FlowCastle

Set up a product of the connected Tribute account for sale in this application, or change one already set up (one saved product per Tribute product, so calling it again updates). Requires manage_automation. Returns the saved product; its id is the productBindingId of a Payment block with provider TRIBUTE. A purchase always runs the Paid branch of that block; adding a number to a contact variable is optional. Once the product is published, what it adds is fixed (TRIBUTE_IMMUTABLE_BENEFIT): to change it the owner creates a new product in Tribute. Messages stay editable.

Search the library of reusable flow examples covering common business cases (lead capture, onboarding, payments, reminders). Read-only, needs no API key. Returns summaries to choose by — id, title, summary, useWhen, tags, requiredModules, hasSchemaExample — with no flow body; pass an id to get_flow_example for the full example. Calling it with no arguments returns the top examples, and a query matching nothing returns an empty list rather than an error.

Find every flow and block whose contents contain a keyword. Read-only. Searches message text and its translations, button labels and URLs, action names and configs, action input/output field paths and values, condition operands, trigger commands and payloads, custom-code files, and flow names and descriptions. A keyword matching a VARIABLE NAME also returns the blocks that reference that variable, which plain text search cannot do because blocks store variable ids, not names. `truncated` is true whenever a limit dropped something, and `cappedBy` names which: FLOW_LIMIT (more flows matched than `limit`), ROW_LIMIT (the 1000-match ceiling was hit; lower-ranked matches were not read), MATCHED_VARIABLES (the keyword matched more than 25 variable names — only the 25 closest, shortest name first, are resolved to the blocks that reference them, so blocks reading the others are MISSING), MATCHES_PER_FLOW (a flow lists at most 12 matches; its matchCount is the real number), MATCHES_PER_BLOCK (a block lists at most 3). A truncated answer is not proof that nothing else matches: narrow the keyword, or search the full variable name, before you rename or remove something on the strength of it. Use this instead of walking flows with get_flow_context when you know what the content says but not where it lives. Broadcast-backed flows and operation graphs are excluded — use list_broadcasts and the operations tools for those.

Run an EXISTING interactive flow for each listed contact right now, outside any trigger — as if each of them had just triggered it. Use it when the WHOLE message is the flow — its first block's text, media and buttons are what the recipient sees. To send your own custom text with buttons that run a flow on tap, prefer send_message with `buttons: [{ text, flowId }]`; it needs no wrapper flow. The flow starts at its start block for every recipient, and any `{{var|name}}` inside it resolves against that recipient's own variable context. No deploy is needed — the runtime compiles the flow on demand — but the flow must already be applied (use the ids apply_actions returned). Contacts are targeted by contactId only (from list_contacts), 1 to 50 per call. Duplicates are collapsed. Each contact is dispatched independently: one bad id fails its own row in `results` and the others still go out, so read `sent`/`failed`, not just the absence of an error. An unsubscribed contact, or a contact whose bot is not active, is refused — the same rule send_message applies. Nothing is queued for it; its row has `ok: false`, the reason in `error`, and `refused` set to `contact_unsubscribed` or `bot_inactive`. A sleeping bot is not refused: it is woken first. BROADCAST and OPERATION flows are rejected — a broadcast flow runs in an audience scope (send it with its broadcast) and an operation runs in system context (use run_operation). For a large audience this is the WRONG tool: create a broadcast whose flow filter selects the audience, and launch that once. Requires the send_flow_to_contact permission. NOT idempotent and not reversible — every call reaches real people again and a sent message cannot be recalled. Confirm the flow and the exact recipient list with the user before calling, and never retry a timed-out call blindly.

Send a message to ONE contact right now, outside any flow. For reaching many contacts use a broadcast instead. Target the contact with contactId (globally unique — preferred), or with platformId (the platform-side id, e.g. the Telegram user id). platformId is NOT globally unique: it is unique only per bot, so the same Telegram user talking to two of your bots is two contacts sharing one platformId. Pass botId alongside it whenever the application has more than one bot; without botId the call succeeds only if exactly one contact in the application matches, and otherwise fails listing the candidate bots. `{{var|name}}` placeholders in the text resolve against that contact's variable context. Requires the manage_broadcasts permission. Formatting: plain text by default, so tags arrive exactly as written. Pass parseMode "HTML" to send Telegram HTML (<b>, <i>, <u>, <s>, <code>, <pre>, <a href="…">, <tg-spoiler>, <blockquote>; escape a literal <, > or & as &lt; &gt; &amp;); the flow tokens [[b]]…[[/b]], [[i]], [[u]] and [[a|url]]…[[/a]] work too. Values filled in from what people typed are escaped, so they show as text and never add formatting. HTML that Telegram cannot parse is sent once more as plain text with the tags removed. Telegram bots and web chat only (web chat: not with media); refused for Instagram, mail, Telegram user accounts and SDK bots. Markdown is never rendered. Media: pass up to 10 attachments as publicly reachable http(s) URLs; the text becomes the caption (max 1024 characters) and may be empty. Several attachments send as one album. The kind is inferred from the URL's file extension — override with type when the URL has none. Not supported for SDK bots or for Telegram user-account bots (telegram_mtproto, text only) — the call is rejected and nothing is sent. Buttons: up to 8, each carrying EXACTLY ONE destination — a `url` (http(s) or tg://) the recipient opens, or a `flowId`, an already-applied INTERACTIVE flow that runs for that recipient when they…

Replace a telegram_mtproto userbot's watched-groups list — the chats it monitors. Requires the manage_settings permission. SET semantics: send the COMPLETE desired list every time (call list_watched_groups first and include existing entries you want to keep — omitting one removes it). Each entry needs a chatId (e.g. "-100…") or a public username/t.me link, and it must be a chat the account has JOINED: only joined chats can be watched. Watching a public chat without joining it is not available — an entry for a chat the account is not in is saved but never produces a message, so join the chat with the account first. The running userbot picks the change up within a few minutes, no restart. An empty list means "watch every joined chat" — NOT "watch nothing".

Import a telegram_mtproto userbot's existing chats as contacts — DM partners, groups, and channels — so everything the account already talks to becomes a contact send_message can target without waiting for each chat to message first. Importing does not allow sending: send_message to these contacts is rejected until the account's owner turns on "Sending from this account" in the dashboard (OFF by default, no tool changes it), and then it sends text only — no media, no buttons. Requires the manage_broadcasts permission. Reads the account's dialog list live (the userbot must be connected; large accounts can take up to a minute) and creates missing contacts; existing contacts are untouched, so the call is idempotent. Pass kinds to narrow the import (e.g. ["group","channel"] to leave personal DMs out). Does NOT change the watched-groups list. botId may be omitted when the application has exactly one userbot.

Update application-level settings (name, active state, default language, language for everyone else, incoming-message behavior). Requires the manage_settings permission in that application. Only the fields you pass are changed; omitted fields keep their current value, so the call is idempotent. Returns the updated application.

Update a contact's profile fields and/or contact-variable values. Requires the manage_broadcasts permission. Only the fields you pass are changed — omitted fields keep their current value — so the call is idempotent. The variables map takes variable NAMES (or full folder paths when a name is ambiguous), not ids; an unknown name fails with 422 before anything is written. Variable writes propagate to the live bot immediately (the runtime's cached values are invalidated). Setting status to "unsubscribed" stops broadcasts, sequences and direct sends for the contact. Setting it back to "subscribed" works only when a person on the team unsubscribed them; a contact who blocked the bot or used an unsubscribe link is refused with 409 and comes back only by writing to the bot again.

Close, reopen, snooze, or reschedule one follow-up task. Completing it records that a person handled the reminder — it does not message the contact. Snoozing moves the due time too, so the task reappears when the snooze ends.

Change one Pulse item's state. Every action changes the queue for the WHOLE workspace — an item belongs to the workspace, not to whoever called the tool, so dismissing a recommendation hides it from every member and records who decided that. `acknowledge` closes an attention item as seen, with no reason and no note — it is the only hand-close an `automatic` item accepts. `resolve` closes with a resolutionCode and is refused for an `automatic` item. Both need the permission for the item's source (manage_broadcasts for a broadcast, manage_automation for a flow, sequence or operation), and a critical item that is not `manual` by policy can be closed only by an owner or admin (a workspace key counts as owner); `resolve` on such an item also needs a note. Closing a card does not fix its cause, and it hides the problem: an item closed by hand is NOT raised again for 14 days, even while its detector still observes the condition. Only an anomaly the platform closed itself (resolutionCode `source_condition_cleared`) reopens at once when the condition returns. A dismissed recommendation returns by itself after the same cooldown. Does not apply a recommendation's proposed change — that is a dashboard action.

Change one CRM task: its fields, its status, or which contacts it is linked to, in one call. Tasks live in CRM → Tasks. A task may stand alone or be linked to contacts. While leads are on for the workspace, linking parks the contact's open lead until the task is done (parkLeads, default true), and marking the task done brings the linked leads back to Waiting on us so someone tells them the result (Won and Lost leads are left alone unless named in returnContactIds). Deleting a task, or unlinking a contact, brings a lead parked on it back to Waiting on us. A task is internal work for the team: nothing is sent to anyone. Setting status "done" is what brings the linked leads back; it does not message anyone.

Connect a Tribute account to the application or change the connection. Requires manage_settings. Pass at least one field; they are applied in the order apiKey, notificationsConfirmed, paused. Returns the same view as get_tribute_setup. The API key is stored encrypted and no tool returns it. Three things happen in the owner's Tribute account and no tool can do them: creating the API key, creating a digital product and getting it approved by Tribute, and saving the notification link in Tribute (Dashboard → Settings → API Keys → Webhook URL).

Dry-run validation of a proposed batch of flow-builder actions. Mutates nothing and is safe to repeat. OPTIONAL: apply_actions runs this exact validation itself and applies nothing when invalid, so calling validate_actions first is redundant — use it only to check a draft you do not intend to apply yet. Returns the same errors and warnings apply_actions would report. Note that passing validation does not mean the design is sound; structural rules live in get_design_guidelines.