@centrali-io/centrali-mcp 4.4.8-rc.7 → 4.4.8-rc.8

package/dist/tools/service-accounts.js

@@ -228,18 +228,18 @@ function registerServiceAccountTools(server, sdk, centraliUrl, workspaceId, ownC
             };
         }
     }));
-    server.tool("delete_service_account", "Permanently delete a service account. This is irreversible — all tokens are invalidated immediately.", {
-        serviceAccountId: zod_1.z.number().describe("The service account numeric ID to delete"),
-    }, (_a) => __awaiter(this, [_a], void 0, function* ({ serviceAccountId }) {
+    server.tool("delete_service_account", "Permanently delete a service account. This is irreversible — all tokens are invalidated immediately. Note: the service account must not be revoked (revoke prevents deletion).", {
+        clientId: zod_1.z.string().describe("The service account's clientId string (e.g., 'ci_abc123') — NOT the numeric ID"),
+    }, (_a) => __awaiter(this, [_a], void 0, function* ({ clientId }) {
         try {
-            yield getSaClient().delete(`/${serviceAccountId}`);
+            yield getSaClient().delete(`/${clientId}`);
             return {
-                content: [{ type: "text", text: `Service account '${serviceAccountId}' deleted successfully.` }],
+                content: [{ type: "text", text: `Service account '${clientId}' deleted successfully.` }],
             };
         }
         catch (error) {
             return {
-                content: [{ type: "text", text: formatError(error, `deleting service account '${serviceAccountId}'`) }],
+                content: [{ type: "text", text: formatError(error, `deleting service account '${clientId}'`) }],
                 isError: true,
             };
         }
@@ -614,16 +614,13 @@ function registerServiceAccountTools(server, sdk, centraliUrl, workspaceId, ownC
             };
         }
     }));
-    server.tool("update_role", "Update a role's name, description, or permissions.", {
+    server.tool("update_role", "Update a role's description or permissions. Role names are immutable and cannot be changed after creation.", {
         roleId: zod_1.z.string().describe("The role ID (UUID) to update"),
-        name: zod_1.z.string().optional().describe("Updated name"),
         description: zod_1.z.string().optional().describe("Updated description"),
         permissions: zod_1.z.array(zod_1.z.string()).optional().describe("Updated permission UUIDs (replaces all existing)"),
-    }, (_a) => __awaiter(this, [_a], void 0, function* ({ roleId, name, description, permissions }) {
+    }, (_a) => __awaiter(this, [_a], void 0, function* ({ roleId, description, permissions }) {
         try {
             const input = {};
-            if (name !== undefined)
-                input.name = name;
             if (description !== undefined)
                 input.description = description;
             if (permissions !== undefined)
@@ -715,15 +712,12 @@ function registerServiceAccountTools(server, sdk, centraliUrl, workspaceId, ownC
             };
         }
     }));
-    server.tool("update_group", "Update a group's name or description.", {
+    server.tool("update_group", "Update a group's description. Group names are immutable and cannot be changed after creation.", {
         groupId: zod_1.z.string().describe("The group ID (UUID) to update"),
-        name: zod_1.z.string().optional().describe("Updated name"),
         description: zod_1.z.string().optional().describe("Updated description"),
-    }, (_a) => __awaiter(this, [_a], void 0, function* ({ groupId, name, description }) {
+    }, (_a) => __awaiter(this, [_a], void 0, function* ({ groupId, description }) {
         try {
             const input = {};
-            if (name !== undefined)
-                input.name = name;
             if (description !== undefined)
                 input.description = description;
             const result = yield getGroupsClient().put(`/${groupId}`, input);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@centrali-io/centrali-mcp",
-  "version": "4.4.8-rc.7",
+  "version": "4.4.8-rc.8",
   "description": "Centrali MCP Server - AI assistant integration for Centrali workspaces",
   "main": "dist/index.js",
   "type": "commonjs",

package/src/tools/service-accounts.ts

@@ -261,19 +261,19 @@ export function registerServiceAccountTools(server: McpServer, sdk: CentraliSDK,
 
   server.tool(
     "delete_service_account",
-    "Permanently delete a service account. This is irreversible — all tokens are invalidated immediately.",
+    "Permanently delete a service account. This is irreversible — all tokens are invalidated immediately. Note: the service account must not be revoked (revoke prevents deletion).",
     {
-      serviceAccountId: z.number().describe("The service account numeric ID to delete"),
+      clientId: z.string().describe("The service account's clientId string (e.g., 'ci_abc123') — NOT the numeric ID"),
     },
-    async ({ serviceAccountId }) => {
+    async ({ clientId }) => {
       try {
-        await getSaClient().delete(`/${serviceAccountId}`);
+        await getSaClient().delete(`/${clientId}`);
         return {
-          content: [{ type: "text", text: `Service account '${serviceAccountId}' deleted successfully.` }],
+          content: [{ type: "text", text: `Service account '${clientId}' deleted successfully.` }],
         };
       } catch (error: unknown) {
         return {
-          content: [{ type: "text", text: formatError(error, `deleting service account '${serviceAccountId}'`) }],
+          content: [{ type: "text", text: formatError(error, `deleting service account '${clientId}'`) }],
           isError: true,
         };
       }
@@ -754,17 +754,15 @@ export function registerServiceAccountTools(server: McpServer, sdk: CentraliSDK,
 
   server.tool(
     "update_role",
-    "Update a role's name, description, or permissions.",
+    "Update a role's description or permissions. Role names are immutable and cannot be changed after creation.",
     {
       roleId: z.string().describe("The role ID (UUID) to update"),
-      name: z.string().optional().describe("Updated name"),
       description: z.string().optional().describe("Updated description"),
       permissions: z.array(z.string()).optional().describe("Updated permission UUIDs (replaces all existing)"),
     },
-    async ({ roleId, name, description, permissions }) => {
+    async ({ roleId, description, permissions }) => {
       try {
         const input: Record<string, any> = {};
-        if (name !== undefined) input.name = name;
         if (description !== undefined) input.description = description;
         if (permissions !== undefined) input.permissions = permissions;
         const result = await getRolesClient().put(`/${roleId}`, input);
@@ -875,16 +873,14 @@ export function registerServiceAccountTools(server: McpServer, sdk: CentraliSDK,
 
   server.tool(
     "update_group",
-    "Update a group's name or description.",
+    "Update a group's description. Group names are immutable and cannot be changed after creation.",
     {
       groupId: z.string().describe("The group ID (UUID) to update"),
-      name: z.string().optional().describe("Updated name"),
       description: z.string().optional().describe("Updated description"),
     },
-    async ({ groupId, name, description }) => {
+    async ({ groupId, description }) => {
       try {
         const input: Record<string, any> = {};
-        if (name !== undefined) input.name = name;
         if (description !== undefined) input.description = description;
         const result = await getGroupsClient().put(`/${groupId}`, input);
         return {