49 tools from the Flowforge MCP Server, categorised by risk level.
View the Flowforge policy →flowforge_get_agent Get a single agent's full record: status, model, system prompt, enabled skills, and aggregate performance stats (tasks completed, tool calls, etc.)... flowforge_get_event Get the full record of a single event — name, data payload, timestamp, and ingest metadata. Use after flowforge_list_events to inspect a specific e... flowforge_get_function Get the full record of a single workflow function — trigger config, tools, agent config, and active state. Use after flowforge_list_functions to in... flowforge_get_run Get the full record of a single workflow run: status, timing, input event, and summary metadata. Use after flowforge_list_runs to drill into a spec... flowforge_get_run_steps Get the ordered list of durable steps executed by a run, with inputs, outputs, and timing per step. Use this to trace what a run did and why it fai... flowforge_get_run_tool_calls Get just the tool-call events from a run — useful for auditing what an agent actually called and with which arguments. For the full step-by-step tr... flowforge_get_stats Get aggregate platform statistics: total runs by status, function count, queue depth, active workers, and recent throughput. Takes no parameters — ... flowforge_get_task Get the full record of a single task: title, description, assignee, linked function/run, labels, and comment/sub-task counts. Use after flowforge_l... flowforge_get_task_board Get the Kanban board view — tasks grouped into status columns (todo, in_progress, in_review, done, blocked, cancelled). Use this when you want a bi... flowforge_get_tool Get the full definition of a specific AI tool by name: its parameter schema, Python code or webhook config, approval settings, and active state. Us... flowforge_health_check Binary reachability check — returns a short 'healthy' / 'unhealthy' string telling you whether the FlowForge server is up and responding. Takes no ... flowforge_list_agents List AI agents in the workspace, ordered by creation time (newest first). Agents are named AI identities — each has its own model, system prompt, a... flowforge_list_approvals List human-in-the-loop tool-call approvals, ordered by creation time (most recent first). An approval is raised whenever an agent tries to call a t... flowforge_list_comments List comments on a task or run, ordered by post time (oldest first). Comments form a unified activity timeline mixing human and agent authors, with... flowforge_list_credentials List all stored credentials, ordered by name. Secret values are NEVER returned — each entry includes only a masked prefix for identification plus m... flowforge_list_events List events that have been sent to FlowForge, ordered by send time (most recent first). Use to audit what's been fired or verify that a just-sent e... flowforge_list_functions List registered workflow functions, ordered by creation time (newest first). Soft-deleted functions are excluded — their run history is preserved b... flowforge_list_notifications List notifications for the current user, ordered by creation time (most recent first). Notifications cover approvals (pending tool calls), task ass... flowforge_list_runs List workflow runs, ordered by creation time (most recent first). Use to find recent executions of a function, triage failures, or verify that a ju... flowforge_list_skills List installed skill templates, ordered by import date (newest first). Skills are reusable knowledge packets injected into an agent's system prompt... flowforge_list_tasks List tasks as a flat array, ordered by creation time (newest first). Tasks are Kanban work items assignable to humans or agents. Use flowforge_get_... flowforge_list_tools List all AI tools registered in FlowForge, ordered by name. Tools are reusable capabilities that inline functions and agents can call — either Pyth... flowforge_search_marketplace Search the skills.sh community marketplace for skills you can install. Returns match results with install counts and preview URLs, ordered by relev... 2/5 flowforge_add_comment Post a new comment to a task or run. Supports both human and agent authors, markdown content, and @mentions. Supply exactly one of task_id or run_i... 2/5 flowforge_approve_tool_call Approve a pending tool-call approval. The paused run resumes and the tool is invoked, optionally with modified arguments. To deny the call instead ... 2/5 flowforge_create_agent Create a new AI agent in the workspace. Agents are team members that can be assigned tasks (flowforge_create_task) and linked to functions. To enab... 2/5 flowforge_create_credential Create a new encrypted credential the workflow tools can reference. Once stored, use the credential in webhook tool URLs or headers via {{credentia... 2/5 flowforge_create_function Create a worker-mode workflow function whose code runs on your own server at endpoint_url. FlowForge calls the endpoint when the trigger fires and ... 2/5 flowforge_create_inline_function Create an inline/serverless AI agent function that runs on the FlowForge server — an LLM drives execution using the listed tools, no endpoint_url i... 2/5 flowforge_create_task Create a new task on the Kanban board. Tasks auto-get human-readable identifiers like FF-1, FF-2. To update an existing task, use flowforge_update_... 2/5 flowforge_create_tool Create a new AI tool. Three tool types: 'custom' (Python code executed in a sandbox — must define execute(**kwargs)), 'webhook' (HTTP endpoint with... 3/5 flowforge_import_skill Install a skill from the marketplace into FlowForge by downloading its SKILL.md and creating a local skill template. After installing, wire it into... 3/5 flowforge_mark_notifications_read Mark notifications as read — either one specific notification (pass notification_id) or every currently-unread notification (omit notification_id).... 3/5 flowforge_preview_skill Fetch and parse a remote SKILL.md file from a GitHub repo without installing it. Shows the frontmatter (name, description, tags) and markdown body ... 3/5 flowforge_send_event Send an event into FlowForge. Any function with trigger_type='event' and a matching trigger_value will fan out into a new run. Returns the event id... 2/5 flowforge_set_agent_skills Set the complete list of skills enabled for an agent. Enabled skills have their SKILL.md content injected into the agent's context at runtime. Repl... 2/5 flowforge_set_function_skills Set the complete list of skills enabled for a function. Enabled skills have their SKILL.md content injected into the agent's system prompt at each ... 2/5 flowforge_update_agent Update fields on an existing agent — name, current status, model, system prompt, or active flag. Only provided fields are changed; omitted fields k... 2/5 flowforge_update_function Update fields on an existing workflow function. Works for both worker and inline functions — only provided fields change. Note: worker-only fields ... 2/5 flowforge_update_task Update fields on an existing task — change status (moves the card between columns), reassign, retitle, or re-prioritize. Only provided fields are c... 2/5 flowforge_update_tool Update fields on an existing AI tool — code, webhook config, approval settings, or active flag. Only provided fields are changed; omitted fields ke... 3/5 flowforge_cancel_run Cancel a run that is currently pending or running. Irreversible — the run stops where it is and ends in 'cancelled' state. Use this to abort stuck ... 4/5 flowforge_delete_credential Delete a stored credential by name. Irreversible — the encrypted value is wiped and cannot be undone. Any webhook tool referencing {{credential:nam... 4/5 flowforge_delete_function Soft-delete a workflow function. The row is marked deleted and hidden from flowforge_list_functions, existing runs are preserved so run history sti... 4/5 flowforge_delete_task Delete a task from the board. Irreversible — the task and its comments are removed and cannot be undone. If you only want to hide the task, move it... 4/5 flowforge_delete_tool Soft-delete an AI tool by name. The row is retained so in-flight runs that already loaded the tool can finish, but it is hidden from all user-facin... 4/5 flowforge_reject_tool_call Reject a pending tool-call approval. Irreversible for the current run — the run's step fails with the supplied reason and moves on according to its... 4/5 flowforge_replay_run Re-run a workflow from the very beginning with the same input event, creating a brand-new run record. All steps execute again — prior step results ... 3/5 flowforge_retry_run Retry a failed run, resuming from the step that failed. Completed steps are memoized and NOT re-executed — the run picks up where it left off. Use ... 4/5 The Flowforge MCP server exposes 49 tools across 4 categories: Read, Write, Destructive, Execute.
Use Intercept, the open-source MCP proxy. Write YAML rules for each tool — rate limits, argument validation, or deny rules — then run Intercept in front of the Flowforge server.
Flowforge tools are categorised as Read (23), Write (18), Destructive (6), Execute (2). Each category has a recommended default policy.
Open source. One binary. Zero dependencies.
npx -y @policylayer/intercept