@centrali-io/centrali-mcp 4.4.8-rc.2 → 4.4.8-rc.3

package/dist/tools/describe.js

@@ -27,10 +27,10 @@ function registerDescribeTools(server) {
                     type: "text",
                     text: JSON.stringify({
                         platform: "Centrali",
-                        description: "Centrali is a low-code backend platform. You define data structures (collections), write compute functions, build orchestration workflows, and publish pages — all through APIs.",
+                        description: "Centrali is a low-code backend platform. You define data collections, write compute functions, build orchestration workflows, and publish pages — all through APIs.",
                         domains: {
                             collections: {
-                                summary: "Data schemas (formerly 'structures'). Define the shape of your data — fields, types, constraints, references.",
+                                summary: "Data schemas. Define the shape of your data — fields, types, constraints, references.",
                                 describeWith: "describe_collections",
                                 tools: [
                                     "list_collections",
@@ -224,12 +224,11 @@ function registerDescribeTools(server) {
                         naming_guide: {
                             description: "Different tools use different parameter names for the same concept (collection identifier). This is a historical naming drift — all of these refer to the same thing.",
                             aliases: {
-                                recordSlug: "Used by record tools (query_records, create_record, etc.). This is the collection's URL-safe slug, e.g., 'orders'.",
-                                structureSlug: "Used by validation and insights tools. Same value as recordSlug.",
+                                recordSlug: "Used across all tools — the collection's URL-safe identifier (e.g., 'orders').",
                                 collections: "Used by search_records. Same value as recordSlug. Accepts a string or array of strings.",
-                                structureIds: "Used by generate_starter_pages. This is the collection UUID (not the slug). Get it from list_collections → id field.",
+                                collectionIds: "Used by generate_starter_pages. This is the collection UUID (not the slug). Get it from list_collections → id field.",
                             },
-                            rule: "When a tool asks for recordSlug, structureSlug, or collections — use the collection's slug (e.g., 'orders'). When a tool asks for structureIds — use the collection's UUID.",
+                            rule: "When a tool asks for recordSlug or collections — use the collection's slug (e.g., 'orders'). When a tool asks for collectionIds — use the collection's UUID (from list_collections → id).",
                         },
                         workflow: "Typical workflow: 1) Define collections → 2) Create records → 3) Write compute functions → 4) Wire orchestrations → 5) Build pages to surface data → 6) Publish pages for end users. When building an app, also: 7) Create a service account → 8) Grant least-privilege permissions via remediation → 9) Create publishable keys for the frontend.",
                         app_credential_setup: {
@@ -294,14 +293,14 @@ function registerDescribeTools(server) {
         });
     }));
     // ── Collections ────────────────────────────────────────────────────
-    server.tool("describe_collections", "Get the schema reference for Centrali collections (data structures). Explains field types, property shapes, constraints, and how to define data models.", {}, () => __awaiter(this, void 0, void 0, function* () {
+    server.tool("describe_collections", "Get the schema reference for Centrali collections. Explains field types, property shapes, constraints, and how to define data models.", {}, () => __awaiter(this, void 0, void 0, function* () {
         return ({
             content: [
                 {
                     type: "text",
                     text: JSON.stringify({
                         domain: "Collections",
-                        description: "Collections (formerly 'structures') define the schema for your data. Each collection has a name, a recordSlug (used in API calls), and an array of properties that define the fields.",
+                        description: "Collections define the schema for your data. Each collection has a name, a recordSlug (used in API calls), and an array of properties that define the fields.",
                         collection_shape: {
                             id: "UUID — auto-generated",
                             name: "string — display name (e.g., 'Customers')",
@@ -382,7 +381,7 @@ function registerDescribeTools(server) {
                         description: "Records are rows of data stored in collections. All custom field values live under the 'data' namespace.",
                         record_shape: {
                             id: "UUID — auto-generated",
-                            structureId: "UUID — the collection this record belongs to",
+                            collectionId: "UUID — the collection this record belongs to",
                             data: "object — all custom field values keyed by field name",
                             createdAt: "ISO 8601 datetime",
                             updatedAt: "ISO 8601 datetime",
@@ -523,7 +522,7 @@ function registerDescribeTools(server) {
                                     "record_updated — fires after a record is modified",
                                     "record_deleted — fires after a record is deleted",
                                 ],
-                                config: "Specify the collection (structureId) and event type to listen for",
+                                config: "Specify the collection (collectionId) and event type to listen for",
                             },
                             scheduled: {
                                 description: "Runs on a cron schedule (e.g., every hour, daily at midnight).",
@@ -752,7 +751,7 @@ function registerDescribeTools(server) {
                         smart_query_shape: {
                             id: "UUID",
                             name: "string — display name",
-                            structureSlug: "string — the collection this query targets",
+                            recordSlug: "string — the collection this query targets",
                             description: "string | null",
                             query: "object — the query definition with filters, sort, fields, and aggregations",
                             variables: "object[] — declared variables with name, type, and default values",
@@ -995,7 +994,7 @@ function registerDescribeTools(server) {
                         description: "Centrali's AI-powered anomaly detection scans your data for unusual patterns. Insights are generated automatically or on-demand via trigger_anomaly_analysis.",
                         insight_shape: {
                             id: "UUID",
-                            structureSlug: "string — the collection where the anomaly was detected",
+                            recordSlug: "string — the collection where the anomaly was detected",
                             type: "string — anomaly type (e.g., 'spike', 'drop', 'outlier', 'pattern_break')",
                             severity: "'info' | 'warning' | 'critical'",
                             status: "'active' | 'acknowledged' | 'dismissed'",
@@ -1045,7 +1044,7 @@ function registerDescribeTools(server) {
                         },
                         suggestion_shape: {
                             id: "UUID",
-                            structureSlug: "string — the collection containing the issue",
+                            recordSlug: "string — the collection containing the issue",
                             recordId: "UUID — the specific record with the issue",
                             field: "string — the field name where the issue was found",
                             issueType: "'typo' | 'format' | 'duplicate' | 'semantic' | 'type'",

package/dist/tools/insights.js

@@ -37,10 +37,10 @@ function formatError(error, context) {
 }
 function registerInsightTools(server, sdk) {
     server.tool("list_insights", "List anomaly insights detected by Centrali's AI analysis. Insights flag unusual patterns in your data such as spikes, drops, or outliers.", {
-        structureSlug: zod_1.z
+        recordSlug: zod_1.z
             .string()
             .optional()
-            .describe("Filter insights by structure slug. If omitted, returns insights for all structures."),
+            .describe("Filter insights by collection record slug. If omitted, returns insights for all collections."),
         status: zod_1.z
             .enum(["active", "acknowledged", "dismissed"])
             .optional()
@@ -49,11 +49,11 @@ function registerInsightTools(server, sdk) {
             .enum(["info", "warning", "critical"])
             .optional()
             .describe("Filter by severity level"),
-    }, (_a) => __awaiter(this, [_a], void 0, function* ({ structureSlug, status, severity }) {
+    }, (_a) => __awaiter(this, [_a], void 0, function* ({ recordSlug, status, severity }) {
         try {
             const options = {};
-            if (structureSlug)
-                options.structureSlug = structureSlug;
+            if (recordSlug)
+                options.structureSlug = recordSlug;
             if (status)
                 options.status = status;
             if (severity)
@@ -127,14 +127,14 @@ function registerInsightTools(server, sdk) {
             };
         }
     }));
-    server.tool("get_insights_summary", "Get a summary of anomaly insights in the workspace — counts by status and severity. Optionally filter by structure.", {
-        structureSlug: zod_1.z
+    server.tool("get_insights_summary", "Get a summary of anomaly insights in the workspace — counts by status and severity. Optionally filter by collection.", {
+        recordSlug: zod_1.z
             .string()
             .optional()
-            .describe("Filter summary to a specific structure. If omitted, returns workspace-wide summary."),
-    }, (_a) => __awaiter(this, [_a], void 0, function* ({ structureSlug }) {
+            .describe("Filter summary to a specific collection's record slug. If omitted, returns workspace-wide summary."),
+    }, (_a) => __awaiter(this, [_a], void 0, function* ({ recordSlug }) {
         try {
-            const result = yield sdk.anomalyInsights.getSummary(structureSlug);
+            const result = yield sdk.anomalyInsights.getSummary(recordSlug);
             return {
                 content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }],
             };
@@ -148,11 +148,11 @@ function registerInsightTools(server, sdk) {
             };
         }
     }));
-    server.tool("trigger_anomaly_analysis", "Trigger AI-powered anomaly analysis for a structure. Starts a background analysis to detect unusual patterns. Check list_insights after the scan completes.", {
-        structureSlug: zod_1.z.string().describe("The structure's record slug to analyze"),
-    }, (_a) => __awaiter(this, [_a], void 0, function* ({ structureSlug }) {
+    server.tool("trigger_anomaly_analysis", "Trigger AI-powered anomaly analysis for a collection. Starts a background analysis to detect unusual patterns. Check list_insights after the scan completes.", {
+        recordSlug: zod_1.z.string().describe("The collection's record slug to analyze"),
+    }, (_a) => __awaiter(this, [_a], void 0, function* ({ recordSlug }) {
         try {
-            const result = yield sdk.anomalyInsights.triggerAnalysis(structureSlug);
+            const result = yield sdk.anomalyInsights.triggerAnalysis(recordSlug);
             return {
                 content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }],
             };
@@ -162,7 +162,7 @@ function registerInsightTools(server, sdk) {
                 content: [
                     {
                         type: "text",
-                        text: formatError(error, `triggering anomaly analysis for '${structureSlug}'`),
+                        text: formatError(error, `triggering anomaly analysis for '${recordSlug}'`),
                     },
                 ],
                 isError: true,

package/dist/tools/pages.js

@@ -117,7 +117,7 @@ function registerPageTools(server, sdk, centraliUrl, workspaceId) {
     const { client } = createPagesClient(sdk, centraliUrl, workspaceId);
     const basePath = `/ws/${workspaceId}/api/v1/pages`;
     // ── Page CRUD ──────────────────────────────────────────────────────
-    server.tool("list_pages", "List all pages in the workspace. Pages are pre-built UI views (lists, detail views, forms, dashboards) that surface data from structures.", {
+    server.tool("list_pages", "List all pages in the workspace. Pages are pre-built UI views (lists, detail views, forms, dashboards) that surface data from collections.", {
         page: zod_1.z.number().optional().describe("Page number (1-indexed, default: 1)"),
         pageSize: zod_1.z.number().optional().describe("Items per page (default: 20)"),
         pageType: zod_1.z
@@ -161,7 +161,7 @@ function registerPageTools(server, sdk, centraliUrl, workspaceId) {
             };
         }
     }));
-    server.tool("create_page", `Create a new page in the workspace. A page is a UI view backed by data from structures. Specify the page type: 'list' for data tables, 'detail' for single-record views, 'form' for data entry, 'dashboard' for metrics and charts.
+    server.tool("create_page", `Create a new page in the workspace. A page is a UI view backed by data from collections. Specify the page type: 'list' for data tables, 'detail' for single-record views, 'form' for data entry, 'dashboard' for metrics and charts.
 
 Navigate-to-page actions can use config.useQueryParams: true to pass selected row fields as URL query params to the target page. Pair with paramConfig: { source: 'row', mode: 'selected', selectedFields: ['id'] } to control which fields are passed. Use config.paramMapping: { sourceField: 'targetParam' } to rename fields in the URL (e.g., { requestId: 'id' } passes ?id=<value> instead of ?requestId=<value>). The target detail page can then use variable bindings with { source: 'url', param: 'id' } to read those params.`, {
         name: zod_1.z.string().describe("Display name for the page (e.g., 'Customer List')"),
@@ -474,17 +474,17 @@ Common patterns:
         }
     }));
     // ── Assembly (AI-assisted page generation) ────────────────────────
-    server.tool("generate_starter_pages", "Generate page proposals from structure IDs. Uses guided assembly to create page definitions (list, detail, form, dashboard) tailored to the data schema. Returns proposals that can be reviewed and accepted.", {
-        structureIds: zod_1.z
+    server.tool("generate_starter_pages", "Generate page proposals from collection IDs. Uses guided assembly to create page definitions (list, detail, form, dashboard) tailored to the data schema. Returns proposals that can be reviewed and accepted.", {
+        collectionIds: zod_1.z
             .array(zod_1.z.string())
-            .describe("Array of structure IDs (UUIDs) to generate pages for"),
+            .describe("Array of collection IDs (UUIDs) to generate pages for. Get these from list_collections → id field."),
         goals: zod_1.z
             .array(zod_1.z.string())
             .optional()
             .describe("Optional goals to guide page generation (e.g., 'customer management dashboard', 'order tracking')"),
-    }, (_a) => __awaiter(this, [_a], void 0, function* ({ structureIds, goals }) {
+    }, (_a) => __awaiter(this, [_a], void 0, function* ({ collectionIds, goals }) {
         try {
-            const body = { structureIds };
+            const body = { structureIds: collectionIds };
             if (goals)
                 body.goals = goals;
             const resp = yield client.post(`${basePath}/generate-starter-pages`, body);

package/dist/tools/records.js

@@ -34,10 +34,10 @@ function formatError(error, context) {
     return `Error ${context}: ${error instanceof Error ? error.message : String(error)}`;
 }
 function registerRecordTools(server, sdk) {
-    server.tool("query_records", "Query records from a structure with optional filters, sorting, and pagination. Filters use 'data.' prefix for custom fields and bracket notation for operators (e.g., 'data.status': 'active', 'data.price[lte]': 100).", {
+    server.tool("query_records", "Query records from a collection with optional filters, sorting, and pagination. Filters use 'data.' prefix for custom fields and bracket notation for operators (e.g., 'data.status': 'active', 'data.price[lte]': 100).", {
         recordSlug: zod_1.z
             .string()
-            .describe("The structure's record slug (e.g., 'orders')"),
+            .describe("The collection's record slug (e.g., 'orders')"),
         filters: zod_1.z
             .record(zod_1.z.string(), zod_1.z.any())
             .optional()
@@ -82,8 +82,8 @@ function registerRecordTools(server, sdk) {
             };
         }
     }));
-    server.tool("get_record", "Get a single record by its ID from a structure. Optionally expand reference fields.", {
-        recordSlug: zod_1.z.string().describe("The structure's record slug"),
+    server.tool("get_record", "Get a single record by its ID from a collection. Optionally expand reference fields.", {
+        recordSlug: zod_1.z.string().describe("The collection's record slug"),
         id: zod_1.z.string().describe("The record ID (UUID)"),
         expand: zod_1.z
             .string()
@@ -111,10 +111,10 @@ function registerRecordTools(server, sdk) {
             };
         }
     }));
-    server.tool("create_record", "Create a new record in a structure. Pass the record data as a JSON object with field names matching the structure's properties.", {
+    server.tool("create_record", "Create a new record in a collection. Pass the record data as a JSON object with field names matching the collection's properties.", {
         recordSlug: zod_1.z
             .string()
-            .describe("The structure's record slug (e.g., 'orders')"),
+            .describe("The collection's record slug (e.g., 'orders')"),
         data: zod_1.z
             .record(zod_1.z.string(), zod_1.z.any())
             .describe("The record data object (field names as keys)"),
@@ -140,7 +140,7 @@ function registerRecordTools(server, sdk) {
         }
     }));
     server.tool("update_record", "Update an existing record by ID. Only include the fields you want to change.", {
-        recordSlug: zod_1.z.string().describe("The structure's record slug"),
+        recordSlug: zod_1.z.string().describe("The collection's record slug"),
         id: zod_1.z.string().describe("The record ID (UUID) to update"),
         data: zod_1.z
             .record(zod_1.z.string(), zod_1.z.any())
@@ -167,7 +167,7 @@ function registerRecordTools(server, sdk) {
         }
     }));
     server.tool("delete_record", "Delete a record by ID. Performs a soft delete by default (can be restored). Set hard=true for permanent deletion.", {
-        recordSlug: zod_1.z.string().describe("The structure's record slug"),
+        recordSlug: zod_1.z.string().describe("The collection's record slug"),
         id: zod_1.z.string().describe("The record ID (UUID) to delete"),
         hard: zod_1.z
             .boolean()
@@ -200,7 +200,7 @@ function registerRecordTools(server, sdk) {
         }
     }));
     server.tool("upsert_record", "Create or update a record atomically. Matches on the provided fields to find an existing record — updates it if found, creates it if not. Returns the record and whether it was 'created' or 'updated'.", {
-        recordSlug: zod_1.z.string().describe("The structure's record slug"),
+        recordSlug: zod_1.z.string().describe("The collection's record slug"),
         match: zod_1.z
             .record(zod_1.z.string(), zod_1.z.any())
             .describe("Fields to match on when looking for an existing record (e.g. { sku: 'WIDGET-001' })"),
@@ -229,7 +229,7 @@ function registerRecordTools(server, sdk) {
         }
     }));
     server.tool("get_records_by_ids", "Fetch multiple records by their IDs in a single request. Returns an array of records.", {
-        recordSlug: zod_1.z.string().describe("The structure's record slug"),
+        recordSlug: zod_1.z.string().describe("The collection's record slug"),
         ids: zod_1.z.array(zod_1.z.string()).describe("Array of record IDs (UUIDs) to fetch"),
     }, (_a) => __awaiter(this, [_a], void 0, function* ({ recordSlug, ids }) {
         try {
@@ -248,7 +248,7 @@ function registerRecordTools(server, sdk) {
         }
     }));
     server.tool("restore_record", "Restore a soft-deleted record by ID. Only works on records deleted without hard=true.", {
-        recordSlug: zod_1.z.string().describe("The structure's record slug"),
+        recordSlug: zod_1.z.string().describe("The collection's record slug"),
         id: zod_1.z.string().describe("The record ID (UUID) to restore"),
     }, (_a) => __awaiter(this, [_a], void 0, function* ({ recordSlug, id }) {
         try {

package/dist/tools/search.js

@@ -34,29 +34,22 @@ function formatError(error, context) {
     return `Error ${context}: ${error instanceof Error ? error.message : String(error)}`;
 }
 function registerSearchTools(server, sdk) {
-    server.tool("search_records", "Full-text search across records in the workspace. Powered by Meilisearch. Optionally filter by structure(s) and limit results.", {
+    server.tool("search_records", "Full-text search across records in the workspace. Powered by Meilisearch. Optionally filter by collection(s) and limit results.", {
         query: zod_1.z.string().describe("The search query string"),
         collections: zod_1.z
             .union([zod_1.z.string(), zod_1.z.array(zod_1.z.string())])
             .optional()
-            .describe("Filter by collection slug(s). Single slug string or array of slugs"),
-        structures: zod_1.z
-            .union([zod_1.z.string(), zod_1.z.array(zod_1.z.string())])
-            .optional()
-            .describe("[DEPRECATED: use collections instead] Filter by structure slug(s). Single slug string or array of slugs"),
+            .describe("Filter by collection record slug(s). Single slug string or array of slugs"),
         limit: zod_1.z
             .number()
             .optional()
             .describe("Maximum results to return (default: 20, max: 100)"),
-    }, (_a) => __awaiter(this, [_a], void 0, function* ({ query, collections, structures, limit }) {
+    }, (_a) => __awaiter(this, [_a], void 0, function* ({ query, collections, limit }) {
         try {
             const options = {};
             if (collections) {
                 options.collections = collections;
             }
-            else if (structures) {
-                options.collections = structures;
-            }
             if (limit)
                 options.limit = limit;
             const result = yield sdk.search(query, Object.keys(options).length > 0 ? options : undefined);

package/dist/tools/service-accounts.js

@@ -853,4 +853,141 @@ function registerServiceAccountTools(server, sdk, centraliUrl, workspaceId, ownC
             };
         }
     }));
+    // ── Policies CRUD ──────────────────────────────────────────────────
+    // These tools give the MCP the ability to create, inspect, and delete
+    // access policies directly — making remediation safely reversible.
+    const getPoliciesClient = () => createIamClient(sdk, centraliUrl, workspaceId, "access/policies");
+    const getPermissionsClient = () => createIamClient(sdk, centraliUrl, workspaceId, "access/permissions");
+    const getResourcesClient = () => createIamClient(sdk, centraliUrl, workspaceId, "access/resources");
+    server.tool("list_policies", "List all access control policies in the workspace. Policies define who can do what — they bind roles/groups/principals to permissions with optional conditions.", {
+        page: zod_1.z.number().optional().describe("Page number (default: 1)"),
+        pageSize: zod_1.z.number().optional().describe("Results per page (default: 20)"),
+    }, (_a) => __awaiter(this, [_a], void 0, function* ({ page, pageSize }) {
+        try {
+            const params = {};
+            if (page !== undefined)
+                params.page = page;
+            if (pageSize !== undefined)
+                params.pageSize = pageSize;
+            const result = yield getPoliciesClient().get("/", { params });
+            return { content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }] };
+        }
+        catch (error) {
+            return { content: [{ type: "text", text: formatError(error, "listing policies") }], isError: true };
+        }
+    }));
+    server.tool("get_policy", "Get the full definition of an access control policy by ID.", {
+        policyId: zod_1.z.string().describe("The policy ID"),
+    }, (_a) => __awaiter(this, [_a], void 0, function* ({ policyId }) {
+        try {
+            const result = yield getPoliciesClient().get(`/${policyId}`);
+            return { content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }] };
+        }
+        catch (error) {
+            return { content: [{ type: "text", text: formatError(error, `getting policy '${policyId}'`) }], isError: true };
+        }
+    }));
+    server.tool("create_policy", "Create an access control policy. Policies grant or deny actions on resources to principals (users, service accounts, groups, roles).", {
+        policy: zod_1.z.record(zod_1.z.string(), zod_1.z.any()).describe("The policy definition object. Must include: name, effect ('allow'|'deny'), principals, resources, actions. May include conditions."),
+    }, (_a) => __awaiter(this, [_a], void 0, function* ({ policy }) {
+        try {
+            const result = yield getPoliciesClient().post("/", policy);
+            return { content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }] };
+        }
+        catch (error) {
+            return { content: [{ type: "text", text: formatError(error, "creating policy") }], isError: true };
+        }
+    }));
+    server.tool("update_policy", "Update an existing access control policy by ID.", {
+        policyId: zod_1.z.string().describe("The policy ID to update"),
+        policy: zod_1.z.record(zod_1.z.string(), zod_1.z.any()).describe("The updated policy definition"),
+    }, (_a) => __awaiter(this, [_a], void 0, function* ({ policyId, policy }) {
+        try {
+            const result = yield getPoliciesClient().put(`/${policyId}`, policy);
+            return { content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }] };
+        }
+        catch (error) {
+            return { content: [{ type: "text", text: formatError(error, `updating policy '${policyId}'`) }], isError: true };
+        }
+    }));
+    server.tool("delete_policy", "Delete an access control policy by ID. This immediately revokes the access it granted. Use this to undo apply_remediation.", {
+        policyId: zod_1.z.string().describe("The policy ID to delete"),
+    }, (_a) => __awaiter(this, [_a], void 0, function* ({ policyId }) {
+        try {
+            yield getPoliciesClient().delete(`/${policyId}`);
+            return { content: [{ type: "text", text: `Policy '${policyId}' deleted.` }] };
+        }
+        catch (error) {
+            return { content: [{ type: "text", text: formatError(error, `deleting policy '${policyId}'`) }], isError: true };
+        }
+    }));
+    // ── Permissions CRUD ───────────────────────────────────────────────
+    server.tool("list_permissions", "List all permission definitions in the workspace. Permissions are resource + action pairs (e.g., 'workspace::records' + 'create').", {
+        page: zod_1.z.number().optional().describe("Page number (default: 1)"),
+        pageSize: zod_1.z.number().optional().describe("Results per page (default: 20)"),
+    }, (_a) => __awaiter(this, [_a], void 0, function* ({ page, pageSize }) {
+        try {
+            const params = {};
+            if (page !== undefined)
+                params.page = page;
+            if (pageSize !== undefined)
+                params.pageSize = pageSize;
+            const result = yield getPermissionsClient().get("/", { params });
+            return { content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }] };
+        }
+        catch (error) {
+            return { content: [{ type: "text", text: formatError(error, "listing permissions") }], isError: true };
+        }
+    }));
+    server.tool("create_permission", "Create a new permission definition (resource + action pair).", {
+        permission: zod_1.z.record(zod_1.z.string(), zod_1.z.any()).describe("The permission definition. Must include: resource (name), action."),
+    }, (_a) => __awaiter(this, [_a], void 0, function* ({ permission }) {
+        try {
+            const result = yield getPermissionsClient().post("/", permission);
+            return { content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }] };
+        }
+        catch (error) {
+            return { content: [{ type: "text", text: formatError(error, "creating permission") }], isError: true };
+        }
+    }));
+    server.tool("delete_permission", "Delete a permission definition by ID.", {
+        permissionId: zod_1.z.string().describe("The permission ID to delete"),
+    }, (_a) => __awaiter(this, [_a], void 0, function* ({ permissionId }) {
+        try {
+            yield getPermissionsClient().delete(`/${permissionId}`);
+            return { content: [{ type: "text", text: `Permission '${permissionId}' deleted.` }] };
+        }
+        catch (error) {
+            return { content: [{ type: "text", text: formatError(error, `deleting permission '${permissionId}'`) }], isError: true };
+        }
+    }));
+    // ── Resources ──────────────────────────────────────────────────────
+    server.tool("list_resources", "List all protected resource definitions in the workspace. Resources are the things permissions act on (e.g., 'workspace::records', 'workspace::functions').", {
+        page: zod_1.z.number().optional().describe("Page number (default: 1)"),
+        pageSize: zod_1.z.number().optional().describe("Results per page (default: 20)"),
+    }, (_a) => __awaiter(this, [_a], void 0, function* ({ page, pageSize }) {
+        try {
+            const params = {};
+            if (page !== undefined)
+                params.page = page;
+            if (pageSize !== undefined)
+                params.pageSize = pageSize;
+            const result = yield getResourcesClient().get("/", { params });
+            return { content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }] };
+        }
+        catch (error) {
+            return { content: [{ type: "text", text: formatError(error, "listing resources") }], isError: true };
+        }
+    }));
+    server.tool("get_resource", "Get details of a protected resource definition by ID.", {
+        resourceId: zod_1.z.string().describe("The resource ID"),
+    }, (_a) => __awaiter(this, [_a], void 0, function* ({ resourceId }) {
+        try {
+            const result = yield getResourcesClient().get(`/${resourceId}`);
+            return { content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }] };
+        }
+        catch (error) {
+            return { content: [{ type: "text", text: formatError(error, `getting resource '${resourceId}'`) }], isError: true };
+        }
+    }));
 }

package/dist/tools/smart-queries.js

@@ -34,11 +34,11 @@ function formatError(error, context) {
     return `Error ${context}: ${error instanceof Error ? error.message : String(error)}`;
 }
 function registerSmartQueryTools(server, sdk) {
-    server.tool("list_smart_queries", "List smart queries. Smart queries are reusable, parameterized queries defined in the Centrali console. Optionally filter by structure slug.", {
+    server.tool("list_smart_queries", "List smart queries. Smart queries are reusable, parameterized queries defined in the Centrali console. Optionally filter by collection record slug.", {
         recordSlug: zod_1.z
             .string()
             .optional()
-            .describe("Filter by structure slug. If omitted, lists all smart queries in the workspace"),
+            .describe("Filter by collection record slug. If omitted, lists all smart queries in the workspace"),
     }, (_a) => __awaiter(this, [_a], void 0, function* ({ recordSlug }) {
         try {
             const result = recordSlug
@@ -65,7 +65,7 @@ function registerSmartQueryTools(server, sdk) {
     server.tool("execute_smart_query", "Execute a smart query by ID and return the results. Smart queries can have parameterized variables using {{variableName}} syntax.", {
         recordSlug: zod_1.z
             .string()
-            .describe("The structure's record slug the query belongs to"),
+            .describe("The collection's record slug the query belongs to"),
         queryId: zod_1.z.string().describe("The smart query ID (UUID) to execute"),
         variables: zod_1.z
             .record(zod_1.z.string(), zod_1.z.string())
@@ -94,7 +94,7 @@ function registerSmartQueryTools(server, sdk) {
         }
     }));
     server.tool("get_smart_query", "Get a smart query by ID. Returns the full query definition including filters, sort, and variable declarations.", {
-        recordSlug: zod_1.z.string().describe("The structure's record slug the query belongs to"),
+        recordSlug: zod_1.z.string().describe("The collection's record slug the query belongs to"),
         queryId: zod_1.z.string().describe("The smart query ID (UUID)"),
     }, (_a) => __awaiter(this, [_a], void 0, function* ({ recordSlug, queryId }) {
         try {
@@ -118,7 +118,7 @@ function registerSmartQueryTools(server, sdk) {
         }
     }));
     server.tool("create_smart_query", "Create a new smart query for a collection. Smart queries are reusable, parameterized queries with filter, sort, and variable support.", {
-        recordSlug: zod_1.z.string().describe("The structure's record slug to create the query for"),
+        recordSlug: zod_1.z.string().describe("The collection's record slug to create the query for"),
         name: zod_1.z.string().describe("Display name for the smart query"),
         description: zod_1.z.string().optional().describe("Optional description"),
         queryDefinition: zod_1.z
@@ -149,7 +149,7 @@ function registerSmartQueryTools(server, sdk) {
         }
     }));
     server.tool("update_smart_query", "Update an existing smart query. Only include the fields you want to change.", {
-        recordSlug: zod_1.z.string().describe("The structure's record slug the query belongs to"),
+        recordSlug: zod_1.z.string().describe("The collection's record slug the query belongs to"),
         queryId: zod_1.z.string().describe("The smart query ID (UUID) to update"),
         name: zod_1.z.string().optional().describe("Updated display name"),
         description: zod_1.z.string().optional().describe("Updated description"),
@@ -186,7 +186,7 @@ function registerSmartQueryTools(server, sdk) {
         }
     }));
     server.tool("delete_smart_query", "Delete a smart query by ID.", {
-        recordSlug: zod_1.z.string().describe("The structure's record slug the query belongs to"),
+        recordSlug: zod_1.z.string().describe("The collection's record slug the query belongs to"),
         queryId: zod_1.z.string().describe("The smart query ID (UUID) to delete"),
     }, (_a) => __awaiter(this, [_a], void 0, function* ({ recordSlug, queryId }) {
         try {
@@ -213,7 +213,7 @@ function registerSmartQueryTools(server, sdk) {
         }
     }));
     server.tool("test_smart_query", "Test execute a query definition without saving it. Useful for validating query syntax and previewing results before creating a smart query.", {
-        recordSlug: zod_1.z.string().describe("The structure's record slug to test against"),
+        recordSlug: zod_1.z.string().describe("The collection's record slug to test against"),
         queryDefinition: zod_1.z
             .record(zod_1.z.string(), zod_1.z.any())
             .describe("The query definition to test (where, sort, limit, select, etc.)"),

package/dist/tools/validation.js

@@ -36,16 +36,16 @@ function formatError(error, context) {
     return `Error ${context}: ${error instanceof Error ? error.message : String(error)}`;
 }
 function registerValidationTools(server, sdk) {
-    server.tool("trigger_validation_scan", "Trigger an AI-powered data quality scan on a structure. Detects typos, format inconsistencies, duplicates, and other data issues. Returns a batchId — use get_validation_summary or list_validation_suggestions to see results after the scan completes.", {
-        structureSlug: zod_1.z.string().describe("The structure's record slug to scan"),
+    server.tool("trigger_validation_scan", "Trigger an AI-powered data quality scan on a collection. Detects typos, format inconsistencies, duplicates, and other data issues. Returns a batchId — use get_validation_summary or list_validation_suggestions to see results after the scan completes.", {
+        recordSlug: zod_1.z.string().describe("The collection's record slug to scan"),
         validationTypes: zod_1.z
             .array(zod_1.z.enum(["typo", "format", "duplicate", "semantic", "type"]))
             .optional()
             .describe("Specific validation types to run. If omitted, all types are run."),
-    }, (_a) => __awaiter(this, [_a], void 0, function* ({ structureSlug, validationTypes }) {
+    }, (_a) => __awaiter(this, [_a], void 0, function* ({ recordSlug, validationTypes }) {
         try {
             const options = validationTypes ? { validationTypes } : undefined;
-            const result = yield sdk.validation.triggerScan(structureSlug, options);
+            const result = yield sdk.validation.triggerScan(recordSlug, options);
             return {
                 content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }],
             };
@@ -55,7 +55,7 @@ function registerValidationTools(server, sdk) {
                 content: [
                     {
                         type: "text",
-                        text: formatError(error, `triggering validation scan for '${structureSlug}'`),
+                        text: formatError(error, `triggering validation scan for '${recordSlug}'`),
                     },
                 ],
                 isError: true,
@@ -63,10 +63,10 @@ function registerValidationTools(server, sdk) {
         }
     }));
     server.tool("list_validation_suggestions", "List data quality suggestions generated by validation scans. Each suggestion identifies an issue in a record and proposes a fix.", {
-        structureSlug: zod_1.z
+        recordSlug: zod_1.z
             .string()
             .optional()
-            .describe("Filter suggestions to a specific structure"),
+            .describe("Filter suggestions to a specific collection's record slug"),
         status: zod_1.z
             .enum(["pending", "accepted", "rejected", "auto-applied"])
             .optional()
@@ -79,11 +79,11 @@ function registerValidationTools(server, sdk) {
             .number()
             .optional()
             .describe("Minimum confidence score (0-1). Use 0.9 for high-confidence suggestions only."),
-    }, (_a) => __awaiter(this, [_a], void 0, function* ({ structureSlug, status, issueType, minConfidence }) {
+    }, (_a) => __awaiter(this, [_a], void 0, function* ({ recordSlug, status, issueType, minConfidence }) {
         try {
             const options = {};
-            if (structureSlug)
-                options.structureSlug = structureSlug;
+            if (recordSlug)
+                options.structureSlug = recordSlug;
             if (status)
                 options.status = status;
             if (issueType)
@@ -107,14 +107,14 @@ function registerValidationTools(server, sdk) {
             };
         }
     }));
-    server.tool("get_validation_summary", "Get a summary of data quality across the workspace — counts of pending, accepted, and rejected suggestions. Optionally filter by structure.", {
-        structureSlug: zod_1.z
+    server.tool("get_validation_summary", "Get a summary of data quality across the workspace — counts of pending, accepted, and rejected suggestions. Optionally filter by collection.", {
+        recordSlug: zod_1.z
             .string()
             .optional()
-            .describe("Filter summary to a specific structure. If omitted, returns workspace-wide summary."),
-    }, (_a) => __awaiter(this, [_a], void 0, function* ({ structureSlug }) {
+            .describe("Filter summary to a specific collection's record slug. If omitted, returns workspace-wide summary."),
+    }, (_a) => __awaiter(this, [_a], void 0, function* ({ recordSlug }) {
         try {
-            const result = yield sdk.validation.getSummary(structureSlug);
+            const result = yield sdk.validation.getSummary(recordSlug);
             return {
                 content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }],
             };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@centrali-io/centrali-mcp",
-  "version": "4.4.8-rc.2",
+  "version": "4.4.8-rc.3",
   "description": "Centrali MCP Server - AI assistant integration for Centrali workspaces",
   "main": "dist/index.js",
   "type": "commonjs",