---
title: "Code Mode"
description: "Two tools, search and execute. The agent searches its own OpenAPI document, then writes one script that calls many operations, in a sandbox with no network."
canonical: "https://gtable.app/docs/agents/code-mode"
updated: "2026-10-05"
---

# Code Mode

Code Mode serves the same API as two tools instead of one per operation. It suits an agent that
writes code well and has a task of many steps: one script replaces a conversation of fifty tool
calls, each costing a round trip and a share of the context window.

| Address                                     | Document it works against                                          |
| ------------------------------------------- | ------------------------------------------------------------------ |
| `https://{suite}.gtable.app/{app}/mcp/code` | that app, as you see it                                            |
| `https://{suite}.gtable.app/mcp/code`       | the first app of the connection; use the per-app address to choose |
| `https://studio.gtable.app/mcp/code`        | the Builder API                                                    |

## The two tools

**`search`** takes a JavaScript filter and runs it over the OpenAPI document of what this
connection may call. Operations outside its scopes are removed from the document before it is
handed over, so `search` can never describe something `execute` would refuse.

**`execute`** runs one script. The script calls operations through the API, as you, with your
permissions, and returns a result.

## The sandbox

The script runs in an isolated Worker with **no outbound network**: it can reach gtable's API
through what it is given and nothing else on the internet.

| Limit                | Value                         |
| -------------------- | ----------------------------- |
| Run time             | 30 seconds                    |
| API requests per run | 100                           |
| Script size          | 64 KB                         |
| Result size          | 256 KB, truncated beyond that |

Credentials cannot be made or revoked from a script, any more than from a tool: those
operations answer only a person in a browser.