ci_create_binding
Authorize a CI workflow to deploy a project by submitting a signed delegation. Specify the GitHub subject, allowed events, and optional route scopes for deployment.
Instructions
Create a GitHub Actions CI/OIDC deploy binding by sending a locally signed delegation to the SDK. This MCP wrapper does not sign or broaden authority; the signed delegation defines the repository/branch or environment, allowed events/actions, and optional route_scopes. Without route_scopes, CI cannot deploy route declarations.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| project_id | Yes | Project ID the CI binding may deploy to. | |
| provider | No | CI provider. V1 supports only github-actions; omitted defaults to github-actions. | |
| subject_match | Yes | GitHub Actions OIDC subject match, e.g. repo:owner/repo:ref:refs/heads/main. | |
| allowed_actions | Yes | Allowed CI actions. V1 supports only deploy. | |
| allowed_events | Yes | Allowed GitHub event names, typically push and workflow_dispatch. | |
| route_scopes | No | Optional route delegation scopes, normalized by the SDK. Use exact paths like /admin or final wildcard prefixes like /api/*. Omit or pass [] for no CI route authority. | |
| github_repository_id | No | Numeric GitHub repository id to pin the binding to, or null if absent. | |
| expires_at | No | Optional ISO timestamp when this binding expires. | |
| nonce | Yes | Lowercase hex nonce included in the signed delegation. | |
| signed_delegation | Yes | Base64 SIGN-IN-WITH-X delegation signed locally by the allowance wallet. This MCP tool does not sign; it only sends the signed delegation to the SDK. |