Devin MCP integration for AI agents.
Connect AI agents to Devin through 6 structured actions, including get self, create session, and terminate session. Review authentication, inputs, workflows…
- ACTION CONTRACTS
- 6
- AUTHENTICATION
- API key
- SOURCE STATUS
- Provider-backed
CATALOG SOURCE REVIEWED AUGUST 23, 2026 / ACTION NAMES AND SCHEMAS DERIVED FROM WORKING MACHINES PROVIDER SOURCE
CAPABILITY PROFILE
What the Devin integration exposes
The Devin Agent App exposes 6 provider-backed actions for ai and developer tools work. Its current contract lets an authorized agent get identity information for the authenticated devin api credential, create a new devin organization session from a prompt, and terminate a devin session, optionally archiving it for future reference. These operations are called through Working Machines as typed capabilities rather than through browser navigation or copied UI steps.
A connection uses API key. Before execution, the agent can inspect the selected action, its required fields, declared scopes, and expected output contract. Provider credentials remain inside the Working Machines runtime; the calling agent receives the capability and its structured result, not the underlying secret.
For reliable operation, start with the narrowest action that satisfies the task, resolve stable provider identifiers before changing state, and validate the returned object or status after execution. Availability still depends on the connected Devin account, granted provider permissions, workspace policy, region, plan, and upstream API behavior.
VERIFIED ACTION SAMPLE
Real Devin capabilities.
Showing 6 of 6 actions. Risk labels are conservative signals based on operation names, not substitutes for provider documentation or runtime policy.
get_selfREADGet identity information for the authenticated Devin API credential.
create_sessionWRITECreate a new Devin organization session from a prompt.
INPUTS: orgId / prompt / title / devinId / devinMode
terminate_sessionHIGH IMPACTTerminate a Devin session, optionally archiving it for future reference.
INPUTS: orgId / devinId / archive
get_sessionREADGet details for one Devin organization session.
INPUTS: orgId / devinId
list_sessionsREADList Devin organization sessions with optional filters using cursor-based pagination.
INPUTS: orgId / first / after / devinId / sessionIds
send_messageWRITESend a message to an active Devin session and resume it if suspended.
INPUTS: orgId / devinId / message / attachmentUrls / messageAsUserId
INPUT CONTRACTS
Know what the action needs before it runs.
create_session
orgIdREQUIRED- The Devin organization ID, usually prefixed with org-.
promptREQUIRED- The prompt Devin should execute in the new session.
titleOPTIONAL- The optional title for the new session.
devinIdOPTIONAL- Optional caller-supplied Devin session ID for the request query.
devinModeOPTIONAL- The Devin agent mode to use for the session.
terminate_session
orgIdREQUIRED- The Devin organization ID, usually prefixed with org-.
devinIdREQUIRED- The Devin session ID, usually prefixed with devin-.
archiveOPTIONAL- Whether Devin should archive the session after terminating it.
get_session
orgIdOPTIONAL- The Devin organization ID, usually prefixed with org-.
devinIdOPTIONAL- The Devin session ID, usually prefixed with devin-.
list_sessions
orgIdREQUIRED- The Devin organization ID, usually prefixed with org-.
firstOPTIONAL- The maximum number of sessions to return.
afterOPTIONAL- The pagination cursor returned by a previous list_sessions call.
devinIdOPTIONAL- Filter results to one Devin session ID.
sessionIdsOPTIONAL- Filter results by Devin session IDs.
PROVIDER-SPECIFIC WORKFLOWS
Jobs this Agent App can support
Inspect Get Self
Get identity information for the authenticated Devin API credential. Use this as a bounded discovery step, retain the returned identifier, and avoid expanding the read beyond the task's stated scope.
get_selfControl Create Session
Create a new Devin organization session from a prompt. Resolve the target first, present material changes for confirmation, and make retries idempotent where the provider supports it.
create_sessionVerify with Get Session
Get details for one Devin organization session. Compare the returned provider state with the intended outcome and preserve stable IDs or canonical links in the run record.
get_sessionSAFETY BOUNDARY
Operate Devin with explicit limits
- Authorize Devin with API key and grant only the provider access required by the selected actions.
- 3 actions are change-capable by name. Confirm the target identity and material parameters before allowing a write.
- Treat `terminate_session` as high-impact operations and require an explicit approval boundary.
- No provider scope string is declared on the sampled actions. Verify the connected account's actual permissions in Devin rather than assuming unrestricted access.
- After a call, inspect the structured result and execution record before reporting that the Devin task completed successfully.
CONNECTION MODEL
API key
Devin service user API key sent in the Authorization Bearer header. Create a service user and generate its API key from Devin Settings > Service users: https://docs.devin.ai/api-reference/authentication.
Working Machines stores provider credentials behind the execution boundary. An agent can use an authorized connection identity, but catalog discovery alone does not reveal OAuth tokens, API keys, or provider secrets.
- READ SIGNALS
- 3
- WRITE SIGNALS
- 2
- HIGH IMPACT
- 1
- REVIEW SIGNALS
- 0
EVIDENCE AND AVAILABILITY
Provider reference
Action names, input fields, authentication types, and counts on this page are generated from the Working Machines provider catalog. Provider behavior, quotas, object semantics, account eligibility, and regional availability remain governed by Devin.