@breign/client 1.0.102 → 1.0.104

package/dist/openapi.json

@@ -5806,6 +5806,588 @@
         "tags" : [ "organizations" ]
       }
     },
+    "/organizations/{organizationId}/access-roles" : {
+      "get" : {
+        "operationId" : "listOrganizationAccessRoles",
+        "parameters" : [ {
+          "description" : "ID of the organization",
+          "in" : "path",
+          "name" : "organizationId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        } ],
+        "responses" : {
+          "200" : {
+            "content" : {
+              "application/json" : {
+                "schema" : {
+                  "items" : {
+                    "$ref" : "#/components/schemas/AccessRole"
+                  },
+                  "type" : "array"
+                }
+              }
+            },
+            "description" : "Access roles found"
+          },
+          "401" : {
+            "description" : "Unauthorized"
+          },
+          "404" : {
+            "description" : "Organization not found"
+          }
+        },
+        "summary" : "List access roles of an organization",
+        "tags" : [ "organizations" ]
+      },
+      "post" : {
+        "operationId" : "createOrganizationAccessRole",
+        "parameters" : [ {
+          "description" : "ID of the organization",
+          "in" : "path",
+          "name" : "organizationId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        } ],
+        "requestBody" : {
+          "content" : {
+            "application/json" : {
+              "schema" : {
+                "$ref" : "#/components/schemas/AccessRoleCreateRequest"
+              }
+            }
+          },
+          "required" : true
+        },
+        "responses" : {
+          "201" : {
+            "content" : {
+              "application/json" : {
+                "schema" : {
+                  "$ref" : "#/components/schemas/AccessRole"
+                }
+              }
+            },
+            "description" : "Access role created"
+          },
+          "400" : {
+            "description" : "Invalid request body"
+          },
+          "401" : {
+            "description" : "Unauthorized"
+          },
+          "404" : {
+            "description" : "Organization not found"
+          }
+        },
+        "summary" : "Create an access role in an organization",
+        "tags" : [ "organizations" ]
+      }
+    },
+    "/organizations/{organizationId}/access-roles/{roleId}" : {
+      "delete" : {
+        "operationId" : "deleteOrganizationAccessRole",
+        "parameters" : [ {
+          "description" : "ID of the organization",
+          "in" : "path",
+          "name" : "organizationId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        }, {
+          "in" : "path",
+          "name" : "roleId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        } ],
+        "responses" : {
+          "204" : {
+            "description" : "Access role deleted"
+          },
+          "401" : {
+            "description" : "Unauthorized"
+          },
+          "404" : {
+            "description" : "Organization not found"
+          }
+        },
+        "summary" : "Delete an access role from an organization",
+        "tags" : [ "organizations" ]
+      },
+      "put" : {
+        "operationId" : "updateOrganizationAccessRole",
+        "parameters" : [ {
+          "description" : "ID of the organization",
+          "in" : "path",
+          "name" : "organizationId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        }, {
+          "in" : "path",
+          "name" : "roleId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        } ],
+        "requestBody" : {
+          "content" : {
+            "application/json" : {
+              "schema" : {
+                "$ref" : "#/components/schemas/AccessRoleUpdateRequest"
+              }
+            }
+          },
+          "required" : true
+        },
+        "responses" : {
+          "204" : {
+            "description" : "Access role updated"
+          },
+          "400" : {
+            "description" : "Invalid request body"
+          },
+          "401" : {
+            "description" : "Unauthorized"
+          },
+          "404" : {
+            "description" : "Organization not found"
+          }
+        },
+        "summary" : "Update an access role in an organization",
+        "tags" : [ "organizations" ]
+      }
+    },
+    "/organizations/{organizationId}/access-roles/{roleId}/permissions" : {
+      "put" : {
+        "operationId" : "setOrganizationAccessRolePermissions",
+        "parameters" : [ {
+          "description" : "ID of the organization",
+          "in" : "path",
+          "name" : "organizationId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        }, {
+          "in" : "path",
+          "name" : "roleId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        } ],
+        "requestBody" : {
+          "content" : {
+            "application/json" : {
+              "schema" : {
+                "$ref" : "#/components/schemas/AccessRolePermissionsRequest"
+              }
+            }
+          },
+          "required" : true
+        },
+        "responses" : {
+          "204" : {
+            "description" : "Permissions updated"
+          },
+          "400" : {
+            "description" : "Invalid request body"
+          },
+          "401" : {
+            "description" : "Unauthorized"
+          },
+          "404" : {
+            "description" : "Organization not found"
+          }
+        },
+        "summary" : "Set permissions for an access role",
+        "tags" : [ "organizations" ]
+      }
+    },
+    "/organizations/{organizationId}/members/me/permissions" : {
+      "get" : {
+        "operationId" : "getOrganizationMemberPermissions",
+        "parameters" : [ {
+          "description" : "ID of the organization",
+          "in" : "path",
+          "name" : "organizationId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        } ],
+        "responses" : {
+          "200" : {
+            "content" : {
+              "application/json" : {
+                "schema" : {
+                  "$ref" : "#/components/schemas/MemberPermissions"
+                }
+              }
+            },
+            "description" : "Resolved permissions for the current member"
+          },
+          "401" : {
+            "description" : "Unauthorized"
+          },
+          "404" : {
+            "description" : "Organization not found"
+          }
+        },
+        "summary" : "Get current member resolved permissions",
+        "tags" : [ "organizations" ]
+      }
+    },
+    "/organizations/{organizationId}/users" : {
+      "get" : {
+        "operationId" : "listOrganizationUsers",
+        "parameters" : [ {
+          "description" : "ID of the organization",
+          "in" : "path",
+          "name" : "organizationId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        } ],
+        "responses" : {
+          "200" : {
+            "content" : {
+              "application/json" : {
+                "schema" : {
+                  "items" : {
+                    "$ref" : "#/components/schemas/OrganizationMember"
+                  },
+                  "type" : "array"
+                }
+              }
+            },
+            "description" : "Organization users"
+          },
+          "401" : {
+            "description" : "Unauthorized"
+          },
+          "404" : {
+            "description" : "Organization not found"
+          }
+        },
+        "summary" : "List users of an organization",
+        "tags" : [ "organizations" ]
+      },
+      "post" : {
+        "operationId" : "inviteOrganizationUser",
+        "parameters" : [ {
+          "description" : "ID of the organization",
+          "in" : "path",
+          "name" : "organizationId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        } ],
+        "requestBody" : {
+          "content" : {
+            "application/json" : {
+              "schema" : {
+                "$ref" : "#/components/schemas/OrganizationUserInviteRequest"
+              }
+            }
+          },
+          "required" : true
+        },
+        "responses" : {
+          "201" : {
+            "content" : {
+              "application/json" : {
+                "schema" : {
+                  "$ref" : "#/components/schemas/OrganizationUserInviteResponse"
+                }
+              }
+            },
+            "description" : "User invited"
+          },
+          "400" : {
+            "description" : "Invalid request body"
+          },
+          "401" : {
+            "description" : "Unauthorized"
+          },
+          "409" : {
+            "description" : "User already in organization"
+          }
+        },
+        "summary" : "Invite a user to an organization",
+        "tags" : [ "organizations" ]
+      }
+    },
+    "/organizations/{organizationId}/users/{userId}" : {
+      "delete" : {
+        "operationId" : "deleteOrganizationUser",
+        "parameters" : [ {
+          "description" : "ID of the organization",
+          "in" : "path",
+          "name" : "organizationId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        }, {
+          "in" : "path",
+          "name" : "userId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        } ],
+        "responses" : {
+          "204" : {
+            "description" : "User removed"
+          },
+          "401" : {
+            "description" : "Unauthorized"
+          },
+          "403" : {
+            "description" : "Cannot delete admin user"
+          },
+          "404" : {
+            "description" : "Organization or user not found"
+          }
+        },
+        "summary" : "Remove a user from an organization",
+        "tags" : [ "organizations" ]
+      }
+    },
+    "/organizations/{organizationId}/users/{userId}/access" : {
+      "get" : {
+        "operationId" : "getOrganizationUserAccess",
+        "parameters" : [ {
+          "description" : "ID of the organization",
+          "in" : "path",
+          "name" : "organizationId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        }, {
+          "in" : "path",
+          "name" : "userId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        } ],
+        "responses" : {
+          "200" : {
+            "content" : {
+              "application/json" : {
+                "schema" : {
+                  "$ref" : "#/components/schemas/UserAccess"
+                }
+              }
+            },
+            "description" : "User access configuration"
+          },
+          "401" : {
+            "description" : "Unauthorized"
+          },
+          "404" : {
+            "description" : "Organization or user not found"
+          }
+        },
+        "summary" : "Get user access roles and direct permissions",
+        "tags" : [ "organizations" ]
+      }
+    },
+    "/organizations/{organizationId}/users/{userId}/access-roles" : {
+      "put" : {
+        "operationId" : "setOrganizationUserAccessRoles",
+        "parameters" : [ {
+          "description" : "ID of the organization",
+          "in" : "path",
+          "name" : "organizationId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        }, {
+          "in" : "path",
+          "name" : "userId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        } ],
+        "requestBody" : {
+          "content" : {
+            "application/json" : {
+              "schema" : {
+                "$ref" : "#/components/schemas/UserAccessRolesRequest"
+              }
+            }
+          },
+          "required" : true
+        },
+        "responses" : {
+          "204" : {
+            "description" : "User access roles updated"
+          },
+          "400" : {
+            "description" : "Invalid request body"
+          },
+          "401" : {
+            "description" : "Unauthorized"
+          },
+          "404" : {
+            "description" : "Organization or user not found"
+          }
+        },
+        "summary" : "Set user access roles",
+        "tags" : [ "organizations" ]
+      }
+    },
+    "/organizations/{organizationId}/users/{userId}/permissions" : {
+      "put" : {
+        "operationId" : "setOrganizationUserDirectPermissions",
+        "parameters" : [ {
+          "description" : "ID of the organization",
+          "in" : "path",
+          "name" : "organizationId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        }, {
+          "in" : "path",
+          "name" : "userId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        } ],
+        "requestBody" : {
+          "content" : {
+            "application/json" : {
+              "schema" : {
+                "$ref" : "#/components/schemas/UserDirectPermissionsRequest"
+              }
+            }
+          },
+          "required" : true
+        },
+        "responses" : {
+          "204" : {
+            "description" : "User direct permissions updated"
+          },
+          "400" : {
+            "description" : "Invalid request body"
+          },
+          "401" : {
+            "description" : "Unauthorized"
+          },
+          "404" : {
+            "description" : "Organization or user not found"
+          }
+        },
+        "summary" : "Set user direct permissions",
+        "tags" : [ "organizations" ]
+      }
+    },
+    "/organizations/{organizationId}/users/{userId}/agents-access" : {
+      "get" : {
+        "operationId" : "getOrganizationUserAgentsAccess",
+        "parameters" : [ {
+          "description" : "ID of the organization",
+          "in" : "path",
+          "name" : "organizationId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        }, {
+          "in" : "path",
+          "name" : "userId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        } ],
+        "responses" : {
+          "200" : {
+            "content" : {
+              "application/json" : {
+                "schema" : {
+                  "$ref" : "#/components/schemas/UserAgentAccess"
+                }
+              }
+            },
+            "description" : "User agent access configuration"
+          },
+          "401" : {
+            "description" : "Unauthorized"
+          },
+          "404" : {
+            "description" : "Organization or user not found"
+          }
+        },
+        "summary" : "Get user agent access configuration",
+        "tags" : [ "organizations" ]
+      },
+      "put" : {
+        "operationId" : "setOrganizationUserAgentsAccess",
+        "parameters" : [ {
+          "description" : "ID of the organization",
+          "in" : "path",
+          "name" : "organizationId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        }, {
+          "in" : "path",
+          "name" : "userId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        } ],
+        "requestBody" : {
+          "content" : {
+            "application/json" : {
+              "schema" : {
+                "$ref" : "#/components/schemas/UserAgentAccessRequest"
+              }
+            }
+          },
+          "required" : true
+        },
+        "responses" : {
+          "204" : {
+            "description" : "User agent access updated"
+          },
+          "400" : {
+            "description" : "Invalid request body"
+          },
+          "401" : {
+            "description" : "Unauthorized"
+          },
+          "404" : {
+            "description" : "Organization or user not found"
+          }
+        },
+        "summary" : "Set user agent access configuration",
+        "tags" : [ "organizations" ]
+      }
+    },
     "/organizations/{organizationId}/engine" : {
       "get" : {
         "description" : "Retrieves only the engine configuration (providerId, model, options) for a given organization.",
@@ -7771,22 +8353,114 @@
             "description" : "Unauthorized"
           },
           "403" : {
-            "description" : "Forbidden - User doesn't have access to this tool"
+            "description" : "Forbidden - User doesn't have access to this tool"
+          },
+          "404" : {
+            "description" : "Tool not found"
+          },
+          "500" : {
+            "description" : "Internal server error"
+          }
+        },
+        "summary" : "Disconnect OAuth2 from a tool",
+        "tags" : [ "tools" ]
+      }
+    },
+    "/tools/{toolId}/mcp/introspect" : {
+      "get" : {
+        "operationId" : "introspectMcpTool",
+        "parameters" : [ {
+          "description" : "Tool identifier",
+          "in" : "path",
+          "name" : "toolId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        } ],
+        "responses" : {
+          "200" : {
+            "content" : {
+              "application/json" : {
+                "schema" : {
+                  "$ref" : "#/components/schemas/introspectMcpTool_200_response"
+                }
+              }
+            },
+            "description" : "MCP introspection result"
+          },
+          "400" : {
+            "description" : "Tool configuration missing"
+          },
+          "401" : {
+            "description" : "Unauthorized"
+          },
+          "403" : {
+            "description" : "Forbidden"
+          },
+          "404" : {
+            "description" : "Tool not found"
+          },
+          "500" : {
+            "description" : "MCP introspection failed"
+          }
+        },
+        "summary" : "Introspect an MCP tool server to refresh available actions",
+        "tags" : [ "tools" ]
+      }
+    },
+    "/tools/{toolId}/mcp/allowed-tools" : {
+      "put" : {
+        "description" : "Admins can adjust the catalog of MCP actions exposed to agents at any time.\nEach name must exist in the tool's introspection result.\n",
+        "operationId" : "updateMcpAllowedTools",
+        "parameters" : [ {
+          "description" : "Tool identifier",
+          "in" : "path",
+          "name" : "toolId",
+          "required" : true,
+          "schema" : {
+            "type" : "string"
+          }
+        } ],
+        "requestBody" : {
+          "content" : {
+            "application/json" : {
+              "schema" : {
+                "$ref" : "#/components/schemas/ToolAllowedToolsRequest"
+              }
+            }
+          },
+          "required" : true
+        },
+        "responses" : {
+          "200" : {
+            "content" : {
+              "application/json" : {
+                "schema" : {
+                  "$ref" : "#/components/schemas/ToolAllowedToolsResponse"
+                }
+              }
+            },
+            "description" : "Updated allowed tools"
+          },
+          "400" : {
+            "description" : "MCP not introspected or unknown tool names"
+          },
+          "403" : {
+            "description" : "Forbidden"
           },
           "404" : {
             "description" : "Tool not found"
-          },
-          "500" : {
-            "description" : "Internal server error"
           }
         },
-        "summary" : "Disconnect OAuth2 from a tool",
+        "summary" : "Replace the list of allowed MCP tools for an MCP tool",
         "tags" : [ "tools" ]
       }
     },
-    "/tools/{toolId}/mcp/introspect" : {
+    "/tools/{toolId}/connection-status" : {
       "get" : {
-        "operationId" : "introspectMcpTool",
+        "description" : "For organization-scoped tools, returns whether the shared connection is set up.\nFor user-scoped tools, returns whether the caller has connected their own account.\n",
+        "operationId" : "getToolConnectionStatus",
         "parameters" : [ {
           "description" : "Tool identifier",
           "in" : "path",
@@ -7801,29 +8475,20 @@
             "content" : {
               "application/json" : {
                 "schema" : {
-                  "$ref" : "#/components/schemas/introspectMcpTool_200_response"
+                  "$ref" : "#/components/schemas/ToolConnectionStatusResponse"
                 }
               }
             },
-            "description" : "MCP introspection result"
-          },
-          "400" : {
-            "description" : "Tool configuration missing"
-          },
-          "401" : {
-            "description" : "Unauthorized"
+            "description" : "Connection status"
           },
           "403" : {
             "description" : "Forbidden"
           },
           "404" : {
             "description" : "Tool not found"
-          },
-          "500" : {
-            "description" : "MCP introspection failed"
           }
         },
-        "summary" : "Introspect an MCP tool server to refresh available actions",
+        "summary" : "Get the current user's connection status for a tool",
         "tags" : [ "tools" ]
       }
     },
@@ -9806,6 +10471,11 @@
           "description" : {
             "type" : "string"
           },
+          "scope" : {
+            "description" : "Credentials scope. Defaults to organization for legacy tools.",
+            "enum" : [ "organization", "user" ],
+            "type" : "string"
+          },
           "configuration" : {
             "additionalProperties" : true,
             "type" : "object"
@@ -12556,6 +13226,9 @@
       },
       "ProviderValiationRequest" : {
         "properties" : {
+          "organizationId" : {
+            "type" : "string"
+          },
           "providerType" : {
             "type" : "string"
           },
@@ -12563,7 +13236,7 @@
             "type" : "string"
           }
         },
-        "required" : [ "apiKey", "providerType" ],
+        "required" : [ "apiKey", "organizationId", "providerType" ],
         "type" : "object"
       },
       "Model" : {
@@ -12899,6 +13572,234 @@
         "required" : [ "color", "name" ],
         "type" : "object"
       },
+      "AccessRole" : {
+        "properties" : {
+          "id" : {
+            "type" : "string"
+          },
+          "organizationId" : {
+            "type" : "string"
+          },
+          "name" : {
+            "type" : "string"
+          },
+          "description" : {
+            "type" : "string"
+          },
+          "slug" : {
+            "nullable" : true,
+            "type" : "string"
+          },
+          "isSystem" : {
+            "type" : "boolean"
+          },
+          "createdAt" : {
+            "type" : "string"
+          },
+          "permissions" : {
+            "items" : {
+              "$ref" : "#/components/schemas/PermissionEntry"
+            },
+            "type" : "array"
+          }
+        },
+        "required" : [ "createdAt", "description", "id", "name", "organizationId", "permissions" ],
+        "type" : "object"
+      },
+      "PermissionEntry" : {
+        "properties" : {
+          "permission" : {
+            "$ref" : "#/components/schemas/OrganizationPermissionKey"
+          },
+          "allowed" : {
+            "type" : "boolean"
+          }
+        },
+        "required" : [ "allowed", "permission" ],
+        "type" : "object"
+      },
+      "OrganizationPermissionKey" : {
+        "enum" : [ "org.read", "agent.read", "agent.update", "agent.delete", "agent.chat", "app.read", "knowledge.read", "knowledge.create", "knowledge.update", "knowledge.delete", "knowledge.file.add", "knowledge.file.delete", "knowledge.file.download", "skill.read", "skill.create", "skill.update", "skill.delete", "skill.file.add", "skill.file.delete", "moderation.read", "moderation.create", "moderation.update", "moderation.delete", "user.read", "user.create", "user.update", "user.delete", "engine.read", "engine.create", "engine.update", "engine.delete", "tool.read", "tool.create", "tool.update", "tool.delete", "flow.read" ],
+        "type" : "string"
+      },
+      "AccessRoleCreateRequest" : {
+        "properties" : {
+          "name" : {
+            "type" : "string"
+          },
+          "description" : {
+            "type" : "string"
+          },
+          "permissions" : {
+            "items" : {
+              "$ref" : "#/components/schemas/PermissionEntry"
+            },
+            "type" : "array"
+          }
+        },
+        "required" : [ "name" ],
+        "type" : "object"
+      },
+      "AccessRoleUpdateRequest" : {
+        "properties" : {
+          "name" : {
+            "type" : "string"
+          },
+          "description" : {
+            "type" : "string"
+          }
+        },
+        "required" : [ "name" ],
+        "type" : "object"
+      },
+      "AccessRolePermissionsRequest" : {
+        "properties" : {
+          "permissions" : {
+            "items" : {
+              "$ref" : "#/components/schemas/PermissionEntry"
+            },
+            "type" : "array"
+          }
+        },
+        "required" : [ "permissions" ],
+        "type" : "object"
+      },
+      "MemberPermissions" : {
+        "additionalProperties" : {
+          "type" : "boolean"
+        },
+        "type" : "object"
+      },
+      "OrganizationMember" : {
+        "properties" : {
+          "id" : {
+            "type" : "string"
+          },
+          "role" : {
+            "type" : "string"
+          },
+          "createdAt" : {
+            "type" : "string"
+          },
+          "user" : {
+            "$ref" : "#/components/schemas/OrganizationMember_user"
+          }
+        },
+        "required" : [ "createdAt", "id", "role", "user" ],
+        "type" : "object"
+      },
+      "OrganizationUserInviteRequest" : {
+        "properties" : {
+          "email" : {
+            "type" : "string"
+          },
+          "role" : {
+            "type" : "string"
+          }
+        },
+        "required" : [ "email" ],
+        "type" : "object"
+      },
+      "OrganizationUserInviteResponse" : {
+        "properties" : {
+          "userId" : {
+            "type" : "string"
+          }
+        },
+        "required" : [ "userId" ],
+        "type" : "object"
+      },
+      "UserAccess" : {
+        "properties" : {
+          "roleIds" : {
+            "items" : {
+              "type" : "string"
+            },
+            "type" : "array"
+          },
+          "directPermissions" : {
+            "items" : {
+              "$ref" : "#/components/schemas/PermissionEntry"
+            },
+            "type" : "array"
+          }
+        },
+        "required" : [ "directPermissions", "roleIds" ],
+        "type" : "object"
+      },
+      "UserAccessRolesRequest" : {
+        "properties" : {
+          "roleIds" : {
+            "items" : {
+              "type" : "string"
+            },
+            "type" : "array"
+          }
+        },
+        "required" : [ "roleIds" ],
+        "type" : "object"
+      },
+      "UserDirectPermissionsRequest" : {
+        "properties" : {
+          "permissions" : {
+            "items" : {
+              "$ref" : "#/components/schemas/PermissionEntry"
+            },
+            "type" : "array"
+          }
+        },
+        "required" : [ "permissions" ],
+        "type" : "object"
+      },
+      "UserAgentAccess" : {
+        "properties" : {
+          "scoped" : {
+            "description" : "When true, only listed agents are accessible (org-wide agent.read is ignored for listing).",
+            "type" : "boolean"
+          },
+          "agentIds" : {
+            "items" : {
+              "type" : "string"
+            },
+            "type" : "array"
+          },
+          "availableAgents" : {
+            "items" : {
+              "$ref" : "#/components/schemas/UserAgentAccessAgent"
+            },
+            "type" : "array"
+          }
+        },
+        "required" : [ "agentIds", "availableAgents", "scoped" ],
+        "type" : "object"
+      },
+      "UserAgentAccessAgent" : {
+        "properties" : {
+          "id" : {
+            "type" : "string"
+          },
+          "name" : {
+            "type" : "string"
+          }
+        },
+        "required" : [ "id", "name" ],
+        "type" : "object"
+      },
+      "UserAgentAccessRequest" : {
+        "properties" : {
+          "scoped" : {
+            "type" : "boolean"
+          },
+          "agentIds" : {
+            "items" : {
+              "type" : "string"
+            },
+            "type" : "array"
+          }
+        },
+        "required" : [ "agentIds", "scoped" ],
+        "type" : "object"
+      },
       "OrganizationEngine" : {
         "additionalProperties" : false,
         "description" : "Engine configuration attached to an organization.",
@@ -13171,6 +14072,11 @@
             "description" : "e.g. tool_api | mcp",
             "type" : "string"
           },
+          "scope" : {
+            "description" : "Credentials scope. organization = one shared connection; user = each user connects their own account. Immutable after creation.",
+            "enum" : [ "organization", "user" ],
+            "type" : "string"
+          },
           "configuration" : {
             "additionalProperties" : true,
             "type" : "object"
@@ -13248,6 +14154,11 @@
             "enum" : [ "tool_api", "mcp" ],
             "type" : "string"
           },
+          "scope" : {
+            "description" : "Credentials scope. Defaults to organization for legacy tools.",
+            "enum" : [ "organization", "user" ],
+            "type" : "string"
+          },
           "configuration" : {
             "$ref" : "#/components/schemas/ToolSecure_configuration"
           },
@@ -13335,6 +14246,50 @@
         "title" : "RevealTokenResponse",
         "type" : "object"
       },
+      "ToolAllowedToolsRequest" : {
+        "additionalProperties" : false,
+        "properties" : {
+          "allowedTools" : {
+            "items" : {
+              "type" : "string"
+            },
+            "type" : "array",
+            "uniqueItems" : true
+          }
+        },
+        "required" : [ "allowedTools" ],
+        "title" : "ToolAllowedToolsRequest",
+        "type" : "object"
+      },
+      "ToolAllowedToolsResponse" : {
+        "additionalProperties" : false,
+        "properties" : {
+          "allowedTools" : {
+            "items" : {
+              "type" : "string"
+            },
+            "type" : "array"
+          }
+        },
+        "required" : [ "allowedTools" ],
+        "title" : "ToolAllowedToolsResponse",
+        "type" : "object"
+      },
+      "ToolConnectionStatusResponse" : {
+        "additionalProperties" : false,
+        "properties" : {
+          "scope" : {
+            "enum" : [ "organization", "user" ],
+            "type" : "string"
+          },
+          "connected" : {
+            "type" : "boolean"
+          }
+        },
+        "required" : [ "connected", "scope" ],
+        "title" : "ToolConnectionStatusResponse",
+        "type" : "object"
+      },
       "Skill" : {
         "properties" : {
           "id" : {
@@ -13776,7 +14731,7 @@
             "type" : "boolean"
           },
           "user" : {
-            "$ref" : "#/components/schemas/User_user"
+            "$ref" : "#/components/schemas/OrganizationMember_user"
           },
           "createdAt" : {
             "type" : "string"
@@ -14841,6 +15796,15 @@
         "required" : [ "id" ],
         "type" : "object"
       },
+      "OrganizationMember_user" : {
+        "properties" : {
+          "email" : {
+            "type" : "string"
+          }
+        },
+        "required" : [ "email" ],
+        "type" : "object"
+      },
       "KnowledgeFileSummary_knowledgeBaseId" : {
         "oneOf" : [ {
           "type" : "string"
@@ -15015,15 +15979,6 @@
           }
         },
         "type" : "object"
-      },
-      "User_user" : {
-        "properties" : {
-          "email" : {
-            "type" : "string"
-          }
-        },
-        "required" : [ "email" ],
-        "type" : "object"
       }
     },
     "securitySchemes" : {