Bento

Register a workspace folder as an agent, together with the apps it declares

Rename the default agent (the drive root's own agent)

Delete an agent and its folder, including nested agents and apps

Focus an existing root or named-agent browser window without creating one.

List workspace agents

Add one durable memory to an agent's own memory without starting a training job.

Search an agent's own durable memory records by relevance.

List the agents reachable from one agent session

Get an agent's default session snapshot

Page through an agent's default session history

Create or message an agent's default session and wait for the turn

Point an agent's default session alias at a session, or at nothing

Snapshot staged sources and start an asynchronous agent training job

Get the progress and result state of one agent training job

List recent agent training jobs newest first

Delete a trained agent memory record and its archived corpus

Read one trained agent memory record and its synthesized content

List trained agent memory records newest first

Reload an agent memory's archived sources into its staging inbox, re-scraping its URLs

Read one file an agent memory's training archive kept a copy of

Replace the synthesized content of one trained agent memory record

Remove one file from an agent training inbox

List files waiting in an agent training inbox

Mint short-lived credentials for direct uploads to an agent training inbox

Scrape a public URL into an agent training inbox

Update agent disabled state, onboarding, pin, or display metadata

List path anchors and their current health.

Repair a broken anchor after its workspace path moves.

Mark the calling app's own agent onboarded, addressed by the app's credential

Register a workspace folder as an app runtime with optional display metadata

Export an independent app credential once with an explicit expiration

Inspect the bounded live exported credential inventory without secrets

Revoke one exported app credential without replacing managed credentials

Stop serving and unregister an app

Stop serving a custom hostname and schedule provider cleanup

Inspect an app domain and its DNS instructions

List current app domains in a workspace

Request a fresh domain check or retry exhausted removal

Attach one custom hostname without changing app visibility

Get one registered app by slug

Open an app through a short-lived access grant, optionally returning to its validated host and path

List workspace apps, optionally filtered by exact id, the deepest app containing a cwd, or drive path

Repair a broken app anchor by slug after the automatic move rail cannot recover its folder

Stop and start an app with its current runtime, answering once it is ready or failed to come back

Update app disabled state, visibility, display metadata, or runtime settings

Page through newest-first workspace audit events.

Start a durable workspace ZIP capture; returns 202 and replays the same request ID.

Cancel capture and delete its artifact; returns 202 while cleanup is pending.

Mint a fresh short-lived private download URL for a ready backup.

Read durable capture status, counters, and warning summary.

Page retained workspace backups, newest first, without download grants.

Read the workspace payer, monthly spending cap, and storage allowance.

List the workspace credit ledger newest-first with actor attribution.

Update the workspace payer, monthly spending cap, and storage allowance.

Read workspace usage grouped over a reporting period.

Read failed cloud backup files from the live gateway.

List folders in the explicit, saved or sole active Drive account.

Read the saved account pin, active Drive choices and live backup status.

Set the cloud backup target using an explicit, saved or sole active Drive account.

Read the shared desktop lifecycle, viewer count, and browser-owner activity.

Mint a short-lived, origin-bound viewer URL for the shared workspace desktop.

Approve a pending CLI login as the signed-in user.

Read one chunk of the workspace directory snapshot

Read one chunk of the workspace drive snapshot; drive grants are refused

Submit anonymous product feedback; accepted asynchronously and rate limited.

Create a directory or symlink, move, copy, or bounded-recursively delete

Page file events by workspace, exact path, or folder subtree in sequence order

Page one file’s attributed event history in sequence order

Batch-resolve the most recent writer for each named entry of one directory

List every actor that touched one file, most recently active first

Delete one file or empty directory

Create a short-lived, headerless reference to one workspace file

Stream one file with ETag and single-range support

List one workspace directory with file stats

Render a model file as a turntable or still preview image

Search a folder and everything below it by name, path and document text. Results come from an index on the workspace VM, so they can lag the drive; meta.index says how far behind it is. Paths with any segment starting with "." and derived folders such as node_modules are never indexed, so no result does not mean no file. Terms of two letters or more match by word prefix; a one-letter term matches that whole word only. "voice" does not find "invoice". Text is read only from pdf, docx, pptx, xlsx, md, txt, csv and html files.

Read file or directory metadata without transferring file bytes

Atomically write one file, optionally guarded by If-Match

Create a short-lived direct upload session for one Drive path prefix

Read drive usage and capacity, with recursive size for a subfolder

Set or clear the agents that receive one integration toolkit

Search and page through the provider-neutral integration catalog

Begin an OAuth connection using server-derived tenant identity

Idempotently disconnect one tenant-owned integration account

List workspace integration connections directly from the provider

Execute a provider tool using an explicit or sole active workspace account; return the raw provider response.

Invite an editor or viewer by canonical email address.

List recent invitations for a workspace.

Revoke an invitation before it is consumed.

Offer one of this workspace's agents on the marketplace.

Remove a listing from the catalog; existing subscribers keep pulling.

Browse listed marketplace agents.

Read a marketplace listing and its changelog.

Acknowledge the currently applied version of a subscription.

Clone a marketplace listing once into a caller-chosen path.

Install a marketplace listing and synchronously pull it.

Detach a marketplace subscription while preserving local files.

List marketplace agent subscriptions for a workspace.

Set or clear the agents that receive one custom MCP server

Begin OAuth consent for an attached remote MCP server; open the returned authorization URL.