Return the workspace this connector is bound to, plus the key role/scopes. Call this first to confirm which workspace and what capability (read vs write, ADMIN) you have.

Return server/tenant metadata for the connected workspace.

Return tenant data to fill argument values: brands, portals, personas, installed apps (with their widget keys), and connected providers. Use this to discover valid ids before creating or editing.

Search the full operator API contract (from /v1/openapi.json) for operations not covered by a curated tool. Returns operationIds usable with kilango_call_operation.

Return the method, path, path/query params, whether it needs If-Match, and whether it is a write for a given operationId. Use before kilango_call_operation.

List portals in the workspace. Optional filters: kind, status, brandId, q (free text). Paged with cursor.

Fetch one portal by uuid or slug. Returns counts, domains, urls, navigation, theme overrides, and the navigation ETag.

Create a portal in a brand. With seedHomePage (default true) it gets an "overblik" page + a navigation entry and starts as DRAFT with a preview token. Slug is not editable after creation.

Update a portal (name / kind / defaultPersonaId). Slug cannot be changed.

Return { ready, blockers[], warnings[] } for a portal. Each problem carries a code and whether it is overridable. Check before publishing.

Publish a portal (idempotent). Pass force=true to publish despite overridable readiness blockers.

Take a portal offline (back to DRAFT).

Archive a portal. Requires an ADMIN key.

Return { previewUrl, token } for previewing a DRAFT portal.

Return the portal navigation tree { navigation, etag }. The etag is needed to save navigation.

Replace the portal navigation tree (whole-document write). Each entry is { pageSlug, label, icon? }. The current ETag is fetched and sent as If-Match automatically; a concurrent change makes it retry once.

Delete a portal. Requires an ADMIN key. Refuses if it has pages or accesses unless force=true.

List the pages of a portal, ordered by sortOrder.

Fetch one page (by slug or id) including its layout.

Return the ordered blocks of a page. Each block has a stable blockId; app-widget blocks carry a widgetInstanceId.

Create a page in a portal. sortOrder controls page order in navigation. Layout is added separately with kilango_save_page_layout / kilango_add_content_block.

Update a page (title / sortOrder / visibility).

Delete a page. Requires an ADMIN key.

Replace the whole page layout (a Puck payload { root, content: [...] }). Whole-document write: the current ETag is fetched and sent as If-Match automatically. Preserve each app-widget block's widgetInstanceId verbatim, or the widget row is recreated.

Add a Hub-native content block (e.g. Heading, RichText, WidgetGrid) to a page at an optional position (at most one of index/before/after).

Update a content block's props and/or move it (position). Position is at most one of index/before/after.

Remove a block from a page.

Place an app widget on a page. The app must be installed AND activated in the portal first (otherwise the app_not_activated_in_portal error names the fixing call). Visual position follows the widget's renderRole tier — read the returned rendering note; index 0 is not necessarily top of page.

Update an app-widget block's config and/or position.

Remove an app-widget block from a page.

Move one block to a new position (index, or before/after another blockId). Fetches the current order, computes the complete permutation, and calls reorder with If-Match. Position within a render tier follows the widget renderRole, so the visual result may differ from the array index — read the rendering note.

Set the full block order on a page. order must be a complete permutation of every existing blockId (no adds/drops). Sent to reorder with If-Match.

List installable apps with their manifests (appClass, authMode, connectionFields, widgets).

Return one app manifest: appClass, authMode (apikey/oauth), the connectionFields a human must supply, and its widgets (widgetKey + renderRole).

List providers and their scope capabilities.

List apps installed in the workspace.

Return the installation record (pinned manifest version, config, status) for one app.

Install an app into the workspace (idempotent; pins the manifest version). Installing does NOT make it visible — activate it per portal with kilango_activate_app_in_portal. For apps that need credentials, use kilango_connect_app instead.

Uninstall an app from the workspace. Requires an ADMIN key. Cascades: removes its widgets from all pages.

List which installed apps are activated in a given portal.

Activate an installed app in a portal (precondition for placing its widgets). Optional per-portal config.

Deactivate an app in a portal. Cascades widget removal within that portal.

Install and connect an app to its backend. For apps that need credentials (API key), returns a one-time browser URL where the operator enters the secrets — they go straight to Kilango's vault, never through this chat. Apps without credentials are installed (and activated if a portal is given) immediately. OAuth apps are not connectable yet.

List the workspace's backend connections (one per provider). Secrets are never returned.

Return the connection for one provider (status/health, never the secret).

Verify a connection's credentials against the source system.

Remove a backend connection (drops the stored secret from Kilango's vault).

Escape hatch: call any operator API operation by its operationId (discover ids with kilango_search_operations / kilango_describe_operation). Provide path params, query, and body separately. If-Match operations fetch and send the current ETag automatically. Mutating calls are gated by KILANGO_ENABLE_WRITES and by the API key's own scopes.