Skip to content

Application Development · Beta

Retool
API integration

Ship Application Development features without building the integration. Full Retool API access via Proxy, normalized data through Unified APIs, and 160+ MCP-ready tools for AI agents — all extensible to your exact use case.

Built for specific customer use cases. Issues are resolved quickly.

Talk to us
Retool

Use Cases

Why integrate with Retool

Common scenarios for SaaS companies building Retool integrations for their customers.

01

Automate employee provisioning and deprovisioning in Retool

HR and identity management SaaS companies can sync their employee lifecycle events to automatically create, update, or suspend user accounts in their customers' Retool organizations — ensuring access to sensitive internal tools is always in sync with employment status.

02

Enforce role-based access control across internal tooling

Security and compliance platforms can map organizational roles to Retool groups, ensuring that when an employee changes departments or roles, their permissions on internal dashboards and admin panels are updated immediately without manual intervention.

03

Centralize user directory management across SaaS tools including Retool

IT management and SaaS governance platforms can offer a single pane of glass for managing user accounts across all tools their customers use, with Retool as a key integration point for internal application access.

04

Audit and report on internal tool access for compliance

GRC and compliance SaaS companies can pull user and group data from Retool to generate access reports, flag orphaned accounts, and demonstrate SOC 2 or ISO 27001 compliance for internal tooling environments.

What You Can Build

Ship these features with Truto + Retool

Concrete product features your team can ship faster by leveraging Truto’s Retool integration instead of building from scratch.

01

Automated Retool user provisioning on employee onboarding

Automatically create a Retool user account and assign them to the correct permission groups the moment they are added in your customer's HR or identity system.

02

Real-time access revocation on offboarding

Instantly suspend or delete a user's Retool account when they are terminated or deactivated in the source-of-truth directory, closing the access gap in seconds.

03

Cross-platform user directory dashboard

Surface a unified view of all user accounts across Retool and other connected applications, letting IT admins spot discrepancies and orphaned accounts at a glance.

04

Group membership sync for RBAC enforcement

Map organizational roles or department tags to Retool groups so that permission boundaries are always consistent with the customer's identity provider.

05

Compliance-ready access audit reports

Generate exportable reports showing which users have access to Retool, what groups they belong to, and when their accounts were last modified — ready for auditor review.

SuperAI

Retool AI agent tools

Comprehensive AI agent toolset with fine-grained control. Integrates with MCP clients like Cursor and Claude, or frameworks like LangChain.

list_all_retool_users

List Retool users in the organization. Returns: id, email, active, first_name, last_name, is_admin, user_type, created_at. Filter by email, first_name, or last_name.

get_single_retool_user_by_id

Get a single Retool user by id. Returns: id, email, active, first_name, last_name, is_admin, user_type. Required: id, userId.

create_a_retool_user

Create a user in Retool. Returns the created user including id, email, first_name, last_name, active, created_at, user_type, seat_type, and metadata. Required: email, first_name, last_name. seat_type requires the Named Seats feature on your plan.

delete_a_retool_user_by_id

Delete a user in Retool by id. Disables the user from the organization rather than permanently removing the account. Returns an empty 204 response on success. Required: id.

update_a_retool_user_by_id

Update a Retool user by id using JSON Patch operations (op: add, remove, or replace). Returns the updated user including id, email, first_name, last_name, active, created_at, user_type, and seat_type. Required: id, operations.

list_all_retool_groups

List Retool permission groups for the organization or a space. Returns: id, legacy_id, name, members, universal_app_access, universal_resource_access, universal_workflow_access, created_at, updated_at.

get_single_retool_group_by_id

Get a single Retool permission group by its numeric id. Returns: id, legacy_id, name, members, universal_app_access, universal_resource_access, created_at, updated_at. Required: id, groupId.

create_a_retool_group

Create a Retool permission group. Returns the created group: id, name, members, universal access levels, created_at. Required: name. Members, user invites, and access levels can be set at creation.

delete_a_retool_group_by_id

Delete a Retool permission group by id, revoking its access to apps, resources, and workflows. Returns an empty 204 response on success. Required: id.

retool_groups_partial_update

Update a Retool group partially using a list of patch operations. Returns the updated group: id, name, members, universal access levels, updated_at. Required: group_id, operations.

update_a_retool_group_by_id

Replace a Retool group entirely with the supplied fields. Returns the updated group: id, name, members, universal access levels, updated_at. Required: id.

list_all_retool_spaces

List Retool spaces. Returns the child spaces within the current space, each with: id, name, domain, created_at, and updated_at.

get_single_retool_space_by_id

Get a single Retool space by id. Returns: id, name, domain, created_at, updated_at. Required: id.

create_a_retool_space

Create a Retool space for isolated, multitenant experiences. Returns the created space with id, name, domain, created_at, and updated_at. Required: name, domain. On Retool Cloud, domain is the space's subdomain.

delete_a_retool_space_by_id

Delete a Retool space by id. Returns an empty 204 response on success. Required: id.

update_a_retool_space_by_id

Update a Retool space by id. Returns the updated space with id, name, domain, created_at, and updated_at. Required: id, name, domain.

list_all_retool_organizations

List Retool organizations with their usage data, covering page views, active users, and app activity across organizations. Returns: org_id, host, last_active.

retool_organizations_bulk_update

Update Retool organization settings by applying a batch of patch operations. Returns: id, request_access_enabled, release_management_enabled, preloaded_css, two_factor_auth_required. Required: operations.

create_a_retool_folder

Create a Retool folder for apps, workflows, resources, agents, or libraries. Returns: success, data. Required: name, folder_type.

delete_a_retool_folder_by_id

Delete a Retool folder (app, workflow, resource, agent, or library) by id. Returns an empty 204 response on success. Required: id, folderId.

get_single_retool_folder_by_id

Get a single Retool folder by id. Returns: success, data. Required: id.

list_all_retool_folders

List Retool folders for apps, workflows, resources, agents, and libraries in your organization. Returns: success, data.

update_a_retool_folder_by_id

Update a Retool folder by id using RFC 6902 JSON Patch operations. Returns: success, data. Required: id, operations.

delete_a_retool_group_member_by_id

Remove a user from a Retool group. Returns the updated group including id, name, members, universal_app_access, and created_at. Required: id, group_id, groupId, userId.

create_a_retool_group_member

Add users to a Retool group and optionally set or unset group admin status. Returns the updated group: id, name, members, universal access levels, created_at. Existing members cannot be removed with this endpoint. Required: group_id, groupId, members.

create_a_retool_group_user_invite

Add user invites to a Retool group. Returns the updated group including id, name, members, user_invites, and universal access levels. Required: group_id, groupId, userInviteIds.

delete_a_retool_group_user_invite_by_id

Remove a pending user invite from a Retool permission group. Returns an empty 204 response on success. Required: id, group_id, group_id, userInviteId.

create_a_retool_spaces_copy_element

Copy apps, queries, resources, and workflows to another Retool space. Returns: resource_ids, query_library_query_ids, app_ids, workflow_ids. Required: destination_space_id. Dependent elements are copied automatically; omit id lists for element types you are not copying.

create_a_retool_user_logout

Log out a Retool user by id, terminating all their active sessions and optionally initiating an RP-initiated SSO logout. Returns: sso_logout, sso_logout_url, warning. Required: user_id, userId.

retool_user_user_attributes_bulk_delete

Delete a user attribute from a Retool user. Returns: metadata (the user's updated user metadata). Required: user_id, attribute_name.

create_a_retool_user_user_attribute

Create or update a user attribute on a Retool user. Returns: metadata (the updated user metadata containing the new attribute value). Required: user_id, user_id, name, value.

update_a_retool_users_reset_2_fa_by_id

Reset a user's two-factor authentication in Retool, disabling all two-factor authentication methods for the specified user. Returns an empty 204 response on success. user_1234). Required: id.

create_a_retool_app_delete

Delete an app's entry from a named Retool release manifest by pushing a delete branch to source control. Returns: commit_sha, url, branch_name. Deprecated — use the element-based delete endpoint instead. Required: app_uuid, manifest_name.

list_all_retool_app_themes

List all app themes for your Retool organization or space. Returns themes with id, legacy_id, name, theme, created_at, and updated_at.

retool_app_themes_bulk_update

Create or update an app theme in Retool by sending its full record. Returns: success, data. Required: id, legacy_id, name, theme, created_at, updated_at. Fails with 409 if a theme with the same name already exists.

create_a_retool_app_theme

Create a new app theme in Retool. Returns: id, legacy_id, name, theme, created_at, updated_at. Required: id, legacy_id, name, theme, created_at, updated_at. Fails with 409 if a theme with the same name already exists.

delete_a_retool_app_theme_by_id

Delete an app theme in Retool by id. Returns an empty 204 response on success. Required: id. Available for classic apps only.

get_single_retool_app_theme_by_id

Get a single Retool app theme by id. Returns the theme with id, legacy_id, name, theme, created_at, and updated_at. Required: id.

create_a_retool_branches_reset

Reset a Retool app branch by discarding Retool-local branch changes and reloading app contents from a remote Git branch. Returns: branch_name, remote_branch_name, status, updated_apps. Required: branch_name. Updates to non-page elements on the branch are not persisted.

create_a_retool_delete

Delete an element from a Retool release manifest by pushing a source control branch that removes its entry. Returns: commit_sha, url, branch_name. Requires multi-instance releases to be enabled. Required: element_type, element_uuid, manifest_name.

update_a_retool_manifest_app_by_id

Set the release version for an app in a Retool release manifest by pushing a branch to source control; the manifest is created in the branch if it does not exist. Returns: commit_sha, url, branch_name. This endpoint is deprecated. Required: id, manifest_name, release.

create_a_retool_manifest_delete

Delete a named release manifest in Retool by pushing a branch to the source control repository that removes it. Returns: commit_sha, url, branch_name. Required: manifest_name, manifestName.

create_a_retool_releases_app

Create a release artifact for a Retool classic app by pushing a source control branch with the given version. Returns: commit_sha, url, branch_name. Deprecated: supports classic apps only; use the newer releases endpoint instead. Required: app_id, appUuid, release_version.

get_single_retool_releases_app_by_id

List all available releases for a Retool classic app. Returns: release_version, release_description, created_at. Required: id. Deprecated: supports classic apps only; use the newer releases endpoint instead.

create_a_retool_source_control_branch

Create a Retool source control branch, optionally initialized with a single element. Returns: branch_id, branch_name, shared, and element. Required: branch_name. When element_id is provided, element_type is also required (PAGE, PLAYGROUND_QUERY, WORKFLOW, PROCESS, or AGENT).

retool_source_control_configs_bulk_delete

Delete the Retool source control configuration for the organization or space, removing the Git provider connection. Returns an empty 204 response on success.

retool_source_control_configs_bulk_update

Set the Retool source control configuration for the organization or space, overwriting any existing configuration. Returns: config, provider, org, repo, default_branch, repo_version. Required: config.

create_a_retool_source_control_config

Create the Retool source control configuration for the organization or space. Returns: config, provider, org, repo, default_branch, repo_version. Required: config. Fails if a configuration is already set.

list_all_retool_source_control_configs

Get the Retool source control configuration for the organization or space. Returns: config, provider, org, repo, default_branch, repo_version.

get_single_retool_source_control_deployment_by_id

Get a Retool source control deployment by id. Returns: id, status, commit_sha, triggered_by, created_at, completed_at, app_deployment_details. Required: id.

list_all_retool_source_control_deployments

List Retool source control deployments in reverse chronological order, matching the deploy dashboard. Returns: id, status, commit_sha, triggered_by, created_at, completed_at, app_deployment_details.

create_a_retool_source_control_deploy

Trigger a deployment of the latest changes from the source control provider to Retool. Returns the deployment object including its id, status, commit_sha, created_at, and per-app app_deployment_details. No request body needed; deployments start in PENDING_START status and can be polled by their id.

retool_source_control_manifests_bulk_update

Set a Retool release manifest by pushing a branch that creates the named manifest, overwriting it if it already exists. Returns: commit_sha, url, branch_name. Required: manifest_name, manifestName.

list_all_retool_source_control_manifests

List all release manifests available in the Retool source control repository. Returns: name, apps, workflows, apps-v2.

update_a_retool_source_control_manifest_by_id

Set the release version for an element in a named Retool release manifest by pushing a branch to the source control repository. Returns: commit_sha, url, branch_name. The APP element type requires a source control provider that supports external release tags. Required: id, manifest_name, elementType, release.

list_all_retool_source_control_manifests_source_control

Get a Retool release manifest by name. Returns: name, apps, workflows, apps-v2 (release versions for classic apps, workflows, and apps). Required: manifest_name. Multi-instance releases must be enabled for the organization.

create_a_retool_source_control_release

Create a release artifact for a Retool app, classic app, or workflow. Returns the release with commit_sha plus url and branch_name (classic apps and workflows) or release_version and external_tag_name (apps). Multi-instance releases must be enabled. Required: release_id, elementType, elementUuid, release_version.

get_single_retool_source_control_release_by_id

List the available releases for a Retool app, classic app, or workflow element. Returns: release_version, release_description, created_at. Required: id, elementUuid, elementType.

retool_source_control_settings_bulk_update

Create or update the Retool source control settings for your organization or space, overwriting any existing settings. Returns: auto_branch_naming_enabled, custom_pull_request_template, version_control_locked, multi_instance_releases_enabled. Required: settings.

list_all_retool_source_control_settings

Get the Retool source control settings for your organization or space. Returns: auto_branch_naming_enabled, custom_pull_request_template, version_control_locked, multi_instance_releases_enabled.

list_all_retool_source_control_test_connections

Test the connection to the configured source control provider in Retool. Returns: success, message.

create_a_retool_source_control_test_deploy

Run a test deployment of Retool source control changes for a given commit to validate it without applying permanent changes. Returns: success, message. Required: deploy_params.

get_single_retool_access_request_by_id

Get a single Retool access request by id. Returns: id, status, legacy_id, requesting_email, updated_by_id, created_at, updated_at. Required: id.

list_all_retool_access_requests

List Retool access requests in your organization. Returns: id, status, legacy_id, requesting_email, created_at, updated_at.

update_a_retool_access_request_by_id

Approve or deny a Retool access request by applying JSON Patch operations to it. Returns the updated request with id, status, requesting_email, created_at, and updated_at. Required: id, operations.

create_a_retool_access_token

Create a Retool access token for authenticating API requests. Returns: id, label, last4, scopes, access_token, created_at. Required: label, scopes. The secret access_token is only visible once.

list_all_retool_access_tokens

List Retool access tokens in the organization. Returns: id, label, description, last4, scopes, created_at, updated_at.

get_single_retool_access_token_by_id

Get a specific Retool access token by id. Returns the access token object including its id (uuid), label, description, last4 of the token secret, scopes, owner_legacy_id, and created_at/updated_at timestamps. Required: access_token_id.

delete_a_retool_app_by_id

Delete a Retool app by id. Returns an empty 204 response on success. Required: id.

get_single_retool_app_by_id

Get a single Retool app by id. Returns the app object including its id, name, description, app_type, folder_id, and release_version. Required: id.

list_all_retool_apps

List Retool apps in your organization. Returns apps with id, name, app_type, folder_id, and created_at. Max 100 per page when paginating.

create_a_retool_apps_clone_app

Clone a Retool app by creating a copy of an existing app in a specified folder. Returns the newly cloned app under data with a success flag. Required: app_id, new_app_name.

retool_permissions_search

List Retool objects a subject (group or user) can access along with their access levels. Returns: type, id, access_level. Required: subject, object_type.

get_single_retool_permissions_access_list_by_id

Get a Retool access list for an app, folder, resource, workflow, or agent. Returns: group, user, and userInvite arrays, each entry with its subject (id, type), sources, and accessLevel. Required: id, object_type, objectId, objectType.

create_a_retool_permissions_grant

Grant a Retool group or user access to an app, folder, screen, resource, or resource configuration. Returns the updated list of objects with their type, id, and access_level. Required: subject, object, and access_level. Does not cascade to subfolders.

create_a_retool_permissions_revoke

Revoke a group or user's access to a Retool app, folder, screen, resource, or resource configuration. Returns the updated list of objects with their type, id, and access_level. Required: subject, object. Revoking a folder covers objects directly under it but does not cascade to subfolders.

create_a_retool_resource_configuration

Create an environment-specific configuration for a Retool resource. Returns: success, data. Required: resource_id, environment_id, options. The options shape varies by resource type (e.g. Postgres, MySQL, Snowflake, Azure Blob, REST API).

get_single_retool_resource_configuration_by_id

Get a Retool resource configuration by id. Returns: id, resource, environment, options, created_at, updated_at. Required: id.

list_all_retool_resource_configurations

List Retool resource configurations. Returns each configuration's id, resource, environment, options, created_at, and updated_at. Max 100 per page.

update_a_retool_resource_configuration_by_id

Update a Retool resource configuration by id by applying JSON Patch replace operations. Returns: success, data. Required: id, operations.

delete_a_retool_resource_configuration_by_id

Delete a Retool resource configuration by id. Returns an empty 204 response on success. Required: id.

create_a_retool_resource

Create a Retool resource such as a database, REST API, or AI provider connection. Returns: success, data, type, display_name, folder_id, options. Required: type, display_name, options.

delete_a_retool_resource_by_id

Delete a Retool resource by id. Returns an empty 204 response on success. Required: id, resourceId.

get_single_retool_resource_by_id

Get a single Retool resource by id. Returns: success, data. Required: id.

list_all_retool_resources

List Retool resources in your organization. Returns: success, data.

update_a_retool_resource_by_id

Update a Retool resource by id using JSON Patch replace operations. Returns: success, data. Required: id, operations.

create_a_retool_role_permissions_remove_role_grants_for_subject

Remove role grants for a subject in Retool, deleting the subject's grant for the given role and, when object info is provided, any object-level grants. Returns: role_id, subject_type, subject_id, object_type, object_id. Required: role_id, subject_type, subject_id.

create_a_retool_role_permissions_role_grant

Create a role grant in Retool that assigns a role to a user, group, or user invite. Returns: role_id, subject_type, subject_id, object_type, object_id. Requires role_id, subject_type, and subject_id. Omit object_type and object_id together to create a universal (organization-level) grant. Required: role_id, subject_type, subject_id.

delete_a_retool_role_permissions_role_grant_by_id

Delete a Retool role grant by id. Returns an empty 204 response on success. Required: id.

get_single_retool_role_permissions_role_grant_by_id

Get the role grants assigned to a Retool subject. Returns a list of grants including role_id, subject_type, subject_id, and object_type/object_id when object-scoped. Universal grants are returned without object_type and object_id. Required: id, subject_type, subjectType, subjectId.

list_all_retool_role_permissions_role_grants

List Retool role grants that give groups or users access to apps, folders, and other objects. Returns: role_id, subject_type, subject_id, object_type, object_id. Filters combine with AND; user_id and group_id are mutually exclusive. Max 100 per page with next_token pagination.

create_a_retool_role_permissions_role

Create a role in Retool. Returns the created role object including id, name, object_scopes, organization_scopes, is_default_role, and created_at. Requires name, object_scopes, and organization_scopes. Required: name, object_scopes, organization_scopes.

delete_a_retool_role_permissions_role_by_id

Delete a Retool role by id. Default roles cannot be deleted. Returns an empty 204 response on success. Required: id.

list_all_retool_role_permissions_roles

List roles in Retool. Returns each role with id, name, description, is_default_role, object_scopes, and created_at.

update_a_retool_role_permissions_role_by_id

Update a Retool role by id. Returns the updated role including id, name, object_scopes, organization_scopes, and updated_at. Required: id.

retool_sso_configs_bulk_delete

Remove the SSO configuration for the Retool organization or space. Returns an empty 204 response on success. Does not remove SSO configurations set via environment variables.

create_a_retool_sso_config

Set the SSO configuration for a Retool organization or space, choosing a config_type variant (google, oidc, google & oidc, saml, or google & saml). Returns: success, data, config, enabled. Required: data, config_type, disable_email_password_login.

list_all_retool_sso_configs

Get the SSO configuration for a Retool organization or space. Returns: config_type, google_client_id, google_client_secret, disable_email_password_login, oidc_client_id, oidc_client_secret, oidc_auth_url, jit_enabled, trigger_login_automatically, idp_metadata_xml, and 22 more. SSO configurations set via environment variables are not returned.

create_a_retool_toolscript_validate

Validate serialized Retool Toolscript files by deserializing them without saving anything. Returns: valid, diagnostics, error. Required: toolscript.

create_a_retool_user_attribute

Create a user attribute in Retool. Returns the created attribute with id, name, label, data_type, default_value, and intercom_attribute_name. Requires name, label, and dataType (string, json, or number); name must be lowercase alphanumeric with underscores, max 255 chars. Required: name, label, dataType.

delete_a_retool_user_attribute_by_id

Delete a custom user attribute from your Retool organization by id. Returns an empty 204 response on success. Required: id.

list_all_retool_user_attributes

List the user attributes configured for your Retool organization. Returns each attribute with id, name, label, data_type, default_value, and intercom_attribute_name.

update_a_retool_user_attribute_by_id

Update a Retool user attribute by id with JSON Patch operations. Returns success and the updated attribute in data. Requires id and operations (op must be 'replace'). Required: id, operations.

retool_user_invite_user_attributes_bulk_delete

Delete a user attribute from a Retool user invite by name. Returns: metadata (the updated invite metadata without the deleted attribute). Required: user_invite_id, attribute_name.

create_a_retool_user_invite_user_attribute

Add or update a user attribute on a Retool user invite; the attribute name must match an existing attribute exactly. Returns: metadata (the updated invite metadata containing the new attribute value). Required: user_invite_id, userInviteId, name, value.

create_a_retool_user_invite

Create a user invite in Retool. Returns the created invite including id, invited_email, seat_type, created_at, and an invite_link that expires 7 days after generation. Required: email.

delete_a_retool_user_invite_by_id

Delete a pending user invite in Retool by id. Returns an empty 204 response on success. Required: id.

get_single_retool_user_invite_by_id

Get a Retool user invite by id. Returns: success, data, email, defaultGroupIds, seatType, metadata. Required: id.

list_all_retool_user_invites

List Retool user invites pending for the organization. Returns: success, data, email, defaultGroupIds, seatType, metadata.

list_all_retool_ai_tokens_byoks

List Retool BYOK AI token usage as a daily time series broken down by day, model, provider, user, and resource; only usage through customer-provided API keys is included. Returns rows with day, org_id, model, input_tokens, output_tokens. Required: start_date.

create_a_retool_configuration_variable

Create a Retool configuration variable with per-environment values. Returns: id, name, description, secret, values, default_value. Required: name, secret, values.

delete_a_retool_configuration_variable_by_id

Delete a Retool configuration variable by id, removing the variable and its stored values. Returns an empty 204 response on success. Required: id.

get_single_retool_configuration_variable_by_id

Get a Retool configuration variable by id, including its per-environment values. Returns: id, name, description, secret, values, default_value. Required: id.

list_all_retool_configuration_variables

List Retool configuration variables and their values. Returns: id, name, description, secret, values, default_value.

update_a_retool_configuration_variable_by_id

Update a Retool configuration variable and its per-environment values. Returns: id, name, description, secret, values, default_value. Required: id, name, secret, values.

create_a_retool_custom_component_librarie_revision

Create a new revision of a Retool custom component library by uploading component files. Returns: id, version, custom_component_library_id, created_at, updated_at. Required: library_id, libraryId, version_bump, files. Upstream requires multipart/form-data (files are uploaded as form parts), so this endpoint cannot be driven through Truto MCP or the proxy; use the Retool API directly for revision uploads.

list_all_retool_custom_component_librarie_revisions

List revisions of a Retool custom component library. Returns: id, version, custom_component_library_id, created_at, updated_at. Required: library_id, libraryId.

create_a_retool_custom_component_library

Create a Retool custom component library. Returns the created library with id, name, description, label, created_at, and updated_at. Required: name, description, label.

get_single_retool_custom_component_library_by_id

Get a Retool custom component library by id. Returns: id, name, description, label, created_at, updated_at. Required: id.

list_all_retool_custom_component_libraries

List Retool custom component libraries. Returns a paginated list of libraries with id, name, description, label, created_at, and updated_at. Required: libraryId.

list_all_retool_data_security_policies

List the data security policies in your Retool organization, including each policy's group assignments, exemptions, and attached resource configurations. Returns: id, name, description, status, grants_unrestricted_access, assigned_group_ids, exempt_group_ids, resource_configurations, created_at, updated_at. Max 100 per page.

get_single_retool_data_security_policy_by_id

Get a Retool data security policy by id, including its lifecycle status, group assignments and exemptions, and attached resource configurations. Returns: id, name, description, status, grants_unrestricted_access, assigned_group_ids, exempt_group_ids, resource_configurations, created_at, updated_at. Required: id.

create_a_retool_embed_url_external_user

Create a single-use embed URL in Retool that signs an external user into a published app. Returns: embedUrl. Required: landingPageUuid, groupIds, externalIdentifier. The URL fails when loaded a second time; branch and releaseVersion are mutually exclusive.

create_a_retool_environment

Create an environment in Retool for running resources against different configurations like development, staging, or production. Returns: id, name, description, color, default, created_at, updated_at. #FFFFFF). Required: name, color.

delete_a_retool_environment_by_id

Delete a Retool environment by id. Returns an empty 204 response on success. Required: id.

get_single_retool_environment_by_id

Get a single Retool environment by id. Returns: id, name, description, color, default, created_at, updated_at. Required: id.

list_all_retool_environments

List Retool environments in your organization. Returns each environment with: id, name, description, color, default, created_at, updated_at.

update_a_retool_environment_by_id

Update a Retool environment by id using JSON Patch operations. Returns: id, name, description, color, default, created_at, updated_at. Required: id, operations.

list_all_retool_info_ip_allowlists

List the Retool Cloud IP addresses that require access to connected data sources, organized by region. Returns ipAddresses with entries for us-west-2, eu-central-1, and ap-southeast-1.

create_a_retool_observability_config

Create an observability configuration for your Retool organization. Returns the created configuration with id, config, and enabled. Requires config (Sentry DSN or Datadog API key) and enabled. Fails if a configuration already exists. Required: config, enabled.

delete_a_retool_observability_config_by_id

Delete an observability configuration in Retool by id. Returns an empty 204 response on success. Required: id.

list_all_retool_observability_configs

List observability configurations for your Retool organization. Returns each configuration with id, config, and enabled.

update_a_retool_observability_config_by_id

Update an observability configuration in Retool by id. Returns the updated configuration with id, config, and enabled. Required: id. Fails if no existing configuration is found.

retool_organization_ai_settings_bulk_update

Update the AI settings for a Retool organization. Returns the updated settings: retoolAI (global switch for all Retool AI features), retoolAIActions, retoolVector, and retoolAskAI. Required: retoolAI, retoolAIActions, retoolVector, retoolAskAI.

list_all_retool_organization_ai_settings

Get the AI settings for a Retool organization. Returns the current feature switches: retoolAI (global switch that takes precedence over individual features), retoolAIActions, retoolVector, and retoolAskAI.

list_all_retool_organization_analytics_integrations

List the analytics integrations configured for your Retool organization. Returns: type, measurement_id, enabled, host, api_key. At most one configuration is returned per integration type.

retool_organization_code_executor_settings_bulk_update

Update the Retool organization's Code Executor resource settings. Returns the updated settings: memoryLimitMbs, maxConcurrentProcesses, and circuitBreakerEnabled. Required: memoryLimitMbs, maxConcurrentProcesses, circuitBreakerEnabled.

list_all_retool_organization_code_executor_settings

Get the Retool organization's Code Executor resource settings. Returns: memoryLimitMbs, maxConcurrentProcesses, and circuitBreakerEnabled. Null memoryLimitMbs or maxConcurrentProcesses values mean service defaults apply.

create_a_retool_organization_invalidate_session

Invalidate all active sessions for every user in the Retool organization. Returns an empty 204 response on success.

list_all_retool_organizations_organization

Get the advanced settings of your Retool organization. Returns: id, request_access_enabled, two_factor_auth_required, preloaded_css, preloaded_javascript, hide_environment_toggle.

list_all_retool_revision_files

List files for a custom component library revision in Retool. Returns: filepath, file_contents, created_at, updated_at. Required: library_id, revision_id, libraryId, revisionId.

create_a_retool_test

Send a test error event to a configured Retool observability provider to verify error delivery. Returns: success, message (returned when the send fails). Required: provider.

list_all_retool_usage_ai_credits

Get a daily time series of AI credit usage in Retool, broken down by day, org, model, provider, user, and credit pool. Returns: day, org_id, surface_area, model, provider_name, user_id, user_email, credits, credits_pool_source, additional_ai_credits_pool_id. Required: start_date. Max 100 per page.

list_all_retool_usage_app_details

Get detailed app usage in Retool, including the breakdown of saves and views for a specific app over a date range. Returns: overall_summary, weekly_summary, viewer_summary, editor_summary. Required: start_date, app_name.

list_all_retool_usage_app_summaries

List Retool app usage summaries for the selected organizations, including views, saves, and unique editors and viewers in a specified time range. Returns: app_name, host, count_app_views, count_app_saves, count_viewers, count_editors. Required: start_date.

list_all_retool_usage_user_details

Get detailed usage for a selected user and organizations in Retool, including the breakdown of app saves and views over a date range. Returns: overall_summary, weekly_summary, viewer_summary, editor_summary. Required: start_date, email.

list_all_retool_usage_user_summaries

List Retool user usage summaries for the selected organizations, covering app views and edits in a date range. Returns: org_id, user_id, email, host, count_app_views, count_app_saves, count_unique_apps, last_active. Required: start_date. If end_date is omitted, the range defaults to start_date + 30 days.

list_all_retool_usages

Get a Retool usage summary for the selected organizations over a date range, covering page saves, page views, and active users. Returns: count_current_page_saves, count_current_page_views, count_current_users, count_T30_users, percent_growth_page_saves, percent_growth_page_views, daily_T30_usage, and 2 more. Required: start_date.

retool_user_task_reassigns_bulk_update

Reassign a Retool user task to a group or user. Returns the reassigned task including id, workflow_name, task_name, status, context, and assignees. Required: task_id, email, assignees.

list_all_retool_user_tasks

List Retool user tasks generated by workflows. Returns: id, task_name, status, assignees, context, created_at, expires_at.

get_single_retool_workflow_run_by_id

Get a Retool workflow run by id, including its user tasks. Returns: status, workflow_id, id, trigger_type, trigger_id, created_at, user_tasks. Required: id.

create_a_retool_workflow_trigger

Create a cron or webhook trigger for a Retool workflow. Returns the created trigger including id, type, is_enabled, crontab, timezone, environment_id, created_by, created_at, and updated_at. The trigger starts disabled, a workflow can have only one webhook trigger, and crontab is required for cron triggers. Required: workflow_id, workflowId, type.

delete_a_retool_workflow_by_id

Delete a Retool workflow by its UUID id. Returns an empty 204 response on success. Required: id.

get_single_retool_workflow_by_id

Get a Retool workflow by id. Returns: id, name, description, crontab, timezone, is_enabled, folder_id, protected, created_by, created_at, updated_at, code_executor_memory_limit_mbs, run_as_group. Required: id.

list_all_retool_workflows

List Retool workflows in the organization. Returns: id, name, description, crontab, timezone, is_enabled, folder_id, protected, created_by, created_at, updated_at, code_executor_memory_limit_mbs, run_as_group.

update_a_retool_workflow_by_id

Update a Retool workflow's resource limit overrides by id. Returns: id, name, is_enabled, code_executor_memory_limit_mbs, updated_at, run_as_group. Required: id. code_executor_memory_limit_mbs accepts 256-32768 or null.

list_all_retool_data_security_policie_users

List the Retool users a data security policy applies to, computed from the policy's group assignments minus its group exemptions. Returns: id, email, first_name, last_name, active, via_group_ids. Required: policy_id, policyId.

list_all_retool_resource_configuration_users

List Retool users whose data access on a resource configuration is impacted by data security policies, each with the policies that apply to them. Returns: id, email, first_name, last_name, active, policies. Required: configuration_id, configurationId.

retool_user_task_cancels_bulk_update

Cancel a Retool user task by id. Returns the cancelled task including id, task_name, status, assignees, and completed_at. Required: task_id, task_id, email.

retool_user_task_submits_bulk_update

Submit a Retool user task by id with the assignee-defined output payload. Returns the submitted task including id, task_name, status, assignees, and output. Required: task_id, task_id, email, output.

Why Truto

Why use Truto’s MCP server for Retool

Other MCP servers give you a static tool list for one app. Truto gives you a managed, multi-tenant MCP infrastructure across 950+ integrations.

01

Auto-generated, always up to date

Tools are dynamically generated from curated documentation — not hand-coded. As integrations evolve, tools stay current without manual maintenance.

02

Fine-grained access control

Scope each MCP server to read-only, write-only, specific methods, or tagged tool groups. Expose only what your AI agent needs — nothing more.

03

Multi-tenant by design

Each MCP server is scoped to a single connected account with its own credentials. The URL itself is the auth token — no shared secrets, no credential leaking across tenants.

04

Works with every MCP client

Standard JSON-RPC 2.0 protocol. Paste the URL into Claude, ChatGPT, Cursor, or any MCP-compatible agent framework — tools are discovered automatically.

05

Built-in auth, rate limits, and error handling

Tool calls execute through Truto’s proxy layer with automatic OAuth refresh, rate-limit handling, and normalized error responses. No raw API plumbing in your agent.

06

Expiring and auditable servers

Create time-limited MCP servers for contractors or automated workflows. Optional dual-auth requires both the URL and a Truto API token for high-security environments.

Unified APIs

Unified APIs for Retool

Skip writing code for every integration. Use Truto’s category-specific Unified APIs out of the box or customize the mappings with AI.

Unified User Directory API

Users

The User object represents a User.

View Docs

How It Works

From zero to integrated

Start with Retool in a free sandbox, usually ready within one business day. No boilerplate, no maintenance burden.

01

Link your customer’s Retool account

Use Truto’s frontend SDK to connect your customer’s Retool account. We handle all OAuth and API key flows — you don’t need to create the OAuth app.

02

We handle authentication

Don’t spend time refreshing access tokens or figuring out secure storage. We handle it and inject credentials into every API request.

03

Call our API, we call Retool

Truto’s Proxy API is a 1-to-1 mapping of the Retool API. You call us, we call Retool, and pass the response back in the same cycle.

04

Unified response format

Every response follows a single format across all integrations. We translate Retool’s pagination into unified cursor-based pagination. Data is always in the result attribute.

FAQs

Common questions about Retool on Truto

Authentication, rate limits, data freshness, and everything else you need to know before you integrate.

What authentication method does Retool's API use?

Retool's administrative API (v2) uses API key-based authentication. Your end users generate an API key from their Retool organization settings, and Truto handles storing and passing this securely with each request.

Which Retool resources can be accessed through Truto's Unified User Directory API?

Truto's Unified User Directory API maps to Retool's Users endpoints, allowing you to read, create, update, and manage user accounts within a Retool organization through a standardized schema.

Are Retool-specific tools available out of the box in Truto?

Retool integration tools are built on request. Once you indicate the need, Truto's team builds and tests the connector to Retool's API, covering auth, pagination, and error handling so you don't have to.

Can I manage Retool group assignments through this integration?

Retool's API exposes group management endpoints. While the Unified User Directory API focuses on user-level operations, group assignment workflows can be supported as part of a custom connector build through Truto.

How does Truto handle pagination and rate limits for Retool's API?

Truto abstracts away Retool's API pagination logic and respects its rate limits automatically, so your application receives complete data sets without needing to implement retry or cursor management logic.

Does this integration support both Retool Cloud and self-hosted Retool?

Retool's administrative API is available on both Cloud and self-hosted deployments. As long as the API endpoint is reachable and a valid API key is provided, Truto can connect to either environment.

Retool

Get Retool integrated into your app

Our team understands what it takes to make a Retool integration successful. A short, crisp 30 minute call with folks who understand the problem.