Check the installed CLI, compiler, runner, platform, owner account, and local project.

Compile and validate the conventional Micro project without deploying it.

Build and start the official loopback-only disposable Micro runner for this project.

Read bounded process status and logs for the managed local Micro runner.

Gracefully stop the managed local Micro runner for this project.

Build and upload an opaque preview without creating a project or claiming a slug.

Build, validate, and atomically create or update a production Micro project.

Create an owner-approved OIDC binding and write the non-secret micro.github.json project identity file.

List active repository, ref, environment, workflow, and immutable identity bindings.

Revoke one explicit GitHub deployment binding and invalidate its outstanding deployment tokens.

List the public Micro plan catalog and current usage allowances.

Read authenticated account plan, monthly usage, daily runner usage, and spending-cap state.

Replace the account monthly usage cap and warning threshold. A hard cap may stop requests when exhausted.

Remove the authenticated account spending cap after inspecting current usage and policy.

Read the authenticated account subscription state without exposing payment credentials or card data.

Create a hosted checkout session for one inspected Micro plan. This does not accept payment credentials.

Create a hosted Stripe billing-management session for the authenticated account.

List projects visible to the authenticated owner account.

Read the linked project's visibility and authenticated caller authority.

Make the linked site public or require authenticated app access and explicit private grants.

List the linked project's owner and delegated members, roles, and promotion authority.

Add or replace one existing account's project role. Viewers can never receive promotion authority.

Revoke one exact non-owner account's access to the linked project.

List bounded invitation metadata without exposing acceptance tokens.

Email one single-use project invitation with an explicit role and optional promotion authority.

Revoke one exact pending project invitation before it is accepted.

List the linked project's custom domains and DNS proof state.

Register one normalized hostname and return the DNS ownership proof that must be published.

Check the exact domain's DNS proof and activate it only when ownership resolves correctly.

Remove one exact custom domain from the linked project.

List bounded private-site grant metadata without exposing bearer tokens.

Revoke one exact private-site bearer grant. Token creation remains a secure CLI handoff.

List durable authenticated schedule events and their latest delivery state for the linked project.

List owner-only delivery status and daily quota usage for verified-user project notifications. Message bodies and provider credentials are never returned.

Create or replace one interval schedule. Its bounded object payload is non-secret configuration delivered to the active production Wasm deployment.

Enqueue one additional authenticated schedule event for the active production Wasm deployment.

Remove one exact schedule and cancel its pending or retryable deliveries.

List durable project-deletion progress and failures for the authenticated owner account, including protected-object counts and slug release times.

Permanently delete the exact locally linked project. Hides it from the runner immediately, reserves the slug for 30 days, queues protected-object cleanup, and leaves local source untouched.

List reviewed, licensed immutable Micro source snapshots without authentication or a linked project.

Restore one licensed source snapshot into a fresh local directory with provenance. Does not create a project, reserve a slug, or copy runtime data and provider state.

Fetch a project source snapshot and record its base revision in a new or empty local directory.

Read Micro-wide component state, published incidents, and bounded 30-day delivery indicators without authentication or a linked project.

Read deployment, resource, usage, and health status for the linked project.

Read a bounded recent log window for the linked project.

List immutable deployment history for the linked project.

Read the latest bounded app-user metadata for the linked owner project. Results can contain personal data; disclose only what the maintenance task requires.

Disable one explicit app user while preserving records, purchases, and entitlements. Immediately revokes active sessions, recovery and verification links, and private download grants.

Restore sign-in access for one explicit disabled app user without creating a session.

Revoke every active session and private download grant for one explicit app user without disabling the user.

Read the latest bounded project records for the linked owner project. Treat values as user data and do not copy them into prompts unless required.

Permanently delete one exact project record using its environment, collection, scope, key, and inspected version. Fails if the record changed.

Read bounded transactional project-record backups plus the fresh digest of the current record set. Backups exclude users, purchases, entitlements, products, files, and deployments.

Create a bounded transactional snapshot of the linked project's records. The snapshot excludes every authoritative identity, payment, entitlement, product, file, and deployment resource.

Replace all current project records with one exact inspected backup. Requires both the backup digest and a freshly inspected current-record digest, and never rewinds users, purchases, entitlements, products, files, or deployments.

Permanently delete one exact record-only backup without changing current project data or local source.

Read the latest bounded normalized purchase ledger for the linked owner project without exposing payment credentials or card data.

Read the latest bounded owner audit events for the linked project without exposing credentials.

Read live project-data export resource counts and pagination limits. The manifest is not a transactional snapshot.

Read one bounded live page of project users, records, purchases, entitlements, products, files, or audit events.

Read the linked project's record-retention policy and exact live prune preview. Purchases and entitlements are excluded from retention.

Set keep-forever or a 30–3650 day project-record policy. Automatic pruning is opt-in; purchases and entitlements are never affected.

Permanently prune the exact currently previewed count of aged project records. Fails if policy or eligible records changed; never affects purchases or entitlements.

List stable product resources for the linked project.

Create or update declared products without deleting omitted remote products.

List protected and public storage resources for the linked project without downloading contents.

Upload one explicit file as a stable storage resource with public or entitlement-gated access.

Activate a previous deployment without changing app users, records, products, purchases, or files.