Massdriver

Creates a new ABAC policy on a group. Policies control what actions group members can perform, optionally scoped by attribute conditions.

Creates a new project in the Massdriver organization.

Imports (creates) a resource by providing its type and payload data. The payload must conform to the resource type's schema — use get_resource_type to inspect it and its import instructions first.

Creates a sharing grant on a resource, optionally restricting recipients by attribute conditions.

Schedules a teardown of every instance in the environment in reverse dependency order. The environment shell stays in place so it can be redeployed; use delete_environment to remove the empty environment afterwards. Cancels any in-flight environment deployment and enqueues a fresh decommission wave. Returns as soon as the wave is enqueued — the infrastructure changes happen asynchronously. Blocked when the environment has decommission protection enabled; disable it via update_environment first.

Deletes a custom attribute definition from the organization.

Deletes an environment. All instances in the environment must be decommissioned before deletion.

Deletes an access control group.

Deletes an OCI repository.

Deletes an OCI repository sharing grant by ID.

Deletes an ABAC policy.

Deletes a project. All environments in the project must be empty before deletion.

Deletes a resource by ID.

Deletes a sharing grant by ID.

Deletes a service account.

Schedules a deployment of every instance in the environment in dependency order. Cancels any in-flight environment deployment and enqueues a fresh provision wave. Returns as soon as the wave is enqueued — the infrastructure changes happen asynchronously.

Evaluates multiple permission checks in a single request (up to 10).

Evaluates whether the current caller is allowed to perform an action on a specific entity.

Returns a human-readable explanation of what a policy configuration would permit or deny.

Exports a resource with unmasked payload data. This action is audit-logged.

Forks a new environment from an existing parent environment within the same project, copying the parent's component configuration into the new environment. Requires `parent_id`, `id`, and `name`. The copy toggles control what carries over from the parent: `copy_secrets` (each component's secret values), `copy_remote_references` (each component's remote resource references), and `copy_environment_defaults` (the parent's default resource connections). All default to false.

Gets a specific audit log entry by ID.

Gets a specific bundle by ID. Supports version constraints like 'aws-aurora-postgres@1.2.3', 'aws-aurora-postgres@~1', or 'aws-aurora-postgres@latest'. To discover which bundles exist, use `list_oci_repos` with `artifact_type` set to 'BUNDLE'. To list the available versions of a bundle, use `get_oci_repo` — the published version tags live on the bundle's OCI repository. Returns resources (outputs the bundle produces) and dependencies (inputs it requires), each tagged with a resourceType — components connect when a producer's resource type matches a consumer's dependency type.

Gets a specific component by ID, including its configuration and links. Each link carries `fromVersionConstraint` and `toVersionConstraint` — the tilde version ranges of the components it routes between (`~1` covers 1.x, `~0.4` covers 0.4.x) — which decide the environments the link actually applies in. Use list_environment_links to see which links are in effect for a given environment.

Gets a specific deployment by ID, including its status, action, elapsed time, and associated instance.

Gets the logs for a specific deployment. By default returns a snapshot of the logs so far. Output is capped to the most recent 40KB — a leading note reports when older content was elided; use `tail_lines` to adjust (-1 for everything). Set follow=true to block until the deployment reaches a terminal status (COMPLETED, FAILED, ABORTED, or REJECTED), then return the final status plus the logs — use this after create_deployment or approve_deployment to deploy and see the result in a single call. If follow times out before the deployment finishes, the response says so; call again with follow=true …

Gets a specific environment by its full identifier (e.g., 'myproject-staging'), including its default resource bindings (the `defaults` field — the default resource bound per type for instances in this environment).

Gets a specific access control group by ID (id, name, description, role, timestamps). Members, service accounts, and policies are not included here — use list_group_members, list_group_service_accounts, list_group_invitations, and list_group_policies for those.

Gets a specific instance by ID, including its environment, project, and current bundle release. Returns paramsSchema (the JSON Schema for this instance's deploy params, resolved for its pinned bundle version) and params (values from the most recent deployment — empty until first deployed). Also returns dependencies: the instance's incoming connections — the upstream resources wired into its connection slots.

Gets a specific OCI repository by ID, including its published version tags.

Gets the current organization's details (id, name, subscription status, timestamps). Custom attributes and members are not included here — use list_custom_attributes and list_organization_members for those.

Gets the organization's behavior settings. `default_bundle_access` is the access new bundle repositories receive at creation: NONE keeps each new repository restricted until a grant is authored; ALL_PROJECTS auto-creates an org-wide repo:pull grant on each new repository. Requires the organization:manageSettings permission — non-admin tokens will get a forbidden error.

Gets a specific ABAC policy by ID.

Gets the JSON Schema describing valid condition attributes for a given policy action.

Gets a specific project by ID, including its environments.

Gets a specific resource by ID. Payload values are masked; use export_resource for unmasked data.

Gets a resource type — the contract behind Massdriver's connection system — including its full JSON schema, import instructions, and connection orientation (LINK = wired explicitly between instances; ENVIRONMENT_DEFAULT = satisfied automatically by an environment default). The version portion of the ID may be an exact semver ('aws-iam-role@1.2.3'), a range ('aws-iam-role@~1'), a channel ('aws-iam-role@latest'), or omitted entirely (resolves to latest); the returned ID always carries the fully resolved version.

Gets server metadata including version information and available authentication methods.

Gets a specific service account by ID.

Generates a deep link URL into the Massdriver web UI. Supported types: organization, projects, project, environment, instance, bundle, repo_instances.

Gets the currently authenticated identity (user account or service account).

Creates a link between two components in a project's blueprint, connecting a source component's output to a destination component's input slot of the same resource type. from_field/to_field are the named connection slots; their resource types must match (use get_bundle to see a component's resources and dependencies).

Lists alarms across instances, one page at a time. PREFER filtering by `project_id`, `environment_id`, `component_id`, `instance_id`, or `oci_repo_name` to keep the result set focused. Returns up to `page_size` alarms (default 25, max 100) plus a `next_cursor` for the following page. To continue, call again with `cursor` set to the previous `next_cursor`. Do NOT paginate to exhaustion unless the user explicitly asked for every alarm.

Lists all available audit log event types that can be used to filter audit logs.

Lists audit log entries for the organization, newest first, one page at a time. STRONGLY PREFER filtering by `type`, `actor_id`, or `actor_search` — audit logs grow unboundedly. Returns up to `page_size` entries (default 25, max 100) plus a `next_cursor` for the following page. To continue, call again with `cursor` set to the previous `next_cursor`. Do NOT paginate to exhaustion unless the user explicitly asked for the full history.

Lists all components in a project's blueprint.

Lists the organization's custom attribute definitions, one page at a time. Use this to discover which attribute keys are declared (and their scopes and allowed values) before setting attributes on projects/environments/components or writing policy conditions. Returns up to `page_size` attributes (default 25, max 100) plus a `next_cursor` for the following page. To continue, call again with `cursor` set to the previous `next_cursor`.

Lists deployments in the organization, newest first, one page at a time. STRONGLY PREFER filtering by `instance_id`, `status`, or `action` — unfiltered lists span the entire org history. Returns up to `page_size` deployments (default 25, max 100) plus a `next_cursor` for the following page. To continue, call again with `cursor` set to the previous `next_cursor`. Do NOT paginate to exhaustion unless the user explicitly asked for every deployment.

Lists the blueprint links in effect in an environment given the component versions its instances actually run. Where a project's links list every link in the architecture, this is the subset applying to this environment: a link applies only where the versions at both ends fall inside its version range (from_version_constraint / to_version_constraint, as tilde constraints like '~1'). A link whose source or destination has no instance in this environment does not appear. Returns the whole list (not paginated).

Lists required dependency inputs across an environment's instances that nothing fills — no blueprint link, no per-instance remote reference, and no environment default of the matching resource type. Each entry is one input a deploy would block on (optional inputs are never included), so use this to answer "why won't this environment deploy?". To fix an entry: wire a resource into the slot (link_components or set_remote_reference) or bind an environment default of the listed resource type (set_environment_default). Returns the whole list (not paginated), sorted by instance identifier then input…

Lists environments in the organization, one page at a time. PREFER filtering by `project_id` — unfiltered lists span every project. Returns up to `page_size` environments (default 25, max 100) plus a `next_cursor` for the following page. To continue, call again with `cursor` set to the previous `next_cursor`. Do NOT paginate to exhaustion unless the user explicitly asked for every environment.

Lists pending email invitations to a group (users invited but not yet joined), one page at a time. Returns up to `page_size` invitations (default 25, max 100) plus a `next_cursor` for the following page. To continue, call again with `cursor` set to the previous `next_cursor`.

Lists the users who are members of a group, one page at a time. Returns up to `page_size` members (default 25, max 100) plus a `next_cursor` for the following page. To continue, call again with `cursor` set to the previous `next_cursor`.

Lists the ABAC policies attached to a group, one page at a time. Returns up to `page_size` policies (default 25, max 100) plus a `next_cursor` for the following page. To continue, call again with `cursor` set to the previous `next_cursor`.

Lists the service accounts that are members of a group, one page at a time. Returns up to `page_size` service accounts (default 25, max 100) plus a `next_cursor` for the following page. To continue, call again with `cursor` set to the previous `next_cursor`.

Lists access control groups in the organization, one page at a time. Returns up to `page_size` groups (default 25, max 100) plus a `next_cursor` for the following page. To continue, call again with `cursor` set to the previous `next_cursor`. Stop once you have what you need — do NOT paginate to exhaustion unless the user explicitly asked for every group.

Lists instances in the organization, one page at a time. STRONGLY PREFER filtering by `project_id`, `environment_id`, `status`, or `attributes` — unfiltered lists can span thousands of instances. Returns up to `page_size` instances (default 25, max 100) plus a `next_cursor` for the following page. To continue, call again with `cursor` set to the previous `next_cursor`. Do NOT paginate to exhaustion unless the user explicitly asked for every instance.

Lists sharing grants on an OCI repository, one page at a time. Returns up to `page_size` grants (default 25, max 100) plus a `next_cursor` for the following page. To continue, call again with `cursor` set to the previous `next_cursor`.

Lists OCI repositories in the organization, one page at a time. Filter by `artifact_type` to list repositories of a given type (e.g. 'BUNDLE'). PREFER filtering by `search` or `artifact_type` to focus the catalog. Returns up to `page_size` repositories (default 25, max 100) plus a `next_cursor` for the following page. To continue, call again with `cursor` set to the previous `next_cursor`. Do NOT paginate to exhaustion unless the user explicitly asked for every repository.

Lists the members (user accounts) of the current organization, one page at a time. Returns up to `page_size` members (default 25, max 100) plus a `next_cursor` for the following page. To continue, call again with `cursor` set to the previous `next_cursor`. Requires the organization:manageProfile permission — non-admin tokens will get a forbidden error.

Lists all available policy actions that can be used in ABAC policies.

Lists the permitted values for a custom attribute key at a given scope.

Lists all available entity kinds that policies can target.

Lists projects in the Massdriver organization, one page at a time. Returns up to `page_size` projects (default 25, max 100) plus a `next_cursor` for the following page. To continue, call again with `cursor` set to the previous `next_cursor`. Optionally filter with `search` (free-text over name and description), `name` (exact name match), `name_in` (match any of several exact names), or `created_after`/`created_before` (creation time window). Stop once you have what you need — do NOT paginate to exhaustion unless the user explicitly asked for every project.

Lists sharing grants on a resource, one page at a time. Returns up to `page_size` grants (default 25, max 100) plus a `next_cursor` for the following page. To continue, call again with `cursor` set to the previous `next_cursor`.

Lists the instances in an environment that depend on a resource type, one entry per (instance, dependency field) pair. Use it to see what a resource type is used by before changing or removing a resource of that type. Returns the whole list (not paginated).

Lists resources (provisioned or imported), one page at a time. STRONGLY PREFER filtering by `environment_id`, `resource_type`, `origin`, or `search` — unfiltered lists can span thousands of resources across an org. Returns up to `page_size` resources (default 25, max 100) plus a `next_cursor` for the following page. To continue, call again with `cursor` set to the previous `next_cursor`. Do NOT paginate to exhaustion unless the user explicitly asked for every resource.

Lists service accounts in the organization, one page at a time. Returns up to `page_size` accounts (default 25, max 100) plus a `next_cursor` for the following page. To continue, call again with `cursor` set to the previous `next_cursor`. Use `search` to narrow by name when looking for a specific account. Do NOT paginate to exhaustion unless the user explicitly asked for every account.

Break-glass operation that resets a permanently-stuck instance to INITIALIZED, clearing all Terraform/OpenTofu state locks. Active RUNNING, PENDING, and APPROVED deployments are bulk-aborted so a late worker callback cannot walk the instance status back to PROVISIONED. Set `delete_state: true` to ALSO remove the remote IaC state files — this is IRREVERSIBLE: the next deployment provisions from scratch and may duplicate any resources the prior state was tracking. Leave `delete_state` false unless the state is known to be unrecoverable. Use only to recover a genuinely stuck instance.

Runs a fresh PLAN (dry-run preview) against an existing deployment's parameters. This is a read-only preview: it copies the source deployment's params onto a new PLAN deployment and changes nothing on the source deployment, the instance's saved configuration, or any other deployment. The source deployment can be in any status — use it to preview a proposal before approving, replay a completed deployment, or scope out a rollback against an older snapshot. Returns the new PLAN deployment.

Proposes a deployment for approval. Only supports PROVISION and DECOMMISSION actions. The deployment enters PROPOSED status and must be approved or rejected. Both actions need the full parameter set, validated against the instance's params schema (see get_instance.paramsSchema) — `params` is not a partial override. Either pass `params` explicitly, or set `use_latest_params` to true to reuse the instance's current saved configuration.

Rejects a proposed deployment, preventing it from proceeding.

Removes a component from a project's blueprint.

Removes a default resource binding from an environment.

Removes a service account from an access control group.

Removes a user from an access control group.

Removes a secret from an instance.

Removes the remote-reference override from the named connection slot on an instance. The slot reverts to its blueprint link (if any) or the environment default at the next deploy. `field` is a key in the instance bundle's connectionsSchema. The instance must not be in PROVISIONED or FAILED status.

Revokes a pending invitation for a user to join an access control group.

Proposes a rollback to a past deployment's exact state. The source deployment is the historical run to return to and must be a COMPLETED PROVISION. This creates a new PROPOSED PROVISION deployment that snapshots the source's params, connection wiring, bundle version, and release — it does NOT apply anything on its own. The proposal goes through the normal review flow: preview it with plan_deployment, then approve_deployment to apply (pinning the instance to the source's exact configuration) or reject_deployment to discard.

Sets a component's pixel position on the project's visual canvas. `x` is the horizontal offset and `y` the vertical offset, both in pixels from the canvas origin. This is a purely cosmetic layout change and does not affect the component's configuration or deployments.

Sets a resource as the default of its type for an environment — new instances bind to it for that dependency type. The resource must first be shared to the environment with create_resource_grant (whose recipient_conditions match the environment, or are omitted for all environments), otherwise this fails with "not granted to this environment". Only one default per resource type.

Sets or updates a secret on an instance. Secrets are injected into deployments as environment variables.

Overrides one of an instance's connection slots with a resource from another project (or an imported resource). `field` names the connection slot to bind — a key in the instance bundle's connectionsSchema. `resource_id` is either a UUID (for imported resources) or "instance.field" (for a resource provisioned by another instance). This override takes priority over any blueprint-level link wired into the same slot, and reverts to that link (or the environment default) when removed with remove_remote_reference. The instance must not be in PROVISIONED or FAILED status.

Removes a link between two components in a project's blueprint.

Updates a component's name, description, or configuration attributes.

Updates a custom attribute definition for the organization.

Updates an environment's name, description, custom attributes, decommission protection, or separation of duty. Only the fields you provide are changed.

Updates an existing access control group's name or description.

Updates an instance's version pin.

Updates an OCI repository's attributes.

Updates the organization's behavior settings. Setting `default_bundle_access` to ALL_PROJECTS auto-creates an org-wide repo:pull grant on each bundle repository created AFTERWARDS (a normal, revocable grant row); NONE keeps each new repository restricted until a grant is authored. Changing it never affects access to existing repositories. Requires the organization:manageSettings permission — non-admin tokens will get a forbidden error.

Updates an existing ABAC policy's effect, actions, or conditions.

Updates a project's name or description.

Updates an existing resource by ID.

Updates a service account's name or description.