User management tools

Two tools for listing and creating workspace users. They only appear when the deployment's gRPC backend is configured (CORE_SERVICE_GRPC_URL); on a deployment without it, they aren't registered.

Access control: the MCP server doesn't apply its own role check — every valid Personal Access Token is accepted and the call is forwarded to Single Origin's core backend under your token's user identity, where any permission rules on user management are enforced. Check with your Single Origin admin about who is allowed to create users.

All sample responses below use synthetic data.

user_list_users

Lists all users in the workspace. Each entry carries uuid, email, name, title, role, and disabled. The title and role come from the user's profile in Single Origin's backend.

Sample call

"Who's in our workspace?"

Sample response

[
  {
    "uuid": "9f0e1d2c-aaaa-bbbb-cccc-ddddeeeeffff",
    "email": "[email protected]",
    "name": "Dana Lee",
    "title": "Data Engineer",
    "role": "Admin",
    "disabled": false
  },
  {
    "uuid": "1b2c3d4e-5555-6666-7777-8888aaaabbbb",
    "email": "[email protected]",
    "name": "Sam Rivera",
    "title": "Analyst",
    "role": "Member",
    "disabled": false
  }
]

user_create_user

Creates a new user from an email and name. Returns the new user's uuid, email, name, and an invite code. Write tool.

Sample call

"Add [email protected] (Sam Rivera) to the workspace."

Sample response

{
  "uuid": "7a6b5c4d-8888-9999-aaaa-bbbbccccdddd",
  "email": "[email protected]",
  "name": "Sam Rivera",
  "code": "INV-3F9A2C"
}