@centrali-io/centrali-mcp 4.4.8-rc.6 → 4.4.8-rc.7

package/dist/tools/service-accounts.js

@@ -939,8 +939,8 @@ function registerServiceAccountTools(server, sdk, centraliUrl, workspaceId, ownC
             return { content: [{ type: "text", text: formatError(error, "listing permissions") }], isError: true };
         }
     }));
-    server.tool("create_permission", "Create a new permission definition (resource + action pair).", {
-        permission: zod_1.z.record(zod_1.z.string(), zod_1.z.any()).describe("The permission definition. Must include: resource (name), action."),
+    server.tool("create_permission", "Create a new permission definition. Permissions bind actions to a resource within a policy. Required fields: name, resourceId (UUID from list_resources), actions (string array), policyId (UUID from list_policies or create_policy).", {
+        permission: zod_1.z.record(zod_1.z.string(), zod_1.z.any()).describe("Required: { name: string, resourceId: UUID, actions: string[], policyId: UUID }. Optional: description, groups (string[]), priority (number)."),
     }, (_a) => __awaiter(this, [_a], void 0, function* ({ permission }) {
         try {
             const result = yield getPermissionsClient().post("/", permission);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@centrali-io/centrali-mcp",
-  "version": "4.4.8-rc.6",
+  "version": "4.4.8-rc.7",
   "description": "Centrali MCP Server - AI assistant integration for Centrali workspaces",
   "main": "dist/index.js",
   "type": "commonjs",

package/src/tools/service-accounts.ts

@@ -1166,9 +1166,9 @@ export function registerServiceAccountTools(server: McpServer, sdk: CentraliSDK,
 
   server.tool(
     "create_permission",
-    "Create a new permission definition (resource + action pair).",
+    "Create a new permission definition. Permissions bind actions to a resource within a policy. Required fields: name, resourceId (UUID from list_resources), actions (string array), policyId (UUID from list_policies or create_policy).",
     {
-      permission: z.record(z.string(), z.any()).describe("The permission definition. Must include: resource (name), action."),
+      permission: z.record(z.string(), z.any()).describe("Required: { name: string, resourceId: UUID, actions: string[], policyId: UUID }. Optional: description, groups (string[]), priority (number)."),
     },
     async ({ permission }) => {
       try {