Manage StaffDeck capability resources
Inspect before writing
- Confirm the target
agent_idand credential write access. - Fetch
GET /agents/{agent_id}/resourcesand/capabilities. - Fetch live OpenAPI for payload schemas before creating HTTP tools, MCP servers, or scheduled tasks; those schemas may evolve.
- Use the route inventory in references/resources-api.md.
Apply capability scope
- Use
generalfor capabilities the Harness may discover for ordinary tasks. - Use
sop_specificwhen a capability must be hidden unless the current SOP node explicitly references it. - After creating or publishing a resource, bind it to the employee and re-read
/capabilitiesto verify actual executability and any unavailable reason. - Do not assume a stored resource is executable merely because creation succeeded.
Knowledge
Prefer knowledge search when answering policy or factual questions and preserve returned citations. Use stable external_id values for repeatable entry upserts. Poll persistent Jobs for document ingestion and report failed stage and retryability.
Skills, tools, and MCP
Create as draft or disabled where supported, test first, then publish or enable. Never place plaintext secrets in skill files or logs; use secret references and verify that read responses remain masked. Run MCP discovery before sync, inspect the discovered tool schemas, and sync only the intended tools.
Scheduled tasks
Scheduled tasks use the same Harness v2 and SOP-specific rules as chat. Validate the employee's capability snapshot before activating a schedule. Prefer forbid concurrency unless overlapping runs are explicitly safe.
Mutating operations
Use a unique Idempotency-Key for retryable creates. Archive rather than physically delete. Do not update a resource owned by another account merely because it is visible through the gallery.