Members & invitations

Member management is rate-limited (10 invites/hour) and refuses to remove the last owner. Email-existence error responses are intentionally opaque to defend against enumeration. Workspace-level members are managed separately so an org admin can grant an external collaborator scoped access without a full org seat.

Live discovery

Your agent can call searchTools with category: "members" to fetch this list at runtime, complete with full input schemas. The page below is the human-readable mirror.

15 tools

Every tool below honours the credential’s permission scope and the user’s org role. Agents see only what they’re authorised to call.

addWorkspaceMember
Add a workspace member.
cancelInvitation
Cancel a pending invitation.
getCurrentUser
Authenticated user's identity, role, and org membership.
getMember
Read a single member.
inviteMember
Send an invitation. Rate-limited 10/hour. Returns seat-billing impact.
listAssignablePrincipals
Members and teams an agent can assign as task owners or evidence authors.
listInvitations
List pending invitations.
listMembers
List org members (org member or `manage_members` capability).
removeMember
Hard remove. Refuses to remove the last owner.
removeWorkspaceMember
Remove a workspace member.
resendInvitation
Resend a pending invitation email.
setMemberActive
Soft-deactivate / reactivate a member (preserves history).
updateMemberRole
Change a member's organisation role.
updateProfile
Update a profile (self always; others require admin).
updateWorkspaceMember
Update a workspace member's role.

All MCP tools

Back to the full catalogue grouped by category.

Setup & auth

Generate an API key with the right scopes.

Permissions

Scope what each agent can do.

Claude Code recipe

Drop-in config for Claude.