Skip to main content
POST
Error

Authorizations

Authorization
string
header
required

Flowyte secret API key (Authorization: Bearer flowyte_sk_live_…). Scope-gated; is scoped to your organization — a key can never reach another tenant. The listed scopes in each operation's apiKey requirement are the scopes that key must hold. The tokenUrl is nominal: keys are minted in the dashboard.

Path Parameters

agentId
string
required

The agent this resource is scoped to (the UUID returned by createAgent / listAgents).

kind
enum<string>
required

The integration provider (connector). One of the supported connector slugs: native providers (google_calendar, google_sheets, calendly, hubspot, ``, square, opentable, shopify), SQL databases (postgres, mysql), the universal Zapier MCP fallback (zapier), or Composio (composio).

Available options:
google_calendar,
google_sheets,
calendly,
hubspot,
square,
opentable,
shopify,
postgres,
mysql,
zapier,
composio

Body

application/json
toolName
string
required

The equipped MCP tool to freeze to (stamped into execution_config.tool_name).

name
string
required

The LLM-facing skill/function name.

description
string
required

The LLM-facing skill description.

pinnedArgs
object

Operator-pinned args (override/augment LLM args); the second lock. Cannot overlap exposedParams; sensitive-PII fields are refused.

exposedParams
string[]

The subset of the tool's input the LLM may fill → becomes parameters_schema (byte-faithful sub-schemas). Sensitive-PII fields are refused.

allowedFields
string[]

Dotted leaf paths (from a probe) the agent may READ back. Deny-by-default: an empty list returns NO data (a warning is emitted).

timeoutMs
integer

Optional per-call overall timeout (bounded at 25s; the mcp type is slow-listed so filler masks the dip).

enabled
boolean

Start enabled (default true; the confirm gate — not a draft flag — protects a write).

fireAndForget
boolean

WRITE actions only. Confirms with the caller as normal, then on the CONFIRMED execution enqueues the same pinned + validated wire args to a durable background queue and returns an immediate speakable "done" instead of blocking the turn on Zapier's ~10-13s agentic execute (or the shorter classic call). A background worker completes the real send off-turn with retries + idempotency; the call can end before it finishes. Never bypasses the confirm gate — it only changes what happens after the caller says yes. Silently ignored (not stamped) unless the frozen skill is an effective write; a read or an attested-read is never fire-and-forget. Default false = the classic synchronous send.

readAttestation
object

When attestedRead is true, DOWNGRADES the fail-closed write to an un-gated read, recorded verbatim (who + when + note).

agentic
object

Optional AGENTIC block — present to freeze ONE concrete action from a Zapier AGENTIC (dynamic-discovery) server (see POST …/tools/{tool}/resolve). When present, the server RE-RESOLVES the action from selectedApi + action + parentParams (never trusting a client-supplied schema), synthesizes a CLOSED schema, and rejoins the same freeze pipeline. instructions/output are OPERATOR-authored and LOCKED — they are stored, NEVER LLM-filled, and are NOT schema inputs (listing them in exposedParams is rejected). Omit for the classic per-tool freeze (unchanged).

Response

The created (frozen) mcp skill, plus authoring warnings and whether it was attested a read.

data
object