Invoke connector tool
well_invoke_connector_toolRun one tool on a connected provider's own MCP server, on behalf of this workspace's connection: an action the user asked to take there (create a record in Attio), or a read of content Well does not sync (a page in a docs tool, a note in a CRM, a file the user pasted a link to).
It is NOT a way to read financial data: Well already syncs invoices, transactions, accounts and the accounting graph from every connected provider — read those with well_query_records instead of calling a provider's own list/read tools. The one exception is a report the accounting tool builds and Well does not sync, such as a QuickBooks or Xero profit and loss or balance sheet: read that report with this tool, and state its lines as returned.
WORKFLOW:
well_list_connectors() → pick the connected provider (connection_status "enabled" or "processing": a connection whose sync was started still serves its tools) and read its workspace_connector_id directly off the row. A workspace_connector_id the user pasted is fine to use as-is: it is resolved inside this workspace, and an id that does not belong here fails server-side.
well_list_connector_tools({ workspace_connector_id }) → the live tool names + input schemas that connection actually exposes right now.
well_invoke_connector_tool({ workspace_connector_id, tool: "<one of the names from step 2>", args: { ... } }).
Only works on connectors that expose an MCP server (e.g. Attio, Notion, Linear) and whose connection is enabled or processing (a sync was started on it). A read-only tool runs at once. A write tool that Well reviewed for that provider waits for the user's approval in Well: the first call runs nothing and returns status "pending_confirmation" with a confirmation_request_id. Tell the user to approve the request in Well, then call again with the same arguments and that confirmation_request_id. A confirmation_request_id runs one call only: never reuse it, and never pass one the user did not approve. Any other write tool is refused: tell the user that the action is not available and do not retry it. Returns the provider's tool result, or { success: false, error } if the tool failed / is not granted.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| args | No | Arguments object passed straight to the provider tool. Omit if the tool takes none. | |
| tool | Yes | The provider tool name to run (one of the connector's available_tools). | |
| workspace_id | No | Target workspace. Omit when the token authorizes one workspace. Required when it authorizes several — a write lands in exactly one workspace and this call would not say which. | |
| conversation_id | No | The conversation id returned by the previous Well result, in its meta under well/conversation_id, in its structuredContent, or in its JSON text block. Pass it back on every call in the same conversation, including a call a card makes, so the chosen workspace and the earlier answers still apply. It decides the conversation on its own: nothing the host states about the session replaces it. Omit it only on the first call of a conversation. | |
| idempotency_key | No | Optional client-supplied key. A retried write with the same key returns the original result instead of re-applying the operation. | |
| workspace_scope | No | Restrict this call to the family: the token's primary workspace plus the company workspaces under it that you are a member of. Unrelated authorized workspaces drop out of the read; row reads merge across the family, while a per-workspace figure still reports exactly one workspace. | |
| workspace_connector_id | Yes | The connected provider's workspace_connector_id (from well_list_connectors). | |
| confirmation_request_id | No | The confirmation_request_id a pending_confirmation result returned, once the user approved it in Well. Omit on the first call. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| tool | No | ||
| error | No | ||
| result | No | ||
| status | No | ||
| success | Yes | ||
| always_ask | No | ||
| error_code | No | ||
| conversation_id | No | The conversation this result belongs to. Pass it back as the conversation_id argument on every later Well call in the same conversation. | |
| newly_connected | No | Tools that connected to this workspace since the last result and that no session was told about yet, oldest first. Present only when at least one tool is new. The connected-line rule says when to tell an entry; when it does, one line per entry, in the person's language: "<name> is connected.". Never fold several entries into one sentence. Each entry comes back once, on one result only: never repeat its line later. | |
| conversation_id_note | No | Present only when the server opened a fresh lane, stating that no choice recorded earlier was read. | |
| conversation_id_source | No | Where the conversation id came from: the host's own request meta, the caller's argument, or a fresh lane the server opened. | |
| untrusted_content_note | No | ||
| confirmation_request_id | No |