set_v2_rule_access
Returns rule permissions and the audit/receipt for a scoped security write. Verify the subject or group and application, then preserve the exact workspace security request key for retries.
These signatures come from local MCP tool discovery. Use the signature registered by your deployment and confirm your identity and permissions before calling the tool.
Endpoint signatures and example arguments
Examples show the arguments to the tool. Replace placeholder IDs and illustrative revisions with values from your authorized disposable scope.
Bound application
Set or revoke one subject's rule design, publish and run grants.
- Required arguments
program,idempotency_key- Optional arguments
- None
{
"program": {
"languageVersion": 2,
"function": "security.rule.access.set",
"arguments": {
"subjectId": "{{subject_id}}",
"action": "set",
"permissions": {
"design": true,
"publish": false,
"run": false
}
}
},
"idempotency_key": "docs-example-0001"
}Exact JSON input schema
{
"properties": {
"program": {
"additionalProperties": true,
"title": "Program",
"type": "object"
},
"idempotency_key": {
"title": "Idempotency Key",
"type": "string"
}
},
"required": [
"program",
"idempotency_key"
],
"title": "set_v2_rule_accessArguments",
"type": "object"
}Application router
Set or revoke one subject's scoped rule permissions.
- Required arguments
workspace_id,application_id,program,idempotency_key- Optional arguments
- None
{
"workspace_id": "{{workspace_id}}",
"application_id": "operating-cube",
"program": {
"languageVersion": 2,
"function": "security.rule.access.set",
"arguments": {
"subjectId": "{{subject_id}}",
"action": "set",
"permissions": {
"design": true,
"publish": false,
"run": false
}
}
},
"idempotency_key": "docs-example-0001"
}Exact JSON input schema
{
"properties": {
"workspace_id": {
"title": "Workspace Id",
"type": "string"
},
"application_id": {
"title": "Application Id",
"type": "string"
},
"program": {
"additionalProperties": true,
"title": "Program",
"type": "object"
},
"idempotency_key": {
"title": "Idempotency Key",
"type": "string"
}
},
"required": [
"workspace_id",
"application_id",
"program",
"idempotency_key"
],
"title": "set_v2_rule_accessArguments",
"type": "object"
}Supported application-language functions
Handling errors
MCP_TOOL_CAPACITY_NOT_DISPATCHED means the server did not dispatch this call. MCP_TOOL_DEADLINE_OUTCOME_UNKNOWN or MCP_TOOL_PROCESS_FAILED_OUTCOME_UNKNOWN leaves the outcome unknown. For a call with effects, reconcile the original request before starting a new one. For a scoped denial, verify the caller's grant and the selected target.