Developer & CI · wired today
What can agents actually do with Windmill?
Build, review and release state is where agents earn their keep. The Windmill connector is one of 205 executable connectors and gives agents 5 read-only tools, with the credential held in the vault and every call receipted.
The Windmill tool list, exactly as agents see it
server_health— Get the Windmill backend version and detailed health: database reachability and latency, active worker count, and queue statewhoami— Identify the Windmill account or service account the stored token belongs to, instance-widelist_workspaces— List the Windmill workspaces visible to the token's identitylist_scripts— List the scripts deployed in one Windmill workspace, optionally filtered by path prefix or script kindlist_flows— List the flows deployed in one Windmill workspace, optionally filtered by path prefix
Every tool above is read-only. Write surfaces ship only after live testing, and always behind approval gates.
What the Windmill connector needs
You provide base URL, token from your Windmill account; Quox sends it as a bearer token. The credential is stored encrypted in the vault and resolved just-in-time, so agents use it without ever seeing it.
Where to get it: Windmill's own API documentation ↗ covers creating and scoping the credential.
How proven is this?
LIVE-PROVEN: every tool on this page was executed with real credentials against a real running Windmill instance (provisioned for the proof, then destroyed), and every call answered successfully. The strongest proof class a connector can carry before it runs inside your own deployment.
Windmill integration FAQ
What can Quox agents do with Windmill?
Agents can run 5 read-only tools against Windmill: server health, whoami, list workspaces, list scripts, list flows. Every call is receipted in the evidence trail.
What does the Windmill integration need?
You provide base URL, token from your Windmill account; Quox sends it as a bearer token. The credential is stored encrypted in the vault and resolved just-in-time, so agents use it without ever seeing it.
Do agents see my Windmill credentials?
No. Credentials live encrypted in the Quox vault and are resolved server-side at call time. Agents invoke tools; they never receive the underlying secret.
How proven is the Windmill connector?
LIVE-PROVEN: every tool on this page was executed with real credentials against a real running Windmill instance (provisioned for the proof, then destroyed), and every call answered successfully. The strongest proof class a connector can carry before it runs inside your own deployment.