tool	domain	effect	what it does	signature
agents_create	router	write	POST /api/agents — provision agent specialist + insert definition (owner only) · auth: authenticated	a3e3e9a4caaf2060f63d51b6c8d288e1
agents_delete	router	destructive	DELETE /api/agents/:id — soft-delete + disable specialist (owner of this agent, or master) · auth: authenticated	4e67ee2a3c724c2625dd0ad130c6b33c
agents_get	router	read	GET /api/agents/:id — definition + status + last-run summary (tenancy-scoped) · auth: authenticated	ce1fa7eb8f7bf140cc298df9e38022e2
agents_get_run	router	read	GET /api/agents/:id/runs/:runId — one full run row (tenancy-scoped) · auth: authenticated	ddc86dba859d0b032537a182c68cdab3
agents_list	router	read	GET /api/agents — owner-scoped list of the caller's definitions · auth: authenticated	b7ba5e2384868cd5694e9f3a8952a086
agents_list_runs	router	read	GET /api/agents/:id/runs — run history, newest first (tenancy-scoped) · auth: authenticated	e659938eba6a39bfae5a8a72418f35a4
agents_ready	router	read	GET /agents/-/ready · auth: none	a4d5e2196b3be9f7506f507e773f4531
agents_trigger	router	write	POST /api/agents/:id/trigger — enqueue a manual run (owner only; 202/200/409) · auth: authenticated	8e664f0a5f2e6c980ed83d4b071d4f9d
agents_update	router	write	PATCH /api/agents/:id — update mutable fields (owner of this agent, or master) · auth: authenticated	eb6a626f6c744c824cfa5ca1466a1809
router_explain	router	read	GET /_router/explain?method&path · auth: none	2b684b3fb0f9458fefb86d037d62d7dd
health	surfaces	read	GET /health · auth: none	706ab94c074e8b0562e570f13eed3b3b
robots_txt	surfaces	read	GET /robots.txt · auth: none	ca3d0de9d3f99f13d90eae5091cbc788
surface_catalog	surfaces	read	GET /api/surfaces · auth: none	9ad8b6681ab8b2f727e987ece0887359