Tools reference

The Aly MCP server exposes ~80 tools across 23 families. Each tool is a thin wrapper over a Convex query or mutation; arguments are validated with Zod, and authorization is enforced against the bearer token's workspace and scope set.

Authoritative list is on the server

The canonical tool list comes from the server itself. After connecting, any MCP client's tool inspector renders the live catalog with input schemas. This page documents the families and the most-used tools — for everything else, browse the connected catalog.

Naming convention

Tools follow resource.action. Reads are list, get, or search. Writes are create, update, delete, or a verb tied to a state machine (publish, fulfill, refund).

Sites

sites.list — list sites in the workspace.
sites.get — fetch a single site by id or slug.
sites.create — create a new site.
sites.update — patch theme, settings, navigation.
sites.publish / sites.unpublish — change publication state.
sites.delete — delete (requires delete:sites).

Content (products, collections, CMS)

content.products.list / .get / .create / .update / .delete
content.variants.create / .update / .delete
collections.list / .get / .create / .update / .attachProduct / .detachProduct
cms.pages.list / .get / .upsert — top-level page CRUD.
cms.blocks.upsert — structured content blocks (Aly Blocks).
galleries.create / .update
coupons.list / .create / .expire
price-lists.list / .upsert
memberships.list / .create / .cancelSubscriber

Orders and operations

orders.list — filterable by status, date, customer.
orders.get
commerce-ops.fulfill — record a shipment with carrier + tracking.
commerce-ops.return.create / .approve / .reject
commerce-ops.exchange.create / .approve
orders.refund — full or partial via Stripe.

Customers

customers.list / .get / .update
customer-groups.list / .create / .assign / .unassign

Media

media.list
media.upload — returns a signed R2 upload URL.
media.delete

Domains, voice, API keys, workspace

domains.attach / .verify / .detach (requires manage:domains).
voice.config.get / .update — system prompt, voice id, allowed skills.
api-keys.list / .create / .revoke (requires manage:api_keys).
workspace.get / .update (requires manage:workspace).

Analytics, webhooks, A2A, UCP-from-MCP

analytics.metrics — visits, conversion, revenue by range.
analytics.activity — recent events feed.
webhooks.endpoints.list / .create / .delete
webhooks.deliveries.list / .replay
a2a.tasks.list / .get — inspect agent-to-agent task graph.
ucp.catalog.search / .lookup — UCP-shaped catalog query, useful when an MCP client also needs the buyer-facing schema.

Discovering schemas

Every tool publishes a JSON Schema input spec via the MCP tools/list method. Use that to drive UI or to validate arguments before sending — most failures are caught at the schema layer before they hit the server.

Was this page helpful?