Token-economy playbook for host agents: when to consult vs execute, how to poll compact receipts, and VPS offload tips. Call once; prefer over re-planning. Read-only, no secrets.

Check whether the running bridge is behind its git remote, and update it. Without confirm it only reports and returns the exact steps it would run. With confirm=true it pulls and reinstalls, then asks you to restart the MCP host -- the server cannot restart itself. Refuses if the checkout is dirty.

Read or set this project's Grok preset (.grok-mcp.json). Without preset it reports whether the project opted in and lists the presets: off, cheap, standard, max. With preset it writes the file. Job tools refuse a project that has no config, so call this first when they report PROJECT_NOT_ENABLED.

Session Protocol v1.2: begin session with plan compiler + budget guard. Pass intent, optional goal (≤500), host_budget tiny|small|normal. Returns mode, plan[≤5], budget, deny_tools, host_script, skill_ref. Call first.

Session Protocol v1.2: compact progress + budget. Returns step, steps_left, budget_remaining, force_end. Pass tool_used/step_done to count budget. verbose default false.

Session Protocol v1.2 navigator: ONE next action card (host_cmd|mcp_tool|end). Host loops this until done=true.

Session Protocol v1.2: short receipt (status/job/changed/tests/next). Optional suggest_issue returns scrubbed issue draft (no auto-create).

Version/auth-presence, exact roots, transport router, daemon and durable job status. Read-only.

Asynchronously start a versioned typed task packet on an explicit legacy|stdio|websocket transport. auto means stdio only.

Read bounded progress/events and the final evidence receipt for a typed job.

Boundedly cancel one typed job without stopping the MCP server.

Start an isolated read-only consult session; non-git exact allowlisted roots are supported.

Start an independent read-only skeptic session over supplied evidence/diff inputs.

Start workspace execution in a git worktree. completed requires a real diff and requested evidence.

Start a separate workspace fixer session scoped to confirmed findings in the task packet.

Delegate a coding goal to local headless grok in an isolated git worktree on a grok/* branch. Returns branch + diffstat. No push, no merge, no --always-approve. Dev-only — not the product admin-bridge.

Read-only plan variant of grok_delegate (plan_only=true). Does not allow write/edit/shell mutation in the permission profile.

Start grok_delegate in the BACKGROUND and return a job_id immediately. Use this instead of grok_delegate for real lanes: a lane runs for minutes and a synchronous call is killed by the client timeout, leaving an empty worktree. Poll with grok_delegate_poll. Same guarded profile, no push, no merge.

Poll a background delegation started with grok_delegate_start. With job_id: that job's state and result (branch, changed_files, commits, diffstat), plus live progress while running — phase (preflight/worktree/worktree_recover/anchors/executor/collect), elapsed_s, phase_elapsed_s, last_step, and worker_pid once the executor is spawned. A dispatch spends its first minutes in git with no process and no lane directory to see: that is normal, and phase is how you tell it apart from a stuck server. Without job_id: newest job summaries. Read-only.

Structured health status: grok binary/version, auth presence (without reading auth.json), git availability, allowed roots/lanes_parent, permission and sandbox profile info. Read-only.

Run grok doctor --json only (never doctor fix). Read-only diagnostic JSON.

List available models via grok models. Read-only; no secrets.

Run grok inspect --json for an allowlisted project root. Read-only.