Wagglet

1. 01

   Enable MCP Access for the Team

   A person with the Team setting permission enables MCP access in Team settings. Disabling it later rejects all connection requests immediately without deleting the connections.
2. 02

   Create a personal MCP Connection

   In Profile → MCP connections, give the client a recognizable name and create it. Wagglet shows the MCP Token once and retains only its hash. Save it in the client's protected credential store, not in a repository, prompt, URL, or screenshot.
3. 03

   Configure the Wagglet endpoint

   Point the MCP client at the canonical HTTPS endpoint and send the token in the Authorization header. The public endpoint link is useful for configuration, but a browser visit without MCP authentication is not a workspace login.
4. 04

   Verify current identity before work

   Call whoami first. Use its Team, identity, roles, permissions, and the current tools/list schemas as authority. Tool names and schemas can evolve; a copied old catalog is not the source of truth.

URL     https://wagglet.com/api/mcp
Header  Authorization: Bearer <your MCP token>

Use list_notes and search_notes to discover notes and transcripts. read_note returns a short-lived markdown download URL and includes small documents inline. Every download rechecks access.

create_note creates a Private Note. Read before update_note or append_note, and supply its revision and a fresh operation id. Writes merge with live typing; conflicting replacements ask you to read again.

calendar_range and calendar_item read meetings, focus blocks, reminders and Google events. calendar_availability and calendar_rooms show when teammates and rooms are free, without titles. calendar_alerts lists what is ringing for you now.

calendar_command makes one typed change: create, move or cancel a meeting, start or plan focus time, set, snooze or finish a reminder. create_reminder is a shortcut for the most common one. Times are local wall-clock strings with a timezone, and calendar_undo reverses a change within ten minutes.

calendar_open_note returns a meeting's note for the Notes tools. calendar_preferences and update_calendar_preferences read and change your own calendar notifications. Connecting Google and workspace calendar settings stay in the app.

1. 01

   Discover identifiers

   Use bounded search and list tools for tickets, Stories, Notes, and people. Continue through cursors when the requested population is larger than one response.
2. 02

   Read the complete authorized record

   Fetch the ticket or Story before changing it. Keep the returned record and item revisions for the intended mutation. Recurring Template records include their structured schedule; scheduled Occurrences include their template provenance.
3. 03

   Use the matching lifecycle command

   Choose the explicit Wagglet action. Give each intended mutation a fresh operationId; reuse it only to retry that exact operation after an uncertain network result.
4. 04

   Reconcile conflicts and confirmations

   On STALE_REVISION, read again and reconcile with current state. On CONFIRMATION_REQUIRED, show the impact to the user and continue with that tool's required confirmation fields against the same current revision only after approval.

[!note] Note Retry rule

An operation id is scoped to its connection. Repeating the same intended mutation returns its stored first result instead of repeating the action. Reusing that id for different arguments or a different tool is an error, not a shortcut. Stored ticket results are reauthorized before replay.

[!note] Note Collaborator changes

set_ticket_collaborators replaces the complete collaborator list and is available only to the ticket creator. get_ticket returns the current collaborator identities: read them first, preserve everyone who should remain, and use the returned revision if another ticket edit runs first. Removing somebody returns the exact names and a short-lived server-issued confirmation token because it revokes their private Draft access and other permitted co-owner actions.

[!note] Note People and responsibilities

list_people returns current teammate IDs, names, emails, skill tags, roles and responsibilities: an ordered array of plain sentences describing what each person is expected to own in this workspace. An empty array means no responsibilities are recorded. Use this context when comparing events with expected ownership in incident reports and other reports. Everyone on the team can read the list. MCP cannot change it; people with the Edit people's responsibilities permission (Admins and Managers by default) edit it on the person's Responsibilities tab on the website.

[!note] Note Delegation and ownership

Read get_ticket for expectedRevision and list_people for current teammate IDs. Each command takes ticketId and a fresh operationId. delegate_ticket_step takes holderId and step: WRITE_UP sends a Draft out for writing, RUN hands over a claimed human run, and REVIEW names a reviewer on active work. The browser's permissions and state restrictions apply; FOLLOW_UP is not supported. Show any CONFIRMATION_REQUIRED away warning and retry with acknowledgeAway: true only after user approval.

give_ticket_ownership lets the creator transfer to newOwnerId, keeping the old owner as a collaborator. take_ticket_ownership lets permitted Managers/Admins take active work they can see; ordinary users are refused. Authorship, history, prior-owner and delegation-chain access remain, and a write-up stays with its writer. Private Drafts stay hidden from outsiders. These are separate from update_ticket and set_ticket_collaborators. Reuse an operation ID only for an identical retry; on STALE_REVISION, read again and reconcile before a new operation.

[!note] Note Scheduled tasks

schedule_ticket moves an owned, publish-ready Draft or unclaimed Open ticket to the Scheduled lane, or changes what posts a Scheduled task: BY_HAND, REPEATING, or ON_DATE. By hand and Repeating rows spawn copies and stay; On a date rows post themselves once and leave. spawn_scheduled_draft copies a row into your Drafts, post_scheduled_now posts one you created without waiting, and search_tickets with publication: "scheduled" lists the lane.

[!note] Note Recurring Templates

create_recurring_template converts an owned Draft or unclaimed Open ticket into a Team-visible, unpublished Recurring Template. Use update_recurring_schedule for its weekly or interval-days cadence and generation options, and set_recurring_template_active to activate or pause it. Each successful command consumes the current ticket revision and returns the next one. Search with publication: "all" to discover templates. The template stays off-board on the Scheduled lane; its scheduled Occurrences are ordinary published tickets. A ticket's scheduled field names the lane's trigger — by hand, repeating, or on a date.

Current checks

Connection revocation, Team MCP setting, current membership, roles, effective permissions, and the connection's Team are checked on every request.

Private Drafts

Only the creator and collaborators can see them. Everyone else receives no identifier, count, relationship, or existence signal.

Human-only tasks

Create and update tools accept humanOnly and preferredAssigneeId; list_people supplies teammate IDs. Assignment reserves work without claiming it or granting private Draft access. Human-only mode sets hands-on to 5 and revokes machine tokens when changed. Human-only instructions read and edit like any other field, and claim, release and review work as usual; only delivery requires a person in the UI.

Attachments

Every MCP read reauthorizes task visibility. Bounded text and images may return inline; other files use short-lived download access.

Analytics

Outcome analysis requires the dedicated analytics permission and returns bounded product evidence, never arbitrary SQL or an invented stored taxonomy.

Action records

A successful mutation records its connection, person, tool, target, and time. Authored content, arguments, credentials, reads, and refusals are not copied into that origin record.

• Rotate a connection when its credential may have been exposed.
• Revoke clients you no longer use; revoked credentials fail on the next request.
• Team disablement preserves connections so they remain visible and revocable, but they cannot be used until access is enabled again.
• MCP Connections have no automatic expiry. Review names, creation time, and last-use time as part of normal Team access hygiene.

For one claimed task, use Task Handoff. Its starting credential is read-only, claim-rooted, and short-lived; delivery arrives separately. Whichever path you choose, use your own provider account and keep delivery, acceptance, merge, and deployment truthful and separate.