The render.* family (1 verb). Every verb enters through the one front door: it is capability-checked, permission-checked, scope-checked and audited before it runs (see Security & permissions). Each entry below lists its capability, risk class (which fixes the minimum autonomy level), the minimum caller permission, its availability tier, whether it is idempotent, and any outbound egress.
Exportrender.export
| Property | Value |
|---|---|
| Capability | file.write |
| Risk class | Sensitive - autonomy L2 |
| Min. permission | Member |
| Availability | Core - always on (MCP tier 1) |
| Idempotent | No |
| Egress | None - in-box (pure Postgres, no outbound call) |
re-read a table-render verb through the kernel, serialise (csv|xlsx), store the bytes as
an encrypted file_record (origin=RENDER), and return its outputKey (file id). SENSITIVE/L2/MEMBER.
Input: { verb, input?, format, filename? }
verb - the READ verb to re-read (must declare a table render descriptor + be out-ranked).
input - the params forwarded to that verb (its own input shape); default {}.
format - “csv” | “xlsx” (server-side PDF is a sequenced follow-on).
filename - optional base name; the format extension is appended if missing.
Call POST /v/render.export with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool render.export.