Glide MCP for AI agents

Agents read Glide MCP at once. Changes and sends are held for a person's approval by default.

About Glide MCP

Build, manage, and operate Glide apps, projects, data, and workflows through Glide's hosted MCP server.

What an agent can do in Glide MCP

Every Glide MCP action is classed by the platform as a read, a change or a send. Reads run at once. Changes and sends are held for a person by default.

Runs at once (reads)

Looks things up in Glide MCP without asking first. 58 actions.

  • Ai models listList the AI models available to deployed apps that declare an `ai` binding. Each entry returns an `id`, a provider, and a tier. Pass the `id` verbatim — the compound `provider/model` form (e.g. anthro
  • Ai query usageQuery AI Gateway request logs for this project's deployed apps. Returns recent calls made through the `ai` binding — model, provider, success, tokens, cost, duration — with per-app attribution via met
  • App custom domain statusCheck the status of an app's custom domain: whether the SSL cert is active, still provisioning, or blocked. When blocked, returns the exact issue (commonly the customer's DNS CAA records not permittin
  • App getGet details of a specific app by slug. Returns user-facing name, latest deploy description, URL, status, version, script name, bindings, and timestamps.
  • App listList all apps for the project (deployed, pending, or errored — excludes deleted). Each app includes app slug, user-facing name, latest deploy description, deployed URL, status, version, script name, a
  • App list versionsGet version history for a deployed app. Shows all past deploys with version numbers, titles/descriptions, and URLs.
  • App request readMake an authenticated HTTP request to THIS project's own app backend (the routes you write in server.ts) and get the response back — use it to verify an endpoint returns what you expect, walk a multi-
  • App runtime errorsRead build, client-runtime, and retained server-error history for this project. Read the top-level `verificationStatus` first: it is the canonical, server-authored interpretation of the current previe
  • Auth audit queryQuery recent tool-dispatch audit rows for this project. Every mutating tool call (and every denied call of any kind) produces an audit entry with the verified actor, delegation chain, traceId, decisio
  • Auth audit traceFetch every audit entry sharing a given `traceId`, reconstructing one turn's full effect chain. A traceId is carried end-to-end on every ActorContext, so this surfaces every tool the agent called on b
  • Auth checkDry-run an authorization check for the caller without executing anything. Returns `{ allowed, decisionId, reason? }` — same shape the registry's dispatch() uses to gate every tool call. Useful for 'ca
  • Auth list actionsIntrospect the project worker's tool registry — returns every registered tool with its authz-relevant metadata: name, domain, scope, readOnly, destructive, idempotent, supportsDryRun, and whether it d
Show all 58
  • Auth whoamiReturn the verified ActorContext for the caller — actorId, actorType, orgId, projectId, delegation chain (if any), and correlation IDs (requestId, traceId) — enriched with the organization name from p
  • Billing lookupLook up live Glide pricing and billing facts: the org's current plan and subscription, credit balance and quota usage, the full plan catalog with current prices, per-plan baseline features, and the of
  • Db backup connectionReturn a read-only connection string for a G3-managed backup branch. Requires editor access even though the branch endpoint is read-only.
  • Db backup listList all G3-managed database backup branches for this project. Backup metadata is parsed from branch names.
  • Db backup statusShow whether the project database is provisioned, the Neon history window, and the active branch.
  • Db getGet details for a single project database by name. Returns engine, provisioning state, and Neon project ID. Does not return the connection string — that stays inside the worker.
  • Db healthHealth check for the project database, read-only: compute size and suspend timeout, data size, largest tables, tables read by full scans, dead-row bloat, open connections against the limit, the slowes
  • Db listList the databases provisioned for this project. Each project currently has at most one Neon Postgres database (`project-db`), auto-provisioned on first deploy; the return shape is an array to stay fo
  • Db list tablesList all public tables and SQL views in the project's Postgres database (if provisioned), including relation comments plus column schemas or view definitions. Prefer relevant views over raw tables whe
  • Db selectRun a single read-only statement (`SELECT …` or `WITH … SELECT …`) against the project's Postgres database, inside a `SET TRANSACTION READ ONLY` envelope. Use this for dashboard questions, summaries,
  • File historyList the mutation history of workspace files — every write, edit, delete, move, and copy, newest first, with a ledger id per entry. Pass `path` for one file's history, `prefix` for a directory subtree
  • File inspectInspect a file from the workspace. For images (PNG/JPG/GIF/WEBP/AVIF/HEIC), returns the visual content. For PDFs and text files, returns the extracted text (truncated at 32 KB; when the result is trun
  • File listList files in the project workspace. Returns project-relative regular-file paths. Use prefix for a literal subtree, pattern for the same glob/subtree syntax as file_search, or both to require both fil
  • File readRead a file or directory from the project workspace. Files return contents; directories return a recursive list of project-relative regular-file paths. Pass historyId (the restore dry run's anchorId)
  • File searchSearch file contents in the project workspace using a text query. Supports searching one file by path or many files by glob/prefix pattern, and returns compact line previews.
  • File statCheck whether a file exists in the project workspace and return its size in bytes.
  • Get workflow runInspect one workflow run — returns the run status, its `input` (the payload the run was triggered with — `event.payload` in the workflow's run(event, step); for a trigger this is `{ triggerSlug, toolk
  • Get workflow step outputRead the FULL value of one workflow step's output — the run's final output, or the run's INPUT (the trigger payload / `event.payload`; pass `runInput: true`) — when get_workflow_run's bounded preview
  • Integration actionsGet the COMPLETE input schema + description for specific tool slugs (from integration_search's recommended/related lists). Returns each tool's required + optional parameters and a description carrying
  • Integration searchFind the right integration tools for a task (e.g. "send an email", "save a record to a connected app"). Returns a semantic ranking: `recommended` tool slugs to use first, `related` alternatives, the `
  • List active triggersList this project's LIVE integration triggers (the ones enable_trigger created) — each with its `triggerId` (needed for set_trigger_enabled / delete_trigger), toolkit, trigger slug, config filters, ti
  • List triggersList the event triggers available for a connected toolkit — call this to find the exact trigger slug BEFORE enable_trigger. Returns `[{ slug, name, description, payload, config }]`: `description` is w
  • List workflow appsList this project's workflows with their WORKFLOW-LEVEL enabled state — the app master switch (set_workflow_enabled) that decides whether the workflow runs at all. Use THIS to answer 'is this workflow
  • List workflow app triggersList this project's app triggers — each with its id, the UI app that fires it, the workflow it starts, its label, and enabled state. Pass `appName` to scope to one UI app, or omit for all.
  • List workflow data triggersList this project's data triggers — each with its id, the workflow it starts, the table and changes it watches, its label, and whether it is on. Pass `workflowName` to scope to one workflow.
  • List workflow runsList recent runs of this project's workflows — each with its run id, status (complete / errored / running / paused / …), source, and a top-level error if any. Use this to find a failed run, then call
  • List workflow schedulesList cron schedules for this project's workflows — each with its id (needed to pause or remove it), cron, timezone (null = UTC), enabled state, and next fire time. Pass `appName` to scope to one workf
  • List workflow webhooksList this project's workflow webhook triggers — each with its id (needed to rotate/enable/delete it), label, enabled state, and URL. Pass `appName` to scope to one workflow, or omit for all.
  • Log queryQuery recent debug logs for the project. Returns entries with level, source, message, and timestamp. Useful for diagnosing build failures and runtime errors.
  • Org member role lookupLook up the calling actor's role on the org they are scoped to. Returns `{ role: 'admin' | 'editor' | 'viewer' | null }`. `null` means the actor is not a member of any role on the org. A user with mul
  • Org model policy lookupLook up the AI model policy for the org the calling actor is scoped to. Returns `{ allowedModelIds: string[], residency: 'everywhere' | 'us_eu', staffOverride: boolean }`. An empty `allowedModelIds` m
  • Project getGet metadata for the project — name, org, orgSlug, and creation date.
  • Project listList all projects in this org. Returns project names, IDs, statuses, and timestamps.
  • Project lookupLook up a single project by id. Returns its `id`, `name`, `status`, and timestamps. Used by the unified-agent's `open_project` scope-change flow to verify a project exists and resolve its name before
  • Project searchFind projects in this org by name, by the name of an app inside them, or by what a chat about them was called. Use this to narrow a large org to a small candidate set before calling project-scoped too
  • Resource listList supported non-secret infrastructure metadata for the project: database identifiers and regions, plus R2 bucket names.
  • Secret listList project secrets as metadata only. Returns secret names, descriptions, and timestamps; values are write-only and are never returned. Use this before adding app code that depends on an API key, tok
  • Spreadsheet grepSearch all cells (and sheet names) in an xlsx attachment for a regex pattern. Returns matching cells with sheet, A1 address, and a short preview. Capped at 80 hits.
  • Spreadsheet inspect rangeInspect a rectangular range of an xlsx — JSON row objects + a compact formatting section, or an exhaustive formatting report. Returns `focus` info that callers should use to highlight the range in the
  • Spreadsheet list featuresSurvey the structural and visual features of an xlsx in a single call: worksheets (names, dimensions, formula counts, visibility), embedded charts, embedded images, workbook-level metadata (creator, l
  • Spreadsheet list macrosList the VBA macros in an xlsm (macro-enabled Excel) workbook. Returns each module's name, kind (Standard / Class / Form / Document), source line count, and source byte size. Returns `hasMacros: false
  • Spreadsheet read cell commentRead the full text + any reply chain for one cell comment OR Note in an xlsx. **Modern Excel UI distinguishes "Notes" (legacy yellow stickies, single-author) from "Comments" (threaded discussions). Bo
  • Spreadsheet read macro sourceReturn the decompressed VBA source code for one named module in an xlsm workbook. Use after `spreadsheet_list_macros` to read the source you'll translate into SQL stored procedures or JavaScript funct
  • Spreadsheet read pivot definitionReturn the full definition of one pivot table: source range/table, row/column/page axes (resolved to source field names), and every data field with its aggregation. Use after `spreadsheet_list_feature
  • Spreadsheet read table definitionReturn the full definition of one Excel `Table` (the structured-range object that powers `Table[Column]` formulas + autofilter): every column with name, optional totals-row function/label, and any `ca
  • Wait for workflow runWait for a workflow run to finish and return its result — call this ONCE after run_workflow instead of polling get_workflow_run. Blocks up to `timeoutSeconds` (default 60, max 120) while the run is qu

Held for approval by default (changes and sends)

Held for a person's approval by default. The approval is recorded and the action is sent once, never twice, with 10 seconds to undo. 66 actions.

  • Add app assetsPromote user attachments into the project's public app-asset storage and return an app-local path — `/assets/<sha256>/<filename>` — for each. Use that value as-is in `src` / `href`: it resolves on the
  • App authenticated linkCreate a pre-authenticated link to an app. Use this to test/verify/screenshot.
  • App bind custom domainBind a custom domain to a published app (e.g. `mycoolapp.dev` or `app.example.com`). Platform subdomains (*.glideapps.dev, *.glideos.app, etc.) are not allowed — use app_claim_vanity_slug instead. Reg
  • App claim vanity slugClaim a globally unique vanity subdomain for an app (e.g. `myapp.glideapps.dev`). The slug must follow DNS naming rules and be unique across all organizations.
  • App deleteDelete an app. Soft-deletes the app record, removes the deployed worker (or dispatch-namespace script), and clears the production KV route. Best-effort cleanup — missing CF resources are ignored.
  • App promotePromote a specific version of an app to production. Verifies the target version script exists in the dispatch namespace, updates the production KV pointer, and updates the app's production URL.
  • App publishPromote a version of an app to production. After update_preview succeeds, pass its returned publishable content hash as this tool's `version`. Only available when Workers for Platforms is configured.
  • App release vanity slugRelease a vanity subdomain so it can be claimed by another app. The app's long-form production URL continues to work.
  • App request writeMake an authenticated HTTP request to THIS project's own app backend (the routes you write in server.ts) and get the response back — use it to verify an endpoint returns what you expect, walk a multi-
  • App rollbackRoll an app back to a previous version. The target version must already exist in the app's version history. Updates the app record + production KV pointer so the public URL serves the older build. IMP
  • App set accessSet the app's access level — the same setting the user sees in the Share dialog. When you describe org access to the user, always call it their "Glide org" / "Glide organization", never a bare "org".
  • App set iconSet the icon for one of the project's apps. Provide `name` (the app to retint) and EITHER a short `description` of what the icon should evoke — e.g. 'task tracker', 'expense reports', 'rocket' — OR `p
Show all 66
  • App set nameRename an app's user-facing name when the user explicitly asks to rename it. This does not change the app slug, dispatch script names, or production URLs.
  • App set presentationSet how one of the project's apps presents itself when installed, shared, or indexed: the web-manifest and <head> fields the platform otherwise fills with defaults. Pass `name` (the app) and `presenta
  • App unbind custom domainUnbind a custom domain from an app. Removes the CF for SaaS hostname registration, deletes the KV routing pointer, and clears the domain from the app. The app's production URL and any vanity URL conti
  • BashRun a short Bash script in a sandboxed shell. Use this for shell-style text and data work: pipes, heredocs, grep/sed/awk/jq, sorting, diffs, checksums, zip/unzip for .zip archives, and quick text/CSV/
  • Cancel workflow runStop an in-flight workflow run (running / paused / waiting) by its run id — the same Stop the dashboard offers. Terminates execution at the current step; completed steps are NOT rolled back, and a fin
  • Create workflow app triggerRegister that a deployed app in this project may start a workflow from its own server code — the way a button in the app kicks off a run. Then the app's server route calls `workflows(c.env).start("<wo
  • Create workflow data triggerStart a workflow whenever rows in one of this project's tables are inserted, updated or deleted — by the app's users (a form submit), in the Data Editor, by agent SQL, or by another workflow. The run
  • Create workflow scheduleSchedule a deployed workflow to run automatically — either RECURRING or ONE-TIME. Use this after the workflow is deployed; actually create the schedule, do NOT just tell the user how. Provide EXACTLY
  • Create workflow webhookGive a deployed workflow a PUBLIC URL that an external POST fires a run on — for EXTERNAL systems only (Stripe, Zapier, partner callbacks, curl). An app in THIS project must NEVER call the webhook: a
  • Db backup createCreate a read-only backup branch from a timestamp or Postgres LSN within the Neon history window.
  • Db backup deleteDelete a G3-managed database backup branch. Refuses non-G3 branches and the active branch.
  • Db computeRead or change the project database's compute ceiling. With no input it reports the current autoscaling range (min and max CU), the suspend timeout, the compute state, and the largest ceiling this org
  • Db executeRun any SQL statement against the project's Postgres database — SELECT, INSERT, UPDATE, DELETE, or DDL. When creating or materially changing a table or view, also add/update a Postgres relation commen
  • Db ingest data sourceBulk-load a CSV/JSON/XLSX attachment into a Postgres table in one step. The destination table must already exist — create it first with db_execute. `columns` is REQUIRED and acts as the inclusion list
  • Db restore from backupRestore the live project database from a G3-managed backup branch. The current state is first preserved as a backup branch.
  • Db restore to pointRestore the live project database to a timestamp or LSN. The current state is first preserved as a backup branch.
  • Delete triggerPermanently remove a live integration trigger — the external event stops starting the workflow. The toolkit CONNECTION is untouched (other triggers and action calls keep working). Get the `triggerId`
  • Delete workflow app triggerDelete an app trigger by id (from list_workflow_app_triggers). The app's `workflows(env).start()` call then refuses with trigger_not_found until the app is registered for that workflow again. To only
  • Delete workflow data triggerDelete a data trigger by id (from list_workflow_data_triggers). Changes to its table stop starting the workflow. To only pause it, use set_workflow_data_trigger_enabled with enabled:false instead.
  • Delete workflow webhookPermanently delete a webhook by id (from list_workflow_webhooks). The URL stops working. To only temporarily pause it (keeping the URL), use set_workflow_webhook_enabled with enabled:false instead.
  • Enable triggerMake an external event START A WORKFLOW (e.g. "when a new inbound message arrives, run the triage workflow"). A trigger is just another source that kicks off a workflow run — the integration counterpa
  • File copyCopy a file in the project workspace from `source` to `destination` without removing the original.
  • File deleteDelete a file from the project workspace.
  • File editIn-place edit of a workspace file: apply one or more exact replacement entries in a single call. Prefer one file_edit invocation with multiple edits[] entries over several separate file_edit calls whe
  • File moveMove (rename) a file in the project workspace from `source` to `destination`.
  • File restoreRestore one workspace file to the state it had AFTER a specific file_history entry (pass that entry's `historyId`). A delete entry restores the deletion. Use this to recover a file that was overwritte
  • File writeWrite (or overwrite) a file in the project workspace.
  • Log clearDelete all debug log entries for the project. Does not affect deployed logs or tail-worker output — only the in-DO debug ring buffer.
  • Project createCreate a new project in this org. Registers the project in the org dashboard and initializes its metadata in the project worker (via PROJECT_SERVICE RPC). Returns the new project's id, name, and creat
  • Project deleteSoft-delete one or more projects in this org by ID or unique name. Requires confirmed: true after the human confirms via suggest_answers.
  • Project renameRename a project owned by this org. Updates both the org dashboard and the project worker's metadata (via PROJECT_SERVICE RPC).
  • Project set accent colorSet the project's accent (brand) color. Hex `#rrggbb`. Used for buttons, links, focus rings, the rendered app icon, and any `bg-accent` / `text-accent-fg` / `text-accent-ink` / `bg-accent-soft` Tailwi
  • Remove workflow schedulePermanently delete a workflow schedule by id (from list_workflow_schedules). The cron stops firing. To only temporarily pause it, use set_workflow_schedule_enabled with enabled:false instead.
  • Rotate workflow webhookRegenerate a webhook's URL by id (from list_workflow_webhooks) — the OLD URL stops working immediately and a new one is returned. Use this if a URL leaked. To only pause it (keeping the URL), use set_
  • Run backend codeRun a short snippet of server-side JavaScript/TypeScript in this project's real backend runtime — with the same env a deployed server.ts gets (env.<DB binding>, env.AI, env.<R2 binding>, project secre
  • Run workflowRun a workflow once, right now (on demand) — a manual trigger, no schedule. Use when the user wants to run or test a workflow immediately. Returns the run id. To read the result, call wait_for_workflo
  • Secret deleteDelete a project secret. This removes it from future deploys only; already-deployed apps keep their current bindings until redeployed.
  • Send feedbackSend Markdown feedback to the Glide team about GlideOS itself. Use this when the user asks to report feedback, bugs, confusion, feature requests, praise, or product issues. You may also call this proa
  • Set trigger enabledPause or resume a live integration trigger without deleting it (its config and identity survive — re-enabling is instant, no re-connect). Get the `triggerId` from list_active_triggers. While disabled,
  • Set workflow app trigger enabledTurn an app trigger off or back on by id (from list_workflow_app_triggers). While off, the app's `workflows(env).start()` call refuses with trigger_disabled and no run starts; the app code and the row
  • Set workflow data trigger enabledTurn a data trigger off or back on by id (from list_workflow_data_triggers). While off, no runs start; turning it back on fires only for changes made from then on.
  • Set workflow enabledEnable or disable an ENTIRE workflow — the app-level master switch, by appName or appId. This is NOT a single trigger: disabling stops every trigger (all schedules, webhooks, and integration triggers)
  • Set workflow schedule enabledEnable (resume) or disable (pause) ONE existing workflow schedule by id — get the id from list_workflow_schedules. Disabling stops the cron from firing without deleting it; in-flight runs are unaffect
  • Set workflow webhook enabledEnable (resume) or disable (pause) a webhook by id — get the id from list_workflow_webhooks. Disabling stops the URL from firing WITHOUT changing it, so re-enabling resumes the SAME URL (the sender ne
  • Set workflow webhook header authRequire (or stop requiring) a SECRET HEADER on a webhook's inbound requests, by id (from list_workflow_webhooks) — an optional second credential so a leaked URL alone can't fire the workflow. Enabling
  • Spreadsheet extract assetsBatch-extract embedded images from an xlsx directly into the project workspace as files under `attachments/`, WITHOUT routing the image bytes through chat context. Pass an array of image filenames (ex
  • Spreadsheet renderRender one sheet of an xlsx — or one A1 range of it — to a PNG, the way Excel draws it: cell values and styling PLUS everything in the drawing layer (callout bubbles, arrows, text boxes, shapes, chart
  • Suggest appsSearch the published App Store catalog for installable templates. Returns up to 3 matching listings (id, slug, title, tagline, category, imageUrl, href, appCount on multi-app bundles), ranked by relev
  • Ui add glide componentsInstall Glide components from the catalog into an app by copying each canonical source into apps/<appName>/client/components/<componentName>.tsx. List every component a page needs and install them in
  • Update previewUpdate the preview build of a React + Hono full-stack app. Bundles client React code and server Hono API into a single worker. The client is served as an SPA with Tailwind CSS (CDN). Server API routes
  • Update workflow data triggerChange a data trigger by id (from list_workflow_data_triggers): the table it watches, which changes fire it (`ops`), or its name (`triggerLabel`). Switching `table` restarts it from now — changes made
  • Update workflow scheduleEdit an existing workflow schedule IN PLACE by id (from list_workflow_schedules) — change its cadence and/or enabled state WITHOUT deleting and recreating it, so the id, run history, and overlap guard
  • Use app store appInstall a published App Store app by cloning its entire project — apps, workspace files, and data — which is dramatically faster and cheaper than building the same thing from scratch. Call it only aft
  • Workspace restorePoint-in-time restore of a directory subtree: return everything under `prefix` (almost always one app's folder, e.g. `apps/<name>`) to its state at a moment in the past — an exact file_history entry i

Changes wait in Needs you

Changes and sends in Glide MCP are held for a person's approval by default. The approval is recorded, and the action is sent once, never twice, with 10 seconds to undo.

How approvals work

Glide MCP questions

Can an agent change data in Glide MCP on its own?

Not by default. Changes and sends in Glide MCP are held for a person's approval. The approval is recorded, and the action is sent once, never twice, with 10 seconds to undo.

What can an agent read in Glide MCP?

This connector lists 58 read actions. Reads run at once, without waiting for approval.

How does Glide MCP connect?

It connects with dcr oauth. Connectors are built and maintained by third-party developers; availability is confirmed during scoping.

Bring Glide MCP to your agents.