WebRun Browser Automation
Server Details
Run multi-step tasks in a real Chrome browser: persistent environments, live view, human takeover.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
Available Tools
21 toolsbrowser_taskRun browser taskADestructiveInspect
Execute a browser automation task in a real Chrome browser running in a WebRun cloud environment (docs.webrun.ai). Creates a session, runs the task, and auto-terminates. Best for simple one-off tasks that no saved workflow covers. May navigate, fill forms, and submit data on third-party websites as the task requires. Do NOT use this to run or test a saved workflow — use trigger_workflow instead: only a workflow run carries the workflow's own rules, tracking and memory, so a session run will behave differently. If the user says "run it", "run it once", "test it" or "try it" about a workflow, that means trigger_workflow, not this tool.
| Name | Required | Description | Default |
|---|---|---|---|
| files | No | Optional file IDs to attach (from /files/upload). Max 5 files. | |
| model | No | Optional model name or profile key (from global config). Falls back to the configured default. | |
| proxy | No | Proxy configuration. WebRun-managed: { source: "WebRun", country: "GB" }. Custom: { source: "custom", type: "http"|"socks", host, port, username?, password? }. Omit for no proxy. Social/messaging automation (WhatsApp, Telegram, Instagram, Facebook, X, LinkedIn, TikTok): prefer country = the country the user is in right now — recommend it and confirm the country with them first; a mismatch is the usual cause of refused logins and sessions that log out repeatedly. | |
| debugC | No | Enable debug mode on the instance (default: false) | |
| prompt | Yes | Task description in natural language | |
| secrets | No | Domain-matched secrets [{match, fields}] passed to instance (not stored) | |
| webhook | No | Webhook configuration for task completion notification | |
| policyId | No | Policy ID to apply automation guardrails (domain restrictions, capability controls, LLM role). Optional. | |
| timezone | No | IANA timezone name for the session, e.g. "America/New_York", "Europe/London", "Asia/Tokyo". Date/time-sensitive instructions (e.g. "tomorrow morning", "today", "in 2 hours") are interpreted in this timezone. Defaults to "UTC" when omitted. | |
| outputType | No | Response format (default: text) | |
| maxDuration | No | Max duration in minutes (default: 20, max: 60) | |
| startingUrl | No | Optional starting URL | |
| outputSchema | No | JSON Schema for structured output (required if outputType is structured_json) | |
| environmentId | No | Environment ID for persistent profile session. Use list_environments to find available IDs. Without this, a disposable instance is used. | |
| reach_out_mode | No | Controls proactive chat-platform messages (Telegram/WhatsApp/Slack/Discord/Teams) to bot users on the same environment. Default: "off" — no messages are sent unless this is set explicitly. "guardrail_only" forwards guardrail prompts (CAPTCHA/2FA/verification) to chat when the API caller is offline. "full" also forwards the task result on completion. Each bot user additionally filters by their own reachOutMode preference. |
Output Schema
| Name | Required | Description |
|---|---|---|
| data | No | Task output payload (instance-authored shape) |
| type | No | Result type, e.g. 'task_completed', 'task_failed', 'guardrail_trigger' |
| error | No | |
| status | No | Present on guardrail results: 'awaiting_input' |
| taskId | No | |
| message | No | |
| pending | No | True when the task is still running — poll get_task_status |
| success | No | |
| sessionId | No | |
| environment | No | |
| liveViewURL | No | Page for watching the run live, present while it is still running or awaiting input. The only URL here that is safe to show a user or open in a browser. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond annotations, the description discloses that the tool creates a session, auto-terminates, may navigate and fill forms on third-party sites, and may submit data. It also warns that a session run behaves differently from a workflow run. This aligns with and enriches the destructiveHint and openWorldHint annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the core action and lifecycle, then provides usage guidance and an explicit sibling distinction. Every sentence contributes behavioral context, selection criteria, or an important warning. There is no filler or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a complex tool with 15 parameters, the description covers purpose, environment, lifecycle, side effects, and when not to use it. The exhaustive parameter schema handles parameter-specific details, and the sibling context is explicitly addressed. Nothing essential is missing for an agent to invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 100% parameter description coverage, so the schema itself fully documents all 15 parameters. The description adds no additional parameter-level semantics, but it does not need to. This matches the baseline of 3 for a high-coverage schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource: executing a browser automation task in a real Chrome browser in a WebRun cloud environment. It clearly distinguishes this from trigger_workflow by describing the session lifecycle and one-off task scope. The agent can immediately tell what the tool does and how it differs from siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly says this tool is best for simple one-off tasks not covered by a saved workflow. It names trigger_workflow as the alternative and even maps natural-language phrases like 'run it' or 'test it' to the correct sibling. This is unusually strong routing guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
create_agentCreate scheduled agentAInspect
Create a scheduled agent — a recurring or one-time automation that runs on a timer in a real Chrome browser. Two modes. WORKFLOW MODE: pass workflowId plus a schedule — the platform copies everything else (prompt, starting URL, output contract, model, proxy, policy, files) from the workflow and bakes your variables into the prompt; results and memory stay centralised on the workflow. STANDALONE MODE: omit workflowId and provide name, prompt (a Goal / Ground rules / Stages / Output browsing runbook — see the prompt field description), and a schedule; the connection's environment is used automatically. Ask the user only what it should do and when it should run, in plain language — pick sensible defaults for everything else and state them; never ask about environments or technical settings. Results are delivered to your connected chat and appear in session history.
| Name | Required | Description | Default |
|---|---|---|---|
| name | No | Agent name. Required standalone; defaults to the workflow title in workflow mode. | |
| proxy | No | STANDALONE MODE (workflow mode inherits the workflow proxy instead): Proxy for runs. {source:"WebRun", country?} or {source:"custom", type:"http"|"socks", host, port, username?, password?}. Custom passwords are encrypted at rest and never returned. Social/messaging workflows (WhatsApp, Telegram, Instagram, Facebook, X, LinkedIn, TikTok): set country to the country the user is in right now — recommend it and confirm the country with them first; a mismatch is the usual cause of refused logins and sessions that log out repeatedly, and a scheduled workflow re-hits it every run, so keep the country stable once set. | |
| memory | No | STANDALONE MODE: the agent's private notebook, shown to it every run and updated automatically after each run. Seed ONLY durable facts the next run must know (target descriptions, preferences, known state) — one short line each. Task steps belong in prompt, not here. Usually best left empty. | |
| prompt | No | STANDALONE MODE (required there): The task the browser agent runs, written as a BROWSING RUNBOOK. Structure it as: `Goal:` — one sentence naming the outcome. `Ground rules (every stage, every turn):` — bullet invariants when the task needs them, e.g. work one item at a time — never batch; only record a figure you can read on screen this turn — if it is not shown record it as "not stated", never estimate; keep a running tally and restate it every turn ("captured C items · written R rows"). Then `Stage N — <Site name> (<https://url>)` — one section per website or phase, listing the concrete steps to take in the browser (open/navigate, click, read, capture, compare, flag) in the order a person would do them, each stage ending with `Done when: <verifiable completion condition>`. Finish with `Output —` stating exactly what to produce or deliver once the final tally is met, including what to say when there is no data (never fabricate a row). When a stage delivers per-recipient (message/email each customer), state the MATCHING RULE in that stage — the identifier shared by the source record and the destination recipient (e.g. the customer name exactly as written in the source, matched against the contact name) — and the no-match branch: skip it and report it, never deliver to a similarly-named near-match. Write the user's CONCRETE values (group names, URLs, numbers) directly into the text; use {{variables}} ONLY when the user explicitly wants a reusable template whose inputs change per run. A short single-site task can be just a Goal plus its steps. PURE TASK ONLY — never write memory bookkeeping into the prompt (no "check memory", "record in memory", "store in memory" steps): tracking is authored in memoryContract and WebRun applies it to every run automatically. | |
| schedule | Yes | When the agent fires. Required. | |
| expiresAt | No | ISO 8601 date-time after which the agent auto-pauses (recurring schedules). | |
| variables | No | WORKFLOW MODE, and only when the workflow's prompt actually contains {{variables}}: values for them, BAKED IN at deploy and reused every run (stored variableValues defaults fill gaps). Every template variable must be covered — an unattended agent cannot ask later. Workflows with concrete prompts need nothing here. | |
| outputType | No | STANDALONE MODE: output contract (same rules as create_workflow). | |
| workflowId | No | WORKFLOW MODE: 24-hex id of the workflow to deploy (from list_workflows). The prompt, starting URL, output contract, model, proxy, policy, and files are all copied from it. | |
| startingUrl | No | STANDALONE MODE: page Chrome opens at the start of each run. | |
| outputSchema | No | STANDALONE MODE: JSON Schema object (structured) or column-name array (structured_csv). | |
| environmentId | No | STANDALONE MODE, rarely needed — OMIT it: the connection-bound environment (or your only one) is applied automatically; never ask the user to choose. Workflow mode always uses the workflow's deployed environment. |
Output Schema
| Name | Required | Description |
|---|---|---|
| mode | Yes | |
| name | Yes | |
| notes | No | |
| agentId | Yes | |
| success | Yes | |
| schedule | No | Humanized schedule |
| timezone | No | |
| workflow | No | Present in workflow mode: the workflow this agent was deployed from |
| nextRunAt | No | ISO 8601 timestamp of the first fire |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses significant behavioral traits beyond the annotations: the platform copies workflow settings, bakes variables into the prompt, results are delivered to the connected chat and session history, memory is automatically updated, and the schedule timezone also drives the browser session. It also warns about proxy country mismatch causing login issues. These details are not present in the annotations and greatly enhance understanding.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is long but well-structured, with clear sections for modes and parameter-specific guidance. Every sentence contributes value, and the organization makes the complexity navigable. It is appropriately detailed for a tool this complex, though a slightly more compact format could be imagined.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (12 parameters, nested objects, two modes), the description is remarkably complete. It covers the core behavior, user interaction guidelines, prompt construction, proxy nuances, memory rules, and output delivery. The presence of an output schema and comprehensive parameter descriptions further bolster completeness. Nothing essential is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Although schema_description_coverage is 100%, the description adds substantial meaning beyond the schema. For example, it explains how to structure a prompt as a browsing runbook (Goal, Ground rules, Stages, Output), provides rules for memory seeding, clarifies proxy modes and country recommendations, and specifies when variables are required. This goes far beyond what the schema descriptions offer.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool creates a scheduled agent, a recurring or one-time automation running in a real Chrome browser. It explicitly distinguishes two modes (workflow mode and standalone mode), which differentiates it from sibling tools like create_workflow and list_agents. The verb and resource are specific and unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit guidance on when to use each mode: use workflowId to deploy a workflow, or omit it for standalone. It also instructs the agent on how to interact with the user ('Ask the user only what it should do and when it should run'), what to avoid (never ask about environments or technical settings), and even details proxy country recommendations for social/messaging workflows. This is comprehensive and actionable.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
create_sessionCreate browser sessionADestructiveInspect
Create a persistent session in a real Chrome browser running in a WebRun cloud environment (docs.webrun.ai), for multi-step interactive work. Returns a sessionId for subsequent commands. With an initial task the browser may act on third-party websites immediately. Do NOT use this to run or test a saved workflow — use trigger_workflow instead: only a workflow run carries the workflow's own rules, tracking and memory, so a session run will behave differently.
| Name | Required | Description | Default |
|---|---|---|---|
| mode | No | Session mode (default: default) | |
| task | No | Initial task configuration | |
| model | No | Optional model name or profile key (from global config). Falls back to the configured default. | |
| proxy | No | Proxy configuration. WebRun-managed: { source: "WebRun", country: "GB" }. Custom: { source: "custom", type: "http"|"socks", host, port, username?, password? }. Omit for no proxy. Social/messaging automation (WhatsApp, Telegram, Instagram, Facebook, X, LinkedIn, TikTok): prefer country = the country the user is in right now — recommend it and confirm the country with them first; a mismatch is the usual cause of refused logins and sessions that log out repeatedly. | |
| debugC | No | Enable debug mode on the instance (default: false) | |
| policyId | No | Policy ID to apply automation guardrails (domain restrictions, capability controls, LLM role). Optional. | |
| timezone | No | IANA timezone name for the session, e.g. "America/New_York", "Europe/London", "Asia/Tokyo". Date/time-sensitive instructions (e.g. "tomorrow morning", "today", "in 2 hours") are interpreted in this timezone. Defaults to "UTC" when omitted. | |
| environmentId | No | Environment ID for persistent profile session. Use list_environments to find available IDs. Without this, a disposable instance is used. | |
| reach_out_mode | No | Controls proactive chat-platform messages (Telegram/WhatsApp/Slack/Discord/Teams) to bot users on the same environment. Default: "off" — no messages are sent unless this is set explicitly. "guardrail_only" forwards guardrail prompts (CAPTCHA/2FA/verification) to chat when the API caller is offline. "full" also forwards the task result on completion. Each bot user additionally filters by their own reachOutMode preference. |
Output Schema
| Name | Required | Description |
|---|---|---|
| taskId | No | Task ID when an initial task was provided |
| message | No | |
| sessionId | Yes | Session ID for subsequent commands |
| streaming | No | Endpoints for watching the running browser. Only liveViewURL is a web page — the other two are machine endpoints on a non-standard port. |
| environment | No | Environment this session is bound to, when one was requested |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description goes beyond annotations by noting the session runs in a "real Chrome browser" in a cloud environment, returns a sessionId, and that "with an initial task the browser may act on third-party websites immediately." This complements the annotations (readOnlyHint=false, openWorldHint=true, destructiveHint=true). It does not contradict them. It could still mention that persistent sessions may need explicit cleanup/termination, but most safety-critical traits are disclosed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Every sentence earns its place: core function, return value, unexpected side effect, and the caution about trigger_workflow. The sentences are front-loaded and concise, with no filler or redundancy. The more involved exclusion sentence is still clearly structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 9 parameters, rich nested objects, a full input schema, annotations, and an output schema, the description supplies the essential decision-making context: what a session is, that it is stateful, that it may take real-world actions, and that it is not a workflow runner. Nothing critical needed for selecting or invoking the tool appears to be missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the input schema already documents each parameter. The prose does not need to repeat parameter details, and it does not add much semantics beyond what the schema provides. The schema itself already explains key nuances like proxy levels and timezone interpretation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific action and object — "Create a persistent session" — and clarifies the resource as "a real Chrome browser running in a WebRun cloud environment" for "multi-step interactive work." It also explicitly separates this from running a saved workflow, naming the sibling trigger_workflow as the alternative, which removes ambiguity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It provides explicit when-to-use guidance ("for multi-step interactive work") and an explicit when-not-to-use rule with a named alternative: "Do NOT use this to run or test a saved workflow — use trigger_workflow instead." It also explains why the alternative is required: only a workflow run carries the workflow's rules, tracking, and memory, and a session run behaves differently.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
create_workflowCreate workflowAInspect
Create a new saved workflow. READINESS BAR: if you could not execute the prompt yourself as a human in a browser — which site, which records, which fields, delivered where, matched to each recipient how — it is not ready; first collect the missing business facts from the user (see the TASK INTERVIEW in the server instructions), then create. Requires title and promptTemplate — write the prompt as a browsing runbook following the Goal / Ground rules / Stages / Output contract in the promptTemplate field description. For tasks that must handle each new item exactly once (new messages, forward once, skip seen), memoryContract is REQUIRED — three plain-English fields addressed to the agent: groundRules, memoryInstruction and itemIdentity (see the field descriptions); the platform wires the tracking itself — never write memory or tracking steps into the prompt. Created in the connection's environment automatically — omit environmentId and never ask the user to choose one. Write the user's concrete values (names, URLs, numbers) directly into the prompt; use {{variables}} ONLY when the user explicitly wants a reusable template with per-run inputs. Everything else is optional and defaults sensibly — do not quiz the user about settings. A supplied schedule is stored as a setting only — the workflow does not run on a timer until deployed via create_agent. To run or TEST the workflow, use trigger_workflow ONLY — never browser_task or create_session.
| Name | Required | Description | Default |
|---|---|---|---|
| flow | No | Dashboard flow diagram: { trigger: {kind, phrase}, steps: [{ primary: {label, domain}, verb }] }. | |
| model | No | Model profile key. Omit for the account default. | |
| proxy | No | Proxy for runs. {source:"WebRun", country?} or {source:"custom", type:"http"|"socks", host, port, username?, password?}. Custom passwords are encrypted at rest and never returned. Social/messaging workflows (WhatsApp, Telegram, Instagram, Facebook, X, LinkedIn, TikTok): set country to the country the user is in right now — recommend it and confirm the country with them first; a mismatch is the usual cause of refused logins and sessions that log out repeatedly, and a scheduled workflow re-hits it every run, so keep the country stable once set. | |
| title | Yes | Workflow title (shown on the dashboard). | |
| memory | No | The agent's private notebook: shown to it at the start of every run, updated automatically after each run. Seed it ONLY with durable facts the next run must already know — the exact description of a target item (e.g. the specific picture to match), user preferences, known starting state — one short line per fact. Do NOT put task steps here (promptTemplate) or tracking rules here (memoryContract). Most workflows need no seed at all: the agent builds its own notebook as it runs. | |
| skills | No | Workflow-scoped skill entries (dashboard shape). | |
| trigger | No | How the workflow is meant to be invoked (informational — see notes). Defaults to {type:'manual', source:'manual'}. | |
| listType | No | Advanced — defaults automatically ('monitor' when memoryContract is supplied); leave unset. | |
| schedule | No | Saved schedule setting. NOTE: record-only — the workflow does NOT run on a timer until deployed as a scheduled agent (dashboard or Telegram bot). | |
| timezone | No | IANA timezone for runs of this workflow (e.g. "America/New_York"). | |
| department | No | Free-text department label (e.g. "inventory"). | |
| outputType | No | Output contract: 'text' (default), 'structured' (JSON matching outputSchema), 'structured_csv' (rows for the outputSchema column names). | |
| destination | No | Result destination chip: { type, sub, description }. Types seen: 'custom-api', 'slack', 'sheets', 'email', 'messaging', 'telegram', 'crm'. | |
| startingUrl | No | Page Chrome opens at the start of each run. Omit to let the prompt decide. | |
| useCaseTags | No | Categorisation tags. | |
| fileDeferred | No | Dashboard flag: file selection deferred to run time. | |
| outputSchema | No | JSON Schema object (outputType "structured") or array of column-name strings (outputType "structured_csv"). | |
| reachOutMode | No | Proactive-chat policy for runs: 'off', 'guardrail_only', or 'full'. Omit (or pass null) to inherit the account default (MCP-initiated runs treat inherit as 'off'). | |
| wizardPreset | No | Dashboard wizard preset: { technology, useCases[], destination, destinationSub }. | |
| environmentId | No | Rarely needed — OMIT it: the connection's bound environment (or your only environment) is applied automatically. Pass only when the user explicitly names a different environment. Never ask the user to choose. | |
| memoryEnabled | No | Persist per-workflow agent memory across runs (default true). | |
| publicDraftId | No | Dashboard public-draft correlation id. | |
| requiredFiles | No | Per-run file attachments. Each row may name its own environmentId; ownership is enforced per-file at dispatch. | |
| roiHourlyRate | No | Hourly rate for the ROI card. | |
| triggerPhrase | No | Natural-language phrase that invokes this workflow in chat. | |
| memoryContract | No | How this workflow should behave and what it must remember between runs. REQUIRED whenever the task handles each thing once — new messages, forward once, skip anything already done. Write all three fields in plain English, addressed to the agent; the platform wires the tracking itself. Never write any of this into the prompt: the prompt says what to do, this says how to do it consistently. To explicitly disable tracking for a task that looks like it needs it, pass {mode:'none'}. | |
| policyOptedOut | No | Opt this workflow out of the environment's default policy. | |
| promptTemplate | Yes | The task the browser agent runs, written as a BROWSING RUNBOOK. Structure it as: `Goal:` — one sentence naming the outcome. `Ground rules (every stage, every turn):` — bullet invariants when the task needs them, e.g. work one item at a time — never batch; only record a figure you can read on screen this turn — if it is not shown record it as "not stated", never estimate; keep a running tally and restate it every turn ("captured C items · written R rows"). Then `Stage N — <Site name> (<https://url>)` — one section per website or phase, listing the concrete steps to take in the browser (open/navigate, click, read, capture, compare, flag) in the order a person would do them, each stage ending with `Done when: <verifiable completion condition>`. Finish with `Output —` stating exactly what to produce or deliver once the final tally is met, including what to say when there is no data (never fabricate a row). When a stage delivers per-recipient (message/email each customer), state the MATCHING RULE in that stage — the identifier shared by the source record and the destination recipient (e.g. the customer name exactly as written in the source, matched against the contact name) — and the no-match branch: skip it and report it, never deliver to a similarly-named near-match. Write the user's CONCRETE values (group names, URLs, numbers) directly into the text; use {{variables}} ONLY when the user explicitly wants a reusable template whose inputs change per run. A short single-site task can be just a Goal plus its steps. PURE TASK ONLY — never write memory bookkeeping into the prompt (no "check memory", "record in memory", "store in memory" steps): tracking is authored in memoryContract and WebRun applies it to every run automatically. | |
| refineMessages | No | Dashboard builder refinement thread rows: [{ role, content }]. | |
| variableValues | No | ONLY for explicitly dynamic workflows: default values for {{variables}}, keyed by variable name. NOTE: applied only when triggering via MCP trigger_workflow (merged under caller-supplied variables); REST /trigger and bot triggers ignore this field. | |
| compatibleTools | No | Sites/tools the workflow uses: [{ name, loginUrl, domain, role }]. | |
| conciergeNotify | No | Where the concierge announces results (e.g. 'Telegram', 'Slack', 'WhatsApp', 'Microsoft Teams', 'concierge'). | |
| workListEnabled | No | Advanced — set automatically when memoryContract is supplied; leave unset. | |
| deployedPolicyId | No | Policy id to run under (must be owned by you). | |
| orchestrateFirst | No | Discovery mode: one run gathers the WHOLE work list up front, later runs claim one item each. | |
| shortDescription | No | One-line summary shown in workflow lists. | |
| roiMinutesPerTask | No | Minutes saved per run (dashboard ROI card). | |
| templateVariables | No | ONLY for explicitly dynamic workflows (the user asked for a reusable template): metadata for the {{variables}} used in promptTemplate (drives the dashboard fill-in UI). Omit entirely when the prompt carries concrete values. |
Output Schema
| Name | Required | Description |
|---|---|---|
| slug | Yes | |
| notes | No | Caveats the caller should relay (e.g. the schedule is record-only) |
| title | Yes | |
| success | Yes | |
| nextStep | No | How to run or test this workflow (always trigger_workflow) |
| workflowId | Yes | |
| environment | No | |
| memoryContract | No | Echo of the stored tracking contract (the three authored fields) — absent when the workflow has none |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations provide minimal behavioral hints (all false), so the description must fully disclose behavior. It explains that environment is auto-applied, schedules are record-only (no timer until deployed), tracking is wired automatically, and variable values are only applied via MCP trigger. It also warns about proxy country concerns for social/messaging workflows. No contradictions exist.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is long, but each section earns its place given the tool's complexity (38 params). The essential decision point (readiness bar) is front-loaded, and later sections are clearly structured with labels like 'READINESS BAR' and 'To run or TEST.' Slight redundancy (repeating the {{variables}} guidance in promptTemplate and variableValues) but overall efficient for the stakes.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers the full lifecycle: prerequisites (collect facts), required fields, prompt authoring pattern, memory contract necessity, schedule semantics, deployment path (through create_agent), and testing route (trigger_workflow). It also gives guidance on optional parameters like proxy, skills, and variable handling. The output schema is provided separately, so return format is complete. Nothing critical is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema has 100% description coverage, but the tool description adds richness beyond them: for promptTemplate it gives the runbook structure (Goal/Ground rules/Stages/Output), for memoryContract it explains when required and how to write the three fields, for proxy it gives WebRun vs custom and country guidance, and for environmentId it instructs to omit. This is decisive, actionable parameter guidance.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool creates a saved workflow, lists required fields, and frames the action with a readiness bar. It distinguishes from sibling tools by naming trigger_workflow (to run/test), create_agent (to deploy), and browser_task/session (to execute) as alternatives. This removes ambiguity about the tool's core function.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states 'To run or TEST the workflow, use trigger_workflow ONLY — never browser_task or create_session.' It also specifies when memoryContract is required ('for tasks that must handle each new item exactly once') and when to omit IDs (environmentId, schedule). The description consistently provides concrete conditions for choosing this tool over others.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_task_statusGet task statusARead-onlyIdempotentInspect
Check the status of a task previously started in a browser session. Use to poll for completion or detect guardrails. Read-only: reports on the task without affecting it.
| Name | Required | Description | Default |
|---|---|---|---|
| taskId | Yes | Task ID to check | |
| sessionId | Yes | Session ID |
Output Schema
| Name | Required | Description |
|---|---|---|
| data | No | Task output payload when completed (instance-authored shape) |
| type | No | Raw result type when the task finished |
| status | Yes | Task/session state: 'completed', 'failed', 'awaiting_input', 'pending', 'active', 'paused', 'orphaned', or 'not_found' |
| taskId | No | |
| message | No | |
| sessionId | No | |
| liveViewURL | No | Page for watching the run live, present while it is still running or awaiting input. The only URL here that is safe to show a user or open in a browser. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already include readOnlyHint=true and idempotentHint=true, which the description reinforces with 'Read-only: reports on the task without affecting it.' The description adds behavioral nuance by mentioning 'poll for completion' and 'detect guardrails,' which are not in the annotations. It does not contradict the annotations and adds useful context beyond what structured fields provide.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with no filler. It front-loads the core purpose and then adds the primary use cases and read-only nature. Every sentence contributes value, and it is appropriately sized for a simple polling tool.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the presence of an output schema (which documents return values), the low complexity, and straightforward parameters, the description is complete. It covers the purpose, usage context, and read-only nature. An agent has everything needed to decide when to call this tool and what to expect.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema covers 100% of the parameters with descriptions for both taskId and sessionId. The tool description does not add any parameter-specific details beyond the schema, so the baseline score of 3 applies. It neither enhances nor detracts from the schema's clarity.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Check'), a clear resource ('status of a task'), and adds context ('previously started in a browser session'). It also signals the two main uses (poll for completion, detect guardrails), which clearly distinguishes it from action-oriented siblings like pause_session_task or stop_session_task. The purpose is unmistakable.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly states when to use the tool: 'Use to poll for completion or detect guardrails.' It does not explicitly name alternatives or say when not to use it, but given the sibling list, no other tool serves this status-checking function. The guidance is clear enough for an agent to select this tool over mutating actions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_workflowGet workflow detailsARead-onlyIdempotentInspect
Full detail of one workflow: prompt template, {{variables}} and their defaults, trigger + schedule, run settings (starting URL, timezone, model, proxy, output contract, files), memory state, and any pending logins. Identify by workflowId or exact title. Read-only; proxy credentials are masked.
| Name | Required | Description | Default |
|---|---|---|---|
| title | No | Exact workflow title (case-insensitive) — alternative to workflowId | |
| workflowId | No | 24-hex workflow id (from list_workflows or create_workflow) |
Output Schema
| Name | Required | Description |
|---|---|---|
| slug | Yes | |
| notes | No | |
| title | Yes | |
| trigger | No | |
| schedule | No | |
| variables | No | |
| outputType | No | |
| workflowId | Yes | |
| environmentId | No | |
| totalTriggers | No | |
| promptTemplate | Yes | |
| scheduleDescription | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint and idempotentHint. The description adds useful behavioral context by noting 'Read-only; proxy credentials are masked' and mentioning 'pending logins,' which go beyond the annotations. No contradictions present.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, coherent sentence front-loaded with the tool's purpose, followed by a short identification note and a safety note. Each phrase adds value with no redundancy or wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only tool with an output schema and good annotations, the description enumerates the key data fields and identification parameters. It lacks an explicit statement that at least one identifier is required, but this is implied by 'Identify by workflowId or exact title,' making it almost complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema descriptions already cover 100% of parameters, including that each is an alternative to the other. The description merely reinforces this with 'Identify by workflowId or exact title,' adding no new semantic detail beyond the schema, so baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states the tool retrieves full detail of exactly one workflow, listing specific contents (prompt template, variables, trigger, settings, etc.). This clearly distinguishes it from sibling tools like list_workflows by focusing on a single workflow.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage by providing identification methods ('Identify by workflowId or exact title') and lists what data is returned, giving clear context for when to use it. However, it does not explicitly compare to alternatives or state when not to use this tool, so it falls short of a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
guardrail_responseAnswer guardrail promptADestructiveInspect
Respond to a guardrail trigger when the browser agent needs human input (credentials, clarification, approval). The response is handed to the live agent, which continues acting on it.
| Name | Required | Description | Default |
|---|---|---|---|
| files | No | Optional file IDs to attach (from /files/upload). Max 5 files. | |
| newState | No | How to continue: 'resume' (default) provides the requested input and continues the task; 'deny' declines the request (response text optional). | |
| response | No | Your response/instructions to the agent. Required when newState is 'resume'. | |
| sessionId | Yes | Session ID |
Output Schema
| Name | Required | Description |
|---|---|---|
| taskId | No | |
| message | No | What happened and what to do next (poll get_task_status) |
| success | Yes | |
| sessionId | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds context about the handoff to the live agent and the purpose of the response, but does not detail side effects beyond what annotations already indicate (destructiveHint=true). Given annotations already signal potential destructiveness, the description provides moderate additional context but lacks depth on consequences.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two concise sentences that front-load the tool's purpose and flow, with no redundant wording.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers the core scenario and outcome, and the presence of an output schema reduces the need to explain return values. It does not explicitly address potential alternatives or prerequisites, but overall it provides sufficient context for a tool of this complexity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already provides thorough descriptions for all four parameters (100% coverage), so the description adds no additional parameter-specific semantics. The description's mention of 'response' aligns with the schema but does not enrich the meaning beyond what is already documented.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'Respond' and the resource 'guardrail trigger', specifying the tool's role in providing human input to the browser agent. It distinguishes from sibling tools by referencing the guardrail/human-input context rather than task execution or session management.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly identifies the trigger condition ('when the browser agent needs human input (credentials, clarification, approval)') and describes the flow ('response is handed to the live agent, which continues acting on it'). However, it does not mention alternative tools or exclusions, so it falls short of fully guiding selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_agentsList scheduled agentsARead-onlyIdempotentInspect
List the account's scheduled agents (cron deployments): schedule, status, next/last run, and whether each is standalone or deployed from a workflow. Scoped to the bound environment when this connection has one; pass scope "all" for every environment. Read-only.
| Name | Required | Description | Default |
|---|---|---|---|
| scope | No | 'environment' (default when bound) lists agents in the bound environment; 'all' lists every agent on the account. |
Output Schema
| Name | Required | Description |
|---|---|---|
| count | Yes | |
| scope | Yes | |
| agents | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already declare readOnlyHint and idempotentHint, and the description adds 'Read-only' to confirm. It also explains what data the tool returns (schedule, status, run times, deployment type) and the scope behavior, which goes beyond the s chema. No contradictions found.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two concise sentences, front-loading the primary function, then adding the key scope nuance and a read-only note. Every sentence contributes value with no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple read-only tool with one optional parameter and an output schema, the description covers all essential aspects: what is listed, what fields are returned, how scope works, and the safety profile. It is fully sufficient for an agent to select and invoke the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema provides a complete description of the scope parameter with 100% coverage. The description essentially restates the same scope information without adding new semantic details. Thus, baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool lists the account's scheduled agents (cron deployments) and enumerates the exact information returned (schedule, status, next/last run, standalone/deployed from workflow). It distinguishes itself from sibling tools like list_workflows and list_environments by focusing on agents.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clarifies when to use this tool by explaining the scope parameter: it is scoped to the bound environment unless scope 'all' is passed. This gives clear context for how to invoke it, though it does not explicitly name alternative tools for different use cases.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_environmentsList environmentsARead-onlyIdempotentInspect
List available browser environments (persistent profiles) for this account. Returns environment IDs needed for persistent sessions in browser_task or create_session. Read-only. NOTE: workflows and agents use the connection's environment automatically — you rarely need this tool for those, and should not ask the user to choose an environment.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| hint | No | |
| count | Yes | |
| environments | Yes | |
| boundEnvironment | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint and idempotentHint, and the description reinforces with 'Read-only'. It adds useful behavioral context about automatic environment usage for workflows/agents and the tool's role in returning environment IDs, going beyond what annotations convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with front-loaded action and purpose; the note about workflows/agents is succinct and valuable.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Output schema is present so return values are covered; no parameters; description provides sufficient usage context and alternatives. It fully addresses the tool's simplicity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
No parameters exist, so schema coverage is complete. Description does not need to explain parameters, and the baseline for zero-param tools is met.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description uses specific verb 'List' with resource 'available browser environments' and clarifies it provides environment IDs for persistent sessions. It clearly distinguishes from sibling tools by noting workflows/agents use the connection's environment automatically.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states when the tool is needed (persistent sessions via browser_task or create_session) and when it isn't (workflows/agents), including instruction not to ask users to choose an environment. This provides clear alternative guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_sessionsList sessionsARead-onlyIdempotentInspect
List all active browser sessions for this account. Read-only.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| count | Yes | |
| sessions | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations, the description adds that only 'active' sessions are returned and scopes to 'this account'. It also repeats 'Read-only' which matches readOnlyHint, adding no contradiction but duplicating annotation info.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single, information-dense sentence that covers purpose, scope, and safety with no fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is simple with no params, and an output schema exists. The description fully covers the tool's purpose and scope; nothing more is needed for an agent to invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so the schema is fully covered. The description adds no parameter information, but none is needed; baseline 4 is appropriate for no-param tools.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('List') and identifies the exact resource ('active browser sessions') with scope ('for this account'). It clearly distinguishes this tool from siblings like list_environments and session lifecycle tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Clear context is provided: use this to list all active sessions. However, no explicit exclusions or alternatives are named, though the sibling tool names imply its role.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_workflowsList workflowsARead-onlyIdempotentInspect
List the user's saved workflows (prompt-templated browser automations, docs.webrun.ai). Shows each workflow's title, schedule, {{variables}}, and run stats. Scoped to the bound environment when this connection has one; pass scope "all" for every environment. Read-only.
| Name | Required | Description | Default |
|---|---|---|---|
| scope | No | 'environment' (default when this connection is bound to one) lists workflows deployed to the bound environment; 'all' lists every workflow on the account. |
Output Schema
| Name | Required | Description |
|---|---|---|
| count | Yes | |
| scope | Yes | |
| workflows | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint and idempotentHint, and the description adds useful behavioral context: it documents what fields are included in the output (title, schedule, variables, run stats) and clarifies the environment-scoping behavior. It does not contradict the annotations; it reinforces 'Read-only' consistency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short sentences deliver a complete description without unnecessary words. The tool's purpose, output content, and scope nuance are packed efficiently, and every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple list tool with one optional parameter and an existing output schema, the description covers the core purpose, the returned fields, the scope semantics, and its read-only nature. Nothing important is missing for the assumed complexity level.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already fully documents the only parameter 'scope' with an enum and explanation (100% coverage). The description adds semantic nuance about the default behavior when a connection is bound to an environment, which enriches the schema description and helps the agent choose the correct value.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'List' and the resource 'the user's saved workflows', with an added definition of workflows as 'prompt-templated browser automations'. It further specifies what is shown (title, schedule, variables, run stats), which distinguishes it from sibling tools like get_workflow (single workflow) or trigger_workflow (execute/run).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context on when to use the tool by explaining the environment scoping and the scope parameter values ('environment' default vs 'all'). It does not explicitly name alternative tools or state when not to use it, but the context is sufficient for a simple read-only reporter.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
pause_agentPause scheduled agentADestructiveInspect
Pause an active scheduled agent — it stops firing until resumed. Get agentId from list_agents.
| Name | Required | Description | Default |
|---|---|---|---|
| agentId | Yes | 24-hex agent id (from list_agents or create_agent) |
Output Schema
| Name | Required | Description |
|---|---|---|
| name | No | |
| status | Yes | |
| agentId | Yes | |
| message | No | |
| success | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already convey destructiveHint and readOnlyHint, so the bar is lower. The description adds useful behavioral context: the agent stops firing until resumed, and the tool is for active agents. It could further disclose edge cases (e.g., already paused agents), but the added behavior description earns credit beyond the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two tight sentences, front-loaded with the core action, and every piece of information (pause, stops firing, resume, agentId source) earns its place. No fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple one-parameter tool with an output schema and clear annotations, the description covers the essentials: purpose, effect, and how to obtain the required ID. It doesn't describe error conditions (e.g., invalid or already-paused agents), but these are not critical for a standard pause operation and the output schema likely covers result details.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% as the single parameter agentId is fully described in the schema, including its format and source. The description's note to 'Get agentId from list_agents' adds little beyond the schema, which already mentions list_agents. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action: 'Pause an active scheduled agent' with a specific verb and resource, and distinguishes it from siblings like resume_agent and pause_session_task by specifying 'scheduled agent' and the behavior 'stops firing until resumed.'
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear context (use on active scheduled agents) and even tells where to get the agentId from list_agents. It does not explicitly mention alternatives or exclusions, but the phrase 'until resumed' implicitly points to resume_agent as the complementary operation.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
pause_session_taskPause session taskADestructiveIdempotentInspect
Pause the task currently running in a browser session. Resume it later with resume_session_task.
| Name | Required | Description | Default |
|---|---|---|---|
| sessionId | Yes | Session ID |
Output Schema
| Name | Required | Description |
|---|---|---|
| action | Yes | The control action that was applied |
| message | Yes | |
| success | Yes | |
| sessionId | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses that the task must be 'currently running' and that it can be 'resume[d] later', adding reversible-behavior context beyond the annotations' readOnly, idempotent, and destructive hints. It does not elaborate on side effects or failure modes, but the annotations already cover basic safety traits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loaded with the action, and contains no filler words. Every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This is a simple one-parameter tool with an output schema present (so no need to explain return values). The description covers the core behavior, the resume path, and the session scoping. It could mention permanent alternatives like stop/terminate, but given the sibling list, the context is reasonably complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema provides 100% coverage for sessionId with a description ('Session ID'), so the baseline is 3. The tool description adds no extra meaning about the parameter or how to obtain it, but it is not required given the schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Pause'), the resource ('task currently running in a browser session'), and differentiates from siblings by naming the complementary tool 'resume_session_task' for resuming later. This makes the tool's purpose unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description says to resume later with resume_session_task, which implies when to use this tool and points to an alternative. It does not explicitly state when not to use it (e.g., for permanent stopping with stop_session_task), so it misses the full when/when-not guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
resume_agentResume scheduled agentADestructiveInspect
Resume a paused scheduled agent — recomputes its next run and reactivates it. A completed work-list agent restarts with a fresh full pass. Refuses if the agent's expiry has passed (extend it on the dashboard first).
| Name | Required | Description | Default |
|---|---|---|---|
| agentId | Yes | 24-hex agent id (from list_agents) |
Output Schema
| Name | Required | Description |
|---|---|---|
| name | No | |
| status | Yes | |
| agentId | Yes | |
| message | No | |
| success | Yes | |
| nextRunAt | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Even though annotations already declare destructiveHint=true, the description adds valuable behavioral context: it recomputes next run, reactivates, restarts with a full pass for completed agents, and refuses if expiration has passed. This goes well beyond the structured annotations and helps the agent anticipate side effects and failure conditions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three sentences, front-loaded with the primary action, and every sentence adds distinct information: main action, special-case behavior, and failure condition. No fluff or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With a single parameter, an output schema, and clear behavioral descriptions covering normal, special-case, and refusal scenarios, the description is complete for the tool's complexity. The inclusion of the expiry edge case and fresh-pass behavior leaves no major gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% for the single parameter agentId, and the schema already provides a description ('24-hex agent id (from list_agents)'). The tool description does not add new parameter-level semantics, so the baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb ('Resume') and resource ('scheduled agent'), explains the core behavior ('recomputes its next run and reactivates it'), and distinguishes from sibling tools like resume_session_task by specifying 'scheduled agent' rather than session task. The additional detail about completed work-list agents further clarifies the specific use case.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly implies when to use the tool (for paused scheduled agents) and describes a special case (completed work-list agents). It also provides a precondition for use (expiry not passed) and a workaround ('extend it on the dashboard first'). However, it does not explicitly compare against alternatives like resume_session_task, though the 'scheduled agent' wording provides implicit differentiation.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
resume_session_taskResume session taskADestructiveIdempotentInspect
Resume a previously paused task in a browser session.
| Name | Required | Description | Default |
|---|---|---|---|
| sessionId | Yes | Session ID |
Output Schema
| Name | Required | Description |
|---|---|---|
| action | Yes | The control action that was applied |
| message | Yes | |
| success | Yes | |
| sessionId | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations are provided (readOnlyHint=false, destructiveHint=true, idempotentHint=true, openWorldHint=true), so the safety profile is known. The description adds the precondition that the task must be previously paused, which is a meaningful constraint not in the annotations. However, it does not disclose other behavioral aspects like what happens on resume (e.g., continuation point, side effects) beyond the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single concise sentence, front-loaded with the action. It contains no fluff or redundant information, earning its place with the key detail that the task is previously paused.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (one parameter, output schema exists), the description is reasonably complete. However, it lacks usage context and does not explain the implications of the destructiveHint annotation. The 'previously paused' precondition is helpful, but the description does not describe the lifecycle or relationship to sibling session tools, leaving some contextual gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% for the single parameter 'sessionId', which is described as 'Session ID'. The description does not add any additional meaning or format details beyond the schema. Baseline of 3 applies because the schema handles the parameter documentation adequately.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('resume') and the resource ('previously paused task in a browser session'). It distinguishes this from siblings like pause_session_task, stop_session_task, and terminate_session by specifying that it acts on a paused task. The verb and resource are specific and unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives. It does not mention that it should be used after pause_session_task, nor does it exclude cases like already-running tasks. Without this context, an agent may not know the appropriate usage conditions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
screenshotTake screenshotARead-onlyIdempotentInspect
Capture a screenshot of the current browser page in an active session. Returns the screenshot as an inline image. Read-only.
| Name | Required | Description | Default |
|---|---|---|---|
| sessionId | Yes | Session ID |
Output Schema
| Name | Required | Description |
|---|---|---|
| error | No | |
| message | No | |
| success | No | |
| sessionId | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds value beyond annotations by specifying the return format ('as an inline image'), which the schema does not explain. The 'Read-only' statement aligns with the readOnlyHint, and no contradictions exist.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with the core action, and zero filler. Every word earns its place, and even the redundant 'Read-only' is short and reinforces the annotation.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description is complete for a simple tool: it states the action, the context requirement, and the return format. With an output schema present, the tool doesn't need to spell out the full response structure. Minor details like full-page vs. viewport capture are not essential.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3. The description adds contextual meaning to sessionId by specifying it must be an active session, which goes beyond the simple 'Session ID' schema description.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action ('Capture a screenshot'), a specific resource ('current browser page'), and a condition ('in an active session'). This clearly distinguishes it from sibling tools like list_sessions or browser_task, which have different purposes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'in an active session' clearly indicates that a pre-existing, active session is required, implying a prerequisite of creating a session first. There are no competing screenshot tools, so no exclusions are needed, but it doesn't explicitly outline when not to use it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
send_taskSend task to sessionADestructiveInspect
Send a new task to an existing browser session (from create_session). The real Chrome browser may navigate, fill forms, and submit data on third-party websites as the task requires.
| Name | Required | Description | Default |
|---|---|---|---|
| files | No | Optional file IDs to attach (from /files/upload). Max 5 files. | |
| prompt | Yes | Task description | |
| secrets | No | Domain-matched secrets [{match, fields}] (not stored) | |
| webhook | No | Webhook configuration | |
| sessionId | Yes | Session ID from create_session | |
| outputType | No | Response format | |
| maxDuration | No | Max duration for this task in minutes (3-60). Defaults to the value the session was created with. | |
| startingUrl | No | URL to navigate to before starting this task (optional) | |
| outputSchema | No | JSON Schema for structured output (required if outputType is structured_json) | |
| maxInputTokens | No | Max input tokens for this task (100-3000000). Defaults to the value the session was created with. | |
| maxOutputTokens | No | Max output tokens for this task (100-1000000). Defaults to the value the session was created with. | |
| terminateOnCompletion | No | Auto-terminate after task (default: false) |
Output Schema
| Name | Required | Description |
|---|---|---|
| data | No | Task output payload (instance-authored shape) |
| type | No | Result type, e.g. 'task_completed', 'task_failed', 'guardrail_trigger' |
| error | No | |
| status | No | Present on guardrail results: 'awaiting_input' |
| taskId | No | |
| message | No | |
| pending | No | True when the task is still running — poll get_task_status |
| success | No | |
| sessionId | No | |
| environment | No | |
| liveViewURL | No | Page for watching the run live, present while it is still running or awaiting input. The only URL here that is safe to show a user or open in a browser. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already declare destructiveHint=true, readOnlyHint=false, openWorldHint=true, so the agent knows this is a side-effectful, open-world operation. The description adds valuable context: 'The real Chrome browser may navigate, fill forms, and submit data on third-party websites as the task requires.' This goes beyond the annotations by specifying actual behaviors, which helps the agent anticipate side effects. No contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loaded with the core purpose, followed by a contextual note about browser behavior. Every word earns its place; there is no redundancy or filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given that the schema covers all parameters and an output schema exists to define return values, the description provides the essential context: the purpose and the real-browser behavior that may have side effects. It could mention prerequisites like needing a valid session ID from create_session, but that is implied and captured in the schema. The description is sufficiently complete for an agent to understand what the tool does and what to expect, though it could briefly mention state changes or error conditions.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema provides 100% coverage for all 12 parameters, each with descriptive text. The description itself does not add any additional meaning to the parameters beyond what the schema already states. Since the schema covers everything, the baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool sends a new task to an existing browser session, tying it to create_session. It specifies the verb 'send' and the resource 'task'. However, it does not explicitly differentiate from potentially similar tools like browser_task or create_workflow, relying on the context of 'existing session' to distinguish. This is clear but could be more explicit about its unique role among siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear context: use for existing sessions created via create_session. This implies a workflow where create_session precedes this tool. However, it does not provide any exclusions or mention when to use alternative tools, such as browser_task for direct browsing or create_workflow for multi-step tasks. The context is clear but not comprehensive.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
stop_session_taskStop session taskADestructiveIdempotentInspect
Cancel the task currently running in a browser session, keeping the session alive for new tasks.
| Name | Required | Description | Default |
|---|---|---|---|
| sessionId | Yes | Session ID |
Output Schema
| Name | Required | Description |
|---|---|---|
| action | Yes | The control action that was applied |
| message | Yes | |
| success | Yes | |
| sessionId | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already disclose destructiveHint and idempotentHint, lowering the burden on the description. The description adds valuable context beyond annotations by specifying that the session stays alive, which is a key behavioral trait differentiating it from more destructive operations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, concise sentence that immediately states the action and its outcome. No wasted words or redundant information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity, one parameter, strong annotations, and presence of an output schema, the description sufficiently covers what the tool does. It doesn't explain return values, but the output schema exists, so that's not required. Minor gap: no mention of behavior if no task is running, but overall adequate.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with 'sessionId' documented as 'Session ID'. The description adds only the context that the session is a browser session, which is slightly more specific but not substantially beyond the schema. Baseline 3 is appropriate as the schema carries the parameter meaning.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Cancel') and clearly identifies the resource (the task running in a browser session). It distinguishes itself from sibling tools like pause_session_task and terminate_session by explicitly stating that the session is kept alive, making its purpose unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides a clear context for use (when you want to cancel the current task without ending the session). It implicitly contrasts with terminate_session by noting the session remains alive, but it does not explicitly list alternative tools or state when not to use this tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
terminate_sessionTerminate sessionADestructiveIdempotentInspect
End a browser session and free its resources. The session and any running task cannot be resumed afterwards.
| Name | Required | Description | Default |
|---|---|---|---|
| sessionId | Yes | Session ID |
Output Schema
| Name | Required | Description |
|---|---|---|
| action | Yes | The control action that was applied |
| message | Yes | |
| success | Yes | |
| sessionId | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true and idempotentHint=true, but the description adds meaningful context by stating the session and any running task cannot be resumed, and that resources are freed. This goes beyond the structured metadata and helps the agent understand the full impact of the action.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise and front-loaded, using two sentences to state the action and its consequence. Every word earns its place, with no unnecessary detail or repetition of the title.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is simple with one parameter and an output schema, so the description covers the essential information: what it does and a critical behavioral caveat. It does not explain return values (unnecessary given the output schema) or prerequisites, but for this complexity level, it is sufficiently complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema fully describes the only parameter (sessionId) with 100% coverage, so the description need not add more. The description does not elaborate on the parameter, but the schema is already clear, making the baseline 3 appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose with a specific verb ('End a browser session') and resource, and adds the key detail that it frees resources. It distinguishes itself from similar sibling tools like pause_session_task or stop_session_task by emphasizing the finality and non-resumability of the session.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies when to use the tool (to end a session permanently) and even notes that the session cannot be resumed, which is a clear contextual hint. However, it does not explicitly mention alternatives or provide when-not-to-use guidance, leaving some ambiguity compared to sibling tools that might pause or stop tasks.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
trigger_workflowTrigger workflowADestructiveInspect
Run a workflow now in its deployed environment. This is the ONLY correct way to run or TEST a saved workflow — a run started here carries the workflow's rules, tracking and memory; browser_task/create_session runs do not. When the user says "run it", "run it once", "test it" or "try it" about a workflow, this is the tool they mean. Drives a real Chrome browser: the run may navigate, fill forms, and submit data on third-party websites as the workflow's prompt requires. Pass values for the workflow's {{variables}} in variables (stored variableValues defaults fill any gaps). Returns a sessionId — poll get_task_status for the result.
| Name | Required | Description | Default |
|---|---|---|---|
| force | No | Work-list workflows only: when the list reports complete, re-open it for a fresh full pass. | |
| title | No | Exact workflow title (case-insensitive) — alternative to workflowId | |
| variables | No | Values for the workflow's {{variables}}, keyed by exact variable name. Merged over the workflow's stored variableValues defaults. | |
| workflowId | No | 24-hex workflow id |
Output Schema
| Name | Required | Description |
|---|---|---|
| taskId | No | |
| message | No | |
| success | Yes | |
| sessionId | No | Poll get_task_status with this id |
| workflowId | Yes | |
| liveViewURL | No | Page for watching the run live, present when a run started. The only URL here that is safe to show a user or open in a browser. |
| listComplete | No | Work-list workflows: every item has been visited (no run started) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations, the description discloses concrete real-world side effects: "Drives a real Chrome browser: the run may navigate, fill forms, and submit data on third-party websites." It also clarifies that the run carries workflow rules, tracking, and memory, adding meaningful behavioral context that annotations alone do not provide.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the core purpose, then layers usage guidance, behavioral disclosure, parameter direction, and return-value handling in a logical order. All sentences earn their place; there is no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with a destructiveHint and openWorldHint, the description covers purpose, when to use it, what happens during execution, how to pass variables, and how to obtain results. Nothing essential is missing when combined with the rich schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the input schema already documents all four parameters in detail. The description mostly repeats the variables semantics already present in the schema, adding no significant new parameter-level information beyond emphasizing variable defaults.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states a specific verb and resource: "Run a workflow now in its deployed environment." It explicitly distinguishes itself from browser_task/create_session as the only correct way to run or test a saved workflow, naming sibling alternatives directly.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit when-to-use guidance: "When the user says 'run it', 'run it once', 'test it' or 'try it' about a workflow, this is the tool they mean." It also names alternatives not to use (browser_task/create_session) and describes the post-call flow via get_task_status.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
update_workflowUpdate workflowADestructiveIdempotentInspect
Update an existing workflow. Supply workflowId plus only the fields to change: prompt, trigger, schedule, run settings, variables, presentation. Object and array fields are replaced whole; pass null to clear an optional field. Renaming via title keeps the slug stable. The stored schedule stays a saved setting — scheduled agents already deployed from this workflow keep their own timing. promptTemplate follows the same Goal / Ground rules / Stages / Output runbook contract as create_workflow (see that field's description). memoryContract is the exception to whole-replace: supplying its three fields updates them while platform tracking details are preserved.
| Name | Required | Description | Default |
|---|---|---|---|
| flow | No | Dashboard flow diagram: { trigger: {kind, phrase}, steps: [{ primary: {label, domain}, verb }] }. | |
| model | No | Model profile key. Omit for the account default. | |
| proxy | No | Proxy for runs. {source:"WebRun", country?} or {source:"custom", type:"http"|"socks", host, port, username?, password?}. Custom passwords are encrypted at rest and never returned. Social/messaging workflows (WhatsApp, Telegram, Instagram, Facebook, X, LinkedIn, TikTok): set country to the country the user is in right now — recommend it and confirm the country with them first; a mismatch is the usual cause of refused logins and sessions that log out repeatedly, and a scheduled workflow re-hits it every run, so keep the country stable once set. | |
| title | No | Workflow title (shown on the dashboard). | |
| memory | No | The agent's private notebook: shown to it at the start of every run, updated automatically after each run. Seed it ONLY with durable facts the next run must already know — the exact description of a target item (e.g. the specific picture to match), user preferences, known starting state — one short line per fact. Do NOT put task steps here (promptTemplate) or tracking rules here (memoryContract). Most workflows need no seed at all: the agent builds its own notebook as it runs. | |
| skills | No | Workflow-scoped skill entries (dashboard shape). | |
| trigger | No | How the workflow is meant to be invoked (informational — see notes). Defaults to {type:'manual', source:'manual'}. | |
| listType | No | Advanced — defaults automatically ('monitor' when memoryContract is supplied); leave unset. | |
| schedule | No | Saved schedule setting. NOTE: record-only — the workflow does NOT run on a timer until deployed as a scheduled agent (dashboard or Telegram bot). | |
| timezone | No | IANA timezone for runs of this workflow (e.g. "America/New_York"). | |
| department | No | Free-text department label (e.g. "inventory"). | |
| outputType | No | Output contract: 'text' (default), 'structured' (JSON matching outputSchema), 'structured_csv' (rows for the outputSchema column names). | |
| workflowId | Yes | 24-hex id of the workflow to update (from list_workflows or create_workflow). Required — the title property here is the NEW title for renames, never an identifier. | |
| destination | No | Result destination chip: { type, sub, description }. Types seen: 'custom-api', 'slack', 'sheets', 'email', 'messaging', 'telegram', 'crm'. | |
| startingUrl | No | Page Chrome opens at the start of each run. Omit to let the prompt decide. | |
| useCaseTags | No | Categorisation tags. | |
| fileDeferred | No | Dashboard flag: file selection deferred to run time. | |
| outputSchema | No | JSON Schema object (outputType "structured") or array of column-name strings (outputType "structured_csv"). | |
| reachOutMode | No | Proactive-chat policy for runs: 'off', 'guardrail_only', or 'full'. Omit (or pass null) to inherit the account default (MCP-initiated runs treat inherit as 'off'). | |
| wizardPreset | No | Dashboard wizard preset: { technology, useCases[], destination, destinationSub }. | |
| environmentId | No | Move the workflow to a different environment you own. | |
| memoryEnabled | No | Persist per-workflow agent memory across runs (default true). | |
| publicDraftId | No | Dashboard public-draft correlation id. | |
| requiredFiles | No | Per-run file attachments. Each row may name its own environmentId; ownership is enforced per-file at dispatch. | |
| roiHourlyRate | No | Hourly rate for the ROI card. | |
| triggerPhrase | No | Natural-language phrase that invokes this workflow in chat. | |
| memoryContract | No | How this workflow should behave and what it must remember between runs. REQUIRED whenever the task handles each thing once — new messages, forward once, skip anything already done. Write all three fields in plain English, addressed to the agent; the platform wires the tracking itself. Never write any of this into the prompt: the prompt says what to do, this says how to do it consistently. To explicitly disable tracking for a task that looks like it needs it, pass {mode:'none'}. | |
| policyOptedOut | No | Opt this workflow out of the environment's default policy. | |
| promptTemplate | No | The task the browser agent runs, written as a BROWSING RUNBOOK. Structure it as: `Goal:` — one sentence naming the outcome. `Ground rules (every stage, every turn):` — bullet invariants when the task needs them, e.g. work one item at a time — never batch; only record a figure you can read on screen this turn — if it is not shown record it as "not stated", never estimate; keep a running tally and restate it every turn ("captured C items · written R rows"). Then `Stage N — <Site name> (<https://url>)` — one section per website or phase, listing the concrete steps to take in the browser (open/navigate, click, read, capture, compare, flag) in the order a person would do them, each stage ending with `Done when: <verifiable completion condition>`. Finish with `Output —` stating exactly what to produce or deliver once the final tally is met, including what to say when there is no data (never fabricate a row). When a stage delivers per-recipient (message/email each customer), state the MATCHING RULE in that stage — the identifier shared by the source record and the destination recipient (e.g. the customer name exactly as written in the source, matched against the contact name) — and the no-match branch: skip it and report it, never deliver to a similarly-named near-match. Write the user's CONCRETE values (group names, URLs, numbers) directly into the text; use {{variables}} ONLY when the user explicitly wants a reusable template whose inputs change per run. A short single-site task can be just a Goal plus its steps. PURE TASK ONLY — never write memory bookkeeping into the prompt (no "check memory", "record in memory", "store in memory" steps): tracking is authored in memoryContract and WebRun applies it to every run automatically. | |
| refineMessages | No | Dashboard builder refinement thread rows: [{ role, content }]. | |
| variableValues | No | ONLY for explicitly dynamic workflows: default values for {{variables}}, keyed by variable name. NOTE: applied only when triggering via MCP trigger_workflow (merged under caller-supplied variables); REST /trigger and bot triggers ignore this field. | |
| compatibleTools | No | Sites/tools the workflow uses: [{ name, loginUrl, domain, role }]. | |
| conciergeNotify | No | Where the concierge announces results (e.g. 'Telegram', 'Slack', 'WhatsApp', 'Microsoft Teams', 'concierge'). | |
| workListEnabled | No | Advanced — set automatically when memoryContract is supplied; leave unset. | |
| deployedPolicyId | No | Policy id to run under (must be owned by you). | |
| orchestrateFirst | No | Discovery mode: one run gathers the WHOLE work list up front, later runs claim one item each. | |
| shortDescription | No | One-line summary shown in workflow lists. | |
| roiMinutesPerTask | No | Minutes saved per run (dashboard ROI card). | |
| templateVariables | No | ONLY for explicitly dynamic workflows (the user asked for a reusable template): metadata for the {{variables}} used in promptTemplate (drives the dashboard fill-in UI). Omit entirely when the prompt carries concrete values. |
Output Schema
| Name | Required | Description |
|---|---|---|
| slug | No | |
| notes | No | Caveats to relay (record-only schedule, linked scheduled agents, prompt-structure advice) |
| title | No | |
| changes | Yes | Human-readable field: old → new summaries of what was applied (empty when everything supplied matched the current values) |
| success | Yes | |
| workflowId | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare destructiveHint=true and idempotentHint=true, and the description adds valuable behavioral context: full replacement of object/array fields, null to clear optional fields, slug stability on rename, schedule being record-only until deployed as scheduled agent, and memoryContract partial-update exception. This goes beyond what annotations provide. However, it doesn't explicitly mention reversibility or confirmation beyond the idempotent hint, and the destructive nature is implied by 'update' plus the hint, though not explicitly described as irreversible.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is reasonably concise for a complex tool, front-loading the core behavior (supply workflowId plus only changed fields) and then providing targeted details about edge cases (null clearing, slug stability, schedule semantics, memoryContract). It's a bit dense but each sentence earns its place by conveying behavior not found in the schema. It could be slightly tighter, but is well-structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (39 params, nested objects, output schema), the description covers the key update semantics and caveats (replacement, null clearing, schedule record-only, memoryContract exception). The output schema exists, so return values are covered there. It doesn't explicitly walk through every parameter because the schema covers them, and the description focuses on the critical behavioral nuances an agent must know. A slightly higher score would require more explicit mention of which parameters are commonly updated together, but this is already strong.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents all 39 parameters thoroughly. The description adds a small amount of semantic value by summarizing the partial-update behavior and highlighting how memoryContract differs from whole-replace, but most parameter detail is in the schema. Baseline 3 applies as schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Update') and resource ('an existing workflow') and clearly differentiates from siblings like create_workflow and trigger_workflow by emphasizing partial updates and the workflowId requirement. It also names the runbook contract for promptTemplate and the exception for memoryContract, which distinguishes it from create_workflow.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly says to supply workflowId plus only the fields to change, which is a clear usage directive. It also provides important when-to-use context: object/array fields are replaced whole, null clears optional fields, and renaming via title keeps slug stable. It distinguishes from create_workflow by referencing the same runbook contract and the memoryContract exception. This is explicit guidance for the update use case.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
5 tool updates
- Changed
browser_task1 field changed- changed
Input schema / properties / proxy / descriptionPrevious value: -"Proxy configuration. WebRun-managed: { source: \"WebRun\", country: \"GB\" }. Custom: { source: \"custom\", type: \"http\"|\"socks\", host, port, username?, password? }. Omit for no proxy."New value: +"Proxy configuration. WebRun-managed: { source: \"WebRun\", country: \"GB\" }. Custom: { source: \"custom\", type: \"http\"|\"socks\", host, port, username?, password? }. Omit for no proxy. Social/messaging automation (WhatsApp, Telegram, Instagram, Facebook, X, LinkedIn, TikTok): prefer country = the country the user is in right now — recommend it and confirm the country with them first; a mismatch is the usual cause of refused logins and sessions that log out repeatedly."
- Changed
create_agent1 field changed- added
Input schema / properties / proxyAdded value: +{ + "description": "STANDALONE MODE (workflow mode inherits the workflow proxy instead): Proxy for runs. {source:\"WebRun\", country?} or {source:\"custom\", type:\"http\"|\"socks\", host, port, username?, password?}. Custom passwords are encrypted at rest and never returned. Social/messaging workflows (WhatsApp, Telegram, Instagram, Facebook, X, LinkedIn, TikTok): set country to the country the user is in right now — recommend it and confirm the country with them first; a mismatch is the usual cause of refused logins and sessions that log out repeatedly, and a scheduled workflow re-hits it every run, so keep the country stable once set.", + "properties": { + "country": { + "description": "2-letter ISO code or \"random\" (WebRun).", + "type": "string" + }, + "host": { + "type": "string" + }, + "level": { + "enum": [ + "system", + "chrome" + ], + "type": "string" + }, + "password": { + "type": "string" + }, + "port": { + "type": "number" + }, + "source": { + "enum": [ + "WebRun", + "custom" + ], + "type": "string" + }, + "type": { + "enum": [ + "http", + "socks" + ], + "type": "string" + }, + "username": { + "type": "string" + } + }, + "type": "object" +}
- Changed
create_session1 field changed- changed
Input schema / properties / proxy / descriptionPrevious value: -"Proxy configuration. WebRun-managed: { source: \"WebRun\", country: \"GB\" }. Custom: { source: \"custom\", type: \"http\"|\"socks\", host, port, username?, password? }. Omit for no proxy."New value: +"Proxy configuration. WebRun-managed: { source: \"WebRun\", country: \"GB\" }. Custom: { source: \"custom\", type: \"http\"|\"socks\", host, port, username?, password? }. Omit for no proxy. Social/messaging automation (WhatsApp, Telegram, Instagram, Facebook, X, LinkedIn, TikTok): prefer country = the country the user is in right now — recommend it and confirm the country with them first; a mismatch is the usual cause of refused logins and sessions that log out repeatedly."
- Changed
create_workflow1 field changed- changed
Input schema / properties / proxy / descriptionPrevious value: -"Proxy for runs. {source:\"WebRun\", country?} or {source:\"custom\", type:\"http\"|\"socks\", host, port, username?, password?}. Custom passwords are encrypted at rest and never returned."New value: +"Proxy for runs. {source:\"WebRun\", country?} or {source:\"custom\", type:\"http\"|\"socks\", host, port, username?, password?}. Custom passwords are encrypted at rest and never returned. Social/messaging workflows (WhatsApp, Telegram, Instagram, Facebook, X, LinkedIn, TikTok): set country to the country the user is in right now — recommend it and confirm the country with them first; a mismatch is the usual cause of refused logins and sessions that log out repeatedly, and a scheduled workflow re-hits it every run, so keep the country stable once set."
- Changed
update_workflow1 field changed- changed
Input schema / properties / proxy / descriptionPrevious value: -"Proxy for runs. {source:\"WebRun\", country?} or {source:\"custom\", type:\"http\"|\"socks\", host, port, username?, password?}. Custom passwords are encrypted at rest and never returned."New value: +"Proxy for runs. {source:\"WebRun\", country?} or {source:\"custom\", type:\"http\"|\"socks\", host, port, username?, password?}. Custom passwords are encrypted at rest and never returned. Social/messaging workflows (WhatsApp, Telegram, Instagram, Facebook, X, LinkedIn, TikTok): set country to the country the user is in right now — recommend it and confirm the country with them first; a mismatch is the usual cause of refused logins and sessions that log out repeatedly, and a scheduled workflow re-hits it every run, so keep the country stable once set."
5 tool updates
- Changed
browser_task1 field changed- added
Output schema / properties / liveViewURLAdded value: +{ + "description": "Page for watching the run live, present while it is still running or awaiting input. The only URL here that is safe to show a user or open in a browser.", + "type": "string" +}
- Changed
create_session4 fields changed- changed
Output schema / properties / streaming / descriptionPrevious value: -"Live-view endpoints for the running browser"New value: +"Endpoints for watching the running browser. Only liveViewURL is a web page — the other two are machine endpoints on a non-standard port." - added
Output schema / properties / streaming / properties / liveViewURLAdded value: +{ + "description": "The live-view page. This is the ONLY URL to show a user or open in a browser. Null when the stream is unavailable — say live view is unavailable rather than offering another field.", + "type": [ + "string", + "null" + ] +} - added
Output schema / properties / streaming / properties / webRTCURL / descriptionAdded value: +"WHEP signaling endpoint for a programmatic WebRTC client. POST-only: a browser GET returns HTTP 405. Never show this to a user." - added
Output schema / properties / streaming / properties / webViewURL / descriptionAdded value: +"Direct MediaMTX player on the streaming host (port 2096), unbranded and often firewall-blocked. Debugging fallback only — prefer liveViewURL."
- Changed
get_task_status1 field changed- added
Output schema / properties / liveViewURLAdded value: +{ + "description": "Page for watching the run live, present while it is still running or awaiting input. The only URL here that is safe to show a user or open in a browser.", + "type": "string" +}
- Changed
send_task1 field changed- added
Output schema / properties / liveViewURLAdded value: +{ + "description": "Page for watching the run live, present while it is still running or awaiting input. The only URL here that is safe to show a user or open in a browser.", + "type": "string" +}
- Changed
trigger_workflow1 field changed- added
Output schema / properties / liveViewURLAdded value: +{ + "description": "Page for watching the run live, present when a run started. The only URL here that is safe to show a user or open in a browser.", + "type": "string" +}
3 tool updates
- Changed
create_agent1 field changed- changed
Input schema / properties / prompt / descriptionPrevious value: -"STANDALONE MODE (required there): The task the browser agent runs, written as a BROWSING RUNBOOK. Structure it as: `Goal:` — one sentence naming the outcome. `Ground rules (every stage, every turn):` — bullet invariants when the task needs them, e.g. work one item at a time — never batch; only record a figure you can read on screen this turn — if it is not shown record it as \"not stated\", never estimate; keep a running tally and restate it every turn (\"captured C items · written R rows\"). Then `Stage N — <Site name> (<https://url>)` — one section per website or phase, listing the concrete steps to take in the browser (open/navigate, click, read, capture, compare, flag) in the order a person would do them, each stage ending with `Done when: <verifiable completion condition>`. Finish with `Output —` stating exactly what to produce or deliver once the final tally is met, including what to say when there is no data (never fabricate a row). When a stage delivers per-recipient (message/email each customer), state the MATCHING RULE in that stage — the identifier shared by the source record and the destination recipient (e.g. the customer name exactly as written in the source, matched against the contact name) — and the no-match branch: skip it and report it, never deliver to a similarly-named near-match. Write the user's CONCRETE values (group names, URLs, numbers) directly into the text; use {{variables}} ONLY when the user explicitly wants a reusable template whose inputs change per run. A short single-site task can be just a Goal plus its steps. PURE TASK ONLY — never write memory bookkeeping into the prompt (no \"check memory\", \"record in memory\", \"store in memory\" steps): tracking is authored in memoryContract (and the job-list flags) and WebRun injects it into every run automatically."New value: +"STANDALONE MODE (required there): The task the browser agent runs, written as a BROWSING RUNBOOK. Structure it as: `Goal:` — one sentence naming the outcome. `Ground rules (every stage, every turn):` — bullet invariants when the task needs them, e.g. work one item at a time — never batch; only record a figure you can read on screen this turn — if it is not shown record it as \"not stated\", never estimate; keep a running tally and restate it every turn (\"captured C items · written R rows\"). Then `Stage N — <Site name> (<https://url>)` — one section per website or phase, listing the concrete steps to take in the browser (open/navigate, click, read, capture, compare, flag) in the order a person would do them, each stage ending with `Done when: <verifiable completion condition>`. Finish with `Output —` stating exactly what to produce or deliver once the final tally is met, including what to say when there is no data (never fabricate a row). When a stage delivers per-recipient (message/email each customer), state the MATCHING RULE in that stage — the identifier shared by the source record and the destination recipient (e.g. the customer name exactly as written in the source, matched against the contact name) — and the no-match branch: skip it and report it, never deliver to a similarly-named near-match. Write the user's CONCRETE values (group names, URLs, numbers) directly into the text; use {{variables}} ONLY when the user explicitly wants a reusable template whose inputs change per run. A short single-site task can be just a Goal plus its steps. PURE TASK ONLY — never write memory bookkeeping into the prompt (no \"check memory\", \"record in memory\", \"store in memory\" steps): tracking is authored in memoryContract and WebRun applies it to every run automatically."
- Changed
create_workflow7 fields changed- changed
Input schema / properties / listType / descriptionPrevious value: -"Work-list traversal policy: 'static' (one sweep), 'dynamic' (list refreshes each cycle), 'monitor' (persistent parents + consume-once children)."New value: +"Advanced — defaults automatically ('monitor' when memoryContract is supplied); leave unset." - changed
Input schema / properties / memoryContract / descriptionPrevious value: -"Tracking policy — AUTHOR THIS whenever the task must remember what it already handled (forward once, skip seen items, only new messages): { mode: 'dedupe', key: 'what uniquely identifies one handled item (e.g. group + sender + time + first words)', emit: 'the exact ledger line to record per handled item' }. WebRun injects it into the agent's memory on every run (check-before-act + record-after) — so NEVER restate these steps in promptTemplate. For watch-lists, ALSO set workListEnabled + listType 'monitor'. mode 'none' = no tracking."New value: +"How this workflow should behave and what it must remember between runs. REQUIRED whenever the task handles each thing once — new messages, forward once, skip anything already done. Write all three fields in plain English, addressed to the agent; the platform wires the tracking itself. Never write any of this into the prompt: the prompt says what to do, this says how to do it consistently. To explicitly disable tracking for a task that looks like it needs it, pass {mode:'none'}." - added
Input schema / properties / memoryContract / propertiesAdded value: +{ + "groundRules": { + "description": "Standing rules the agent follows on every turn of every run: what it must never do, what counts as proof a step actually succeeded, what to do when something looks ambiguous, and any pacing or volume limits. Short bullets.", + "maxLength": 1500, + "type": "string" + }, + "itemIdentity": { + "description": "What tells one item apart from another, and stays the same the next time the agent sees it. Use only details visible on screen — for example where it came from, who it is from, when it appeared, and its opening words — and say how to write it the same way every time.", + "maxLength": 300, + "type": "string" + }, + "memoryInstruction": { + "description": "When a single item counts as finished, and what happens to everything else. State plainly what must be true before an item is considered done, what to do when the agent cannot tell whether a past item was done, and what happens to items left over at the end of a run.", + "maxLength": 1500, + "type": "string" + } +} - changed
Input schema / properties / promptTemplate / descriptionPrevious value: -"The task the browser agent runs, written as a BROWSING RUNBOOK. Structure it as: `Goal:` — one sentence naming the outcome. `Ground rules (every stage, every turn):` — bullet invariants when the task needs them, e.g. work one item at a time — never batch; only record a figure you can read on screen this turn — if it is not shown record it as \"not stated\", never estimate; keep a running tally and restate it every turn (\"captured C items · written R rows\"). Then `Stage N — <Site name> (<https://url>)` — one section per website or phase, listing the concrete steps to take in the browser (open/navigate, click, read, capture, compare, flag) in the order a person would do them, each stage ending with `Done when: <verifiable completion condition>`. Finish with `Output —` stating exactly what to produce or deliver once the final tally is met, including what to say when there is no data (never fabricate a row). When a stage delivers per-recipient (message/email each customer), state the MATCHING RULE in that stage — the identifier shared by the source record and the destination recipient (e.g. the customer name exactly as written in the source, matched against the contact name) — and the no-match branch: skip it and report it, never deliver to a similarly-named near-match. Write the user's CONCRETE values (group names, URLs, numbers) directly into the text; use {{variables}} ONLY when the user explicitly wants a reusable template whose inputs change per run. A short single-site task can be just a Goal plus its steps. PURE TASK ONLY — never write memory bookkeeping into the prompt (no \"check memory\", \"record in memory\", \"store in memory\" steps): tracking is authored in memoryContract (and the job-list flags) and WebRun injects it into every run automatically."New value: +"The task the browser agent runs, written as a BROWSING RUNBOOK. Structure it as: `Goal:` — one sentence naming the outcome. `Ground rules (every stage, every turn):` — bullet invariants when the task needs them, e.g. work one item at a time — never batch; only record a figure you can read on screen this turn — if it is not shown record it as \"not stated\", never estimate; keep a running tally and restate it every turn (\"captured C items · written R rows\"). Then `Stage N — <Site name> (<https://url>)` — one section per website or phase, listing the concrete steps to take in the browser (open/navigate, click, read, capture, compare, flag) in the order a person would do them, each stage ending with `Done when: <verifiable completion condition>`. Finish with `Output —` stating exactly what to produce or deliver once the final tally is met, including what to say when there is no data (never fabricate a row). When a stage delivers per-recipient (message/email each customer), state the MATCHING RULE in that stage — the identifier shared by the source record and the destination recipient (e.g. the customer name exactly as written in the source, matched against the contact name) — and the no-match branch: skip it and report it, never deliver to a similarly-named near-match. Write the user's CONCRETE values (group names, URLs, numbers) directly into the text; use {{variables}} ONLY when the user explicitly wants a reusable template whose inputs change per run. A short single-site task can be just a Goal plus its steps. PURE TASK ONLY — never write memory bookkeeping into the prompt (no \"check memory\", \"record in memory\", \"store in memory\" steps): tracking is authored in memoryContract and WebRun applies it to every run automatically." - changed
Input schema / properties / workListEnabled / descriptionPrevious value: -"Work-list mode: the agent works a page list one item per run, reporting each back. SET THIS (with listType 'monitor') for watch-and-handle-once tasks — 'forward each new message', 'reply to new comments' — the platform then tracks handled items itself."New value: +"Advanced — set automatically when memoryContract is supplied; leave unset." - added
Output schema / properties / memoryContractAdded value: +{ + "description": "Echo of the stored tracking contract (the three authored fields) — absent when the workflow has none", + "properties": { + "groundRules": { + "type": [ + "string", + "null" + ] + }, + "itemIdentity": { + "type": [ + "string", + "null" + ] + }, + "memoryInstruction": { + "type": [ + "string", + "null" + ] + } + }, + "type": "object" +} - added
Output schema / properties / nextStepAdded value: +{ + "description": "How to run or test this workflow (always trigger_workflow)", + "type": "string" +}
- Changed
update_workflow5 fields changed- changed
Input schema / properties / listType / descriptionPrevious value: -"Work-list traversal policy: 'static' (one sweep), 'dynamic' (list refreshes each cycle), 'monitor' (persistent parents + consume-once children)."New value: +"Advanced — defaults automatically ('monitor' when memoryContract is supplied); leave unset." - changed
Input schema / properties / memoryContract / descriptionPrevious value: -"Tracking policy — AUTHOR THIS whenever the task must remember what it already handled (forward once, skip seen items, only new messages): { mode: 'dedupe', key: 'what uniquely identifies one handled item (e.g. group + sender + time + first words)', emit: 'the exact ledger line to record per handled item' }. WebRun injects it into the agent's memory on every run (check-before-act + record-after) — so NEVER restate these steps in promptTemplate. For watch-lists, ALSO set workListEnabled + listType 'monitor'. mode 'none' = no tracking."New value: +"How this workflow should behave and what it must remember between runs. REQUIRED whenever the task handles each thing once — new messages, forward once, skip anything already done. Write all three fields in plain English, addressed to the agent; the platform wires the tracking itself. Never write any of this into the prompt: the prompt says what to do, this says how to do it consistently. To explicitly disable tracking for a task that looks like it needs it, pass {mode:'none'}." - added
Input schema / properties / memoryContract / propertiesAdded value: +{ + "groundRules": { + "description": "Standing rules the agent follows on every turn of every run: what it must never do, what counts as proof a step actually succeeded, what to do when something looks ambiguous, and any pacing or volume limits. Short bullets.", + "maxLength": 1500, + "type": "string" + }, + "itemIdentity": { + "description": "What tells one item apart from another, and stays the same the next time the agent sees it. Use only details visible on screen — for example where it came from, who it is from, when it appeared, and its opening words — and say how to write it the same way every time.", + "maxLength": 300, + "type": "string" + }, + "memoryInstruction": { + "description": "When a single item counts as finished, and what happens to everything else. State plainly what must be true before an item is considered done, what to do when the agent cannot tell whether a past item was done, and what happens to items left over at the end of a run.", + "maxLength": 1500, + "type": "string" + } +} - changed
Input schema / properties / promptTemplate / descriptionPrevious value: -"The task the browser agent runs, written as a BROWSING RUNBOOK. Structure it as: `Goal:` — one sentence naming the outcome. `Ground rules (every stage, every turn):` — bullet invariants when the task needs them, e.g. work one item at a time — never batch; only record a figure you can read on screen this turn — if it is not shown record it as \"not stated\", never estimate; keep a running tally and restate it every turn (\"captured C items · written R rows\"). Then `Stage N — <Site name> (<https://url>)` — one section per website or phase, listing the concrete steps to take in the browser (open/navigate, click, read, capture, compare, flag) in the order a person would do them, each stage ending with `Done when: <verifiable completion condition>`. Finish with `Output —` stating exactly what to produce or deliver once the final tally is met, including what to say when there is no data (never fabricate a row). When a stage delivers per-recipient (message/email each customer), state the MATCHING RULE in that stage — the identifier shared by the source record and the destination recipient (e.g. the customer name exactly as written in the source, matched against the contact name) — and the no-match branch: skip it and report it, never deliver to a similarly-named near-match. Write the user's CONCRETE values (group names, URLs, numbers) directly into the text; use {{variables}} ONLY when the user explicitly wants a reusable template whose inputs change per run. A short single-site task can be just a Goal plus its steps. PURE TASK ONLY — never write memory bookkeeping into the prompt (no \"check memory\", \"record in memory\", \"store in memory\" steps): tracking is authored in memoryContract (and the job-list flags) and WebRun injects it into every run automatically."New value: +"The task the browser agent runs, written as a BROWSING RUNBOOK. Structure it as: `Goal:` — one sentence naming the outcome. `Ground rules (every stage, every turn):` — bullet invariants when the task needs them, e.g. work one item at a time — never batch; only record a figure you can read on screen this turn — if it is not shown record it as \"not stated\", never estimate; keep a running tally and restate it every turn (\"captured C items · written R rows\"). Then `Stage N — <Site name> (<https://url>)` — one section per website or phase, listing the concrete steps to take in the browser (open/navigate, click, read, capture, compare, flag) in the order a person would do them, each stage ending with `Done when: <verifiable completion condition>`. Finish with `Output —` stating exactly what to produce or deliver once the final tally is met, including what to say when there is no data (never fabricate a row). When a stage delivers per-recipient (message/email each customer), state the MATCHING RULE in that stage — the identifier shared by the source record and the destination recipient (e.g. the customer name exactly as written in the source, matched against the contact name) — and the no-match branch: skip it and report it, never deliver to a similarly-named near-match. Write the user's CONCRETE values (group names, URLs, numbers) directly into the text; use {{variables}} ONLY when the user explicitly wants a reusable template whose inputs change per run. A short single-site task can be just a Goal plus its steps. PURE TASK ONLY — never write memory bookkeeping into the prompt (no \"check memory\", \"record in memory\", \"store in memory\" steps): tracking is authored in memoryContract and WebRun applies it to every run automatically." - changed
Input schema / properties / workListEnabled / descriptionPrevious value: -"Work-list mode: the agent works a page list one item per run, reporting each back. SET THIS (with listType 'monitor') for watch-and-handle-once tasks — 'forward each new message', 'reply to new comments' — the platform then tracks handled items itself."New value: +"Advanced — set automatically when memoryContract is supplied; leave unset."
1 tool update
- Changed
send_task4 fields changed- added
Input schema / properties / maxDurationAdded value: +{ + "description": "Max duration for this task in minutes (3-60). Defaults to the value the session was created with.", + "type": "number" +} - added
Input schema / properties / maxInputTokensAdded value: +{ + "description": "Max input tokens for this task (100-3000000). Defaults to the value the session was created with.", + "type": "number" +} - added
Input schema / properties / maxOutputTokensAdded value: +{ + "description": "Max output tokens for this task (100-1000000). Defaults to the value the session was created with.", + "type": "number" +} - added
Input schema / properties / startingUrlAdded value: +{ + "description": "URL to navigate to before starting this task (optional)", + "type": "string" +}
1 tool update
- Changed
browser_task1 field changed- changed
Input schema / properties / maxDuration / descriptionPrevious value: -"Max duration in minutes (default: 5)"New value: +"Max duration in minutes (default: 20, max: 60)"
3 tool updates
- Changed
create_agent1 field changed- changed
Input schema / properties / prompt / descriptionPrevious value: -"STANDALONE MODE (required there): The task the browser agent runs, written as a BROWSING RUNBOOK. Structure it as: `Goal:` — one sentence naming the outcome. `Ground rules (every stage, every turn):` — bullet invariants when the task needs them, e.g. work one item at a time — never batch; only record a figure you can read on screen this turn — if it is not shown record it as \"not stated\", never estimate; keep a running tally and restate it every turn (\"captured C items · written R rows\"). Then `Stage N — <Site name> (<https://url>)` — one section per website or phase, listing the concrete steps to take in the browser (open/navigate, click, read, capture, compare, flag) in the order a person would do them, each stage ending with `Done when: <verifiable completion condition>`. Finish with `Output —` stating exactly what to produce or deliver once the final tally is met, including what to say when there is no data (never fabricate a row). Write the user's CONCRETE values (group names, URLs, numbers) directly into the text; use {{variables}} ONLY when the user explicitly wants a reusable template whose inputs change per run. A short single-site task can be just a Goal plus its steps. PURE TASK ONLY — never write memory bookkeeping into the prompt (no \"check memory\", \"record in memory\", \"store in memory\" steps): tracking is authored in memoryContract (and the job-list flags) and WebRun injects it into every run automatically."New value: +"STANDALONE MODE (required there): The task the browser agent runs, written as a BROWSING RUNBOOK. Structure it as: `Goal:` — one sentence naming the outcome. `Ground rules (every stage, every turn):` — bullet invariants when the task needs them, e.g. work one item at a time — never batch; only record a figure you can read on screen this turn — if it is not shown record it as \"not stated\", never estimate; keep a running tally and restate it every turn (\"captured C items · written R rows\"). Then `Stage N — <Site name> (<https://url>)` — one section per website or phase, listing the concrete steps to take in the browser (open/navigate, click, read, capture, compare, flag) in the order a person would do them, each stage ending with `Done when: <verifiable completion condition>`. Finish with `Output —` stating exactly what to produce or deliver once the final tally is met, including what to say when there is no data (never fabricate a row). When a stage delivers per-recipient (message/email each customer), state the MATCHING RULE in that stage — the identifier shared by the source record and the destination recipient (e.g. the customer name exactly as written in the source, matched against the contact name) — and the no-match branch: skip it and report it, never deliver to a similarly-named near-match. Write the user's CONCRETE values (group names, URLs, numbers) directly into the text; use {{variables}} ONLY when the user explicitly wants a reusable template whose inputs change per run. A short single-site task can be just a Goal plus its steps. PURE TASK ONLY — never write memory bookkeeping into the prompt (no \"check memory\", \"record in memory\", \"store in memory\" steps): tracking is authored in memoryContract (and the job-list flags) and WebRun injects it into every run automatically."
- Changed
create_workflow1 field changed- changed
Input schema / properties / promptTemplate / descriptionPrevious value: -"The task the browser agent runs, written as a BROWSING RUNBOOK. Structure it as: `Goal:` — one sentence naming the outcome. `Ground rules (every stage, every turn):` — bullet invariants when the task needs them, e.g. work one item at a time — never batch; only record a figure you can read on screen this turn — if it is not shown record it as \"not stated\", never estimate; keep a running tally and restate it every turn (\"captured C items · written R rows\"). Then `Stage N — <Site name> (<https://url>)` — one section per website or phase, listing the concrete steps to take in the browser (open/navigate, click, read, capture, compare, flag) in the order a person would do them, each stage ending with `Done when: <verifiable completion condition>`. Finish with `Output —` stating exactly what to produce or deliver once the final tally is met, including what to say when there is no data (never fabricate a row). Write the user's CONCRETE values (group names, URLs, numbers) directly into the text; use {{variables}} ONLY when the user explicitly wants a reusable template whose inputs change per run. A short single-site task can be just a Goal plus its steps. PURE TASK ONLY — never write memory bookkeeping into the prompt (no \"check memory\", \"record in memory\", \"store in memory\" steps): tracking is authored in memoryContract (and the job-list flags) and WebRun injects it into every run automatically."New value: +"The task the browser agent runs, written as a BROWSING RUNBOOK. Structure it as: `Goal:` — one sentence naming the outcome. `Ground rules (every stage, every turn):` — bullet invariants when the task needs them, e.g. work one item at a time — never batch; only record a figure you can read on screen this turn — if it is not shown record it as \"not stated\", never estimate; keep a running tally and restate it every turn (\"captured C items · written R rows\"). Then `Stage N — <Site name> (<https://url>)` — one section per website or phase, listing the concrete steps to take in the browser (open/navigate, click, read, capture, compare, flag) in the order a person would do them, each stage ending with `Done when: <verifiable completion condition>`. Finish with `Output —` stating exactly what to produce or deliver once the final tally is met, including what to say when there is no data (never fabricate a row). When a stage delivers per-recipient (message/email each customer), state the MATCHING RULE in that stage — the identifier shared by the source record and the destination recipient (e.g. the customer name exactly as written in the source, matched against the contact name) — and the no-match branch: skip it and report it, never deliver to a similarly-named near-match. Write the user's CONCRETE values (group names, URLs, numbers) directly into the text; use {{variables}} ONLY when the user explicitly wants a reusable template whose inputs change per run. A short single-site task can be just a Goal plus its steps. PURE TASK ONLY — never write memory bookkeeping into the prompt (no \"check memory\", \"record in memory\", \"store in memory\" steps): tracking is authored in memoryContract (and the job-list flags) and WebRun injects it into every run automatically."
- Changed
update_workflow1 field changed- changed
Input schema / properties / promptTemplate / descriptionPrevious value: -"The task the browser agent runs, written as a BROWSING RUNBOOK. Structure it as: `Goal:` — one sentence naming the outcome. `Ground rules (every stage, every turn):` — bullet invariants when the task needs them, e.g. work one item at a time — never batch; only record a figure you can read on screen this turn — if it is not shown record it as \"not stated\", never estimate; keep a running tally and restate it every turn (\"captured C items · written R rows\"). Then `Stage N — <Site name> (<https://url>)` — one section per website or phase, listing the concrete steps to take in the browser (open/navigate, click, read, capture, compare, flag) in the order a person would do them, each stage ending with `Done when: <verifiable completion condition>`. Finish with `Output —` stating exactly what to produce or deliver once the final tally is met, including what to say when there is no data (never fabricate a row). Write the user's CONCRETE values (group names, URLs, numbers) directly into the text; use {{variables}} ONLY when the user explicitly wants a reusable template whose inputs change per run. A short single-site task can be just a Goal plus its steps. PURE TASK ONLY — never write memory bookkeeping into the prompt (no \"check memory\", \"record in memory\", \"store in memory\" steps): tracking is authored in memoryContract (and the job-list flags) and WebRun injects it into every run automatically."New value: +"The task the browser agent runs, written as a BROWSING RUNBOOK. Structure it as: `Goal:` — one sentence naming the outcome. `Ground rules (every stage, every turn):` — bullet invariants when the task needs them, e.g. work one item at a time — never batch; only record a figure you can read on screen this turn — if it is not shown record it as \"not stated\", never estimate; keep a running tally and restate it every turn (\"captured C items · written R rows\"). Then `Stage N — <Site name> (<https://url>)` — one section per website or phase, listing the concrete steps to take in the browser (open/navigate, click, read, capture, compare, flag) in the order a person would do them, each stage ending with `Done when: <verifiable completion condition>`. Finish with `Output —` stating exactly what to produce or deliver once the final tally is met, including what to say when there is no data (never fabricate a row). When a stage delivers per-recipient (message/email each customer), state the MATCHING RULE in that stage — the identifier shared by the source record and the destination recipient (e.g. the customer name exactly as written in the source, matched against the contact name) — and the no-match branch: skip it and report it, never deliver to a similarly-named near-match. Write the user's CONCRETE values (group names, URLs, numbers) directly into the text; use {{variables}} ONLY when the user explicitly wants a reusable template whose inputs change per run. A short single-site task can be just a Goal plus its steps. PURE TASK ONLY — never write memory bookkeeping into the prompt (no \"check memory\", \"record in memory\", \"store in memory\" steps): tracking is authored in memoryContract (and the job-list flags) and WebRun injects it into every run automatically."
3 tool updates
- Changed
create_agent4 fields changed- changed
Input schema / properties / environmentId / descriptionPrevious value: -"STANDALONE MODE: environment to run in. Omit to use the connection-bound environment (or your only one). Workflow mode always uses the workflow's deployed environment."New value: +"STANDALONE MODE, rarely needed — OMIT it: the connection-bound environment (or your only one) is applied automatically; never ask the user to choose. Workflow mode always uses the workflow's deployed environment." - changed
Input schema / properties / memory / descriptionPrevious value: -"STANDALONE MODE: seed for the agent's persistent memory (carried across runs)."New value: +"STANDALONE MODE: the agent's private notebook, shown to it every run and updated automatically after each run. Seed ONLY durable facts the next run must know (target descriptions, preferences, known state) — one short line each. Task steps belong in prompt, not here. Usually best left empty." - changed
Input schema / properties / prompt / descriptionPrevious value: -"STANDALONE MODE (required there): The task the browser agent runs, written as a BROWSING RUNBOOK. Structure it as: `Goal:` — one sentence naming the outcome. `Ground rules (every stage, every turn):` — bullet invariants when the task needs them, e.g. work one item at a time — never batch; only record a figure you can read on screen this turn — if it is not shown record it as \"not stated\", never estimate; keep a running tally and restate it every turn (\"captured C items · written R rows\"). Then `Stage N — <Site name> (<https://url>)` — one section per website or phase, listing the concrete steps to take in the browser (open/navigate, click, read, capture, compare, flag) in the order a person would do them, each stage ending with `Done when: <verifiable completion condition>`. Finish with `Output —` stating exactly what to produce or deliver once the final tally is met, including what to say when there is no data (never fabricate a row). Use {{variables}} for per-run values. A short single-site task can be just a Goal plus its steps. PURE TASK ONLY — never put memory/dedup instructions here; those belong in memoryContract (the policy channel)."New value: +"STANDALONE MODE (required there): The task the browser agent runs, written as a BROWSING RUNBOOK. Structure it as: `Goal:` — one sentence naming the outcome. `Ground rules (every stage, every turn):` — bullet invariants when the task needs them, e.g. work one item at a time — never batch; only record a figure you can read on screen this turn — if it is not shown record it as \"not stated\", never estimate; keep a running tally and restate it every turn (\"captured C items · written R rows\"). Then `Stage N — <Site name> (<https://url>)` — one section per website or phase, listing the concrete steps to take in the browser (open/navigate, click, read, capture, compare, flag) in the order a person would do them, each stage ending with `Done when: <verifiable completion condition>`. Finish with `Output —` stating exactly what to produce or deliver once the final tally is met, including what to say when there is no data (never fabricate a row). Write the user's CONCRETE values (group names, URLs, numbers) directly into the text; use {{variables}} ONLY when the user explicitly wants a reusable template whose inputs change per run. A short single-site task can be just a Goal plus its steps. PURE TASK ONLY — never write memory bookkeeping into the prompt (no \"check memory\", \"record in memory\", \"store in memory\" steps): tracking is authored in memoryContract (and the job-list flags) and WebRun injects it into every run automatically." - changed
Input schema / properties / variables / descriptionPrevious value: -"WORKFLOW MODE: values for the workflow's {{variables}}, BAKED IN at deploy and reused every run (stored variableValues defaults fill gaps). Every template variable must be covered — an unattended agent cannot ask later."New value: +"WORKFLOW MODE, and only when the workflow's prompt actually contains {{variables}}: values for them, BAKED IN at deploy and reused every run (stored variableValues defaults fill gaps). Every template variable must be covered — an unattended agent cannot ask later. Workflows with concrete prompts need nothing here."
- Changed
create_workflow7 fields changed- changed
Input schema / properties / environmentId / descriptionPrevious value: -"Environment to deploy the workflow into. Omit to use the connection's bound environment (or your only environment)."New value: +"Rarely needed — OMIT it: the connection's bound environment (or your only environment) is applied automatically. Pass only when the user explicitly names a different environment. Never ask the user to choose." - changed
Input schema / properties / memory / descriptionPrevious value: -"Seed content for the workflow's long-term memory."New value: +"The agent's private notebook: shown to it at the start of every run, updated automatically after each run. Seed it ONLY with durable facts the next run must already know — the exact description of a target item (e.g. the specific picture to match), user preferences, known starting state — one short line per fact. Do NOT put task steps here (promptTemplate) or tracking rules here (memoryContract). Most workflows need no seed at all: the agent builds its own notebook as it runs." - changed
Input schema / properties / memoryContract / descriptionPrevious value: -"Memory policy channel (NEVER folded into promptTemplate): { mode: 'none'|'dedupe', key, emit, listEngine{…} }."New value: +"Tracking policy — AUTHOR THIS whenever the task must remember what it already handled (forward once, skip seen items, only new messages): { mode: 'dedupe', key: 'what uniquely identifies one handled item (e.g. group + sender + time + first words)', emit: 'the exact ledger line to record per handled item' }. WebRun injects it into the agent's memory on every run (check-before-act + record-after) — so NEVER restate these steps in promptTemplate. For watch-lists, ALSO set workListEnabled + listType 'monitor'. mode 'none' = no tracking." - changed
Input schema / properties / promptTemplate / descriptionPrevious value: -"The task the browser agent runs, written as a BROWSING RUNBOOK. Structure it as: `Goal:` — one sentence naming the outcome. `Ground rules (every stage, every turn):` — bullet invariants when the task needs them, e.g. work one item at a time — never batch; only record a figure you can read on screen this turn — if it is not shown record it as \"not stated\", never estimate; keep a running tally and restate it every turn (\"captured C items · written R rows\"). Then `Stage N — <Site name> (<https://url>)` — one section per website or phase, listing the concrete steps to take in the browser (open/navigate, click, read, capture, compare, flag) in the order a person would do them, each stage ending with `Done when: <verifiable completion condition>`. Finish with `Output —` stating exactly what to produce or deliver once the final tally is met, including what to say when there is no data (never fabricate a row). Use {{variables}} for per-run values. A short single-site task can be just a Goal plus its steps. PURE TASK ONLY — never put memory/dedup instructions here; those belong in memoryContract (the policy channel)."New value: +"The task the browser agent runs, written as a BROWSING RUNBOOK. Structure it as: `Goal:` — one sentence naming the outcome. `Ground rules (every stage, every turn):` — bullet invariants when the task needs them, e.g. work one item at a time — never batch; only record a figure you can read on screen this turn — if it is not shown record it as \"not stated\", never estimate; keep a running tally and restate it every turn (\"captured C items · written R rows\"). Then `Stage N — <Site name> (<https://url>)` — one section per website or phase, listing the concrete steps to take in the browser (open/navigate, click, read, capture, compare, flag) in the order a person would do them, each stage ending with `Done when: <verifiable completion condition>`. Finish with `Output —` stating exactly what to produce or deliver once the final tally is met, including what to say when there is no data (never fabricate a row). Write the user's CONCRETE values (group names, URLs, numbers) directly into the text; use {{variables}} ONLY when the user explicitly wants a reusable template whose inputs change per run. A short single-site task can be just a Goal plus its steps. PURE TASK ONLY — never write memory bookkeeping into the prompt (no \"check memory\", \"record in memory\", \"store in memory\" steps): tracking is authored in memoryContract (and the job-list flags) and WebRun injects it into every run automatically." - changed
Input schema / properties / templateVariables / descriptionPrevious value: -"Metadata for the {{variables}} used in promptTemplate (drives the dashboard fill-in UI)."New value: +"ONLY for explicitly dynamic workflows (the user asked for a reusable template): metadata for the {{variables}} used in promptTemplate (drives the dashboard fill-in UI). Omit entirely when the prompt carries concrete values." - changed
Input schema / properties / variableValues / descriptionPrevious value: -"Default values for {{variables}}, keyed by variable name. NOTE: applied only when triggering via MCP trigger_workflow (merged under caller-supplied variables); REST /trigger and bot triggers ignore this field."New value: +"ONLY for explicitly dynamic workflows: default values for {{variables}}, keyed by variable name. NOTE: applied only when triggering via MCP trigger_workflow (merged under caller-supplied variables); REST /trigger and bot triggers ignore this field." - changed
Input schema / properties / workListEnabled / descriptionPrevious value: -"Work-list mode: the agent works a page list one item per run, reporting each back."New value: +"Work-list mode: the agent works a page list one item per run, reporting each back. SET THIS (with listType 'monitor') for watch-and-handle-once tasks — 'forward each new message', 'reply to new comments' — the platform then tracks handled items itself."
- Changed
update_workflow6 fields changed- changed
Input schema / properties / memory / descriptionPrevious value: -"Seed content for the workflow's long-term memory."New value: +"The agent's private notebook: shown to it at the start of every run, updated automatically after each run. Seed it ONLY with durable facts the next run must already know — the exact description of a target item (e.g. the specific picture to match), user preferences, known starting state — one short line per fact. Do NOT put task steps here (promptTemplate) or tracking rules here (memoryContract). Most workflows need no seed at all: the agent builds its own notebook as it runs." - changed
Input schema / properties / memoryContract / descriptionPrevious value: -"Memory policy channel (NEVER folded into promptTemplate): { mode: 'none'|'dedupe', key, emit, listEngine{…} }."New value: +"Tracking policy — AUTHOR THIS whenever the task must remember what it already handled (forward once, skip seen items, only new messages): { mode: 'dedupe', key: 'what uniquely identifies one handled item (e.g. group + sender + time + first words)', emit: 'the exact ledger line to record per handled item' }. WebRun injects it into the agent's memory on every run (check-before-act + record-after) — so NEVER restate these steps in promptTemplate. For watch-lists, ALSO set workListEnabled + listType 'monitor'. mode 'none' = no tracking." - changed
Input schema / properties / promptTemplate / descriptionPrevious value: -"The task the browser agent runs, written as a BROWSING RUNBOOK. Structure it as: `Goal:` — one sentence naming the outcome. `Ground rules (every stage, every turn):` — bullet invariants when the task needs them, e.g. work one item at a time — never batch; only record a figure you can read on screen this turn — if it is not shown record it as \"not stated\", never estimate; keep a running tally and restate it every turn (\"captured C items · written R rows\"). Then `Stage N — <Site name> (<https://url>)` — one section per website or phase, listing the concrete steps to take in the browser (open/navigate, click, read, capture, compare, flag) in the order a person would do them, each stage ending with `Done when: <verifiable completion condition>`. Finish with `Output —` stating exactly what to produce or deliver once the final tally is met, including what to say when there is no data (never fabricate a row). Use {{variables}} for per-run values. A short single-site task can be just a Goal plus its steps. PURE TASK ONLY — never put memory/dedup instructions here; those belong in memoryContract (the policy channel)."New value: +"The task the browser agent runs, written as a BROWSING RUNBOOK. Structure it as: `Goal:` — one sentence naming the outcome. `Ground rules (every stage, every turn):` — bullet invariants when the task needs them, e.g. work one item at a time — never batch; only record a figure you can read on screen this turn — if it is not shown record it as \"not stated\", never estimate; keep a running tally and restate it every turn (\"captured C items · written R rows\"). Then `Stage N — <Site name> (<https://url>)` — one section per website or phase, listing the concrete steps to take in the browser (open/navigate, click, read, capture, compare, flag) in the order a person would do them, each stage ending with `Done when: <verifiable completion condition>`. Finish with `Output —` stating exactly what to produce or deliver once the final tally is met, including what to say when there is no data (never fabricate a row). Write the user's CONCRETE values (group names, URLs, numbers) directly into the text; use {{variables}} ONLY when the user explicitly wants a reusable template whose inputs change per run. A short single-site task can be just a Goal plus its steps. PURE TASK ONLY — never write memory bookkeeping into the prompt (no \"check memory\", \"record in memory\", \"store in memory\" steps): tracking is authored in memoryContract (and the job-list flags) and WebRun injects it into every run automatically." - changed
Input schema / properties / templateVariables / descriptionPrevious value: -"Metadata for the {{variables}} used in promptTemplate (drives the dashboard fill-in UI)."New value: +"ONLY for explicitly dynamic workflows (the user asked for a reusable template): metadata for the {{variables}} used in promptTemplate (drives the dashboard fill-in UI). Omit entirely when the prompt carries concrete values." - changed
Input schema / properties / variableValues / descriptionPrevious value: -"Default values for {{variables}}, keyed by variable name. NOTE: applied only when triggering via MCP trigger_workflow (merged under caller-supplied variables); REST /trigger and bot triggers ignore this field."New value: +"ONLY for explicitly dynamic workflows: default values for {{variables}}, keyed by variable name. NOTE: applied only when triggering via MCP trigger_workflow (merged under caller-supplied variables); REST /trigger and bot triggers ignore this field." - changed
Input schema / properties / workListEnabled / descriptionPrevious value: -"Work-list mode: the agent works a page list one item per run, reporting each back."New value: +"Work-list mode: the agent works a page list one item per run, reporting each back. SET THIS (with listType 'monitor') for watch-and-handle-once tasks — 'forward each new message', 'reply to new comments' — the platform then tracks handled items itself."
6 tool updates
- Added
create_agent - Changed
create_workflow1 field changed- changed
Input schema / properties / promptTemplate / descriptionPrevious value: -"The task the browser agent runs: the goal plus its stages, optionally with {{variable}} placeholders. PURE TASK ONLY — never put memory/dedup instructions here; those belong in memoryContract (the policy channel)."New value: +"The task the browser agent runs, written as a BROWSING RUNBOOK. Structure it as: `Goal:` — one sentence naming the outcome. `Ground rules (every stage, every turn):` — bullet invariants when the task needs them, e.g. work one item at a time — never batch; only record a figure you can read on screen this turn — if it is not shown record it as \"not stated\", never estimate; keep a running tally and restate it every turn (\"captured C items · written R rows\"). Then `Stage N — <Site name> (<https://url>)` — one section per website or phase, listing the concrete steps to take in the browser (open/navigate, click, read, capture, compare, flag) in the order a person would do them, each stage ending with `Done when: <verifiable completion condition>`. Finish with `Output —` stating exactly what to produce or deliver once the final tally is met, including what to say when there is no data (never fabricate a row). Use {{variables}} for per-run values. A short single-site task can be just a Goal plus its steps. PURE TASK ONLY — never put memory/dedup instructions here; those belong in memoryContract (the policy channel)."
- Added
list_agents - Added
pause_agent - Added
resume_agent - Added
update_workflow
4 tool updates
- Added
create_workflow - Added
get_workflow - Added
list_workflows - Added
trigger_workflow
6 tool updates
- Changed
browser_task1 field changed- changed
Output schema / (root)Previous value: -nullNew value: +{ + "additionalProperties": true, + "description": "Task outcome envelope: a completion (success/type/data), a pending marker (poll get_task_status), or an awaiting_input guardrail. `data` is the task output; its shape is task-defined (freeform text or the caller-supplied structured schema).", + "properties": { + "data": { + "additionalProperties": true, + "description": "Task output payload (instance-authored shape)", + "type": "object" + }, + "environment": { + "properties": { + "environmentId": { + "type": "string" + }, + "name": { + "type": [ + "string", + "null" + ] + } + }, + "type": "object" + }, + "error": { + "type": "string" + }, + "message": { + "type": "string" + }, + "pending": { + "description": "True when the task is still running — poll get_task_status", + "type": "boolean" + }, + "sessionId": { + "type": "string" + }, + "status": { + "description": "Present on guardrail results: 'awaiting_input'", + "type": "string" + }, + "success": { + "type": "boolean" + }, + "taskId": { + "type": [ + "string", + "null" + ] + }, + "type": { + "description": "Result type, e.g. 'task_completed', 'task_failed', 'guardrail_trigger'", + "type": "string" + } + }, + "type": "object" +}
- Changed
get_task_status1 field changed- changed
Output schema / (root)Previous value: -nullNew value: +{ + "additionalProperties": true, + "properties": { + "data": { + "additionalProperties": true, + "description": "Task output payload when completed (instance-authored shape)", + "type": "object" + }, + "message": { + "type": "string" + }, + "sessionId": { + "type": "string" + }, + "status": { + "description": "Task/session state: 'completed', 'failed', 'awaiting_input', 'pending', 'active', 'paused', 'orphaned', or 'not_found'", + "type": "string" + }, + "taskId": { + "type": "string" + }, + "type": { + "description": "Raw result type when the task finished", + "type": "string" + } + }, + "required": [ + "status" + ], + "type": "object" +}
- Changed
guardrail_response1 field changed- changed
Output schema / (root)Previous value: -nullNew value: +{ + "additionalProperties": true, + "properties": { + "message": { + "description": "What happened and what to do next (poll get_task_status)", + "type": "string" + }, + "sessionId": { + "type": "string" + }, + "success": { + "type": "boolean" + }, + "taskId": { + "type": [ + "string", + "null" + ] + } + }, + "required": [ + "success" + ], + "type": "object" +}
- Removed
pull_debug - Changed
screenshot1 field changed- changed
Output schema / (root)Previous value: -nullNew value: +{ + "additionalProperties": true, + "description": "Capture confirmation — the screenshot itself is returned as inline image content alongside this.", + "properties": { + "error": { + "type": "string" + }, + "message": { + "type": "string" + }, + "sessionId": { + "type": "string" + }, + "success": { + "type": "boolean" + } + }, + "type": "object" +}
- Changed
send_task1 field changed- changed
Output schema / (root)Previous value: -nullNew value: +{ + "additionalProperties": true, + "description": "Task outcome envelope: a completion (success/type/data), a pending marker (poll get_task_status), or an awaiting_input guardrail. `data` is the task output; its shape is task-defined (freeform text or the caller-supplied structured schema).", + "properties": { + "data": { + "additionalProperties": true, + "description": "Task output payload (instance-authored shape)", + "type": "object" + }, + "environment": { + "properties": { + "environmentId": { + "type": "string" + }, + "name": { + "type": [ + "string", + "null" + ] + } + }, + "type": "object" + }, + "error": { + "type": "string" + }, + "message": { + "type": "string" + }, + "pending": { + "description": "True when the task is still running — poll get_task_status", + "type": "boolean" + }, + "sessionId": { + "type": "string" + }, + "status": { + "description": "Present on guardrail results: 'awaiting_input'", + "type": "string" + }, + "success": { + "type": "boolean" + }, + "taskId": { + "type": [ + "string", + "null" + ] + }, + "type": { + "description": "Result type, e.g. 'task_completed', 'task_failed', 'guardrail_trigger'", + "type": "string" + } + }, + "type": "object" +}
13 tool updates
- First observed
browser_task - First observed
create_session - First observed
get_task_status - First observed
guardrail_response - First observed
list_environments - First observed
list_sessions - First observed
pause_session_task - First observed
pull_debug - First observed
resume_session_task - First observed
screenshot - First observed
send_task - First observed
stop_session_task - First observed
terminate_session
Frequently Asked Questions
Claiming proves that you control a remote MCP connector. It does not move, proxy, or interrupt the server.
Open the connector listing, choose Claim ownership, and sign in to Glama.
Complete one verification method:
GitHub identity — fastest for official registry listings. For a namespace such as
io.github.alice/server, link the matching GitHub user, then choose Claim with GitHub. An organization namespace such asio.github.acme/serveralso needs that organization to have installed the Glama AI GitHub App and approved its permissions, because GitHub discloses organization membership only to apps it has installed. Use HTTP or DNS when it has not.HTTP challenge — works when you can deploy a public file. Generate a token, publish the exact JSON Glama shows at
/.well-known/glama.jsonon the same origin as the connector, then choose Check HTTP challenge.DNS challenge — works when you control DNS but cannot change the server. Generate a token, create the exact TXT record Glama shows, wait for it to propagate, then choose Check DNS challenge.
After verification, Glama sends a confirmation email and gives you access to listing details, thumbnails, health checks, and analytics. Keep the HTTP file or DNS record in place: Glama periodically checks it and ownership remains verified while the token is discoverable.
The HTTP ownership file has this structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"claim": "glama_claim_..."
}Claim tokens are opaque, stable, and bound to the signed-in Glama account. They contain no email address or other personal information. If Glama can no longer discover a verified HTTP or DNS token, it starts a seven-day grace period before removing claim-based access. Restore the same token during that period to keep ownership verified. Never publish an email address, Glama session token, GitHub token, or connector credential as ownership proof.
If verification fails, confirm that you copied the current token exactly. The HTTP file must be public, return valid JSON with a successful HTTP response, and stay on the connector's origin. DNS changes may need more time to propagate. A claim cannot transfer to a different origin or hostname: if the connector target changes, Glama starts the grace period and the new target must be claimed separately after the previous claim is released.
For a connector linked to the official MCP Registry, registry updates continue to replace its name, description, and URL by default. After claiming, open Manage connector and enable Use Glama listing details as the source of truth if edits made on Glama should be preserved. Categories and thumbnails are always managed on Glama; registry linkage and technical connection settings continue to sync.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
To improve your MCP server's ranking:
Claim ownership of the server listing
Complete the server profile with an accurate description and thumbnail
Provide a test profile so Glama can connect to and evaluate the server
Keep tool definitions clear and complete to earn a high Tool Definition Quality Score (TDQS)
Route real usage through the Glama Gateway; more recorded successful server uses also improve the ranking
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Connectors
Automate cloud Chrome—navigate, click, type, screenshot, run code, record screen video
Hosted real Google Chrome MCP with per-user persistent state. Navigate, click, type, screenshot.
Stealth web automation for AI agents. Login, signup, navigate, screenshot.
Stealth web automation for AI agents. Login, signup, navigate, screenshot.
Related MCP Servers
- AlicenseBqualityAmaintenanceControls a real Chrome browser for AI agents, enabling authenticated automation with parallel lanes, token-efficient page reads, and robust recovery mechanisms.100114236MIT
- AlicenseAqualityBmaintenanceEnables AI agents to drive your real, logged-in Chrome browser with existing sessions and cookies, bypassing CAPTCHA and anti-bot measures, with support for multi-session and human-in-the-loop workflows.4036MIT
- AlicenseNot gradedqualityBmaintenanceAutomate your real Chrome browser locally with AI, supporting vision, human-like input, code execution, macros, and watchdogs.15MIT
- AlicenseNot gradedqualityAmaintenanceEnables AI agents to run durable, isolated, and observable browser automation tasks via Playwright, with persistent profiles, recovery, evidence capture, and unattended execution for long-running web workflows.2MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.
TDQS
Each tool targets a distinct resource and action: ad-hoc tasks (browser_task), persistent sessions (create_session/send_task), workflows (create/get/update/trigger), agents (create/list/pause/resume), and session control (pause/resume/stop/terminate). The descriptions explicitly disambiguate overlapping-looking tools like browser_task vs trigger_workflow, making accidental misselection unlikely.
The vast majority follow a clear verb_noun pattern (create_workflow, list_agents, pause_session_task, trigger_workflow, etc.). Minor deviations exist: browser_task and guardrail_response are noun_noun, and screenshot is a single word, but these are understandable and do not disrupt the overall pattern.
With 21 tools the set is on the heavy side, fitting the 16-25 borderline range. Each tool has a distinct purpose, but the count feels slightly inflated due to granular session/task control (pause, resume, stop, terminate) and separate workflow/agent management that could potentially be consolidated.
Workflows have create/read/update/list/trigger coverage, and sessions/tasks have robust lifecycle control, but there are notable gaps: no delete_workflow or delete_agent, and agents lack update functionality. While core automation flows are supported, lifecycle management is incomplete without deletion or editing of scheduled agents.