2ools
What it does
Build, version, review, and export websites, web apps, and games from a conversation.
- Connects 클라우드에서 실행
- Account or key No key needed
- Category 게임, 스포츠, 음식 및 학습
설치
쓰고 있는 AI 앱을 고른 다음 설정을 복사하세요.
검사 4/4 통과 · 내가 묻는 내용은 제작자 서버(2ools.app)를 거쳐요 · ✓ 명령 확인 2026년 11월 13일
먼저: 어떤 AI를 쓰시나요?
쓰는 앱을 고르면 아래에 단계가 나옵니다.
Claude에 연결할 수 있어요 · 약 2분
키 필요 없음, 설치 필요 없음 · claude.ai나 데스크톱 앱에서 한 번 설정하면 채팅에서 쓸 수 있어요 · 무료 계정은 1개까지 · Team/Enterprise는 소유자(Owner)가 추가
Claude의 Connectors 페이지 열기
CustomizeConnectors
“Add” → “Custom” → “Web”를 누르고 이 2칸 채우기
여기서 복사해 Claude의 같은 이름 칸에 붙여 넣고 Continue를 누르세요
Name · 이름2oolsRemote MCP server URL · 주소https://2ools.app/mcpClaude가 찾은 로그인 설정 화면에서 Continue를 누르고 · Authentication은 제작자 안내대로(Sign in now, Sign in when needed, No sign in) 고른 뒤 Add를 누르세요
채팅에서 켜기
+Connectors2ools
해 보기
2ools을 써서 나에게 무엇을 해 줄 수 있는지 알려 주고, 하나 해 봐✓ Claude가 2ools을 쓰고 있다고 하거나 답에 2ools 도구 이름이 나오면 연결된 거예요
메뉴 이름은 2026년 11월 11일에 Anthropic 도움말에서 확인 · 앱 버전에 따라 화면이 조금 다를 수 있어요
ChatGPT 연결은 요금제에 따라 달라요
전체 MCP: 웹 ChatGPT Business, Enterprise, Edu · Pro: 읽기/가져오기 권한으로 연결, 데이터를 바꾸는 도구는 안 될 수 있어요 · Plus: 공식 문서 미확인, 플러그인 화면에 사용자 지정 MCP 추가 항목이 보이면 시도해 볼 수 있어요 · 웹만
웹 ChatGPT에서 MCP 추가 페이지 열기
Plugins+Add custom MCP server
이름과 주소 입력
이름을 넣고 Connection에 주소를 붙여 넣은 뒤 경고에 체크하고 Create as a plugin을 누르세요
Name · 이름2oolsConnection · 주소https://2ools.app/mcp채팅에서 2ools 고르기
새 채팅을 열고 입력 전에 플러그인 목록에서 2ools을 고르세요
해 보기
2ools을 써서 나에게 무엇을 해 줄 수 있는지 알려 주고, 하나 해 봐✓ ChatGPT가 2ools을 쓰고 있다고 하거나 답에 2ools 도구 이름이 나오면 연결된 거예요
메뉴 이름은 2026년 11월 11일에 OpenAI 도움말에서 확인 · 앱 버전에 따라 화면이 조금 다를 수 있어요
Claude Code에 연결할 수 있어요 · 약 2분
키 필요 없음, 설치 필요 없음
터미널 열기
Mac: Command+스페이스를 누르고 Terminal 입력 · Windows: PowerShell 열기
이 명령을 붙여 넣고 Enter
claude mcp add --transport http --scope user 2ools https://2ools.app/mcpClaude Code에서 /mcp 입력
2ools이 목록에 있고 연결됨으로 보이면 돼요
해 보기
2ools을 써서 나에게 무엇을 해 줄 수 있는지 알려 주고, 하나 해 봐✓ Claude Code가 2ools을 쓰고 있다고 하거나 답에 2ools 도구 이름이 나오면 연결된 거예요
메뉴 이름은 2026년 11월 11일에 Anthropic 도움말에서 확인 · 앱 버전에 따라 화면이 조금 다를 수 있어요
Cursor에 연결할 수 있어요 · 약 2분
키 필요 없음, 설치 필요 없음
Cursor에서 AI 채팅을 Agent 모드로 열기
해 보기
2ools을 써서 나에게 무엇을 해 줄 수 있는지 알려 주고, 하나 해 봐✓ Cursor가 2ools을 쓰고 있다고 하거나 답에 2ools 도구 이름이 나오면 연결된 거예요
메뉴 이름은 2026년 11월 11일에 Cursor 도움말에서 확인 · 앱 버전에 따라 화면이 조금 다를 수 있어요
VS Code에 연결할 수 있어요 · 약 2분
키 필요 없음, 설치 필요 없음
VS Code에서 AI 채팅을 Agent 모드로 열기
해 보기
2ools을 써서 나에게 무엇을 해 줄 수 있는지 알려 주고, 하나 해 봐✓ VS Code가 2ools을 쓰고 있다고 하거나 답에 2ools 도구 이름이 나오면 연결된 거예요
메뉴 이름은 2026년 11월 11일에 VS Code 도움말에서 확인 · 앱 버전에 따라 화면이 조금 다를 수 있어요
Windsurf, Zed, Gemini CLI 같은 다른 MCP 앱은 추가 방법이 저마다 달라요. 앱 목록에서 확인하세요
웹으로 연결하는 앱용 주소
https://2ools.app/mcpJSON 설정은 아래 “개발자용”에 있어요
개발자용: 터미널 명령과 JSON 설정
웹으로 연결
Claude Code
claude mcp add --transport http --scope user 2ools https://2ools.app/mcpCursor (~/.cursor/mcp.json)
{
"mcpServers": {
"2ools": {
"url": "https://2ools.app/mcp"
}
}
}VS Code (mcp.json)
{
"servers": {
"2ools": {
"type": "http",
"url": "https://2ools.app/mcp"
}
}
}이 설정은 제작자의 레지스트리 정보로 만들었어요. README와 다르면 README를 따르세요.
한눈에 보기
어떤 앱에서 쓸 수 있나요
이 서버의 연결 방식과 각 앱의 공식 문서를 바탕으로 했어요. 2026년 11월 10일 확인.
인터넷으로 연결하는 앱
ClaudeChatGPTGooseLM StudioMsty StudioCherry StudioCursorVS Code + GitHub CopilotVisual StudioWindsurf (Devin Desktop)ZedKiroClineContinueJetBrains AI AssistantClaude CodeCodex CLIGemini CLIOpenCodenodecodeWarpLibreChatOpen WebUIRaycast
할 수 있는 일
도구 이름과 설명은 서버가 2026년 11월 13일에 알려 준 그대로예요. 우리가 아니라 제작자가 쓴 글이고, 일반 텍스트로만 보여 드려요.
create_public_previewTurn a complete standalone HTML document already created in this chat into a temporary, read-only 2ools preview. Free and authless; expires after 24 hours. This tool does not generate the page—write the HTML first, then call it.
list_build_systemsList creative systems created by the authenticated account and compatible with an optional output target. Built-in 2ools skills, routing, prompts, and operating systems are private and are not returned.
list_connected_enginesList privacy-minimized connected 2ools Engines for exact native dispatch. Returns opaque Engine identity, a redacted machine label, online state, authenticated provider CLIs, supported protocols, privacy-safe workspace handles, and the last observed timestamp. Never returns token
get_project_engine_workspaceRead the privacy-safe Engine workspace attached to one project. Returns only opaque Engine/workspace identity, safe display metadata, live readiness, and a revision. Never returns source, paths, repository URLs, SSH hosts, tokens, or secrets.
attach_project_engine_workspaceOwner-authorized attachment of one saved project to one exact opaque workspace on one exact online 2ools Engine. This grants future project work access to real source on that computer, so show the selected computer/workspace and obtain explicit confirmation. It changes no source
register_existing_projectCreate one durable Project OS record for a local or external project that list_projects did not match. When the canonical project ID is already known, pass existing_project_id and that exact record is reused. Otherwise an exact normalized name match is reused instead of duplicate
build_from_conversationCreate a new 2ools project from a structured conversation brief and queue one durable build. Returns project_id and job_id; use get_build to retrieve completion status and the protected preview.
start_project_on_engineCreate one new 2ools project and queue its first build on one exact connected Engine and provider selected by the person. Fails before project creation or queueing when that Engine is offline, busy, missing the provider, or lacks the protocol. Never falls back to hosted, server,
refine_projectCreate one protected child version from a saved base version and concrete review feedback. Preserves the base source as currentCode, consumes one persisted project iteration, and returns an asynchronous job_id.
get_buildGet one build's current status, progress, errors, completed version IDs, and protected preview URLs. Does not return generated source code.
get_engine_dispatchRead the authoritative state of one exact Engine dispatch. Queued means accepted but not started; running appears only after the selected Engine atomically claims the lease. Returns claim, heartbeat, failure, and terminal state without client inference.
compare_versionsCompare two saved versions in one project without returning source. Reports lineage, review state, page additions/removals, byte sizes, and SHA-256 identity for each page.
list_approval_requestsList exact saved versions waiting for a separately delegated reviewer. Returns project/version identity and attribution, never generated source.
approve_versionUse separately delegated review authority to approve one saved version and make it the project's active version. Does not publish, export, or change project permissions.
reject_versionUse separately delegated review authority to reject one saved version. If it is active, restores its saved parent as active; the rejected version remains in immutable history.
cancel_buildCancel one exact queued or running non-Agent 2ools build after named explicit confirmation. Repeating the same cancellation is safe, late Engine results are rejected, completed versions are never deleted, and immutable history remains. Governed Agent execution uses cancel_agent_r
get_account_profileRead the authenticated person's 2ools profile, current account labels, and server-derived effective MCP scopes. Passwords, private credentials, billing instruments, and provider secrets are never returned.
update_account_profileUpdate only the explicitly supplied profile fields for the authenticated person. This cannot change email, password, MFA, billing, entitlements, roles, or account-deletion state.
get_project_accessRead the authenticated person's role plus the canonical project owner, members, and pending invitations. Non-managers can read active members but never receive pending-invite metadata.
invite_project_memberInvite an existing 2ools username or an email address to one owned project as a collaborator or viewer. New-account claim tokens are emailed by 2ools and are never returned through MCP.
update_project_member_roleChange one exact member to collaborator or viewer, or transfer ownership. Requires explicit confirmation because demotion cancels that member's active builds and pauses armed project agents, while ownership transfer changes the current owner's authority.
remove_project_memberRemove one exact member's project access after explicit confirmation. Their account and authored history stay; active project builds are canceled and armed project agents are paused.
revoke_project_inviteRevoke one exact pending project invitation after explicit confirmation. The person can no longer accept that invitation; project history remains auditable.
list_projectsOpen the native Project OS entry point and list recent 2ools projects the authenticated account can access. The app automatically continues the only saved project or shows an inline chooser when several projects are available. Returns compact metadata without generated source.
get_projectGet a 2ools project's brief, selected pages, active version, and compact version history. Does not return generated source code.
get_project_contextRead one source-free operating packet: active version metadata, the latest explicitly selected observed project input, review attention, artifact index, work queue, and current activity cursor. Imported input is immutable evidence, not an AI proposal or live filesystem sync; priv
continue_projectReturn one project's current Living Plan, next useful move, continuity-readiness gaps, latest evidence, and a compact 2ools-active receipt. Opens a compact status, Continue, and Open Project OS card on MCP Apps hosts; the full Project OS belongs in the host's browser side panel.
refresh_project_cockpitRefresh the bounded project state shown inside an already-open 2ools MCP App. This app-only read does not start work, import files, or change the project.
activate_projectRecord the person's one-time choice to use this already-connected 2ools client with one exact saved project. Call only after the person approves in the inline card or explicitly in chat. This does not read or import local files and does not start work or a build.
get_project_missionReturn a bounded canonical Project Mission view, active Goal Contract, server-derived health, role capabilities, or a paginated goals, templates, scope-change, or history slice.
get_project_intelligenceReturn the versioned frontier-product research dossier, six parallel lane states, evidence ledger, saturation audits, falsification, concepts, ranked outputs, integrity summary, connector visibility, and a deterministic operating brief. Missing premium access is reported as a gap
update_project_intelligenceInitialize or append one immutable, validated dossier revision. The complete snapshot must cite material claims, preserve unknowns, finish or explicitly block all six lanes before synthesis, include a reproducible saturation audit, and pass falsification/output gates. Revision co
get_project_disciplineReturn derived direction, trade-off, evidence, and continuity status with active decisions, eval evidence, verifier definitions, and explicit permission boundaries. Status is computed from authoritative Project OS records, never editable checkboxes.
list_project_engineering_decisionsList native-safe engineering decisions for one exact project, including the canonical project revision, category, risk, question, rationale, tradeoffs, response contract, constraints, and current state. Never returns secrets or internal prompts; unknown future response kinds rema
answer_project_engineering_decisionAccept or reject one exact native-safe engineering decision at one exact project revision. Requires an explicit confirmation and durable note, enforces project role and high-risk owner policy, rejects revision conflicts, preserves immutable history, and returns an idempotent rece
manage_project_disciplinePropose a project trade-off, version an eval case or verifier definition, or attach an eval/verifier receipt to exact work. Agents may propose decisions but cannot accept their own proposals; verifier definitions describe external evidence and never execute arbitrary code on 2ool
update_project_missionCreate or revise Mission and Goal contracts, explicitly transition or reorder goals, or propose a scope change. Server role, revision, conflict, and safety policy remain authoritative.
review_project_missionRestore an immutable Mission or Goal revision, decide a proposed scope change, or submit proof-based goal completion review. Completion and high-risk authority remain server-gated.
manage_work_watchdogPause, park, resume, or reprioritize one durable task, or deliberately configure the project Watchdog. This never answers for the user, approves a risky action, deploys, spends, sends externally, deletes data, or widens authority.
act_on_project_os_taskApp-only route for an authenticated person's explicit click in the native Project OS panel. Hidden from the model; every action is revision checked and idempotent, and cancellation requires an explicit confirmation.
update_living_planAdd, edit, move, or reorder open Living Plan items from the current conversation, then return the refreshed inline plan and timeline panel. This cannot mark returned work complete; completion remains a separate evidence-backed review decision.
render_project_previewRender an interactive, read-only card for one saved 2ools version. Use after get_build or get_project when the user wants to see, open, or share the result. Returns protected preview and access-checked workspace links without source code.
list_project_agentsList the authorizing account's built-in Agents assigned to one readable project. This reveals status and summary, not full Limits or run traces.
get_agentRead one Agent's saved Limits, trigger, immutable revision summaries, and redacted append-only run traces. Raw prompts, tool arguments, credentials, and source bytes are not returned.
run_project_agentQueue real execution for a project-linked Agent the person already test-ran and armed. The immutable saved Limits, project access, account fuse, and online Engine requirement are enforced server-side before a job exists.
get_project_agent_modeRead the project-level autonomous coordination state derived from the canonical Living Plan, governed Agent, and exact Engine destination. Returns progress, current work, next eligible safe step, and the reason the project is running or needs the person.
configure_project_agent_modeTurn the selected project's governed Agent Mode on or off. When enabled, the person chooses one armed project Agent, one exact Engine, and one provider; only reviewed safe-auto steps in the exact approved plan may advance in dependency order. Limits and approval boundaries are ne
advance_project_agent_modeIdempotently re-evaluate and, when safe, queue the next dependency-ready safe-auto plan step on the project's already approved Agent, Engine, and provider. Running, review, blocked, and approval states never double-dispatch.
dispatch_project_workReserve one exact revision-checked Project OS task for one armed project Agent, then queue it on one exact online Engine and authenticated provider selected by the person. Queued is not working; the task becomes active only after that Engine atomically claims it. Never falls back
get_project_work_dispatchRead the authoritative queued, claimed, running, approval-paused, or terminal state of one exact governed Project OS task dispatch. Returns bounded progress and lease evidence without prompts, credentials, source, paths, or private model transcripts.
cancel_agent_runStop one queued or running Agent execution and close its durable run history. Completed, failed, stalled, and already-canceled runs keep their terminal truth.
get_project_activityRead the attributable project timeline across human work, external MCP agents, builds, versions, feedback, and workspace pins. Actor kind is explicit; an external agent is never presented as the human account that authorized it.
wait_for_project_activityWait up to 20 seconds for attributable project events newer than a head_cursor or prior next_cursor. Returns events oldest-first so an outside agent can process them in order. If resync_required is true, paginate get_project_activity instead of advancing the cursor.
list_project_feedbackRead page-anchored review feedback for versions in a project, with explicit human or external-agent attribution.
add_project_feedbackAdd an attributable review comment to a saved project version. This does not modify source or approve the version.
resolve_project_feedbackOwner-only review decision that resolves or reopens one saved feedback item.
list_project_pinsRead shared workspace notes and http(s) links, with explicit attribution.
add_project_pinAdd an attributable note or safe http(s) link to the shared project workspace.
remove_project_pinRemove one shared workspace pin. The operation is idempotent.
prepare_version_exportCreate a five-minute download URL for an exact saved version. Source is delivered by the download route, never embedded in MCP model output.
기본 점검i
누구나 볼 수 있는 정보를 점검했고, 코드는 읽지 않았어요. 해당하지 않는 항목은 개수에서 뺐어요. · 2026년 11월 15일 점검
- ✓ 통과
제작자와 저장소 일치
레지스트리 이름이 도메인 2ools.app 기준으로 확인되었어요(레지스트리가 도메인 소유를 확인해요)
- ✓ 통과
계속 관리되고 있음
코드 마지막 변경: 3개월 전
- – 해당 없음
라이선스 있음
해당 없음: 2ools.app 소유자가 직접 운영하는 클라우드 서버라 저장소 코드를 실행하지 않아요
- ✓ 통과
엔드포인트 응답
315ms 만에 응답(HTTP 200)
- – 해당 없음
OAuth로 로그인
로그인 필요 없음
- ✓ 통과
도구 설명에 숨겨진 지시 없음
도구 설명 60개를 읽었고, AI에게 보내는 숨겨진 지시는 없었어요
제작자: 재확인 요청 또는 잘못된 정보 신고
토론
질문하고, 팁을 나누고, 안 되는 점을 알려 주세요. "도움이 됨"이 많은 순서예요.
사용자 리뷰
아직 리뷰가 없어요
게임, 스포츠, 음식 및 학습 카테고리의 다른 서버와 비교i
- 이 카테고리의 다른 서버 1500개 중 86%보다 스타가 많아요
- 이 카테고리의 다른 서버 1500개 중 18%보다 최근에 레지스트리에 공개됐어요
- 기본 점검 결과가 이 카테고리의 다른 서버 1500개 중 100%와 같거나 더 좋아요
레지스트리에서 이 카테고리의 활성 서버 전체와 비교했어요. 스타는 게시자가 저장소를 소유한 경우에만 세요.
자주 묻는 질문
2ools, 안전한가요?
해당하는 기본 점검 4개 중 4개를 통과했어요. 코드는 읽지 않았어요. 키나 토큰을 넣기 전에 서버가 어떤 권한을 요구하는지 확인하고, 꼭 필요한 권한만 있는 키를 쓰세요.
어떤 키나 코드가 필요한가요?
레지스트리에 필수 키가 나와 있지 않아요. 다만 처음 쓸 때 로그인을 요구하는 서버도 있어요.
내 컴퓨터에서 실행되나요, 클라우드에서 실행되나요?
제작자의 클라우드에서 실행돼요. 설치 없이 인터넷으로 연결하지만, 보내는 내용은 제작자의 서버를 거쳐요.
아직 관리되고 있나요?
GitHub 저장소는 마지막으로 3개월 전 변경됐고, 최신 버전(0.3.1)은 3개월 전 레지스트리에 올라왔어요.
어떤 앱에서 쓸 수 있나요?
Claude Desktop, Claude Code, Cursor, VS Code처럼 MCP를 지원하는 앱에서 쓸 수 있어요. URL로 연결되므로 원격 MCP를 받는 앱에서도 쓸 수 있어요. 예: 웹 ChatGPT(Business 이상은 전체 MCP, Pro는 읽기 전용).
대신 쓸 수 있는 건 뭐가 있나요?
같은 카테고리에는: Anime Garden, WilmAI, Lumify Sports Intelligence, Savecraft, GoodWatch
비슷하게 동작하는 다른 것
같은 카테고리, 다른 제작자, 명령 확인 완료. 공식이 먼저, 그다음 스타 순.
카드 보는 법:↓ 주간 다운로드i★ GitHub 스타i세 기둥: 리뷰 · 점검 · 사용 정도i업데이트 = 최신 버전을 레지스트리에 공개한 날i
WilmAI
Finland's Wilma school system for parents and students: schedule, homework, exams and messages.
Lumify Sports Intelligence
Schedules, scores, odds, splits & explainable AI bet confidence — 8+ sports, free instant key.
Savecraft
Savecraft serves real save game data and expert game knowledge to AI assistants.
GoodWatch
Find movies and TV shows, track watches, and get suggestions based on your taste.
- Anime Garden — 클라우드에서 동작, 설치 불필요 · 키 불필요
- WilmAI — 컴퓨터에 설치 필요 · 키 불필요
- Lumify Sports Intelligence — 클라우드에서 동작, 설치 불필요 · 키 필요
- Savecraft — 클라우드에서 동작, 설치 불필요 · 키 불필요
- GoodWatch — 클라우드에서 동작, 설치 불필요 · 키 불필요
제작자의 README
README 열기
제작자의 저장소에서 쓰인 그대로 가져왔어요. PopNx MCP가 검토하거나 보증한 내용이 아니에요. HTML, 이미지, 스크립트는 제거했어요. 링크를 누르면 이 사이트를 벗어나요.
2ools MCP Server
Remote MCP server for [2ools](https://2ools.app) — build, version, review and export websites, web apps and games from inside the AI chat you already use.
https://2ools.app/mcp
Your assistant writes the site. 2ools is where it lives: every result becomes a restorable version, previews are shareable links that need no account to open, and the source exports as plain files with no proprietary runtime.
One tool is free and needs no account at all — create_public_preview turns a standalone HTML document your model just wrote into a real, viewable URL. The rest connect over OAuth 2.1 with PKCE and least-privilege scopes.
Quick start
Paste this into the AI client you want to connect:
Connect this client to 2ools (github.com/2ools/mcp-server, MCP endpoint https://2ools.app/mcp). Retrieve https://2ools.app/start non-visibly with an HTTP or web-fetch tool; never navigate the in-app browser to that instructions page. Use this client's in-app browser for every 2ools sign-in and authorization page; never use Chrome, another external browser, or the system browser when this client has an in-app browser or preview pane. The exact OAuth approval URL must be the first 2ools page you visibly open. Before I must act, your only user-facing setup message may be
Connecting 2ools in this client's browser…. Do not output insight blocks or narrate setup mechanics. Ask me exactly once to sign in and click Authorize. Do not end your turn while authorization is pending; after it succeeds, keep the 2ools app visibly open in that pane. Fetch https://2ools.app/start and follow its "For your AI" steps exactly.
The live start page is the single current connection ritual for every client. It detects the current client path, keeps OAuth alive, and leaves only sign-in and the Authorize click to the person. Manual MCP configuration is a fallback only for clients that cannot manage their own remote-MCP setup.
After authorization, the initiating context selects the app destination: an exact project's Project OS when its ID is known, the new-project or existing-project workspace flow when that intent is known, and the authenticated MCP workspace for a generic install. The public homepage is never the fallback.
Registry introspection proxy
Registries that require a local stdio process can run the included credential-free proxy. It forwards MCP JSON-RPC traffic to the same verified remote endpoint; it does not mock or reimplement any 2ools tools. It translates the stdio handshake into the remote endpoint's current per-request MCP envelope and returns the live schemas from 2ools.
npm ci
npm start
The included Dockerfile runs the same dependency-free proxy for reproducible registry introspection. It intentionally does not perform an interactive OAuth flow. Clients using authenticated workspace tools should connect directly to https://2ools.app/mcp so OAuth remains end-to-end with 2ools.
2ools Skill
For assistants that support repository skills, add or copy the 2ools Skill. It keeps the temporary-preview and OAuth workspace boundaries explicit. Client support for remote MCP and Skill folders varies; the live start page routes each client to its supported flow.
Try it with no account
Ask your assistant:
Write this as one standalone HTML document, create a free 2ools preview, and show me the link.
You get back a real URL that anyone can open. It expires after 24 hours.
What you can do with it
| Ask your assistant… | It uses |
|---|---|
| "Open this generated site in 2ools and give me a client-safe preview link" | create_public_preview |
| "Save this conversation as a durable 2ools project" | build_from_conversation |
| "Make the hours bigger and show me the new version" | refine_project |
| "Compare the last two versions" | compare_versions |
| "What changed on this project since Tuesday?" | get_project_activity |
| "Export the source as a zip" | prepare_version_export |
Tools
43 tools, each with explicit readOnlyHint and destructiveHint annotations so a client can reason about blast radius before calling anything.
Free — no account required
| Tool | Effect | What it does |
|---|---|---|
create_public_preview | write | Turn a complete standalone HTML document already created in this chat into a temporary, read-only 2ools preview. |
Build and refine
| Tool | Effect | What it does |
|---|---|---|
build_from_conversation | write | Create a new 2ools project from a structured conversation brief and queue one durable build. |
refine_project | write | Create one protected child version from a saved base version and concrete review feedback. |
get_build | read-only | Get one build's current status, progress, errors, completed version IDs, and protected preview URLs. |
cancel_build | destructive | Cancel a queued or running non-Agent 2ools build. |
compare_versions | read-only | Compare two saved versions in one project without returning source. |
list_build_systems | read-only | List the Curators, Rulebooks, and Skills this paid account may explicitly apply. |
Read a project
| Tool | Effect | What it does |
|---|---|---|
list_projects | read-only | List recent 2ools projects the authenticated account can access, including owned and shared projects. |
get_project | read-only | Get a 2ools project's brief, selected pages, active version, and compact version history. |
get_project_context | read-only | Read one source-free operating packet before acting: the active version, exact frozen Curator snapshot, revision-… |
render_project_preview | read-only | Render an interactive, read-only card for one saved 2ools version. |
get_project_activity | read-only | Read the attributable project timeline across human work, external MCP agents, builds, versions, feedback, and… |
wait_for_project_activity | read-only | Wait up to 20 seconds for attributable project events newer than a head_cursor or prior next_cursor. |
Review and approval
| Tool | Effect | What it does |
|---|---|---|
list_approval_requests | read-only | List exact saved versions waiting for a separately delegated reviewer. |
approve_version | destructive | Use separately delegated review authority to approve one saved version and make it the project's active version. |
reject_version | destructive | Use separately delegated review authority to reject one saved version. |
Feedback and shared notes
| Tool | Effect | What it does |
|---|---|---|
list_project_feedback | read-only | Read page-anchored review feedback for versions in a project, with explicit human or external-agent attribution. |
add_project_feedback | write | Add an attributable review comment to a saved project version. |
resolve_project_feedback | destructive | Owner-only review decision that resolves or reopens one saved feedback item. |
list_project_pins | read-only | Read shared workspace notes and http(s) links, with explicit attribution. |
add_project_pin | write | Add an attributable note or safe http(s) link to the shared project workspace. |
remove_project_pin | destructive | Remove one shared workspace pin. |
Export and sharing
| Tool | Effect | What it does |
|---|---|---|
prepare_version_export | read-only | Create a five-minute download URL for an exact saved version. |
get_version_share_link | read-only | Read the durable sharing state and current URL for one exact saved version. |
create_version_share_link | write | Create or recover a durable public or code-protected link for one exact saved version. |
revoke_version_share_link | destructive | Disable every existing public or code-protected URL for one exact saved version. |
Artifacts
| Tool | Effect | What it does |
|---|---|---|
list_artifacts | read-only | List durable project artifacts and each latest immutable version without returning stored bytes. |
get_artifact | read-only | Read one artifact's immutable version history, provenance, attribution, digests, and review states without… |
prepare_artifact_upload | write | Create a five-minute PUT URL for exact bytes. |
prepare_artifact_download | read-only | Create a five-minute download URL for one immutable artifact version. |
list_artifact_approval_requests | read-only | List exact artifact versions awaiting or carrying a human review decision. |
approve_artifact_version | write | Approve one pending immutable artifact version and make it current. |
reject_artifact_version | write | Reject one pending immutable artifact version with useful feedback. |
Agents
| Tool | Effect | What it does |
|---|---|---|
list_project_agents | read-only | List the authorizing account's built-in Agents assigned to one readable project. |
get_agent | read-only | Read one Agent's saved Limits, trigger, immutable revision summaries, and redacted append-only run traces. |
run_project_agent | write | Queue real execution for a project-linked Agent the person already test-ran and armed. |
cancel_agent_run | destructive | Stop one queued or running Agent execution and close its durable run history. |
Work assignments
| Tool | Effect | What it does |
|---|---|---|
list_work_assignments | read-only | List durable project work contracts, bounded attempts, leases, budgets, and result references. |
create_work_assignment | write | Create a durable assignment with acceptance criteria and hard step, time, and spend ceilings. |
claim_work_assignment | write | Atomically claim one open assignment and receive a five-minute renewable lease plus an immutable budget snapshot. |
heartbeat_work_session | write | Renew the authenticated worker's active lease without widening its immutable step, time, or spend ceilings. |
submit_work_session | write | End the authenticated worker's lease and submit typed result references for a separate review decision. |
decide_work_assignment | write | Complete submitted work or reopen it with useful feedback. |
Authentication
| Access | Method | Scopes |
|---|---|---|
create_public_preview | none — genuinely authless | — |
| Everything else | OAuth 2.1 authorization code + PKCE (S256) | least-privilege, consented per connection |
The authorization server publishes RFC 8414 and RFC 9728 discovery documents at /.well-known/oauth-authorization-server and /.well-known/oauth-protected-resource, supports RFC 7591 dynamic client registration, rotates refresh tokens with family revocation on replay, and stores only token digests.
Review authority is deliberately separate from build authority. projects:build lets an agent produce candidate versions; approve_version and reject_version require projects:approve, which is excluded from default grants. An agent that can build cannot sign off on its own work unless a human explicitly delegates that.
Design notes
Source never travels through the model transcript. Exports and artifact downloads are five-minute signed URLs bound to the action, the account and the exact version. The MCP response carries metadata and links, not bytes — so a large site does not consume the context window, and generated source is not replayed into a provider log.
Shared previews run in an opaque-origin sandbox. A shared page is served under a CSP sandbox with connect-src 'none', so a site built by a model cannot read the viewer's cookies, storage, or