https://mcp.sidecars.ai/mcp exposes 15 tools and one resource
template, and no prompts. Each entry below links to its full contract:
parameters, returned fields, errors and an example.
Read tools change nothing. Write tools act as you in the workspace and
are checkpointed and audited. Destructive write tools can replace existing
content and require a version check.
Knowledge
Scopeknowledge:read, granted on first connect.
- search_knowledge (read): hybrid vector and full-text search over the workspace knowledge base, returning ranked excerpts.
- ask_knowledge (read): a synthesized answer to a question, with cited sources.
Folders
Scopedocuments:read, by step-up consent on first use.
- list_folders (read): the folders you
can open — top level, by name, or one folder’s path, subfolders, sessions
and document count. Its documents come from
list_documentsfolder_id.
Documents
Reads needdocuments:read, writes need documents:write. Both arrive by
step-up consent on first use.
- list_documents (read): the documents and pages you can reach, filtered by folder or library section, with your role on each.
- read_document (read): a document as
markdown, windowed for long content, always with its
version. - create_document (write): a new document in a session, a conversation or your library, optionally pre-filled, with idempotent retries.
- edit_document (write, destructive): append, replace a quoted section, replace everything, or fill an empty document while people may be editing it live.
- get_document_versions (read): the recent checkpoints and named versions, newest first.
- archive_document (write, idempotent): archive a document, page or table so it leaves listings and refuses edits, or restore it. Nothing is deleted.
Pages
Same scopes as documents.- create_page (write): a new HTML page artifact in a conversation or your library.
- read_page (read): a page’s stored HTML and
its
version. - write_page (write, destructive): replace a
page’s HTML under a required
expected_version; a conflict returns a diff.
Automations
Reads needautomations:read, writes need automations:write. Both arrive by
step-up consent on first use. The sidecars-automations skill
teaches the loop.
- list_automations (read): the automations you can see — personal and workspace — with trigger, state and whether you may change each.
- read_automation (read): one
automation’s steps, writes, trigger and version;
include_planfor its plan JSON,include_runs/run_idfor its history. - describe_capabilities (read): the vocabulary for writing a plan — connected systems, node shapes, bindings, triggers and the capability catalogue per namespace.
- draft_automation (write): a plan JSON in, a validated draft out — or every error by rule and path.
- edit_automation (write):
publisha draft behind a trigger,runit (ordry_run),set_enabledto pause or resume. No delete.
Export
Scopedocuments:read.
- export_document (read): render a document, page or table to markdown, PDF, HTML, CSV or JSON and get a 15-minute download URL.
Uploads
Scopedocuments:write.
- request_upload_url (write): a
single-use URL to
curla large markdown or HTML file to, then pass itsupload_idto a document or page write instead of the content.
Comments
Reads needdocuments:read, writes need documents:write.
- read_comments (read): the comment threads on a document or page, with anchors, replies and your role.
- add_comment (write): start a thread, optionally anchored to a quoted passage, or reply in one.
- resolve_comment (write, idempotent): resolve or reopen a thread.
Resources
- sidecars://document/{id}: the documents you can
reach, as
text/markdownresources for hosts that mount them next to tools.
Which methods need a token
A presented-but-invalid token is refused on every method.
How to read a tool result
A successful call returns a text block for a person and astructuredContent
object for the host. The two always agree.
isError: true and, when
there is something to act on, an error code in structuredContent. See
Troubleshooting.
Every tool declares MCP annotations so a host can decide whether to ask before
calling it:
Not exposed
These are not available through this server today, and no tool pretends otherwise:- Posting messages or reading a session’s messages (
list_folderslists a folder’s sessions by title only). - Sharing, granting, moving or linking artifacts.
- Restoring a version, naming a version, or deleting anything
(
archive_documentretires an artifact reversibly; nothing is ever removed). - Editing tables (a table is filled in by the agent that created it).
- Resource subscriptions (
notifications/resources/updated). - Prompts (
prompts/listis answered as unsupported).