Gluecron

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

AI-native git hosting — repos, PRs, issues, CI gates, and AI code review over MCP (60 tools).

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "Gluecron": {
      "url": "https://gluecron.com/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (111)

• gluecron_repo_search read-only

  Search Gluecron repositories by keyword (name + description), case-insensitively. Returns public repos plus any private repos owned by the authenticated caller. Default 20 per page, max 50; `total` is the full match count and `nextOffset` pages through it.

  Parameters:

  • query (required) — string — Search keyword (1-100 chars)
  • limit — number — Max rows per page (default 20, max 50)
  • offset — number — Rows to skip. Use `nextOffset` from the previous response.

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_repo_read_file read-only

  Read a single file from a repository at a given ref (branch / tag / commit). Private repos are readable when the authenticated caller has access. Returns the text content (binary files rejected).

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name
  • path (required) — string — File path within the repo
  • ref — string — Branch / tag / commit. Defaults to the repository's actual default branch (which may not be 'main' — e.g. 'Main').

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_repo_list_issues read-only

  List open issues for a public repository. Returns up to 50 ordered by most-recent.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name
  • limit — number — Max rows per page (default 25, max 50)
  • offset — number — Rows to skip, for paging. Use `nextOffset` from the previous response.

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_repo_explain_codebase read-only

  Return the cached AI 'explain this codebase' Markdown for a public repo (most recent commit). Returns null when no cached explanation exists yet.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_repo_health read-only

  Compute the current health report for a public repo: overall score (0-100), letter grade, per-category breakdown (security/testing/complexity/dependencies/documentation/activity), and a list of insights to fix next. Backed by computeHealthScore in src/lib/intelligence.ts.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_create_issue

  Create a new issue on a Gluecron repository. Requires authenticated caller with write access on the target repo. Returns {number, url}.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name
  • title (required) — string — Issue title
  • body — string — Issue body (Markdown). Optional.

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_comment_issue

  Add a comment to an existing issue. Requires authenticated caller with write access. Returns {commentId}.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name
  • number (required) — number — Issue number
  • body (required) — string — Comment body (Markdown)

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_close_issue destructive

  Close an open issue. Requires authenticated caller with write access. Idempotent — closing an already-closed issue is a no-op. Returns {state}.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name
  • number (required) — number — Issue number

  Hints: read-only no · destructive yes · idempotent yes · open-world not declared

• gluecron_reopen_issue

  Reopen a previously closed issue. Requires authenticated caller with write access. Idempotent. Returns {state}.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name
  • number (required) — number — Issue number

  Hints: read-only no · destructive no · idempotent yes · open-world not declared

• gluecron_create_pr

  Open a new pull request. `head_branch` is required; `base_branch` defaults to the repo default branch. Requires authenticated caller with write access. Returns {number, url}.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name
  • title (required) — string — PR title
  • head_branch (required) — string — Branch with the changes
  • body — string — PR body (Markdown). Optional.
  • base_branch — string — Target branch (default: repo default branch)

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_get_pr read-only

  Fetch the full detail record of a pull request (title, body, state, branches, draft, author, timestamps). Authenticated callers only (the read tool surface still works anonymously).

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name
  • number (required) — number — PR number

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_list_prs read-only

  List pull requests on a repo, filtered by state (open|closed|merged|all). Authenticated callers only. Returns up to 50 summary rows.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name
  • limit — number — Max rows per page (default 50, max 100)
  • state — string — open | closed | merged | all (default: open)
  • offset — number — Rows to skip, for paging. Use `nextOffset` from the previous response.

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_comment_pr

  Add a comment to a pull request. Requires authenticated caller with write access. Returns {commentId}.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name
  • number (required) — number — PR number
  • body (required) — string — Comment body (Markdown)

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_merge_pr destructive

  Merge an open PR. Enforces the same checks as the HTTP merge flow: not a draft, head SHA resolves, GateTest+AI-review hard gates pass, branch-protection rules satisfied. M3: soft-blocks when the pre-merge risk score is `critical` unless `confirm_high_risk: true` is passed. Returns {merged, sha?, reason?, riskScore?}.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name
  • number (required) — number — PR number
  • confirm_high_risk — boolean — When true, bypass the M3 risk-score soft-block on critical-band PRs.

  Hints: read-only no · destructive yes · idempotent not declared · open-world not declared

• gluecron_close_pr destructive

  Close an open pull request without merging. Requires authenticated caller with write access. Idempotent. Returns {state}.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name
  • number (required) — number — PR number

  Hints: read-only no · destructive yes · idempotent yes · open-world not declared

• gluecron_fork_repo

  Fork a repository to the authenticated caller's namespace. Mirrors POST /:owner/:repo/fork. Returns {owner, repo, url}. Requires 'repo' scope.

  Parameters:

  • owner (required) — string — Source repo owner
  • repo (required) — string — Source repo name

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_delete_repo destructive

  Delete a repository — a SOFT delete (2026-10-19): it disappears at once from git, web, REST, MCP, CI, webhooks, search and pages, its name stays reserved, and it can be restored with gluecron_restore_repo until restorable_until (90 days by default). Queued/running CI is cancelled and pending webhook deliveries are stopped. Only the repository OWNER (the personal owner, or an org owner for an org repository) or a site admin may — admin collaborators and org admins are refused, as in the web UI. Requires 'admin' token scope. Audited as repo.delete; the owner is notified. To remove it for good before then, use gluecron_purge_repo. Returns {deleted: true, soft: true, id, restorable_until}.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name

  Hints: read-only no · destructive yes · idempotent not declared · open-world not declared

• gluecron_update_repo destructive

  Update repository description / visibility / default_branch. Requires 'admin' access on the repo (owner, org owners/admins, admin collaborators) and 'repo' scope. Returns {ok: true}.

  Parameters:

  • owner (required) — string — Repo owner username
  • repo (required) — string — Repo name
  • automation — object — Per-repo automation dials, same keys as Settings → Automation: ai_review_mode, pr_triage_mode, issue_triage_mode, auto_merge_mode, ci_autofix_mode, auto_repair_mode, auto_issues_mode, doc_drift_mode, merge_train_mode. Values: off | suggest | auto (merge_train_mode runs only on auto). Only the keys given change.
  • is_private — boolean — Set visibility (optional)
  • description — string — New description (optional)
  • default_branch — string — Set default branch (optional)

  Hints: read-only no · destructive yes · idempotent not declared · open-world not declared

• gluecron_search_repos read-only

  Search repositories by owner, name, owner/name or description, case-insensitively: every public repo, plus the private ones you own or collaborate on when authenticated. Omit `query` (authenticated) to list YOUR repositories — the ones you own or were invited to — instead of searching. Mirrors GET /api/v2/search/repos. `total` is the full match count (not the page size) and `nextOffset` pages through it.

  Parameters:

  • sort — string — stars | updated | name (default: stars)
  • limit — number — Max rows per page (default 30, max 100)
  • query — string — Search keyword — matches owner login, repo name, owner/name and description. Omit to list your own repositories.
  • offset — number — Rows to skip. Use `nextOffset` from the previous response.

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_whoami read-only

  Who this connector is on this Gluecron instance: the signed-in username and email, whether that account is a site admin, the token's scopes, and how many repositories it owns or collaborates on. Call it first when a repository seems missing — the answer is usually which account authorized the connector. Anonymous callers get authenticated:false and a hint.

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_clone_url read-only

  Return the authenticated HTTPS clone URL for a repo + a credential-helper hint. Use this instead of embedding tokens in URLs. Returns {url, owner, repo, defaultBranch, hint} using the repo's stored casing.

  Parameters:

  • owner (required) — string — Repo owner username
  • repo (required) — string — Repo name

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_create_deploy_token

  Mint a short-lived, repository-scoped HTTPS clone credential (a deploy token) and return it once with a ready clone URL — for a sandbox or CI box that has no PAT. Read-only by default; `read_only: false` asks for push access and is granted only if you have write access. Expires in 2 h by default (`expires_in_hours`, max 24). Needs owner / collaborator / team / org access to the repo (public read is not enough) and 'repo' scope. Audit-logged. Returns {id, title, readOnly, expiresAt, token, cloneUrl, url}.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name
  • title — string — Where the token will be used (default 'agent clone (MCP)')
  • read_only — boolean — Default true. false = clone AND push (requires write access).
  • expires_in_hours — number — Lifetime in hours (default 2, max 24, min 5 minutes)

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_create_repo_token

  Mint a fine-grained repository token (`gcft_…`) for ONE repository and return it once. It authenticates the REST API (/api/v2 and the GitHub-compatible /api/v3), git over HTTPS and the container registry (images under owner/repo, by contents) for that repository only. `permissions` sets none/read/write for contents, issues, pull_requests, statuses and actions (admin and settings are never grantable); `expires_in` is optional: omit it (or "never") for no expiration, or give seconds or "30m", "12h", "7d", "1y" (min 5 minutes, max 1 year). Effective access is always held to YOUR current access to the repo, re-checked on every use, and branch protection applies as it does to you. Needs 'repo' scope. Audit-logged. Returns {id, name, repository, permissions, expiresAt, tokenPrefix, token}.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name
  • name (required) — string — Where the token will be used, e.g. 'gatetest deploy box'
  • permissions (required) — object — Object of level per permission — keys contents, issues, pull_requests, statuses, actions; values none | read | write; omitted keys are none; at least one must be read or write. Example: {"actions": "read"}.
  • expires_in — string — Optional lifetime: "30m" / "12h" / "7d" / "1y", or a number of seconds (5 minutes to 1 year). Omit, or "never", for no expiration.

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_list_repo_tokens read-only

  List the fine-grained repository tokens you have minted (never the secret): repository, permissions, state (active / expired / revoked), expiry and last use. Needs 'repo' scope.

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_revoke_repo_token destructive

  Revoke one of your fine-grained repository tokens by id (from gluecron_list_repo_tokens). It stops working on its next use. Needs 'repo' scope. Audit-logged.

  Parameters:

  • id (required) — string — Token id

  Hints: read-only no · destructive yes · idempotent not declared · open-world not declared

• gluecron_list_tokens read-only

  List your own tokens (never a secret): type, name, status (active / expiring / expired / revoked / never_used / stale), last 4 characters, scopes or permissions, repository, expiry, last use (time, IP, client), use count and rotation state. `type` is pat (personal access token, glc_), repo (repository token, gcft_) or deploy (deploy token, gcdt_), or omit it for all three (types your token's scopes cannot read are listed under `omitted`). PATs need 'user' scope to read; repository and deploy tokens need 'repo'.

  Parameters:

  • type — string — Token type: pat (personal access token, glc_), repo (repository token, gcft_) or deploy (deploy token, gcdt_). Omit for all.

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_get_token read-only

  One of your tokens by type and id (from gluecron_list_tokens): everything list shows plus the audit trail (create, edits with a before/after diff, rotations, revocation). Never the secret. `type` is pat (personal access token, glc_), repo (repository token, gcft_) or deploy (deploy token, gcdt_). Same scopes as gluecron_list_tokens.

  Parameters:

  • type (required) — string — Token type: pat (personal access token, glc_), repo (repository token, gcft_) or deploy (deploy token, gcdt_)
  • id (required) — string — Token id

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_rotate_token destructive

  Rotate one of your tokens: mint a new secret with the same name, scopes / permissions, repository and expiry, returned ONCE as `token`. `grace_seconds` (default 0, max 604800 = 7 days) keeps the old secret working that long; 0 kills it now. Rotating again ends an earlier grace period. `expected_rotation_count` (from gluecron_get_token's rotationCount) makes it compare-and-swap; two concurrent rotations never both win. `type` is pat (personal access token, glc_), repo (repository token, gcft_) or deploy (deploy token, gcdt_). PATs need 'admin' scope; repository and deploy tokens need 'repo'. Audit-logged.

  Parameters:

  • type (required) — string — Token type: pat (personal access token, glc_), repo (repository token, gcft_) or deploy (deploy token, gcdt_)
  • id (required) — string — Token id
  • grace_seconds — number — Seconds the old secret keeps working (0 to 604800). Default 0.
  • expected_rotation_count — number — Optional compare-and-swap guard: the rotationCount you last saw.

  Hints: read-only no · destructive yes · idempotent not declared · open-world not declared

• gluecron_revoke_token destructive

  Revoke one of your tokens by type and id. It stops working on its next use; this cannot be undone. `type` is pat (personal access token, glc_), repo (repository token, gcft_) or deploy (deploy token, gcdt_). PATs need 'admin' scope; repository and deploy tokens need 'repo'. Audit-logged.

  Parameters:

  • type (required) — string — Token type: pat (personal access token, glc_), repo (repository token, gcft_) or deploy (deploy token, gcdt_)
  • id (required) — string — Token id

  Hints: read-only no · destructive yes · idempotent not declared · open-world not declared

• gluecron_list_repo_secrets read-only

  List a repository's workflow secrets — NAMES ONLY, with created/updated times; values are never returned. Use it to check that a secret such as CRON_SECRET exists before a workflow needs it. Needs admin access to the repository and 'repo' scope. Returns {repository, total_count, secrets:[{name, created_at, updated_at}]}.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_set_repo_secret

  Create or replace one workflow secret on a repository, used in workflows as ${{ secrets.NAME }}. The name is saved upper-cased (cron_secret → CRON_SECRET); trailing spaces/newlines are removed from the value. The value is WRITE-ONLY: it is encrypted at rest and never returned, logged or audited — the result names the secret only. Pass expected_updated_at (the updated_at you last read) to update only if nobody changed it since: a newer value is never overwritten (error 'conflict'), a deleted secret is not re-created (error 'missing'). Setting the value it already has writes nothing (result 'unchanged'), so a retry is safe. Needs admin access to the repository and 'repo' scope. Audit-logged (name only). Returns {repository, name, created, result: 'created'|'updated'|'unchanged', updated_at}.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name
  • name (required) — string — Secret name: letters, digits, underscores; not starting with a digit
  • value (required) — string — The secret value (never echoed back)
  • expected_updated_at — string — Optional ISO time: only update if the secret's updated_at is still this (from gluecron_list_repo_secrets)

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_delete_repo_secret destructive

  Delete one workflow secret from a repository by name (cron_secret is read as CRON_SECRET). Idempotent: deleting a secret that is already gone succeeds with deleted:false, already_deleted:true, so a retry is safe. Workflows that reference it stop receiving it. Needs admin access to the repository and 'repo' scope. Audit-logged (name only). Returns {repository, name, deleted, already_deleted, at}.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name
  • name (required) — string — Secret name

  Hints: read-only no · destructive yes · idempotent yes · open-world not declared

• gluecron_list_deleted_repos read-only

  List deleted repositories you can restore or purge: your personal ones and those of organizations you own (a site admin may pass all: true for the whole instance). Each has its id, full_name and restorable_until — after that date it is purged automatically. Read-only. Needs 'repo' scope. Returns {total_count, repositories:[{id, full_name, private, deleted_at, deleted_by, restorable_until}]}.

  Parameters:

  • all — boolean — Site admins only: every deleted repository on the instance

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_restore_repo

  Restore a deleted repository by id (from gluecron_list_deleted_repos) before its restorable_until date: git data, LFS objects, issues, PRs, collaborators and webhooks come back exactly as they were. Cancelled CI runs stay cancelled and stopped webhook deliveries are not re-sent. Refused when another repository now has the same name in that namespace. Owner (personal owner, or an org owner) or a site admin; needs 'admin' scope. Audited as repo.restore. Returns {restored: true, id, full_name}.

  Parameters:

  • id (required) — string — The deleted repository's id

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_purge_repo destructive

  PERMANENTLY delete an already-deleted repository now, instead of waiting for its restore window to end. IRREVERSIBLE: the git data, LFS objects, issues, PRs, releases, packages, CI history and settings are removed and cannot be restored (data already in the instance's backups ages out on the backup schedule). Only works on a repository already deleted with gluecron_delete_repo; `confirm` must be its full name (owner/name). Owner (personal owner, or an org owner) or a site admin; needs 'admin' scope. Audited as repo.purge. Returns {purged: true, id, full_name}.

  Parameters:

  • id (required) — string — The deleted repository's id
  • confirm (required) — string — The repository's full name, owner/name, to confirm

  Hints: read-only no · destructive yes · idempotent not declared · open-world not declared

• gluecron_list_variables read-only

  List Actions configuration variables (${{ vars.NAME }}) with their values. Pass owner + repo for a repository variable, owner + repo + environment for an environment variable, or org for an organisation variable (organisation variables need an admin-scoped token). Admin of the repository or organisation only. Paged: limit (≤100, default 30) / offset. Mirrors GET …/actions/variables. Returns {scope, total, limit, offset, nextOffset, variables:[{name, value, createdAt, updatedAt}]}.

  Parameters:

  • org — string — Organisation slug
  • repo — string — Repo name
  • limit — integer — Page size, 1–100 (default 30)
  • owner — string — Repo owner — username or organisation slug (omit when passing org)
  • offset — integer — Rows to skip (default 0)
  • environment — string — Environment name (or id)

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• gluecron_get_variable read-only

  Read one Actions variable by name. Pass owner + repo for a repository variable, owner + repo + environment for an environment variable, or org for an organisation variable (organisation variables need an admin-scoped token). Not found is an error. Returns {name, value, createdAt, updatedAt}.

  Parameters:

  • name (required) — string — Variable name: letters, digits and _, not starting with a digit or GITHUB_ (stored upper-case)
  • org — string — Organisation slug
  • repo — string — Repo name
  • owner — string — Repo owner — username or organisation slug (omit when passing org)
  • environment — string — Environment name (or id)

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• gluecron_set_variable destructive

  Create or replace an Actions variable (plain text, not for secrets — use gluecron_set_repo_secret). Pass owner + repo for a repository variable, owner + repo + environment for an environment variable, or org for an organisation variable (organisation variables need an admin-scoped token). Safe to retry: the same value again changes nothing. Audit-logged. Returns {name, effect: created|updated|unchanged, updatedAt}.

  Parameters:

  • name (required) — string — Variable name: letters, digits and _, not starting with a digit or GITHUB_ (stored upper-case)
  • value (required) — string — Plain-text value (not a secret: shown on the settings page and in logs), at most 48 KB
  • org — string — Organisation slug
  • repo — string — Repo name
  • owner — string — Repo owner — username or organisation slug (omit when passing org)
  • environment — string — Environment name (or id)

  Hints: read-only no · destructive yes · idempotent yes · open-world no

• gluecron_delete_variable destructive

  Delete an Actions variable by name. Pass owner + repo for a repository variable, owner + repo + environment for an environment variable, or org for an organisation variable (organisation variables need an admin-scoped token). A variable that does not exist is a not-found error, never reported as deleted. Audit-logged. Returns {name, deleted: true}.

  Parameters:

  • id — string — Variable id, instead of name
  • org — string — Organisation slug
  • name — string — Variable name: letters, digits and _, not starting with a digit or GITHUB_ (stored upper-case)
  • repo — string — Repo name
  • owner — string — Repo owner — username or organisation slug (omit when passing org)
  • environment — string — Environment name (or id)

  Hints: read-only no · destructive yes · idempotent yes · open-world no

• gluecron_delete_branch destructive

  Delete a branch the way `git push --delete` would: write access, then branch protection (allow_deletion), rulesets and the push inspection apply; webhooks and CI fire. The default branch is never deleted. Pass expected_sha to delete only if the branch still points there. A missing branch is a not-found error. Mirrors DELETE /api/v3/repos/:o/:r/git/refs/heads/:branch. Audit-logged. Returns {branch, sha, deleted: true}.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name
  • branch (required) — string — Branch name, without refs/heads/
  • expected_sha — string — Delete only if the branch still points here (compare-and-swap); otherwise a conflict

  Hints: read-only no · destructive yes · idempotent yes · open-world no

• gluecron_edit_comment destructive

  Replace the text of a comment on an issue or pull request (by comment id). Its author or a repository writer only; the previous text is kept in the edit history; the same text again is `unchanged`; a concurrent edit is a conflict, never overwritten. Mentions the edit adds are notified. Mirrors PATCH /api/v3/repos/:o/:r/issues/comments/:id. Returns {id, kind, number, effect}.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name
  • comment_id (required) — string — The comment's id (as listed by gluecron_list_pr_comments, or the #comment-<id> anchor)
  • body (required) — string — The new text (Markdown); the previous text is kept in the edit history
  • thread — object

  Hints: read-only no · destructive yes · idempotent yes · open-world no

• gluecron_delete_comment destructive

  Delete a comment on an issue or pull request (by comment id), with its edit history. Its author or a repository writer only. A missing comment is a not-found error, never reported as deleted. Mirrors DELETE /api/v3/repos/:o/:r/issues/comments/:id. Audit-logged (who wrote it, never what it said). Returns {id, kind, number, deleted: true}.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name
  • comment_id (required) — string — The comment's id (as listed by gluecron_list_pr_comments, or the #comment-<id> anchor)
  • thread — object

  Hints: read-only no · destructive yes · idempotent yes · open-world no

• gluecron_import_action

  Site admins only (needs an 'admin'-scoped token). Import a third-party GitHub Action at ONE tag, branch or full commit SHA into the Gluecron mirror namespace (gluecron-actions/<owner>--<repo>), so workflows that say `uses: owner/repo@ref` can run it. Workflow runs never fetch from github.com; an action that is not imported is skipped. Re-importing the same ref updates it to what upstream has now. Audit-logged. Returns {action, ref, sha, previousSha, mirror, upstreamUrl, hasActionYml}.

  Parameters:

  • action (required) — string — Upstream action as workflows write it, e.g. actions/github-script
  • ref (required) — string — Tag, branch or full commit SHA, e.g. v7
  • upstream_url — string — Optional; default https://github.com/<owner>/<repo>.git

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_backup_status

  Site admins only (needs an 'admin'-scoped token). Backup and restore-drill health: whether the newest backup set is verified on an offsite target and how old it is, whether offsite copies are immutable (Object Lock), when a restore drill last passed, whether the backup worker is running, plus targets (host/bucket, never keys), schedule and recent runs. A stale, failed, local-only or never-drilled backup reads RED. Pass start: 'backup' or 'drill' to queue one for the worker (picked up within 15 minutes; audit-logged). Returns {health, reasons, targets, problems, schedule, runs, started?}.

  Parameters:

  • start — string — Optional: 'backup' or 'drill' — queue one now

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_learning_status read-only

  Site admins only (needs an 'admin'-scoped token). Whether CI failures are being turned into lessons: classified failures, lesson.pattern events (matched to a docs/ops/CI_GATE_LESSONS.md row, or candidates), recurring candidates, and failures left without a lesson for over an hour, over 7 days. 'N failures, 0 lessons' reads RED. Also each pattern's count and register row, and the register. Counts only: no log text or repository. Returns {health, patterns, register}.

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_label_issue

  Attach one or more labels to an issue. Labels are created if they don't yet exist on the repo. Requires 'repo' scope. Returns {labels}.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • number (required) — number
  • labels (required) — array — Label names (strings)

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_unlabel_issue

  Detach a label from an issue. Idempotent. Requires 'repo' scope. Returns {removed: boolean}.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • number (required) — number
  • label (required) — string

  Hints: read-only no · destructive no · idempotent yes · open-world not declared

• gluecron_assign_issue

  Assign (or, with remove: true, unassign) users on an issue or pull request. Real assignees since 2026-10-12 — up to 10 per thread, only users who can read the repository; the old `assignee:<username>` labels were migrated. Pass `assignee` (one username) or `assignees` (array). `type` is 'issue' (default) or 'pull_request'. Requires 'repo' scope and write access. Returns {assigned, skipped:[{username, reason}], removed, assignees}.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • number (required) — number
  • type — string — issue (default) | pull_request
  • remove — boolean — Unassign the given users instead (default false)
  • assignee — string — Username to assign
  • assignees — array — Usernames to assign, strings (alternative to `assignee`)

  Hints: read-only no · destructive no · idempotent yes · open-world not declared

• gluecron_search_issues read-only

  Search issues by title/body keyword on a single repo, filtered by state. Returns ranked rows.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • query (required) — string — Search keyword
  • limit — number
  • state — string — open | closed | all (default open)

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_request_changes

  Request changes on a PR. Records a 'changes requested' review by the caller, which holds the PR on every merge path (web button, API, MCP merge, merge queue, merge train, autopilot) until the caller approves or someone with write access dismisses it (gluecron_dismiss_review), and posts the body as a comment. Requires 'repo' scope and write access.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • number (required) — number
  • body (required) — string — Review body (Markdown)

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_dismiss_review

  Dismiss the standing 'changes requested' reviews on a PR (all of them, or one reviewer's), so they no longer hold the merge. Requires 'repo' scope and write access; the reason is required and audited.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • number (required) — number
  • reason (required) — string — Why the request is dismissed (3-500 characters)
  • reviewer — string — Only this reviewer's request (username). Optional.

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_search_prs read-only

  Search pull requests by title/body keyword on a repo.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • query (required) — string
  • limit — number
  • state — string — open|closed|merged|all (default open)

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_list_pr_comments read-only

  List every comment on a pull request in chronological order: general comments (kind `issue_comment`), inline review comments (`review_comment`: path, line, thread {id, inReplyToId, position, replies, resolved, resolvedAt, resolvedBy}) and review summaries (`review`: state approved | changes_requested | commented). Each entry has author {login, type user|bot}, isAi (written by an AI reviewer), body, createdAt, updatedAt. A review thread is the inline comments on one file+line; the earliest is its root and holds the resolved state. Gluecron does not store a review comment's commit or diff side, so `commitId` and `side` are always null. Only approved (moderated) comments; unsubmitted draft reviews are private to their author and not listed. `kind`: all (default) | issue | review (review comments + review summaries). `since`: ISO-8601 — only entries updated at or after it. Paged: `total` is the full filtered count, `nextOffset` pages through it. Works anonymously on public repos; private repos need read access.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name
  • number (required) — number — PR number
  • kind — string — all (default) | issue (general comments) | review (review comments + review summaries)
  • limit — number — Max entries (default 50, max 100)
  • since — string — ISO-8601 timestamp; only entries updated at or after it
  • offset — number — Entries to skip. Use `nextOffset` from the previous response.

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_open_draft_pr

  Open a draft pull request. Same payload as gluecron_create_pr but forces is_draft=true. Useful for AI-in-progress PRs that shouldn't run mergeability checks yet.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • title (required) — string
  • head_branch (required) — string
  • body — string
  • base_branch — string

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_set_pr_draft

  Mark a pull request ready for review (draft=false) or convert it back to a draft (draft=true). Same rule as the web 'Ready for review' button: the caller needs write access and must be the PR author or the repository owner; only an open PR changes; marking ready starts the AI review. Idempotent. Requires 'repo' scope. Returns {number, isDraft, changed}.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name
  • number (required) — number — PR number
  • draft (required) — boolean — true = convert to draft, false = mark ready for review

  Hints: read-only no · destructive no · idempotent yes · open-world not declared

• gluecron_generate_pr_description read-only

  Generate an AI commit-message-style description for a diff. Uses src/lib/ai-commit-message.ts under the hood; gracefully degrades to a heuristic when ANTHROPIC_API_KEY is missing. Returns {subject, body}.

  Parameters:

  • diff (required) — string — Unified-diff body
  • style — string — 'conventional' (default) or 'plain'

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_update_pr_branch

  Bring a PR branch up to date with its base: merge the base into the head server-side (the PR page's 'Update branch'). Never a force-push — the new head is a merge commit moved through the push gates, so it gets CI. On conflict nothing changes and `conflictFiles` lists the paths. Requires write access and 'repo' scope. Returns {ok, status: 'updated'|'up-to-date', headSha, previousHeadSha, baseSha, url} or {ok: false, reason, message, conflictFiles}.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name
  • number (required) — number — PR number

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_update_pr

  Edit a pull request's title, body, base branch and/or draft state. Title / body / base: the PR's author or anyone with write access; draft: the same rule as gluecron_set_pr_draft (write access and the PR author or repo owner; marking ready starts the AI review). Needs 'repo' scope. Changing the base (open PRs only) re-runs the PR's pull_request CI against the new base and disarms auto-merge. Returns {number, title, body, baseBranch, headBranch, isDraft, changed, autoMergeDisarmed, url}.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name
  • number (required) — number — PR number
  • base — string — New base branch
  • body — string — New body (Markdown); an empty string clears it
  • draft — boolean — true = back to draft, false = ready for review (gluecron_set_pr_draft's rule: write access and the PR author or repo owner)
  • title — string — New title

  Hints: read-only no · destructive no · idempotent yes · open-world not declared

• gluecron_set_auto_merge

  Arm (enabled: true) or disarm (enabled: false) auto-merge on one PR: it merges by itself through the full gated merge chain (CI, required checks, branch protection, CODEOWNERS, risk) once CI and every required check are green and no reviewer with write access has changes requested. Stays armed while anything is pending; `last_attempt.reason` says what it waits for. Arming is also the merge train's consent: on a repository with the train on, the train merges only armed PRs, so disarming holds the PR from it (an explicit gluecron_merge_pr still merges). Requires write access and 'repo' scope. merge_method: 'merge' only. Returns {number, auto_merge}.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name
  • number (required) — number — PR number
  • enabled (required) — boolean — true = arm, false = disarm
  • merge_method — string — 'merge' (default; the only method the gated chain has)

  Hints: read-only no · destructive no · idempotent yes · open-world not declared

• gluecron_get_pr_checks read-only

  List every check at a PR's current head — workflow runs, gates and commit statuses — with status, conclusion, whether branch protection requires it, and the run's log URL; plus each required check's state (passing / pending / failing / missing) and the merge gate's own CI verdict. Read-only. Returns {head_sha, total_count, check_runs, required, ci}.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name
  • number (required) — number — PR number

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_rerun_failed_jobs

  Re-run a failed or cancelled workflow run at the SAME commit (same inputs, same PR merge preview) — the run page's Re-run. Gluecron re-runs every job of the run (per-job re-run does not exist yet); a successful or still-running run is refused. Joins an identical queued run instead of stacking another. Requires write access and 'repo' scope. Returns {runId, previousRunId, joinedExistingRun, url}.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name
  • run_id (required) — string — The run's id (uuid)

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_get_branch_protection read-only

  Read the branch-protection rule that applies to a branch (exact name or the glob that covers it): required checks, require_pr_run, required approvals, AI / human review, green gates, force-push / deletion, auto-merge. Read-only. Returns {protected: false} when no rule applies, else {protected: true, pattern, matched_by, required_checks, …}.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name
  • branch — string — Branch name (default: the repo's default branch)

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_set_branch_protection

  Set branch protection for one branch (partial update: fields you omit keep their value). Edits the rule named exactly after the branch; when only a glob rule covers it, a new exact rule is created seeded from the glob's settings and checks. required_checks replaces the required-check list ([] clears it). require_pr_run: a required check that names a workflow is met only by that workflow's pull_request run. Requires ADMIN access to the repo and 'repo' scope. Audit-logged. Returns the resulting rule plus {created, warnings}.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name
  • branch (required) — string — Branch name (not a pattern)
  • allow_deletion — boolean
  • require_pr_run — boolean — Workflow checks count only from the PR's pull_request run
  • required_checks — array — Array of check names that must pass (workflow names, gate names or commit-status contexts); [] clears the list
  • allow_force_push — boolean
  • enable_auto_merge — boolean — Branch-wide autopilot auto-merge (K2)
  • required_approvals — number — Human approvals required (0-10)
  • require_ai_approval — boolean
  • require_green_gates — boolean
  • require_human_review — boolean
  • require_pull_request — boolean
  • dismiss_stale_reviews — boolean

  Hints: read-only no · destructive no · idempotent yes · open-world not declared

• gluecron_approve_pr

  Approve a pull request: records an 'approved' review by the caller — the same review the web form and POST /api/v2/repos/:owner/:repo/pulls/:number/reviews write, so it counts toward branch protection's required approvals and clears the caller's own earlier request for changes. The PR must be open; its author cannot approve it. Requires write access and 'repo' scope. To request changes use gluecron_request_changes. Returns {reviewId, number, state, url}.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name
  • number (required) — number — PR number
  • body — string — Optional review comment (Markdown)

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_read_file read-only

  Read a file from a repo at a given ref. Mirrors GET /api/v2/repos/:owner/:repo/contents/:path. Returns {path, size, content, encoding, totalLines}. Pass `start_line` / `end_line` (1-based, inclusive) to read only part of a text file. A text file over ~60 KB read with no range returns its first ~60 KB of whole lines with `truncated: true`, `startLine`/`endLine` and a hint — ask for the next range to read on.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • path (required) — string
  • ref — string — Branch / tag / sha (default HEAD)
  • encoding — string — 'utf8' (default) or 'base64'
  • end_line — number — Last line to return (1-based, inclusive; clamped to the file's length). Text files only.
  • start_line — number — First line to return (1-based, inclusive). Text files only.

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_write_file

  Create or update a file on a branch via git plumbing. Wraps `createOrUpdateFileOnBranch`. Pass `content` as a UTF-8 string OR `content_base64` for binary. Meets the same branch protection, rulesets and secret scan as a git push, and fires CI/webhooks like one. Requires 'repo' scope.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • path (required) — string
  • branch (required) — string
  • message (required) — string — Commit message
  • content — string — UTF-8 file body (optional)
  • content_base64 — string — Base64 file body (optional)
  • expect_blob_sha — string — Optimistic-concurrency check: existing blob sha must match.

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_delete_file destructive

  Delete a file from a branch via git plumbing. Requires the existing blob sha (optimistic concurrency) and 'repo' scope. Meets the same branch protection, rulesets and secret scan as a git push, and fires CI/webhooks like one. Mirrors DELETE /api/v2/contents.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • path (required) — string
  • branch (required) — string
  • message (required) — string
  • sha (required) — string — Current blob sha (40-hex)

  Hints: read-only no · destructive yes · idempotent not declared · open-world not declared

• gluecron_list_tree read-only

  List directory contents at a ref. `path` scopes the listing to a subtree and is honoured in BOTH modes; `recursive: true` walks the whole subtree instead of one level. Always returns the same shape: {path, ref, recursive, entries, truncated, totalCount}. Recursive entries carry full repo-relative paths; non-recursive entries carry names. A ref that does not exist is an error, never an empty listing.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • ref — string — Branch / tag / sha. Omit (or pass HEAD) for the default branch.
  • path — string — Sub-path within the repo
  • recursive — boolean

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_get_commit read-only

  Fetch a single commit by SHA: metadata plus the list of files it changed (path, status, additions, deletions). Mirrors GET /api/v2/repos/.../commits/:sha. Patch bodies are NOT included — use gluecron_get_diff for those.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • sha (required) — string — Commit SHA
  • include_files — boolean — Include the files-changed summary and stats (default true). Set false to skip the diff read on very large commits.

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_get_diff read-only

  Read the actual changes in a commit or a branch range. Pass `sha` for one commit against its first parent, or `base`+`head` for everything head adds since the merge base (what a PR proposes). Returns {files:[{path, oldPath?, status, additions, deletions, binary, patch, patchTruncated}], stats, truncated}. Patch text is byte-capped; set include_patch=false for a files-changed summary only.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • sha — string — Commit SHA — diffs it against its first parent
  • base — string — Base ref (with `head`)
  • head — string — Head ref (with `base`)
  • include_patch — boolean — Include patch bodies (default true)
  • max_patch_bytes — number — Total budget for patch text across all files (default 400000, max 2000000)

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_create_branch

  Create a new branch ref pointing at an existing sha. Mirrors POST /api/v2/repos/.../git/refs. Gated like a push of the new branch (rulesets, secret scan of commits no other ref reaches) and fires CI/webhooks. Requires 'repo' scope. Returns {ref, sha}.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • branch (required) — string — New branch name (short form)
  • sha (required) — string — Target commit sha (40-hex)

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_atomic_multi_file_commit

  Apply a set of file writes + deletes as a single atomic commit on a branch (creates the branch if it doesn't exist). The killer agent tool: blob/tree/commit/ref-update sequence. Each change is `{path, content?, content_base64?, deleted?}`. Meets the same branch protection, rulesets and secret scan as a git push, and fires CI/webhooks like one. Requires 'repo' scope.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • branch (required) — string
  • message (required) — string
  • changes (required) — array — Array of {path, content?|content_base64?, deleted?} entries.
  • base_branch — string — Branch to fork from when `branch` doesn't yet exist (default: repo default).

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_apply_patch

  Commit a patch to a branch without sending whole files — the way to change a few lines of a large file. `patch` is a unified diff as `git diff` prints it (one commit, `message` required) OR `git format-patch` mbox output (each patch becomes its own commit with the patch's own message and author, like `git am`; `message` is ignored). Applied server-side with `git apply --cached` against the branch head (created from `base_branch` if missing); blank context lines a transport stripped to empty lines, or trimmed off the end of the patch, are restored first (git still checks them against the file). `expected_head_sha` makes it compare-and-swap (all zeros = branch must not exist yet). Meets the same branch protection, rulesets and secret scan as a git push, and fires CI/webhooks like one. Patch limit 2 MiB. Requires 'repo' scope. Returns {branch, commit_sha, parent_sha, files_changed, files, commits, created} (+ blank_context_lines_restored / trimmed_blank_context_lines_restored when a repair was needed).

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • branch (required) — string — Target branch (short name). Created if it does not exist.
  • patch (required) — string — Unified diff (`git diff`, a/ b/ prefixes) or `git format-patch` mbox text. Max 2 MiB.
  • message — string — Commit message. Required for a unified diff; ignored for mbox input (each patch carries its own).
  • base_branch — string — Branch to fork from when `branch` does not exist yet (default: the repo's default branch).
  • expected_head_sha — string — Optional compare-and-swap: the 40-hex sha you expect `branch` to point at. Refused if it moved. All zeros = the branch must not exist.

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_ship_spec

  Drop a spec file in .gluecron/specs/ with status: ready so the autopilot picks it up. Wraps voice-to-pr.shipAsSpec — handle both voice + manual specs. Requires 'repo' scope.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • title (required) — string
  • body (required) — string — Spec body (Markdown)

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_voice_to_pr

  Interpret a free-form voice transcript and either ship it as a spec or create an issue (caller picks via `as`). Wraps src/lib/voice-to-pr.ts. Requires 'repo' scope.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • transcript (required) — string
  • as — string — 'spec' or 'issue' (default: auto via interpretVoiceTranscript)

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_refactor_across_repos

  Plan + execute a refactor that spans multiple repos owned by the caller. Wraps src/lib/multi-repo-refactor.ts. `dry_run: true` returns the plan only. Requires 'repo' scope.

  Parameters:

  • description (required) — string — Natural-language description
  • dry_run — boolean — When true, returns the plan and does NOT execute.
  • repository_ids — array — Optional explicit repo IDs to scope the refactor to.

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_explain_repo read-only

  Return the cached AI 'explain this codebase' Markdown for a repo. Pure read — never triggers a new generation (use the web UI for that).

  Parameters:

  • owner (required) — string
  • repo (required) — string

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_chat_with_repo

  Start a new chat with a repo: creates a chat row, sends the first user message, streams + persists the assistant reply. Returns {chat_id, reply}. If the AI service does not answer this fails with a JSON-RPC error carrying {chat_id, ai_error} — it never returns apology copy as a reply. Requires authentication.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • message (required) — string — Initial user message
  • title — string — Chat title (optional)

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_chat_continue

  Send another message to an existing repo chat. Returns the assistant's reply. If the AI service does not answer this fails with a JSON-RPC error carrying {chat_id, ai_error} rather than returning apology copy as a reply.

  Parameters:

  • chat_id (required) — string
  • message (required) — string

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_generate_tests

  Generate tests for a PR via Claude. Wraps src/lib/ai-test-generator.generateTestsForPr. Mode 'follow-up-pr' opens a new PR; 'append-commit' commits onto the head branch. Requires 'repo' scope.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • number (required) — number — PR number
  • mode — string — 'follow-up-pr' or 'append-commit'

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_generate_commit_message read-only

  Generate a commit message for a diff. Same engine as gluecron_generate_pr_description but explicit for the commit-message use case.

  Parameters:

  • diff (required) — string
  • style — string — 'conventional' (default) or 'plain'

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_generate_release_notes read-only

  Generate release notes between two tags. Wraps src/lib/ai-release-notes.generateReleaseNotes. Returns the rendered Markdown + section data.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • to_tag (required) — string — New tag
  • from_tag — string — Previous tag (optional)

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_propose_migration

  Propose a dependency-upgrade PR. Wraps src/lib/migration-assistant.proposeMajorMigration. Requires 'repo' scope.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • dependency (required) — string
  • from_version (required) — string
  • to_version (required) — string
  • base_sha (required) — string — Commit sha to fork from
  • changelog — string — Optional changelog text

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_propose_doc_update

  Manual trigger for the AI doc-update flow: scans tracked sections on the default branch and opens a PR rewriting stale prose. Requires 'repo' scope.

  Parameters:

  • owner (required) — string
  • repo (required) — string

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_trigger_workflow

  Dispatch a workflow_dispatch run. Mirrors POST /api/v2/repos/.../actions/workflows/:filename/dispatches. Requires 'repo' scope.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • filename (required) — string — Workflow filename (e.g. ci.yml)
  • ref — string — Branch / tag / sha (default: repo default branch)
  • inputs — object — Workflow inputs (object)

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_get_workflow_run read-only

  Fetch a workflow run's metadata + status. Mirrors GET /api/v2/repos/.../actions/runs/:id. Also says how it relates to automatic retries: `retryOf` / `retryOfRunNumber` (the run this one retries after a deploy or a lost runner) and `retriedAs` ({id, runNumber} of the run that retried this one, or null). A queued run that no runner can take carries `queueReason` (e.g. "waiting for a runner: 2 configured, 0 reachable, last seen 4m ago"). `workClass` (interactive / review / push / schedule — how the CI claim shares slots); a queued run carries `queue` ({code, text}: its place in the claim order, from the claim plan itself); a schedule run carries `coalescedFires` / `lastCoalescedAt`, and `coalescedNote` when later scheduled fires folded into it while it was queued.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • run_id (required) — string — The run's id, or a unique leading part of it (8+ hex characters)

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_list_workflow_runs read-only

  List a repository's workflow runs, newest first, with optional branch/status/event filters. Mirrors GET /api/v2/repos/.../actions/runs. The companion to gluecron_get_workflow_run / gluecron_cancel_workflow_run — this is how an agent finds the run ids to inspect or cancel (issue #10493: without it, stale queued runs could not be discovered from the tool surface at all).

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • event — string — push | pull_request | manual | schedule | ...
  • limit — number — Max rows (default 30, max 100)
  • branch — string — Only runs for this branch (short name or refs/heads/...)
  • offset — number — Rows to skip, for paging
  • status — string — queued | running | success | failure | cancelled

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_get_workflow_logs read-only

  Return a workflow run's logs plus a failure summary. Always includes run metadata (number, workflow, event, ref, sha), per-job and per-step status / exit code / duration, `failedSteps` (`job / step`) and `testFailures` (failing test names, read from each step's structured results parsed before its log was cut, or the reason they cannot all be named; null when no job failed). `testFailures.details` marks each failure `flaky` (an active forensic label with a repro, from another run — with its label and flip rate), `known` (also failing on the default branch's latest run), `infra` (timed out under load) or `new`, with its file, message, the targeted retry's verdict and this run's determinism-forensics finding (`forensic`: class, label, variable, repro) when they ran. A step whose log was cut carries `fullLog` (artifact download of the uncut output). `step` (a step name or 1-based position within its job) returns only that step's stdout/stderr; `tail_lines` keeps the last N lines. The full per-job logs are included only when neither is given. JSON-friendly companion to the ZIP-download endpoint.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • run_id (required) — string — The run's id, or a unique leading part of it (8+ hex characters)
  • step — string — Only this step's logs: its name (exact, else substring, case-insensitive) or its 1-based position within its job
  • tail_lines — number — Keep only the last N lines of each returned log (max 5000)

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_explain_failure read-only

  Explain a failed CI run: for each failed step, its class (compile / test / flaky / dependency / env / infra / lint / security / unknown) and the rule that chose it, the normalised error signature, failing tests, the files the commit touched, prior occurrences of the same failure (this repo, your other repos with the same owner or org, and platform-wide counts only) with the fix rate, and a suggested fix — the commit / PR that fixed it last time plus its diff limited to the relevant files, or the class's standard remedy. Infra and flaky failures never suggest a code change. `run_id` is the run's full id; with `owner` + `repo` an 8+ hex prefix also works.

  Parameters:

  • run_id (required) — string — The failed run's id (full uuid; an 8+ hex prefix when owner + repo are given)
  • repo — string — Optional: repository name — needed only for a run-id prefix
  • owner — string — Optional: repository owner — needed only for a run-id prefix
  • include_diff — boolean — Include the prior fix's diff, limited to the relevant files (default true)

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_list_flaky_tests read-only

  List a repository's flaky tests. A test is flaky only with a forensic repro: when it failed, CI re-ran just that test in the same order, alone, with the clock shifted +137 ms and +1 s, in TZ=Pacific/Chatham and in a fixed random order, and a variable flipped its verdict N times in a row on the same git tree. Each entry has the test, file, state (active / expired / resolved, or unexplained = flipped with no repro, NOT flaky), label (clock-dependent, order-dependent, concurrency-dependent), the variable, the exact repro command, owner, expiry, issue number, flip rate and evidence runs. Information only — flaky tests are never skipped or quarantined; one targeted retry, and the merge gate excuses a failure only when that retry passed in the same run and the label is active.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • limit — number — Max tests (default 25, max 100)
  • window_days — number — Flip evidence from this many days back (default and max 30)

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_cancel_workflow_run destructive

  Cancel a queued/running workflow run. Requires 'repo' scope.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • run_id (required) — string — The run's id, or a unique leading part of it (8+ hex characters)

  Hints: read-only no · destructive yes · idempotent not declared · open-world not declared

• gluecron_prioritize_workflow_run

  Move a QUEUED workflow run into the priority lane: the runner claims it ahead of the class order, highest `level` first (normal < high < critical), then oldest (issue #10898). The lane holds at most a third of the runner slots, so prioritizing many runs cannot starve the rest. Calling again on a prioritized queued run changes its level. Only queued runs; a running or finished run is reported, not changed. Requires 'repo' scope and write access; `high` and `critical` also require a site admin.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • run_id (required) — string — The run's id, or a unique leading part of it (8+ hex characters)
  • level — string — normal (default) | high | critical — high and critical need a site admin

  Hints: read-only no · destructive no · idempotent yes · open-world not declared

• gluecron_review_deployment

  Approve or reject a workflow run's jobs waiting on a protected environment (`environment:` with required reviewers). The caller must be a reviewer of every environment selected (the environment's reviewers, or the repository owner when none are listed). An approval runs the job (after the environment's wait timer, if any); a rejection fails it. Mirrors POST /api/v2/repos/.../actions/runs/:id/pending_deployments. Requires 'repo' scope.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • run_id (required) — string — The run's id, or a unique leading part of it (8+ hex characters)
  • state (required) — string — "approved" or "rejected"
  • comment — string
  • environments — array — Environment names (or ids), as strings, to decide; omitted = every waiting one

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_create_runner_registration_token

  Create a one-time CI runner registration token for an owner (your username, an org you own or admin, or 'platform' as a site admin). A runner started with RUNNER_REGISTRATION_TOKEN=<token> registers once and gets its own long-lived credential; that owner's CI then runs on it. Expires in an hour. Returns {owner, token, expiresAt, gluecronUrl}.

  Parameters:

  • owner (required) — string — Username, org slug, or 'platform'
  • labels — string — Comma-separated labels the runner gets in addition to its own (e.g. gpu,arm64)

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_list_runners read-only

  List the CI runners registered to an owner (username, org slug, or 'platform'): id, name, url, labels, slots, online, last seen, revoked; allowSharedOverflow (the setting); and sharedLane, whether the owner's jobs actually run on shared runners: 'used (no own runners)', 'overflow allowed' or 'not used (own runners only)', explained in sharedLaneDetail.

  Parameters:

  • owner (required) — string — Username, org slug, or 'platform'

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_revoke_runner destructive

  Revoke a CI runner by id: nothing is dispatched to it from now on, its next heartbeat is refused and it stops accepting jobs. Cannot be undone — register a new runner instead. Returns {id, revoked}.

  Parameters:

  • id (required) — string — Runner id (from gluecron_list_runners)

  Hints: read-only no · destructive yes · idempotent not declared · open-world not declared

• gluecron_ci_executor

  Where CI runs and why: mode (external | in-process), declaration (external | in-process | auto) and its source (CI_EXECUTOR on the box, the estate-wide setting, or auto), runners configured / reachable / busy / slots, lastSeenAt, state (ok | degraded | unconfigured | in-process) and holdReason — the sentence every queued run shows when no runner can take it. In-process never runs while external runners are configured. Site admins (admin scope) also get per-runner rows and may pass `declare` (external | in-process | auto) to set the estate-wide setting, audited (the answer then carries `saved`). Same as GET/PUT /api/v2/ci/executor and /admin/runners.

  Parameters:

  • declare — string — Site admins: set the estate-wide declaration to external, in-process or auto. Omit to read only.

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_get_preview_url read-only

  Return the branch-preview URL + status for a (repo, branch) pair. Wraps branch-previews.getPreviewForBranch. Returns {ok:false, reason:'not enabled on this host'} when the host has no PREVIEW_DOMAIN (no preview would ever resolve).

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • branch (required) — string

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_provision_pr_sandbox

  Provision (or re-provision) a sandbox for a PR. Wraps pr-sandbox.provisionSandbox. Requires 'repo' scope. Returns {ok:false, reason:'not enabled on this host'} when no sandbox provisioner runs on the host.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • number (required) — number

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_create_agent_session

  Mint a new agent-multiplayer session. Returns the plaintext `token` exactly once (store it). Requires 'admin' scope.

  Parameters:

  • name (required) — string — Human-readable session name (unique per owner)
  • repository_id — string — Optional id of a repository you can write, to scope the session to
  • branch_namespace — string — Optional branch namespace override
  • budget_cents_per_day — number — Daily budget cap in cents (default 500)

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_acquire_lease

  Grab an exclusive lease on a PR, issue, branch or file path in a repository you can write, for one of your agent sessions. Pass owner+repo with a bare key (PR/issue number, branch name, path), or target_id '<repository id>:<key>'. Returns lease null when another agent holds an active lease.

  Parameters:

  • agent_session_id (required) — string
  • target_type (required) — string — 'issue' | 'pr' | 'branch' | 'file_path'
  • target_id (required) — string — PR/issue number, branch name or file path (with owner+repo, or a session scoped to a repo); '<repository id>:<key>'; or a PR/issue id
  • repo — string — Repository name (optional, with owner)
  • owner — string — Repository owner (optional, with repo)
  • duration_ms — number — Lease duration, clamped to 1 second – 1 hour (default 5 minutes)

  Hints: read-only no · destructive no · idempotent not declared · open-world not declared

• gluecron_release_lease

  Release a lease by id. Idempotent. Returns {released}.

  Parameters:

  • lease_id (required) — string

  Hints: read-only no · destructive no · idempotent yes · open-world not declared

• gluecron_get_agent_budget read-only

  Return spent / cap / remaining cents for an agent session.

  Parameters:

  • agent_session_id (required) — string

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_semantic_search read-only

  Query the per-repo vector index (Voyage embeddings when configured, hash fallback otherwise). Reads the live per-push index (code_embeddings) first, falling back to the manually-reindexed chunk index (code_chunks). Returns {hits, source, indexed, indexedFiles} — `indexed: false` means the repo has never been indexed (empty hits are NOT 'no match'); `indexedFiles` is the live-index row count.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • query (required) — string
  • limit — number

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_search_code read-only

  Literal / regex code search (git grep, basic regex) across a repo at a ref. The dependable way to find code on this host — works on every repo, indexed or not. Optional scoping: `path` (a directory or file prefix, literal), `glob` (git pathspec glob such as `src/**/*.ts`, relative to `path` when both are given), `ignore_case`, and `files_only` (unique files with match counts instead of lines). Returns {owner, repo, ref, total, truncated, matches: [{file, line, text}]}, or with files_only {owner, repo, ref, total, totalMatches, truncated, files: [{file, count}]}. Omit `ref` for the default branch.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • query (required) — string — Pattern (git grep basic regex)
  • ref — string — Branch / tag / sha (default: the repo's default branch)
  • glob — string — Only search files matching this git pathspec glob (e.g. **/*.test.ts); relative to `path` when both are given
  • path — string — Only search under this repo-relative directory or file (literal prefix, e.g. src/lib)
  • limit — number — Max matches, or max files with files_only (default 50, max 200)
  • files_only — boolean — Return unique files with match counts instead of matching lines
  • ignore_case — boolean — Case-insensitive match (default false)

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_find_symbol read-only

  Find definitions of a symbol by name within a repo. Wraps src/lib/symbols.findDefinitions.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • name (required) — string — Symbol name

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_pr_status_summary read-only

  Compute a one-shot status summary for a PR: state, risk score (and whether it describes the current head), CI state for the head commit as the merge gate sees it, AI-review verdicts (trio), gate signals. Read-only.

  Parameters:

  • owner (required) — string
  • repo (required) — string
  • number (required) — number

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_ci_queue_status read-only

  How full the shared CI queue is, and what to do about it: level (ok / busy / saturated), runs queued and running, runner slots, estimated minutes before a new run starts, and — with owner+repo — that repository's queued/running runs, its share of CI work, the slots it may hold while others wait (per work class, and across classes), a recommendation (e.g. batch changes into fewer pushes), and `explanation`: each work class's queued/running runs (interactive, review, push, schedule) and, for each of the repository's queued runs, its class and why it waits (code + sentence, from the claim plan itself). The same `ciQueue` block the write tools return. Ask before a burst of pushes. Also `executor`: where CI runs (external runners or in-process), runners configured / reachable / busy, and `holdReason` when no runner can take a run. Read-only.

  Parameters:

  • repo — string — Optional, with owner
  • owner — string — Optional, with repo: report this repository's part of the queue

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_handover read-only

  Start here when picking up work: the live state of a repository, read from git and CI rather than from a handoff doc. Returns `summary` (one paragraph), `blockers` (most urgent first), the default branch's CI per workflow (red streak, since when, last green run), the build this Gluecron instance serves and how many commits it is behind (when it is this repository), every open PR grouped green / pending / failing / draft as the merge gate judges it, PRs merged in the last `merged_since_hours` (default 48), and the CI queue. Read-only.

  Parameters:

  • owner (required) — string — Repo owner — username or organisation slug
  • repo (required) — string — Repo name
  • merged_since_hours — number — Window for recently merged PRs (default 48, max 720)

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_ai_cost_summary read-only

  Return AI spend rollups. Scope by one of: user_id (self), repo {owner,repo}, or agent_session_id. Defaults to caller's user spend.

  Parameters:

  • repo — string
  • owner — string
  • scope — string — 'user' (default) | 'repo' | 'agent'
  • agent_session_id — string

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

• gluecron_security_scan read-only

  Everything Gluecron actually knows about a repository's security, in one honest call: OSV.dev CVE/GHSA advisories against the indexed dependency graph (with FIXED VERSIONS), Gluecron's supplemental advisory list, a full-tree committed-secret scan, and optionally a Claude semantic code review. Unlike gluecron_repo_health, an empty result is NEVER reported as a pass: every category returns status 'assessed' | 'partial' | 'not_assessed' | 'error' with a machine-readable reason code, so you can tell 'we checked and it is clean' from 'we never looked'. In particular, a repo whose dependency graph was never indexed returns dependency_advisories.status='not_assessed' (reason 'dependency_graph_not_indexed'), not an empty advisory list. Read-only.

  Parameters:

  • owner (required) — string — Repo owner username
  • repo (required) — string — Repo name
  • ref — string — Branch, tag or commit SHA to scan the tree of. Default: the repo's default branch. Note advisories describe the INDEXED dependency graph, whose commit is reported separately — if it differs from this ref the advisory answer is downgraded to 'partial'.
  • include_ai_review — boolean — Opt in to the Claude Sonnet semantic review (SQLi/XSS/SSRF/authz/crypto). Costs an Anthropic call and adds seconds. Default false. When it cannot run — no key, provider error, unparseable output — the category reports 'not_assessed', never a pass.
  • max_candidate_lines — number — Cap on lines the secret detector inspects (1-200000, default 20000). The whole tree is always prefiltered; only lines that already matched a secret marker are inspected, so this rarely binds. When it does, committed_secrets reports 'partial' with the exact fraction.

  Hints: read-only yes · destructive no · idempotent not declared · open-world not declared

Publisher website

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.