agent.tools v1.0.0 Tool Agent
LLM agent with iterative tool calling.
- In
- Prompt
- Out
- Output · Tool Calls · Usage
Every operator declared under /opt/glyph/schemas/operators/ is listed below. The page is auto-generated at build time from the JSON schemas, so the catalog cannot disagree with the runtime registry.
For deeper per-family reference pages — config tables, port lists, source schema paths — see Operators by family. The same JSON schemas drive both views; the family pages are emitted by docs/scripts/gen-operator-catalog.mjs.
For the conceptual story behind operators, see Why operators (not custom code).
agent.tools v1.0.0 LLM agent with iterative tool calling.
cache.entry v1.0.0 Caches step results by key with configurable TTL.
code.sandbox v1.0.0 Evaluates CEL expressions or JavaScript in a sandboxed environment.
connector.action v1.0.0 Executes an action on a connected external service.
connector.invoke v1.0.0 Calls a third-party API through a tenant-scoped connector credential (OAuth2, API key, basic, bearer).
connector.list_resources v1.0.0 Lists resources of a given kind from a connector (e.g. customers, charges). Dispatched by connector_kind to per-kind handlers.
connector.search v1.0.0 Searches a connected external service.
data.list v1.0.0 Operation-rich list manipulation: map, filter, sort, chunk, flatten, dedupe, aggregate, split.
data.object v1.0.0 Operation-rich object manipulation: assign, select, rename, merge.
data.parse v1.0.0 Converts between formats: JSON, CSV, markdown table, URL-encoded, plain text.
db.mutate v1.0.0 Executes one or more INSERT/UPDATE/DELETE statements as a single transaction under tenant RLS. Each statement is allowlisted (no DDL) and parameterised. Writes an audit row to glyph.operator_audit on commit.
db.query v1.0.0 Executes a parameterized SQL query.
document.clone v1.0.0 Duplicates a source document into a new document row, copying all four subdoc snapshots (graph, draw, meta, comments). Defaults to the current run's document. Collaborators are not copied.
document.extract v1.0.0 Extracts text, tables, or metadata from documents (PDF, DOCX, etc.).
document.list_collaborators v1.0.0 Returns the collaborator roster for a document with their permission bits. Defaults to the current run's document. The email and name fields are surfaced as null — the collaborator row carries only the opaque user id.
document.publish v1.0.0 Captures all four subdocs of the target document (graph, draw, meta, comments) into a new revision row, marks the revision as published, and sets it as the document's published_revision_id.
eval.assertion v1.0.0 Evaluates a CEL boolean expression against merged inputs and fails the step if it returns false.
eval.grade v1.0.0 Scores a response against a rubric using an LLM judge. Returns a score, justification, and per-criterion results.
eval.regex v1.0.0 Native regex match/find_all/replace against a target string.
eval.score v1.0.0 Scores output quality against a reference or rubric.
guardrails.check v1.0.0 Validates text against safety/compliance rules.
guardrails.cost_cap v1.0.0 Compares the run's accumulated USD spend against a hard cap. Fails or throttles when exceeded.
guardrails.input_filter v1.0.0 Scans an input string for PII / prompt injection / jailbreak patterns and can fail, redact, or flag.
guardrails.output_filter v1.0.0 Validates an output against a JSON schema, truncates by max_tokens, and (optionally) runs an external toxicity check.
http.request v1.0.0 Makes an HTTP request to an external URL.
human.approval v1.0.0 Pauses the run and waits for human approval before continuing.
human.input v1.0.0 Pauses the run and requests manual data entry.
input.file v1.0.0 References a file from storage.
input.json v1.0.0 Provides a static JSON value.
input.sample_data v1.0.0 Provides sample input data for testing workflows.
input.secret v1.0.0 Binds a named secret for use downstream.
input.text v1.0.0 Provides a static or template text value.
knowledge.delete v1.0.0 Removes chunks from a knowledge namespace, optionally scoped to a single doc_key.
knowledge.list v1.0.0 Paginates chunk metadata for a knowledge namespace.
knowledge.search v1.0.0 Semantic search over a pgvector knowledge namespace via cosine similarity.
knowledge.upsert v1.0.0 Chunks, embeds, and persists text into a pgvector-backed knowledge base.
logic.if v1.0.0 Routes data based on a CEL condition.
logic.iterate v1.0.0 Fans out: executes downstream once per item in input array.
logic.join v1.0.0 Waits for all upstream branches before continuing.
logic.loop v1.0.0 Repeats a subgraph until a condition is met or max iterations reached.
logic.switch v1.0.0 Routes data to one of N branches based on a CEL expression.
logic.wait v1.0.0 Pauses execution for a specified duration.
logic.wait_for_event v1.0.0 Suspends until a matching external event or timeout.
media.generate v1.0.0 Generates an image from a text prompt via OpenRouter (or any OpenAI-compatible image endpoint). Persists the image to tenant storage.
media.ocr v1.0.0 Extracts text from an image using a vision-capable LLM. Counts against the tenant AI budget.
media.process v1.0.0 Processes images, audio, or video (resize, transcribe, extract frames).
media.transcribe v1.0.0 Transcribes audio to text via a Whisper-compatible endpoint. Counts against the tenant AI budget.
media.transform v1.0.0 Applies local image transformations (resize, re-format, strip metadata). No external API call.
model.classify v1.0.0 Classifies text into predefined categories using an LLM.
model.embed v1.0.0 Generates vector embeddings from text.
model.extract v1.0.0 Extracts structured data from text using an LLM with a JSON schema.
model.rerank v1.0.0 Reranks documents by relevance to a query.
model.respond v1.0.0 Sends a prompt to an LLM and returns generated text.
output.export v1.0.0 Exports output as a downloadable file.
output.notify v1.0.0 Sends a notification via email, Slack, webhook, etc.
output.persist v1.0.0 Writes output data to a persistent store.
output.preview v1.0.0 Displays output in the run console for debugging.
output.return v1.0.0 Returns the final workflow output.
prompt.messages v1.0.0 Constructs a multi-turn chat message array for LLM consumption.
prompt.template v1.0.0 Renders a prompt string from a Handlebars/Jinja-style template.
storage.object v1.0.0 Reads or writes objects in S3-compatible storage.
tools.call v1.0.0 Invokes one of the built-in tools (calculator, datetime, regex_match, json_path, http_fetch).
tools.list v1.0.0 Returns the static catalog of built-in tools and their argument schemas.
tools.mcp v1.0.0 Connects to an MCP server and exposes its tools.
trigger.chat v1.0.0 Starts a run from a chat message.
trigger.connector v1.0.0 Starts a run on an external connector event.
trigger.form v1.0.0 Starts a run from a submitted form.
trigger.manual v1.0.0 Starts a run when a user clicks Run.
trigger.schedule v1.0.0 Starts a run on a cron or interval schedule.
trigger.webhook v1.0.0 Starts a run when an HTTP webhook is received.
trigger.workflow v1.0.0 Starts a run when called by another workflow.
vars.state v1.0.0 Reads or writes persistent workflow-scoped state variables.
web.fetch v1.0.0 Fetches content from a URL.
web.scrape v1.0.0 Fetches a URL through the SSRF-guarded HTTP client and extracts the main article body in markdown / text / html, plus lightweight metadata (author, description, published, site).
web.search v1.0.0 Searches the web using a search API.
workflow.call v1.0.0 Calls another published workflow as a child run.
workflow.invoke v1.0.0 Invokes another deployment as a child run with depth-limited recursion. Calls the engine directly (no HTTP self-loopback) and enforces customer scoping at both the SQL and handler layer.
workflow.return v1.0.0 Terminates the current run early with an explicit value. The DAG scheduler detects the terminal marker on this step's output and finalises the run as completed, skipping any remaining downstream steps.