Create a new API endpoint. Creates the action folder with main.py and module file.

Invoke an API action and return its JSON result. Executes ops invoke with the given endpoint and key=value parameters.

Add a library to an endpoint's requirements.txt. Skips if the library is preinstalled.

Add a secret to an endpoint's context. The secret must exist in .env.

Add a bucket-scoped S3 connection to an endpoint's context. Provides ctx.S3_CLIENT, ctx.S3_DATA, ctx.S3_WEB, ctx.S3_PUBLIC. Never call list_buckets; verify read/write with put_object, get_object plus content comparison, and delete_object in ctx.S3_DATA.

Add PostgreSQL connection to an endpoint's context. Provides ctx.POSTGRESQL.

Add Redis to one endpoint as ctx.REDIS and ctx.REDIS_PREFIX. For authenticated pages, every login/registration, me/session, protected-resource, and logout endpoint must be wired; use auth_setup to configure the complete set atomically. Authentication uses opaque random tokens stored server-side in prefix-safe Redis keys with a bounded TTL, never JWT or an application signing secret.

Add Milvus vector DB connection to an endpoint's context. Provides ctx.MILVUS.

Add MongoDB connection to an endpoint's context. Provides ctx.MONGODB_CLIENT and ctx.MONGODB.

Report whether a secret exists and is bound to selected endpoints without reading or returning its value.

Atomically bind one existing .env secret to multiple OpenServerless endpoints as ctx..

Atomically remove one generated secret binding from multiple OpenServerless endpoints without deleting the secret value.

Atomically add Redis session wiring to the complete authentication surface: token issuers (login/registration), token validators (me/session and every protected resource), and logout. This tool never reads or writes .env. Generated auth must use bcrypt password verification plus a cryptographically random opaque token stored as a prefix-safe ctx.REDIS_PREFIX key with a bounded TTL; protected endpoints derive identity from Redis and logout deletes the record. JWT and application signing secrets are forbidden.