Wagglet

1. 01

   Enable MCP Access for the Team

   A person with the Team setting permission enables MCP access in Team settings. Disabling it later rejects all connection requests immediately without deleting the connections.
2. 02

   Create a personal MCP Connection

   In Profile → MCP connections, give the client a recognizable name and create it. Wagglet shows the MCP Token once and retains only its hash. Save it in the client's protected credential store, not in a repository, prompt, URL, or screenshot.
3. 03

   Configure the Wagglet endpoint

   Point the MCP client at the canonical HTTPS endpoint and send the token in the Authorization header. The public endpoint link is useful for configuration, but a browser visit without MCP authentication is not a workspace login.
4. 04

   Verify current identity before work

   Call whoami first. Use its Team, identity, roles, permissions, and the current tools/list schemas as authority. Tool names and schemas can evolve; a copied old catalog is not the source of truth.

URL     https://wagglet.com/api/mcp
Header  Authorization: Bearer <your MCP token>

1. 01

   Discover identifiers

   Use bounded search and list tools for tickets, Stories, and people. Continue through cursors when the requested population is larger than one response.
2. 02

   Read the complete authorized record

   Fetch the ticket or Story before changing it. Keep the returned record and item revisions for the intended mutation. Recurring Template records include their structured schedule; scheduled Occurrences include their template provenance.
3. 03

   Use the matching lifecycle command

   Choose the explicit Wagglet action. Give each intended mutation a fresh operationId; reuse it only to retry that exact operation after an uncertain network result.
4. 04

   Reconcile conflicts and confirmations

   On STALE_REVISION, read again and reconcile with current state. On CONFIRMATION_REQUIRED, show the impact to the user and continue with that tool's required confirmation fields against the same current revision only after approval.

[!note] Note Retry rule

An operation id is scoped to its connection. Repeating the same intended mutation returns its stored first result instead of repeating the action. Reusing that id for different arguments or a different tool is an error, not a shortcut. Stored ticket results are reauthorized before replay.

[!note] Note Collaborator changes

set_ticket_collaborators replaces the complete collaborator list and is available only to the ticket creator. get_ticket returns the current collaborator identities: read them first, preserve everyone who should remain, and use the returned revision if another ticket edit runs first. Removing somebody returns the exact names and a short-lived server-issued confirmation token because it revokes their private Draft access and other permitted co-owner actions.

[!note] Note Recurring Templates

create_recurring_template converts an owned Draft or unclaimed Open ticket into a Team-visible, unpublished Recurring Template. Use update_recurring_schedule for its weekly or interval-days cadence and generation options, and set_recurring_template_active to activate or pause it. Each successful command consumes the current ticket revision and returns the next one. Search with publication: "all" to discover templates. The template stays off-board; its scheduled Occurrences are ordinary published tickets.

Current checks

Connection revocation, Team MCP setting, current membership, roles, effective permissions, and the connection's Team are checked on every request.

Private Drafts

Only the creator and collaborators can see them. Everyone else receives no identifier, count, relationship, or existence signal.

Human-only tasks

MCP may expose safe planning metadata but not the dormant agent prompt or Human instructions, and it cannot perform the reserved agent lifecycle actions.

Attachments

Every MCP read reauthorizes task visibility. Bounded text and images may return inline; other files use short-lived download access.

Analytics

Outcome analysis requires the dedicated analytics permission and returns bounded product evidence, never arbitrary SQL or an invented stored taxonomy.

Action records

A successful mutation records its connection, person, tool, target, and time. Authored content, arguments, credentials, reads, and refusals are not copied into that origin record.

• Rotate a connection when its credential may have been exposed.
• Revoke clients you no longer use; revoked credentials fail on the next request.
• Team disablement preserves connections so they remain visible and revocable, but they cannot be used until access is enabled again.
• MCP Connections have no automatic expiry. Review names, creation time, and last-use time as part of normal Team access hygiene.

For one claimed task, use Task Handoff. Its starting credential is read-only, claim-rooted, and short-lived; delivery arrives separately. Whichever path you choose, use your own provider account and keep delivery, acceptance, merge, and deployment truthful and separate.