set_v2_workspace_access

Changes a direct or group Administrator grant on the bound workspace and records a receipt and audit entry. Check the target identity and preserve the key in the workspace security namespace.

These signatures come from local MCP tool discovery. Use the signature registered by your deployment and confirm your identity and permissions before calling the tool.

Endpoint signatures and example arguments

Examples show the arguments to the tool. Replace placeholder IDs and illustrative revisions with values from your authorized disposable scope.

{
  "program": {
    "languageVersion": 2,
    "function": "security.workspace.access.set",
    "arguments": {
      "subjectId": "{{subject_id}}",
      "action": "grant",
      "role": "Administrator"
    }
  },
  "idempotency_key": "docs-example-0001"
}

{
  "properties": {
    "program": {
      "additionalProperties": true,
      "title": "Program",
      "type": "object"
    },
    "idempotency_key": {
      "title": "Idempotency Key",
      "type": "string"
    }
  },
  "required": [
    "program",
    "idempotency_key"
  ],
  "title": "set_v2_workspace_accessArguments",
  "type": "object"
}

Handling errors

MCP_TOOL_CAPACITY_NOT_DISPATCHED means the server did not dispatch this call. MCP_TOOL_DEADLINE_OUTCOME_UNKNOWN or MCP_TOOL_PROCESS_FAILED_OUTCOME_UNKNOWN leaves the outcome unknown. For a call with effects, reconcile the original request before starting a new one. For a scoped denial, verify the caller's grant and the selected target.

Module guidelines · Related workflow · Application-language function catalog