Check the configured agy binary and bridge version without enabling a project or consuming a model turn.

Check whether one exact project root is initialized, trusted, read-authorized, and linked to an active AGY conversation. Does not call a model.

Initialize .antigravity-mcp in one exact project root and atomically add only that root to Antigravity trustedWorkspaces and read_file allow rules. Call only after the user explicitly requests AGY. Does not call a model.

Remove only one project's exact Antigravity trusted workspace and read_file rule, mark it disabled, and preserve all local session and run history.

Create a new AGY conversation for an enabled project, save it as active, and return its conversation ID. Consumes one Antigravity model turn.

Return the active AGY conversation ID for a project without calling a model.

List recent persisted AGY delegation and conversation events for one project without calling a model.

Read the official AGY transcript for a conversation registered to this project, filter internal thinking/system/checkpoint records, and update the project-local visible transcript mirror. Does not call a model.

Refresh and return the bounded project-local user/assistant/tool transcript for a registered AGY conversation. Internal thinking, system messages, and checkpoints are never returned.

Start a new read-only AGY analysis conversation for an enabled project and persist it as active.

Continue a specified conversation or the project's active AGY conversation and persist the result.

Start a read-only evidence-oriented review for an enabled project and persist the conversation.

For an enabled project, ask AGY for schema-validated file replacements, apply only validated paths to a disposable copy, optionally run one fixed verification, and never merge into source.

List recent isolated execution runs for one project.

Read one project's run response, token usage, verification output, changed-file manifest, and optional external events.