set_v2_application_access

Runs application security writes such as granting a role or replacing dimensional tag maps. Report the receipt and read back the exact grant or policy. Use the current security revision for fenced changes and preserve the workspace-scoped security request key.

These signatures come from local MCP tool discovery. Use the signature registered by your deployment and confirm your identity and permissions before calling the tool.

Endpoint signatures and example arguments

Examples show the arguments to the tool. Replace placeholder IDs and illustrative revisions with values from your authorized disposable scope.

{
  "program": {
    "languageVersion": 2,
    "function": "security.application.access.set",
    "arguments": {
      "subjectId": "{{subject_id}}",
      "action": "grant",
      "role": "Reader"
    }
  },
  "idempotency_key": "docs-example-0001"
}

{
  "properties": {
    "program": {
      "additionalProperties": true,
      "title": "Program",
      "type": "object"
    },
    "idempotency_key": {
      "title": "Idempotency Key",
      "type": "string"
    }
  },
  "required": [
    "program",
    "idempotency_key"
  ],
  "title": "set_v2_application_accessArguments",
  "type": "object"
}

{
  "workspace_id": "{{workspace_id}}",
  "application_id": "operating-cube",
  "program": {
    "languageVersion": 2,
    "function": "security.application.access.set",
    "arguments": {
      "subjectId": "{{subject_id}}",
      "action": "grant",
      "role": "Reader"
    }
  },
  "idempotency_key": "docs-example-0001"
}

{
  "properties": {
    "workspace_id": {
      "title": "Workspace Id",
      "type": "string"
    },
    "application_id": {
      "title": "Application Id",
      "type": "string"
    },
    "program": {
      "additionalProperties": true,
      "title": "Program",
      "type": "object"
    },
    "idempotency_key": {
      "title": "Idempotency Key",
      "type": "string"
    }
  },
  "required": [
    "workspace_id",
    "application_id",
    "program",
    "idempotency_key"
  ],
  "title": "set_v2_application_accessArguments",
  "type": "object"
}

Handling errors

MCP_TOOL_CAPACITY_NOT_DISPATCHED means the server did not dispatch this call. MCP_TOOL_DEADLINE_OUTCOME_UNKNOWN or MCP_TOOL_PROCESS_FAILED_OUTCOME_UNKNOWN leaves the outcome unknown. For a call with effects, reconcile the original request before starting a new one. For a scoped denial, verify the caller's grant and the selected target.

Module guidelines · Related workflow · Application-language function catalog