Create, search, update and delete calendar events and calendars, manage RSVP attendees and calendar subscribers, and generate "add to calendar" links with AddEvent's Calendar & Events API v2.
AddEvent ships in the w6w first-party pack. It declares 22 actions, 2 health checks, and the host runs its code in a sandbox that never sees the credential.
io.w6w.addeventAddEvent turns a date and a title into a working “add to calendar” link — one that opens correctly in Google Calendar, Apple Calendar, Outlook, Office 365 and Yahoo without the caller having to know each vendor’s own calendar-link format. This app covers AddEvent’s Calendar & Events API v2: full CRUD on events and the calendars that hold them, RSVP attendee management for events that require a response, read access to a calendar’s subscribers, and lookups of the account’s saved RSVP forms, landing-page templates and supported timezones.
The shape of most workflows against this API is small: create or update an event when something happens in your own system (a booking, a webinar, a lifecycle change), and every event comes back with link_long/link_short URLs ready to hand to a user or drop in an email. RSVP-enabled events additionally track seat limits and going/maybe/not-going counts, and a workflow can react to a new RSVP attendee or read the roster of a subscribed calendar.
Health checks track AddEvent’s own status page. AddEvent publishes no rate-limit or usage-quota signal of any kind — no response headers, no metering endpoint — so that question is answered as a declared absence rather than guessed at.
Three routes to the same 22 actions. The Workflow tab is generated from AddEvent's own manifest and carries its real ids, so it is copy-pasteable; the Code and CLI examples are the same call for any action on any app, so every app-specific value in them is a blank you fill in.
calendar-search Search calendars you've previously created. An empty result is a successful "no matches" response.
calendar-subscriber-delete Permanently delete (unsubscribe) a calendar subscriber by id. Cannot be undone.
calendar-subscriber-search Search subscribers to your calendars. An empty result is a successful "no matches" response.
calendar-template-list List your custom calendar landing-page or embeddable-calendar templates, sorted by creation date, newest first.
calendar-update Update a calendar. Only the fields you set are changed; everything else is left as-is.
event-search Search events you've previously created. An empty result is a successful "no matches" response.
event-template-list List your custom event landing-page templates, sorted by creation date, newest first.
event-update Update an event. Only the fields you set are changed; everything else is left as-is.
rsvp-attendee-create Record an RSVP response for an event on the attendee's behalf.
rsvp-attendee-delete Permanently delete an RSVP attendee by id. Cannot be undone.
rsvp-attendee-search Search RSVP attendees previously created. An empty result is a successful "no matches" response.
rsvp-attendee-update Update an RSVP attendee. Only the fields you set are changed; everything else is left as-is.
A workflow step names the app and the action, and the editor fills in the
connection when you pick one. This is the Step shape from the
workflow spec, carrying AddEvent's real ids.
{
"manifestVersion": "2",
"name": "addevent-example",
"steps": [
{
"id": "calendar-create",
"uses": {
"app": "io.w6w.addevent",
"action": "calendar-create",
"connection": "conn_YOUR_CONNECTION_ID"
},
"with": {
"title": "<title>"
}
}
]
}calendar-create calendar-retrieve calendar-search calendar-subscriber-retrieve calendar-subscriber-search +17 more actions available
Every app-specific value here is a blank you have to fill in. An
app action is reached through the connection that authenticates it, so the
address is a connection id, not the app id — and connections belong to your account,
so a public page cannot know yours. Create one for AddEvent, then fill in
the three blanks: conn_YOUR_CONNECTION_ID, the action key, and the
parameters that action declares. The call itself is real — the shape is transcribed
from the studio's own snippet builder, which prints the same kind of blanks — but
nothing in it is specific to AddEvent. The Workflow tab is where this app's
real ids are.
npm install @w6w/sdkyarn add @w6w/sdkpnpm add @w6w/sdkdeno add npm:@w6w/sdkimport { W6wClient, isActionRun } from "@w6w/sdk";
// Reads W6W_BASE_URL and W6W_TOKEN from the environment when omitted.
const client = new W6wClient();
const envelope = await client.run({
urn: "conn_YOUR_CONNECTION_ID",
action: "calendar-create",
payload: {
title: "<value>",
// timezone: "<value>",
// weekdayBegin: "<value>",
// description: "<value>",
// internalName: "<value>",
// calendarColor: "<value>",
// landingPageTemplateId: "<value>",
// embeddableCalendarTemplateId: "<value>",
// customData: "<value>",
},
});
if (isActionRun(envelope)) console.log(envelope.value); npm install -g @w6w/cli w6w run conn_YOUR_CONNECTION_ID --action calendar-create --payload '{"title":"<value>"}' Give an AI agent AddEvent — without giving it AddEvent's credentials. One MCP endpoint exposes every app, function and workflow the caller is entitled to, as tools it can discover and run. Access is granted per team while we onboard.
One tool call{
"name": "w6w_invoke",
"arguments": {
"ref": "app:io.w6w.addevent#calendar-create",
"input": {
"title": "<title>"
}
}
}
Every tool names its target with a single ref. The
app: form above doesn't name a connection at all — the
host resolves which of the caller's AddEvent connections to sign
with, and refuses rather than guesses when the answer is ambiguous.
The token is attached host-side, at the moment of the call. It is never a tool argument, never in the model's context, and never in a transcript — so a prompt injection has nothing to exfiltrate.
Tools are derived per end user from what that person has actually connected and is entitled to — not one shared bot identity carrying the union of everyone's access.
Multi-step work runs on the workflow engine and returns a run handle the agent can poll — retries, branching and state survive the conversation that started them.
AddEvent's declared health checks are on the surface too, so an agent can tell "the vendor is down" from "your credential expired" before it burns a retry on either.
The MCP surface is part of the hosted platform. AddEvent itself is MIT, and the runtime that executes it is source-available (FSL).
AddEvent declares its own checks, so its health is a property of the app rather than something the host guesses at.
Component status from addevent.statuspage.io: dashboard, website, API and landing pages.