Cobl

Check whether a person can read, write, or manage the workspace, a project, a thread, or an organization-drive folder or file. Returns allowed plus the proving ACL chain. Use list_access to see everyone. Does not change anyone's rights. Company roles, usersets, and parent relations are inspect-only.

check_access

Let the signed-in user talk to Cobl from a chat app such as WhatsApp. When it is already linked, returns their account there and their thread for it in Cobl. Otherwise returns a one-time code and a link that opens the chat with the code ready: hand both to the user, who sends it from their own chat account within 15 minutes to finish linking.

connect_channel

Start connecting a third-party app (Gmail, Slack, Notion, ...) to the signed-in user's account. Returns an authorization URL, or `alreadyConnected: true` and no URL when the app is already connected. You cannot complete the OAuth consent yourself; hand the URL to the user to open in their browser and approve access.

connect_integration

Read a PDF or Office file (DOCX/PPTX/XLSX): the way to get a binary document's contents into context (plain `read_file` only reads text). Default `format: "markdown"` returns the text; if you want to keep it, `write_file` it somewhere (large PDFs are chunked and may be truncated). `format: "image"` renders the requested page(s) as pictures and shows them to you; use it when the LOOK matters (layout, palette, typography, imagery), e.g. replicating a document's design. Image calls render at most 4 pages; page through with `pages`. Rendered pages are also saved under `.cobl/pages/` so later steps can reuse them.

convert_file

Copy a file or folder, leaving the source intact. Copy selected assets used by a deliverable, source files needed for verbatim assembly, or a chosen template bundle. Browse and search organization material in place with search_drive, list_files and read_file; do not copy a knowledge folder just to inspect or search it. A complete folder copy is appropriate when the user explicitly requests duplication or export.

copy_file

Have Cobl run instructions for the user on its own: on a schedule, whenever another tool calls a webhook, or both. Each run acts as the user and bills the workspace like a chat. With a webhook, the response holds the URL and signing secret (Standard Webhooks) the sending tool needs; outside assistants get the URL and `secretLocation`, the Cobl page where the person copies the secret. With appEvent, it runs whenever one of the user's connected apps reports that event (find events with list_app_events). Events arrive in the run as untrusted data; such runs keep every tool, but sending anything out (an email, a message, a share link) waits for the user's approval in the run's thread.

create_automation

Create a folder (and missing parents) on the unified drive.

create_folder

Create a named group from existing workspace members. Only owners and admins can do this. Members receive access to resources shared with the group. Requires approval.

create_group

Create a new project (deal room) in the signed-in user's organization and seed its empty `documents/` folder, ready for files, or copy a template into it. Returns the new project id; pass it as `projectId`, `spaceId` or `workspace`, whichever the tool asks for. New projects start Restricted (only the creator has access) unless `visibility` says otherwise, and contain nothing from the organization's shared drive.

create_project

Create a private conversation, optionally filed beside documents. Placement does not share the conversation or set its output destination.

create_thread

Delete one of the user's automations. Threads it already opened stay. Its webhook URL stops working.

delete_automation

Delete a file/folder (recursive for folders) on the unified drive.

delete_file

Delete a group and its membership and resource grants. Resources and other access remain. Only owners and admins can do this. Requires approval.

delete_group

Permanently delete a project everywhere: its documents, drive index, sandboxes, and share links. This is a hard delete with no undo. Ask the human to explicitly confirm the exact project before calling this, then pass `confirm: true`.

delete_project

Permanently delete a conversation you manage and its history. Stop active work first. Archive when history should stay recoverable.

delete_thread

Reject a pending drive proposal: delete it without applying anything. The drive's current files are untouched.

discard_proposal

Disconnect the signed-in user's chat app (such as WhatsApp) from Cobl. Their thread for it and its history stay in Cobl; messages from that account get a new sign-in link until they reconnect.

disconnect_channel

Disconnect a third-party app from the signed-in user's account, revoking Cobl's access to it. Identify the integration by its toolkit slug (preferred) or by a connected account id. Only the user's own connections can be disconnected, unless `team: true`: then a workspace owner or admin stops sharing that app with the workspace.

disconnect_integration

Replace an exact unique snippet in a text file on the unified drive.

edit_file

Extract website identity into design.md and annotated assets. Select organization only for its shared identity; select project for a client or campaign. Returns guide and candidate paths; preserves human corrections. Reuse available identity before extracting again.

generate_brand

Fetch one project's metadata plus a top-level listing of its drive (documents live under `documents/`, shared brand assets under `organization/`) so you get oriented in one call. Pass a project id from `list_projects` as `workspace`.

get_project

Read a thread's placement, output destination, audience and your permissions.

get_thread

The current workspace (organization): its name, slug, and logo, plus the signed-in user's role in it (owner, admin, or member). Use it to know which workspace you're acting in before listing projects or inviting teammates.

get_workspace

Whether colleagues with a verified email at the company domain can find and join the current workspace, how new members get approved, and who is waiting for approval. Requires an owner or admin role.

get_workspace_discovery

Grant reader, writer, or admin access on a project or thread. For threads, use a workspace member or companyId for all current and future members; sharing includes existing history. Organization-drive folders and files accept reader or writer only, and only for active workspace members. Restrict a folder/file with relation restricted (no person): company --restricted--> entry. Workspace members get access at once. Anyone outside the workspace, with or without a Cobl account, gets an emailed project invitation instead (outcome invited) that expires after expiresInDays; inviting the same email again renews it. Guests can view or edit, not manage: admin is for workspace members only. Changing the tier of a guest who already has access applies at once. Nobody outside the workspace can be invited to the Drive. Admin is project or thread manage access. Cannot change workspace roles (use invite_member), can grant to groupId instead of a person (projects, folders and files), cannot mutate company usersets or parent relations, and cannot downgrade an organization member's inherited can edit on an unrestricted entry while the workspace default is members can edit. When team settings set the drive to members can view, members inherit reader and a writer grant gives that member edit on the folder or file and its descendants. On a project shared with the whole team, a workspace member can only be given more than the team default (can edit or can manage over can view, can manage over can edit). Needs approval.

grant_access

Invite someone to join the current workspace by email. Creates a pending invitation, attempts email delivery, and returns the accept link to share when email is unavailable. Requires an owner or admin role.

invite_member

Leave the current workspace. The last owner has to make someone else an owner first. After leaving, the person lands in their next workspace, or in onboarding when none is left.

leave_workspace

What one of the user's apps (gmail, hubspot, slack, ...) can report to start an automation, with each event's settings and what it carries, and whether the user has connected that app. If not, offer connect_integration first.

list_app_events

List who can access the workspace, a project, a thread, or an organization-drive folder or file: your own read/write/manage, direct user grants, inherited or userset access, a stored restricted tuple, and pending invitations. Also the general access level (Restricted, Whole team or Public) with the levels you may pick, and how many distinct people can open it. A group or the whole team is one row, never one row per member. Inspect with this before grant_access, revoke_access or set_general_access. Workspace seats stay read-only here; change those with invite_member.

list_access

The user's automations with their schedule, webhook, whether they are paused, and their last run.

list_automations

List the saved versions of one text file, newest first. Every save is a version, and each says what happened: a person's save, Cobl publishing a conversation's changes, Cobl merging its changes with edits saved at the same time, resolving overlapping edits, or keeping the version a person saved. Restore one with `restore_file_version`. Images, PDFs and other binary files have no versions.

list_file_versions

List files/folders as an ASCII tree, 2 levels deep by default. Browse organization folders directly with an explicit path such as `organization/knowledge`; no working copy is needed. Omit `path` to list the selected output folder, or the three scope folders when no destination is selected. Bare paths use the selected output folder or active project. Raise `depth` to look deeper. If truncated, list narrower subfolders. A `[no access]` entry cannot be opened; tell the user instead of reading it or requesting access.

list_files

List groups in the current workspace, their members, and shared resources visible to the caller. Use group IDs when granting or revoking resource access.

list_groups

List the third-party apps (Gmail, Zoom, Notion, ...) the signed-in user has connected to Cobl, plus the apps their workspace shares with every member. `scope` says whose the connection is ("mine" or "team"); when the user has their own connection for an app the workspace also shares, their own is the one used. Use it to check whether a connection succeeded before offering a new connect link.

list_integrations

List the projects in the signed-in user's workspace. Each returned `id` is the project id other tools take: `projectId` (file tools), `spaceId` (`share_project`, and inside `target` for access tools), `{ type: "project", id }` inside `scope` or `location` (thread and proposal tools) or `workspace` (the rest). Call this first to discover where to work. Returns projects shared with the whole team plus the Restricted ones the user owns or was added to, each with who created it (`createdByYou` answers "my projects").

list_projects

Find saved draft or conflicting output across a conversation's Drive scopes, optionally filtering by scope. Human reviewers can apply or dismiss these alternatives.

list_thread_proposals

The live public share links of a project: id, URL, label, expiry and who created it. The URL is included only when the caller may manage sharing on the project. Use `revoke_share` to switch a link off.

list_shares

List this OAuth application's tasks. Follow nextCursor until absent; a page can be empty after access changes.

list_tasks

Who's in the current workspace: every member with their name, email, and role, plus pending invitations that haven't been accepted yet. Answers "who's on my team?" Use `invite_member` to add someone.

list_members

Find conversations you can read, including shared threads. Follow nextCursor until it is null; a page can be empty while more results remain.

list_threads