fullmakt-a2a

Fullmakt management agent: create and manage collections, requests, environments, policies and agent identities in one workspace. Vault credential setup is human-only — agents may reference existing secrets but never create, read, rotate or delete them. Execution (calling a collection's requests as tools) happens over MCP at https://fullmakt.ai/mcp/{collection} with an execution-scoped token from the same token endpoint.

Skills

• Get workspace
  Summary of the workspace this token manages.
  WorkspaceRead
• List collections
  List the collections in the workspace.
  CollectionRead
• Create collection
  Create a collection in the workspace.
  CollectionWrite
• Get collection
  Full collection detail: items tree, variables, scripts.
  CollectionRead
• Update collection
  Update name/description/auth/default environment/scripts.
  CollectionWrite
• Delete collection
  Delete a collection and everything in it.
  CollectionWrite
• Create item
  Create a folder or request (HTTP/GraphQL/WebSocket/gRPC/MCP) in a collection.
  ItemWrite
• Get item
  Fetch one item with its request definition and children.
  CollectionRead
• Update item
  Update an item's name, request definition and scripts.
  ItemWrite
• Delete item
  Delete an item (and its children).
  ItemWrite
• Move item
  Re-parent and/or re-order an item within its collection.
  ItemWrite
• List environments
  List the workspace's environments.
  EnvironmentRead
• Create environment
  Create an environment with variables. Variables may reference existing vault entries (vault://local/<name>) but LLM provider credentials cannot be set over A2A.
  EnvironmentWrite
• Update environment
  Rename an environment and/or replace its variables. Any stored LLM credential config is preserved untouched.
  EnvironmentWrite
• Delete environment
  Delete an environment.
  EnvironmentWrite
• Get global variables
  List the workspace's global variables.
  EnvironmentRead
• Set global variables
  Replace the workspace's global variables.
  EnvironmentWrite
• Get collection policy
  Read the policy document governing broker calls to a collection.
  PolicyRead
• Set collection policy
  Set the policy document (hardDeny / requireApproval / behavior rules) for a collection.
  PolicyWrite
• List pending approvals
  List approvals awaiting a human decision. Deciding them is human-only.
  ApprovalRead
• List agent principals
  List the account's agent principals. Principals are account-level identities (not workspace-scoped), so this spans the owner's whole account.
  PrincipalRead
• Create agent principal
  Create a named account-level agent identity for execution-side auditing and policy.
  PrincipalWrite
• List execution clients
  List account-level OAuth clients for the remote MCP execution surface (no secrets returned).
  ClientRead
• Create execution client
  Create an OAuth client scoped to collections in this workspace. The secret is returned exactly once.
  ClientWrite
• List vault entry references
  Metadata for existing vault entries (names + vault://local/<name> references). Values are never returned, and secrets can only be created, rotated or deleted by a human in the UI.
  VaultRead
• Query the audit trail
  Recent broker/A2A audit entries for this account.
  AuditRead
• Import Postman collection
  Import a Postman v2.1 collection JSON into the workspace.
  ImportExport
• Export Postman collection
  Export a collection as Postman v2.1 JSON.
  ImportExport
• Probe an API surface
  Run the discovery ladder (OpenAPI/GraphQL/MCP/A2A) against a URL and return the normalized operations and auth summary. Reads only — persists nothing.
  DiscoveryRun
• Generate a collection from a URL
  Discover an API and generate a persisted, authenticated collection wired to credential references (never plaintext secrets). Same pipeline as the REST generate endpoint.
  CollectionWrite
• List upstream OAuth grant references
  Metadata for existing upstream OAuth grants (names + oauth://<name> references, provider, scopes, status). Secrets and tokens are never returned; grants are created, connected and deleted by a human in the UI.
  GrantRead

How to call

https://fullmakt.ai/a2a

Listed in

Directories this entry was found in.