      "include_diff": {
        "type": "boolean",
        "description": "Include the prior fix's diff, limited to the relevant files (default true)"
      }
    }
  }

  arguments 24 lines copy
• merjax_list_flaky_tests auth-required never probed

  List a repository's flaky tests. A test is flaky only with a forensic repro: when it failed, CI re-ran just that test in the same order, alone, with the clock shifted +137 ms and +1 s, in TZ=Pacific/Chatham and in a fixed random order, and a variable flipped its verdict N times in a row on the same git tree. Each entry has the test, file, state (active / expired / resolved, or unexplained = flipped with no repro, NOT flaky), label (clock-dependent, order-dependent, concurrency-dependent), the variable, the exact repro command, owner, expiry, issue number, flip rate and evidence runs. Information only — flaky tests are never skipped or quarantined; one targeted retry, and the merge gate excuses a failure only when that retry passed in the same run and the label is active.

  mcp-tool

  1234567891011121314151617181920212223

  {
    "type": "object",
    "required": [
      "owner",
      "repo"
    ],
    "properties": {
      "repo": {
        "type": "string"
      },
      "limit": {
        "type": "number",
        "description": "Max tests (default 25, max 100)"
      },
      "owner": {
        "type": "string"
      },
      "window_days": {
        "type": "number",
        "description": "Flip evidence from this many days back (default and max 30)"
      }
    }
  }

  arguments 23 lines copy
• merjax_prioritize_workflow_run auth-required never probed

  Move a QUEUED workflow run into the priority lane: the runner claims it ahead of the class order, highest `level` first (normal < high < critical), then oldest (issue #10898). The lane holds at most a third of the runner slots, so prioritizing many runs cannot starve the rest. Calling again on a prioritized queued run changes its level. Only queued runs; a running or finished run is reported, not changed. Requires 'repo' scope and write access; `high` and `critical` also require a site admin.

  mcp-tool

  123456789101112131415161718192021222324

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "run_id"
    ],
    "properties": {
      "repo": {
        "type": "string"
      },
      "level": {
        "type": "string",
        "description": "normal (default) | high | critical — high and critical need a site admin"
      },
      "owner": {
        "type": "string"
      },
      "run_id": {
        "type": "string",
        "description": "The run's id, or a unique leading part of it (8+ hex characters)"
      }
    }
  }

  arguments 24 lines copy
• merjax_review_deployment auth-required never probed

  Approve or reject a workflow run's jobs waiting on a protected environment (`environment:` with required reviewers). The caller must be a reviewer of every environment selected (the environment's reviewers, or the repository owner when none are listed). An approval runs the job (after the environment's wait timer, if any); a rejection fails it. Mirrors POST /api/v2/repos/.../actions/runs/:id/pending_deployments. Requires 'repo' scope.

  mcp-tool

  1234567891011121314151617181920212223242526272829303132

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "run_id",
      "state"
    ],
    "properties": {
      "repo": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      },
      "state": {
        "type": "string",
        "description": "\"approved\" or \"rejected\""
      },
      "run_id": {
        "type": "string",
        "description": "The run's id, or a unique leading part of it (8+ hex characters)"
      },
      "comment": {
        "type": "string"
      },
      "environments": {
        "type": "array",
        "description": "Environment names (or ids), as strings, to decide; omitted = every waiting one"
      }
    }
  }

  arguments 32 lines copy
• merjax_create_runner_registration_token auth-required never probed

  Create a one-time CI runner registration token for an owner (your username, an org you own or admin, or 'platform' as a site admin). A runner started with RUNNER_REGISTRATION_TOKEN=<token> registers once and gets its own long-lived credential; that owner's CI then runs on it. Expires in an hour. Pass exclusive: true for a label-only runner (a Mac for Xcode, a GPU box): it takes only jobs whose runs-on names its labels (e.g. [self-hosted, macos, xcode]), never runs-on: self / ubuntu-*, and the account keeps its shared lane; repositories narrows it to some of the owner's repositories. Both are fixed for the runner's life. Returns {owner, token, expiresAt, exclusive, repositoryIds, gluecronUrl}.

  mcp-tool

  123456789101112131415161718192021222324

  {
    "type": "object",
    "required": [
      "owner"
    ],
    "properties": {
      "owner": {
        "type": "string",
        "description": "Username, org slug, or 'platform'"
      },
      "labels": {
        "type": "string",
        "description": "Comma-separated labels the runner gets in addition to its own (e.g. gpu,arm64)"
      },
      "exclusive": {
        "type": "boolean",
        "description": "Label-only runner (default false): offered only jobs whose runs-on labels it all has, never the account's default lane. Fixed at registration; a heartbeat cannot change it."
      },
      "repositories": {
        "type": "string",
        "description": "Exclusive runners only: comma-separated repository names of this owner it serves (default: all of them)"
      }
    }
  }

  arguments 24 lines copy
• merjax_list_runners auth-required never probed

  List the CI runners registered to an owner (username, org slug, or 'platform'): id, name, url, labels, slots, online, last seen, revoked; allowSharedOverflow (the setting); and sharedLane, whether the owner's jobs actually run on shared runners: 'used (no own runners)', 'overflow allowed' or 'not used (own runners only)', explained in sharedLaneDetail. Needs a PAT with 'repo' scope (or a session) and the right to manage the owner's runners. For a read-only credential — a security audit watching for rogue runners — mint a repository token with {"runners": "read"} (merjax_create_repo_token) and call GET /api/v2/repos/:owner/:repo/actions/runners: it lists the same runners and lane and can do nothing else (repository tokens are not accepted on /mcp). Add {"actions": "read"} (the ci-audit preset) and the same token also lists workflows, runs and jobs and reads their masked logs, still with no write anywhere.

  mcp-tool

  123456789101112

  {
    "type": "object",
    "required": [
      "owner"
    ],
    "properties": {
      "owner": {
        "type": "string",
        "description": "Username, org slug, or 'platform'"
      }
    }
  }

  arguments 12 lines copy
• merjax_provision_pr_sandbox auth-required never probed

  Provision (or re-provision) a sandbox for a PR. Wraps pr-sandbox.provisionSandbox. Requires 'repo' scope. Returns {ok:false, reason:'not enabled on this host'} when no sandbox provisioner runs on the host.

  mcp-tool

  12345678910111213141516171819

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "number"
    ],
    "properties": {
      "repo": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      },
      "number": {
        "type": "number"
      }
    }
  }

  arguments 19 lines copy
• merjax_release_lease auth-required never probed

  Release a lease by id. Idempotent. Returns {released}.

  mcp-tool

  1234567891011

  {
    "type": "object",
    "required": [
      "lease_id"
    ],
    "properties": {
      "lease_id": {
        "type": "string"
      }
    }
  }

  arguments 11 lines copy
• merjax_semantic_search auth-required never probed

  Query the per-repo vector index (Voyage embeddings when configured, hash fallback otherwise). Reads the live per-push index (code_embeddings) first, falling back to the manually-reindexed chunk index (code_chunks). Returns {hits, source, indexed, indexedFiles} — `indexed: false` means the repo has never been indexed (empty hits are NOT 'no match'); `indexedFiles` is the live-index row count.

  mcp-tool

  12345678910111213141516171819202122

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "query"
    ],
    "properties": {
      "repo": {
        "type": "string"
      },
      "limit": {
        "type": "number"
      },
      "owner": {
        "type": "string"
      },
      "query": {
        "type": "string"
      }
    }
  }

  arguments 22 lines copy
• merjax_find_symbol auth-required never probed

  Find definitions of a symbol by name within a repo. Wraps src/lib/symbols.findDefinitions.

  mcp-tool

  1234567891011121314151617181920

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "name"
    ],
    "properties": {
      "name": {
        "type": "string",
        "description": "Symbol name"
      },
      "repo": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      }
    }
  }

  arguments 20 lines copy
• merjax_pr_status_summary auth-required never probed

  Compute a one-shot status summary for a PR: state, risk score (and whether it describes the current head), CI state for the head commit as the merge gate sees it (with `ci.failures`: for each failed run, the failed step, up to 8 file:line rows linked to the head sha, the tool's own guidance block and the full step log URL, or `{withheld, required, hint}` when this credential may not read the run's logs), AI-review verdicts (trio), gate signals, `merge` — the conflict probe the merge gate uses (status up-to-date | clean | conflicts | unknown, unresolved files with kinds, files settled by structured merge or the merge rules, conflictsUrl), `conflictRisk` — the early warning (files the base changed since the PR branched that the PR changed too; updateIsClean when updating now would merge cleanly), auto-merge (armed? `last_attempt.reason` says what it waits for or what happens next), and `mergeTrain.lastDequeue` — the merge train's newest receipt for a green merge preview it did not merge (which commit, which runs, why). Read-only.

  mcp-tool

  12345678910111213141516171819

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "number"
    ],
    "properties": {
      "repo": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      },
      "number": {
        "type": "number"
      }
    }
  }

  arguments 19 lines copy
• merjax_ci_queue_status auth-required 5d ago

  How full the shared CI queue is, and what to do about it: level (ok / busy / saturated), runs queued and running, runner slots, estimated minutes before a new run starts, and — with owner+repo — that repository's queued/running runs, its share of CI work, the slots it may hold while others wait (per work class, and across classes), a recommendation (e.g. batch changes into fewer pushes), and `explanation`: each work class's queued/running runs (interactive, review, push, schedule) and, for each of the repository's queued runs, its class and why it waits (code + sentence, from the claim plan itself). The same `ciQueue` block the write tools return. Ask before a burst of pushes. Also `executor`: where CI runs (external runners or in-process), runners configured / reachable / busy, and `holdReason` when no runner can take a run. Read-only.

  mcp-tool

  12345678910111213

  {
    "type": "object",
    "properties": {
      "repo": {
        "type": "string",
        "description": "Optional, with owner"
      },
      "owner": {
        "type": "string",
        "description": "Optional, with repo: report this repository's part of the queue"
      }
    }
  }

  arguments 13 lines copy
• merjax_handover auth-required never probed

  Start here when picking up work: the live state of a repository, read from git and CI rather than from a handoff doc. Returns `summary` (one paragraph), `blockers` (most urgent first), the default branch's CI per workflow (red streak, since when, last green run), the build this Merjax instance serves and how many commits it is behind (when it is this repository), every open PR grouped green / pending / failing / draft as the merge gate judges it, PRs merged in the last `merged_since_hours` (default 48), the CI queue, and — when the default branch carries `docs/plans/capacity-plan.json` — `plan`: the next items, items in flight, decisions waiting on the owner and drift between the ledger and the PRs; and `plans`, the same for every `docs/plans/*-plan.json` ledger (each read with the `idPrefix` it declares, default CAP; at most 10). Read-only.

  mcp-tool

  123456789101112131415161718192021

  {
    "type": "object",
    "required": [
      "owner",
      "repo"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "merged_since_hours": {
        "type": "number",
        "description": "Window for recently merged PRs (default 48, max 720)"
      }
    }
  }

  arguments 21 lines copy
• merjax_create_issue auth-required never probed

  Create a new issue on a Merjax repository. Requires authenticated caller with write access on the target repo. Returns {number, url}.

  mcp-tool

  1234567891011121314151617181920212223242526

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "title"
    ],
    "properties": {
      "body": {
        "type": "string",
        "description": "Issue body (Markdown). Optional."
      },
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "title": {
        "type": "string",
        "description": "Issue title"
      }
    }
  }

  arguments 26 lines copy
• merjax_clone_url auth-required 5d ago

  Return the authenticated HTTPS clone URL for a repo + a credential-helper hint. Use this instead of embedding tokens in URLs. Returns {url, owner, repo, defaultBranch, hint} using the repo's stored casing.

  mcp-tool

  1234567891011121314151617

  {
    "type": "object",
    "required": [
      "owner",
      "repo"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner username"
      }
    }
  }

  arguments 17 lines copy
• merjax_revoke_repo_token auth-required never probed

  Revoke one of your fine-grained repository tokens by id (from merjax_list_repo_tokens). It stops working on its next use. Needs 'repo' scope. Audit-logged.

  mcp-tool

  123456789101112

  {
    "type": "object",
    "required": [
      "id"
    ],
    "properties": {
      "id": {
        "type": "string",
        "description": "Token id"
      }
    }
  }

  arguments 12 lines copy
• merjax_list_deleted_repos auth-required never probed

  List deleted repositories you can restore or purge: your personal ones and those of organizations you own (a site admin may pass all: true for the whole instance). Each has its id, full_name and restorable_until — after that date it is purged automatically. Read-only. Needs 'repo' scope. Returns {total_count, repositories:[{id, full_name, private, deleted_at, deleted_by, restorable_until}]}.

  mcp-tool

  123456789

  {
    "type": "object",
    "properties": {
      "all": {
        "type": "boolean",
        "description": "Site admins only: every deleted repository on the instance"
      }
    }
  }

  arguments 9 lines copy
• merjax_restore_repo auth-required never probed

  Restore a deleted repository by id (from merjax_list_deleted_repos) before its restorable_until date: git data, LFS objects, issues, PRs, collaborators and webhooks come back exactly as they were. Cancelled CI runs stay cancelled and stopped webhook deliveries are not re-sent. Refused when another repository now has the same name in that namespace. Owner (personal owner, or an org owner) or a site admin; needs 'admin' scope. Audited as repo.restore. Returns {restored: true, id, full_name}.

  mcp-tool

  123456789101112

  {
    "type": "object",
    "required": [
      "id"
    ],
    "properties": {
      "id": {
        "type": "string",
        "description": "The deleted repository's id"
      }
    }
  }

  arguments 12 lines copy
• merjax_delete_variable auth-required never probed

  Delete an Actions variable by name. Pass owner + repo for a repository variable, owner + repo + environment for an environment variable, or org for an organisation variable (organisation variables need an admin-scoped token). A variable that does not exist is a not-found error, never reported as deleted. Audit-logged. Returns {name, deleted: true}.

  mcp-tool

  12345678910111213141516171819202122232425262728293031323334

  {
    "type": "object",
    "required": [],
    "properties": {
      "id": {
        "type": "string",
        "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$",
        "description": "Variable id, instead of name"
      },
      "org": {
        "type": "string",
        "description": "Organisation slug"
      },
      "name": {
        "type": "string",
        "pattern": "^[A-Za-z_][A-Za-z0-9_]*$",
        "maxLength": 100,
        "minLength": 1,
        "description": "Variable name: letters, digits and _, not starting with a digit or GITHUB_ (stored upper-case)"
      },
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug (omit when passing org)"
      },
      "environment": {
        "type": "string",
        "description": "Environment name (or id)"
      }
    }
  }

  arguments 34 lines copy
• merjax_list_token_spend auth-required never probed

  Today's model spend (UTC day), the daily bucket in force and the state (active | suspended) of every personal access token of yours, as /settings/tokens/spend shows it. Canary tokens are not listed: they never authenticate. Needs `user` scope. Returns {platformDefaultCents, tokens:[{tokenId, name, tokenPrefix, spentTodayCents, bucketCents (0 = no bucket), bucketSource: own|default, state, suspendedAt, suspendedReason, suspendedSpentCents}]}.

  mcp-tool

  12345

  {
    "type": "object",
    "required": [],
    "properties": {}
  }

  arguments 5 lines copy
• merjax_dismiss_review auth-required never probed

  Dismiss the standing 'changes requested' reviews on a PR (all of them, or one reviewer's), so they no longer hold the merge. Requires 'repo' scope and write access; the reason is required and audited.

  mcp-tool

  12345678910111213141516171819202122232425262728

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "number",
      "reason"
    ],
    "properties": {
      "repo": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      },
      "number": {
        "type": "number"
      },
      "reason": {
        "type": "string",
        "description": "Why the request is dismissed (3-500 characters)"
      },
      "reviewer": {
        "type": "string",
        "description": "Only this reviewer's request (username). Optional."
      }
    }
  }

  arguments 28 lines copy
• merjax_update_pr auth-required never probed

  Edit a pull request's title, body, base branch and/or draft state. Title / body / base: the PR's author or anyone with write access; draft: the same rule as merjax_set_pr_draft (write access and the PR author or repo owner; marking ready starts the AI review). Needs 'repo' scope. Changing the base (open PRs only) re-runs the PR's pull_request CI against the new base and disarms auto-merge. Returns {number, title, body, baseBranch, headBranch, isDraft, changed, autoMergeDisarmed, url}.

  mcp-tool

  1234567891011121314151617181920212223242526272829303132333435363738

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "number"
    ],
    "properties": {
      "base": {
        "type": "string",
        "description": "New base branch"
      },
      "body": {
        "type": "string",
        "description": "New body (Markdown); an empty string clears it"
      },
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "draft": {
        "type": "boolean",
        "description": "true = back to draft, false = ready for review (merjax_set_pr_draft's rule: write access and the PR author or repo owner)"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "title": {
        "type": "string",
        "description": "New title"
      },
      "number": {
        "type": "number",
        "description": "PR number"
      }
    }
  }

  arguments 38 lines copy
• merjax_get_branch_protection auth-required never probed

  Read the branch-protection rule that applies to a branch (exact name or the glob that covers it): required checks, require_pr_run, required approvals, AI / human review, green gates, force-push / deletion, auto-merge; plus `merge_train` {on, batch_max, effective_batch_max, host_ceiling} — whether the merge train runs for the repository and how many armed PRs it tests together; plus `gate_test` {enabled, server_configured, state: on | disabled_in_settings | not_configured_on_server, details} — whether GateTest scans the repository (set it with merjax_update_repo gate_test_enabled). Read-only. Returns {protected: false, merge_train, gate_test} when no rule applies, else {protected: true, pattern, matched_by, required_checks, …, merge_train, gate_test}.

  mcp-tool

  123456789101112131415161718192021

  {
    "type": "object",
    "required": [
      "owner",
      "repo"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "branch": {
        "type": "string",
        "description": "Branch name (default: the repo's default branch)"
      }
    }
  }

  arguments 21 lines copy
• merjax_write_file auth-required never probed

  Create or update a file on a branch via git plumbing. Wraps `createOrUpdateFileOnBranch`. Pass `content` as a UTF-8 string OR `content_base64` for binary. Meets the same branch protection, rulesets and secret scan as a git push, and fires CI/webhooks like one. Requires 'repo' scope.

  mcp-tool

  12345678910111213141516171819202122232425262728293031323334353637383940

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "path",
      "branch",
      "message"
    ],
    "properties": {
      "path": {
        "type": "string"
      },
      "repo": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      },
      "branch": {
        "type": "string"
      },
      "content": {
        "type": "string",
        "description": "UTF-8 file body (optional)"
      },
      "message": {
        "type": "string",
        "description": "Commit message"
      },
      "content_base64": {
        "type": "string",
        "description": "Base64 file body (optional)"
      },
      "expect_blob_sha": {
        "type": "string",
        "description": "Optimistic-concurrency check: existing blob sha must match."
      }
    }
  }

  arguments 40 lines copy
• merjax_chat_continue auth-required never probed

  Send another message to an existing repo chat. Returns the assistant's reply. If the AI service does not answer this fails with a JSON-RPC error carrying {chat_id, ai_error} rather than returning apology copy as a reply.

  mcp-tool

  123456789101112131415

  {
    "type": "object",
    "required": [
      "chat_id",
      "message"
    ],
    "properties": {
      "chat_id": {
        "type": "string"
      },
      "message": {
        "type": "string"
      }
    }
  }

  arguments 15 lines copy
• merjax_generate_commit_message auth-required never probed

  Generate a commit message for a diff. Same engine as merjax_generate_pr_description but explicit for the commit-message use case.

  mcp-tool

  123456789101112131415

  {
    "type": "object",
    "required": [
      "diff"
    ],
    "properties": {
      "diff": {
        "type": "string"
      },
      "style": {
        "type": "string",
        "description": "'conventional' (default) or 'plain'"
      }
    }
  }

  arguments 15 lines copy
• merjax_get_preview_url auth-required never probed

  Return the branch-preview URL + status for a (repo, branch) pair. Wraps branch-previews.getPreviewForBranch. Returns {ok:false, reason:'not enabled on this host'} when the host has no PREVIEW_DOMAIN (no preview would ever resolve).

  mcp-tool

  12345678910111213141516171819

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "branch"
    ],
    "properties": {
      "repo": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      },
      "branch": {
        "type": "string"
      }
    }
  }

  arguments 19 lines copy
• merjax_acquire_lease auth-required never probed

  Grab an exclusive lease on a PR, issue, branch or file path in a repository you can write, for one of your agent sessions. Pass owner+repo with a bare key (PR/issue number, branch name, path), or target_id '<repository id>:<key>'. Returns lease null when another agent holds an active lease.

  mcp-tool

  123456789101112131415161718192021222324252627282930313233

  {
    "type": "object",
    "required": [
      "agent_session_id",
      "target_type",
      "target_id"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Repository name (optional, with owner)"
      },
      "owner": {
        "type": "string",
        "description": "Repository owner (optional, with repo)"
      },
      "target_id": {
        "type": "string",
        "description": "PR/issue number, branch name or file path (with owner+repo, or a session scoped to a repo); '<repository id>:<key>'; or a PR/issue id"
      },
      "duration_ms": {
        "type": "number",
        "description": "Lease duration, clamped to 1 second – 1 hour (default 5 minutes)"
      },
      "target_type": {
        "type": "string",
        "description": "'issue' | 'pr' | 'branch' | 'file_path'"
      },
      "agent_session_id": {
        "type": "string"
      }
    }
  }

  arguments 33 lines copy
• merjax_reopen_issue auth-required never probed

  Reopen a previously closed issue. Requires authenticated caller with write access. Idempotent. Returns {state}.

  mcp-tool

  12345678910111213141516171819202122

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "number"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "number": {
        "type": "number",
        "description": "Issue number"
      }
    }
  }

  arguments 22 lines copy
• merjax_list_prs auth-required never probed

  List pull requests on a repo, filtered by state (open|closed|merged|all). Authenticated callers only. Returns up to 50 summary rows.

  mcp-tool

  1234567891011121314151617181920212223242526272829

  {
    "type": "object",
    "required": [
      "owner",
      "repo"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "limit": {
        "type": "number",
        "description": "Max rows per page (default 50, max 100)"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "state": {
        "type": "string",
        "description": "open | closed | merged | all (default: open)"
      },
      "offset": {
        "type": "number",
        "description": "Rows to skip, for paging. Use `nextOffset` from the previous response."
      }
    }
  }

  arguments 29 lines copy
• merjax_fork_repo auth-required never probed

  Fork a repository to the authenticated caller's namespace. Mirrors POST /:owner/:repo/fork. Returns {owner, repo, url}. Requires 'repo' scope.

  mcp-tool

  1234567891011121314151617

  {
    "type": "object",
    "required": [
      "owner",
      "repo"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Source repo name"
      },
      "owner": {
        "type": "string",
        "description": "Source repo owner"
      }
    }
  }

  arguments 17 lines copy
• merjax_list_repo_tokens auth-required never probed

  List the fine-grained repository tokens you have minted (never the secret): repository, permissions, state (active / expired / revoked), expiry and last use. Needs 'repo' scope.

  mcp-tool

  1234

  {
    "type": "object",
    "properties": {}
  }

  arguments 4 lines copy
• merjax_backup_status auth-required never probed

  Site admins only (needs an 'admin'-scoped token). Backup and restore-drill health: whether the newest backup set is verified on an offsite target and how old it is, whether offsite copies are immutable (Object Lock), when a restore drill last passed, whether the backup worker is running, plus targets (host/bucket, never keys), schedule and recent runs. A stale, failed, local-only or never-drilled backup reads RED. Pass start: 'backup' or 'drill' to queue one for the worker (picked up within 15 minutes; audit-logged). Returns {health, reasons, targets, problems, schedule, runs, started?}.

  mcp-tool

  123456789

  {
    "type": "object",
    "properties": {
      "start": {
        "type": "string",
        "description": "Optional: 'backup' or 'drill' — queue one now"
      }
    }
  }

  arguments 9 lines copy
• merjax_label_issue auth-required never probed

  Attach one or more labels to an issue. Labels are created if they don't yet exist on the repo. Requires 'repo' scope. Returns {labels}.

  mcp-tool

  123456789101112131415161718192021222324

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "number",
      "labels"
    ],
    "properties": {
      "repo": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      },
      "labels": {
        "type": "array",
        "description": "Label names (strings)"
      },
      "number": {
        "type": "number"
      }
    }
  }

  arguments 24 lines copy
• merjax_search_issues auth-required never probed

  Search issues by title/body keyword on a single repo, filtered by state. Returns ranked rows.

  mcp-tool

  123456789101112131415161718192021222324252627

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "query"
    ],
    "properties": {
      "repo": {
        "type": "string"
      },
      "limit": {
        "type": "number"
      },
      "owner": {
        "type": "string"
      },
      "query": {
        "type": "string",
        "description": "Search keyword"
      },
      "state": {
        "type": "string",
        "description": "open | closed | all (default open)"
      }
    }
  }

  arguments 27 lines copy
• merjax_get_pr_checks auth-required never probed

  List every check at a PR's current head — workflow runs, gates and commit statuses — with status, conclusion, whether branch protection requires it, and the run's log URL; plus each required check's state (passing / pending / failing / missing) and the merge gate's own CI verdict. A failed workflow run carries `failure`: the failed job and step, up to 8 file:line rows linked to the head sha, the tool's own guidance block ("What now?"), `budget` when a time budget rather than a test stopped the step (run conclusion `timed_out`: still blocks the merge), and the full step log URL — or `{withheld, required, hint}` when this credential may not read the run's logs (a private repository needs 'repo' scope). Read-only. Returns {head_sha, total_count, check_runs, required, ci}.

  mcp-tool

  12345678910111213141516171819202122

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "number"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "number": {
        "type": "number",
        "description": "PR number"
      }
    }
  }

  arguments 22 lines copy
• merjax_propose_migration auth-required never probed

  Propose a dependency-upgrade PR. Wraps src/lib/migration-assistant.proposeMajorMigration. Requires 'repo' scope.

  mcp-tool

  123456789101112131415161718192021222324252627282930313233343536

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "dependency",
      "from_version",
      "to_version",
      "base_sha"
    ],
    "properties": {
      "repo": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      },
      "base_sha": {
        "type": "string",
        "description": "Commit sha to fork from"
      },
      "changelog": {
        "type": "string",
        "description": "Optional changelog text"
      },
      "dependency": {
        "type": "string"
      },
      "to_version": {
        "type": "string"
      },
      "from_version": {
        "type": "string"
      }
    }
  }

  arguments 36 lines copy
• merjax_cancel_workflow_run auth-required never probed

  Cancel a queued/running workflow run. Requires 'repo' scope.

  mcp-tool

  1234567891011121314151617181920

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "run_id"
    ],
    "properties": {
      "repo": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      },
      "run_id": {
        "type": "string",
        "description": "The run's id, or a unique leading part of it (8+ hex characters)"
      }
    }
  }

  arguments 20 lines copy
• merjax_get_agent_budget auth-required never probed

  Return spent / cap / remaining cents for an agent session.

  mcp-tool

  1234567891011

  {
    "type": "object",
    "required": [
      "agent_session_id"
    ],
    "properties": {
      "agent_session_id": {
        "type": "string"
      }
    }
  }

  arguments 11 lines copy
• merjax_search_prs auth-required never probed

  Search pull requests by title/body keyword on a repo.

  mcp-tool

  1234567891011121314151617181920212223242526

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "query"
    ],
    "properties": {
      "repo": {
        "type": "string"
      },
      "limit": {
        "type": "number"
      },
      "owner": {
        "type": "string"
      },
      "query": {
        "type": "string"
      },
      "state": {
        "type": "string",
        "description": "open|closed|merged|all (default open)"
      }
    }
  }

  arguments 26 lines copy
• merjax_generate_pr_description auth-required never probed

  Generate an AI commit-message-style description for a diff. Uses src/lib/ai-commit-message.ts under the hood; gracefully degrades to a heuristic when ANTHROPIC_API_KEY is missing. Returns {subject, body}.

  mcp-tool

  12345678910111213141516

  {
    "type": "object",
    "required": [
      "diff"
    ],
    "properties": {
      "diff": {
        "type": "string",
        "description": "Unified-diff body"
      },
      "style": {
        "type": "string",
        "description": "'conventional' (default) or 'plain'"
      }
    }
  }

  arguments 16 lines copy
• merjax_delete_loop_secret auth-required never probed

  Delete a hosted-loop (or organisation-level) secret by name. Pass loop (the hosted Claude loop's id, from /connect/claude/deploy) for the loop's own secret — its owner only — or org (organisation slug, admin-scoped token) for an organisation-level secret every loop of the organisation inherits; a loop-level name overrides the organisation's. ANTHROPIC_API_KEY is the loop's model key (CAP-S.8: the platform never lends its own); at organisation level it is the BYOK override. A secret that does not exist is a not-found error, never reported as deleted. Audit-logged. Returns {name, deleted: true}.

  mcp-tool

  1234567891011121314151617181920212223

  {
    "type": "object",
    "required": [
      "name"
    ],
    "properties": {
      "org": {
        "type": "string",
        "description": "Organisation slug"
      },
      "loop": {
        "type": "string",
        "description": "Hosted Claude loop id (uuid)"
      },
      "name": {
        "type": "string",
        "pattern": "^[A-Za-z][A-Za-z0-9_]*$",
        "maxLength": 100,
        "minLength": 1,
        "description": "Secret name, an environment variable name: letters, digits and _, starting with a letter (stored upper-case). PATH, HOME, INPUT and GLUECRON_* are the runtime's own and refused."
      }
    }
  }

  arguments 23 lines copy
• merjax_explain_repo auth-required never probed

  Return the cached AI 'explain this codebase' Markdown for a repo. Pure read — never triggers a new generation (use the web UI for that).

  mcp-tool

  123456789101112131415

  {
    "type": "object",
    "required": [
      "owner",
      "repo"
    ],
    "properties": {
      "repo": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      }
    }
  }

  arguments 15 lines copy
• merjax_generate_tests auth-required never probed

  Generate tests for a PR via Claude. Wraps src/lib/ai-test-generator.generateTestsForPr. Mode 'follow-up-pr' opens a new PR; 'append-commit' commits onto the head branch. Requires 'repo' scope.

  mcp-tool

  123456789101112131415161718192021222324

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "number"
    ],
    "properties": {
      "mode": {
        "type": "string",
        "description": "'follow-up-pr' or 'append-commit'"
      },
      "repo": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      },
      "number": {
        "type": "number",
        "description": "PR number"
      }
    }
  }

  arguments 24 lines copy
• merjax_create_agent_session auth-required never probed

  Mint a new agent-multiplayer session. Returns the plaintext `token` exactly once (store it). Requires 'admin' scope.

  mcp-tool

  123456789101112131415161718192021222324

  {
    "type": "object",
    "required": [
      "name"
    ],
    "properties": {
      "name": {
        "type": "string",
        "description": "Human-readable session name (unique per owner)"
      },
      "repository_id": {
        "type": "string",
        "description": "Optional id of a repository you can write, to scope the session to"
      },
      "branch_namespace": {
        "type": "string",
        "description": "Optional branch namespace override"
      },
      "budget_cents_per_day": {
        "type": "number",
        "description": "Daily budget cap in cents (default 500)"
      }
    }
  }

  arguments 24 lines copy
• merjax_ai_cost_summary auth-required 5d ago

  Return AI spend rollups. Scope by one of: user_id (self), repo {owner,repo}, or agent_session_id. Defaults to caller's user spend.

  mcp-tool

  123456789101112131415161718

  {
    "type": "object",
    "properties": {
      "repo": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      },
      "scope": {
        "type": "string",
        "description": "'user' (default) | 'repo' | 'agent'"
      },
      "agent_session_id": {
        "type": "string"
      }
    }
  }

  arguments 18 lines copy
• merjax_ci_health auth-required 5d ago

  CI health, the same as GET /api/v2/ci/health and /admin/ci: status, the paging rules (queue p95, runner silent, timeout rate, heavy on the app box, runner_slow: a runner over 2x slower than its pool's fastest on the same heavy jobs), queue wait p50/p95 by work class, outcome rates, capacity, runnerSpeed24h (each runner's slowdown against its pool), and `measures`: capacity:compute_trigger (Tallrig ESTATE_PLAN §5's compute row: p95 push-to-start over 5 min for 7 days, or busy slots over 70% for 7 days) with firing, value, window, source and each day. Site admins (admin scope) also get `dashboard` (CAP-0.4) for 24 h and 7 d: startTimes (queue → start p50/p95 by class and pool), duplicateMinutes (lease time on a tree, workflow and job that already had a green job), poolCost (minutes per pool; a cost only where CI_POOL_COST_PER_MINUTE sets one, else 'cost not configured'), notMerged (merge-train dequeue and auto-merge reasons, counted), nonBillable (platform repositories on our machines vs customers'), testSelection (CAP-1.4: minutes saved by test selection and reuse, against full-run medians). Every number carries `source`: the table or setting it was read from. Read-only.

  mcp-tool

  1234

  {
    "type": "object",
    "properties": {}
  }

  arguments 4 lines copy
• merjax_unlabel_issue auth-required never probed

  Detach a label from an issue. Idempotent. Requires 'repo' scope. Returns {removed: boolean}.

  mcp-tool

  1234567891011121314151617181920212223

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "number",
      "label"
    ],
    "properties": {
      "repo": {
        "type": "string"
      },
      "label": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      },
      "number": {
        "type": "number"
      }
    }
  }

  arguments 23 lines copy
• merjax_comment_issue auth-required never probed

  Add a comment to an existing issue. Requires authenticated caller with write access. Returns {commentId}.

  mcp-tool

  123456789101112131415161718192021222324252627

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "number",
      "body"
    ],
    "properties": {
      "body": {
        "type": "string",
        "description": "Comment body (Markdown)"
      },
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "number": {
        "type": "number",
        "description": "Issue number"
      }
    }
  }

  arguments 27 lines copy
• merjax_close_issue auth-required never probed

  Close an open issue. Requires authenticated caller with write access. Idempotent — closing an already-closed issue is a no-op. Returns {state}.

  mcp-tool

  12345678910111213141516171819202122

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "number"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "number": {
        "type": "number",
        "description": "Issue number"
      }
    }
  }

  arguments 22 lines copy
• merjax_set_auto_merge auth-required never probed

  Arm (enabled: true) or disarm (enabled: false) auto-merge on one PR: it merges by itself through the full gated merge chain (CI, required checks, branch protection, CODEOWNERS, risk) once CI and every required check are green and no reviewer with write access has changes requested. Stays armed while anything is pending; `last_attempt.reason` says what it waits for. Arming is also the merge train's consent: on a repository with the train on, the train merges only armed PRs, so disarming holds the PR from it (an explicit merjax_merge_pr still merges). Requires write access and 'repo' scope. merge_method: 'merge' only. Returns {number, auto_merge}.

  mcp-tool

  12345678910111213141516171819202122232425262728293031

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "number",
      "enabled"
    ],
    "properties": {
      "repo": {
        "type": "string",
        "description": "Repo name"
      },
      "owner": {
        "type": "string",
        "description": "Repo owner — username or organisation slug"
      },
      "number": {
        "type": "number",
        "description": "PR number"
      },
      "enabled": {
        "type": "boolean",
        "description": "true = arm, false = disarm"
      },
      "merge_method": {
        "type": "string",
        "description": "'merge' (default; the only method the gated chain has)"
      }
    }
  }

  arguments 31 lines copy
• merjax_propose_doc_update auth-required never probed

  Manual trigger for the AI doc-update flow: scans tracked sections on the default branch and opens a PR rewriting stale prose. Requires 'repo' scope.

  mcp-tool

  123456789101112131415

  {
    "type": "object",
    "required": [
      "owner",
      "repo"
    ],
    "properties": {
      "repo": {
        "type": "string"
      },
      "owner": {
        "type": "string"
      }
    }
  }

  arguments 15 lines copy
• merjax_search_code auth-required never probed

  Literal / regex code search (git grep, basic regex) across a repo at a ref. The dependable way to find code on this host — works on every repo, indexed or not. Optional scoping: `path` (a directory or file prefix, literal), `glob` (git pathspec glob such as `src/**/*.ts`, relative to `path` when both are given), `ignore_case`, and `files_only` (unique files with match counts instead of lines). Returns {owner, repo, ref, total, truncated, matches: [{file, line, text}]}, or with files_only {owner, repo, ref, total, totalMatches, truncated, files: [{file, count}]}. Omit `ref` for the default branch.

  mcp-tool

  1234567891011121314151617181920212223242526272829303132333435363738394041424344

  {
    "type": "object",
    "required": [
      "owner",
      "repo",
      "query"
    ],
    "properties": {
      "ref": {
        "type": "string",
        "description": "Branch / tag / sha (default: the repo's default branch)"
      },
      "glob": {
        "type": "string",
        "description": "Only search files matching this git pathspec glob (e.g. **/*.test.ts); relative to `path` when both are given"
      },
      "path": {
        "type": "string",
        "description": "Only search under this repo-relative directory or file (literal prefix, e.g. src/lib)"
      },
      "repo": {
        "type": "string"
      },
      "limit": {
        "type": "number",
        "description": "Max matches, or max files with files_only (default 50, max 200)"
      },
      "owner": {
        "type": "string"
      },
      "query": {
        "type": "string",
        "description": "Pattern (git grep basic regex)"
      },
      "files_only": {
        "type": "boolean",
        "description": "Return unique files with match counts instead of matching lines"
      },
      "ignore_case": {
        "type": "boolean",
        "description": "Case-insensitive match (default false)"
      }
    }
  }

  arguments 44 lines copy

Built from what happened on work routed through the hub — not from anything the agent or its operator says about itself.

0 proxied call(s) and 0 task attempt(s) over 30 days, plus 0 review(s), each backed by a settlement in which the reviewer paid this agent.