Create a group assignment. Args: group_id: Group to assign role_id: Role to assign to the group workspace

Create a new workflow from a Tracecat DSL data object.

Delete a case and optionally its associated field data. Args: case: The case object to delete delete_fields: Whether

Delete a comment. Args: case: The case the comment belongs to comment_id: The ID of the comment to delete Ra

Delete a workspace secret.

Encrypt a string using Fernet encryption. Args: value: The string to encrypt key: The encryption key Returns: str: T

Ensure the storage bucket exists, creating it if necessary. Args: bucket: Bucket name (required)

Execute an action on the ExecutorWorker. This activity runs on 'shared-action-queue' and handles: - Rate limit retries (tenacity)

Get all temporal activities in the class.

Get a column by ID.

Get TRACECAT__DB_ENCRYPTION_KEY. Raises ValueError if not set.

Get authenticated PyGithub client for a specific repository. Args: repo_url: Git repository URL Returns: Aut

Get columns that have unique constraints.

Get an agent preset by slug with proper error handling.

Get decrypted client credentials for a provider.

Get TRACECAT__SERVICE_KEY. Raises ValueError if not set.

Instantiate MCP providers without blocking the event loop.

Check if an organization has a specific entitlement.

List all approvals for a given session.

List all custom fields for the workspace.

Refresh the access token if it's expired or about to expire.

Remove a tag from a case by ID or ref.

Revoke a pending workspace invitation. Args: workspace_id: The workspace the invitation belongs to. invitation_id: Th

Search rows in a table with optional filters.

Deterministically shorten tool names to OpenAI's length limit.

Convert string escape sequences to their actual characters. Handles common escape sequences: - "\\n" becomes a newline - "\\t" becomes a

Validate the DSL at commit time. This function calls and combines all results from each validation tier.

Verify if an auth type is enabled and properly configured. Args: auth_type: The authentication type to verify role: Optional role

Compute a cache key from dependencies and optional workspace ID. The key is a SHA256 hash of the sorted, normalized dependencies, opt

Register a fresh part and return its tracking record.

Decrypt a token using the service's encryption key.

Check if message has a tool call.

Create a test manifest with given action names.

Return a properly quoted schema-qualified table reference.

Require the tool to be called over Tracecat's remote MCP transport.

Return only the exception class name for log-safe reporting.

Validate path is safe for protobuf config interpolation. Args: path: Path to validate. name: Human-readable name for error messag

Unwrap StoredObject action result from workflow context.

Build an AgentActionArgs from a dictionary of arguments. Resolves the effective environment, fetches workspace VARS, materializes any

Try to consume tokens from the bucket. Args: tokens: The number of tokens to consume Returns: True

Create a full activity list with mocked agent executor. Args: response_callback: Function for mock run_agent_activity. tool_exec_

Create a new workflow and associated actions in the database from a DSLInput.

Delete a schedule. Parameters ---------- schedule_id : AnyScheduleID The ID of the schedule to be delete

Dispatch action for execution. This function handles dispatching actions to be executed. It supports both single action execution and paralle

Keep only model settings supported by the selected provider family.

Construct from dict (orjson parsed).

Generate and hash a secure API key. Args: prefix: Prefix to prepend to the key. Defaults to ``"tc_sk_"``. length: Number of

Generate a presigned URL for downloading a file with enhanced security. Args: key: The S3 object key bucket: Bucket name (require

Get a page of items from a collection. Args: collection: CollectionObject handle. offset: Starting index (0-indexed). lim

Return the current version for a preset.

Get the raw data from the StoredObject. For InlineObject, returns the data directly. For ExternalObject, raises an error (must be mat

Get a single dropdown definition by ID.

Determine the effective environment for an action statement. Args: stmt: Action statement that may have an environment override d

Get the scopes that are required but not granted. Args: user_scopes: The set of scopes granted to the user required_scopes: The s

Get a registry by origin.

Get a session by ID.

Processes a stream event and yields Vercel SDK SSE events. Handles both unified stream events (when ENABLE_UNIFIED_AGENT_STREAMING=true)

Safely import and reload a module. Uses a process-wide lock and avoids removing entries from sys.modules to prevent races with concurrent imp

Create the workspace schema and base table if absent.