hosting:read and, for authorized mutations, hosting:write. Do not combine these with registry webdock:* scopes. Each call still checks current workspace, role, policy and resource ownership.
Discover the available tools
BYOK command names map to MCP tool names by replacing dots with underscores. For example,byok.inventory is exposed as byok_inventory. Use the connected client’s tool schemas for current fields and enum values.
Policy updates and uncertain-operation review require platform operator authority. An enrollment call returns a protected setup reference, not an agent credential. Vercel’s interactive authorization must be completed in Console.
byok.mail.connect is deliberately not exposed as an MCP tool: enter provider secrets in the protected Console form.
Concurrency and retries
Keep customer, cluster and operation IDs as decimal strings. Use the currentrevision for policy, connection and revoke operations. Refresh a conflicting revision instead of overwriting another administrator’s change.
For a workload action, send the exact current uid and resourceVersion from an authorized inventory read. Preserve the same idempotencyKey for the same intent. A different action needs its own key. Inventory freshness and namespace policy are rechecked when an operation is claimed.
Poll get_hosting_operation with the returned operation ID. A queued response is not proof that the workload changed. If the operation needs reconciliation, refresh inventory and let an authorized operator review the uncertain state before another write.