@elitedcs/ghl-mcp 3.50.0 → 3.52.0

package/CHANGELOG.md

@@ -1,5 +1,56 @@
 # Changelog
 
+## 3.52.0 — Fix: `update_page_content` now actually writes page content
+
+`update_page_content` was a silent no-op — it POSTed the page envelope to GHL's
+prebuilt-section template-sync route (`/funnels/builder/prebuilt-section/sync/changes`),
+which accepts the request, ignores `pageData`, returns `{"prebuiltSectionTemplates":[]}`,
+and persists nothing (the page stayed at version 1 with no `pageDataDownloadUrl`).
+Present since v3.7.0 — this capability had never worked. Reported by a customer
+(v3.47 + v3.50, custom MCP client) and reproduced.
+
+- **Re-pointed to GHL's real builder autosave endpoint**
+  `POST /funnels/builder/autosave/{pageId}`, captured live from the page builder
+  2026-07-09. The server uploads the page to Firebase Storage, bumps the version,
+  and regenerates the preview snapshot, returning the new `pageDataUrl` /
+  `pageDataDownloadUrl`. Verified end-to-end: a from-scratch API write bumps the
+  version and the content round-trips through `get_page_content`.
+- **Body shape** is `{funnelId, pageVersion, pageData: {…envelope, pageVersion,
+  pageType, manualSave, integrations}}`. The tool auto-resolves `funnelId` and the
+  current `pageVersion` from the page metadata (both optional to pass), computes
+  the `integrations` element-type counts from the content, and sends the builder
+  origin/referer + `Version` header the endpoint's IAM check requires.
+- `update_page_content` gains an optional `funnelId` arg (auto-resolved when
+  omitted). No tool-count change.
+
+## 3.51.0 — Agency sub-account provisioning (`create_sub_account` / `delete_sub_account`)
+
+The missing first step of fully programmatic client provisioning: create the
+sub-account itself (optionally loading a snapshot at creation), then Blueprint
+builds inside it and verify_funnel proves it.
+
+- **`create_sub_account`** — agency-API location create with optional
+  `snapshot_id` (see `list_snapshots`), prospect/owner info, address, timezone.
+  Probes whether the agency key can operate the new location's data plane and
+  auto-registers it in the token registry when it can (switch_location works
+  immediately). Non-idempotent create is retry-suppressed. Requires an
+  agency-level key with the locations.write scope; the error path says exactly
+  that when the scope is missing.
+- **`delete_sub_account`** — agency-API location delete, confirm-gated,
+  refuses the currently active location, cleans the token registry entry.
+- **Tool counts corrected: the real full count is 232 (180 core), free tier
+  106 (88).** A live tools/list dump exposed that `get_mcp_version` registers
+  outside the counted registry in both modes — every prior claim (229, 231,
+  free 105/87) was one short. The drift-guard constant now documents all four
+  normal-mode extras.
+- **Test-isolation fix: the suite can never clobber a real install again.**
+  credentials-store's atomicity tests wrote fixture credentials to the REAL
+  per-user credentials.json (no GHL_MCP_CONFIG_DIR override) — any dev running
+  the suite silently broke their own install on next restart. Tests now run in
+  a temp dir AND writeCredentials refuses to run under vitest without an
+  override.
+
+
 ## 3.50.0 — FREE read-only tier
 
 A free license (`ghlcommand.com/free`, key by email, no card) now runs the same

package/README.md

@@ -1,6 +1,6 @@
 # GHL Command — GoHighLevel MCP Server
 
-**Full GoHighLevel API access for Claude.** 229 tools across 48 modules — manage contacts, conversations, pipelines, calendars, funnels, workflows, invoices, custom objects, webhooks, and more. **Includes full workflow builder, funnel/page editor, form builder, pipeline builder, bulk operations, account export, and workflow cloning** — capabilities no other GHL tool offers. **Multi-tenant:** one install can run the workflow builder across multiple clients' GHL accounts.
+**Full GoHighLevel API access for Claude.** 232 tools across 48 modules — manage contacts, conversations, pipelines, calendars, funnels, workflows, invoices, custom objects, webhooks, and more. **Includes full workflow builder, funnel/page editor, form builder, pipeline builder, bulk operations, account export, and workflow cloning** — capabilities no other GHL tool offers. **Multi-tenant:** one install can run the workflow builder across multiple clients' GHL accounts.
 
 **Distributed via npm as [`@elitedcs/ghl-mcp`](https://www.npmjs.com/package/@elitedcs/ghl-mcp).** Buyers install with one config block — no git, no Node.js setup, no terminal commands. Updates flow automatically (`npx @latest` re-resolves on every Claude restart).
 
@@ -8,7 +8,7 @@ Works with **both the Claude Desktop App and Claude Code terminal** — your cho
 
 **License required.** Get it at [ghlcommand.com](https://ghlcommand.com?utm_source=npm&utm_medium=readme) — $97/mo, covering UNLIMITED GoHighLevel sub-accounts on up to 3 machines (never billed per account). **30-day time-back guarantee**: save 5+ hours on one client build or your first month back.
 
-**Try it FREE (read-only tier).** Grab an instant free key at [ghlcommand.com/free](https://ghlcommand.com/free?utm_source=npm&utm_medium=readme) — 105 read-only tools on your own GHL account (87 before the one-login auditor unlock): the account-wide workflow audit (`audit_workflows` finds the silently broken references GHL never warns you about), account health, and every read across contacts, pipelines, funnels, and workflows. Write tools stay visible and answer with upgrade info. Buying later with the same email upgrades your key in place — 1 machine on free, 3 when you upgrade.
+**Try it FREE (read-only tier).** Grab an instant free key at [ghlcommand.com/free](https://ghlcommand.com/free?utm_source=npm&utm_medium=readme) — 106 read-only tools on your own GHL account (88 before the one-login auditor unlock): the account-wide workflow audit (`audit_workflows` finds the silently broken references GHL never warns you about), account health, and every read across contacts, pipelines, funnels, and workflows. Write tools stay visible and answer with upgrade info. Buying later with the same email upgrades your key in place — 1 machine on free, 3 when you upgrade.
 
 Built by [Elite DCs, LLC](https://elitedcs.com).
 
@@ -118,7 +118,7 @@ Run setup_ghl_mcp to activate GHL Command:
   ghl_location_id: YOUR_LOCATION_ID
 ```
 
-Approve the tool call. Server validates your license, verifies your GHL credentials, writes them to a per-user config file. **Quit Claude one more time and reopen** — the full core toolset is now unlocked (229 tools total with the optional Workflow Builder Firebase add-on).
+Approve the tool call. Server validates your license, verifies your GHL credentials, writes them to a per-user config file. **Quit Claude one more time and reopen** — the full core toolset is now unlocked (232 tools total with the optional Workflow Builder Firebase add-on).
 
 ### 4. Try it
 
@@ -158,7 +158,7 @@ https://app.gohighlevel.com/v2/location/YOUR_LOCATION_ID/dashboard
 
 ## Enable the Workflow Builder
 
-The builder + cloner + validator tools (workflow builder, funnel builder, form builder, pipeline builder, workflow cloner, validate_workflow) use GHL's internal API and require Firebase credentials. Without them, the other 177 tools work fine — you just won't have workflow/funnel/form/pipeline editing. This is the flagship feature: do this step.
+The builder + cloner + validator tools (workflow builder, funnel builder, form builder, pipeline builder, workflow cloner, validate_workflow) use GHL's internal API and require Firebase credentials. Without them, the other 180 tools work fine — you just won't have workflow/funnel/form/pipeline editing. This is the flagship feature: do this step.
 
 **One-click capture (v3.49.0+, the supported path):**
 
@@ -747,7 +747,7 @@ Source repo is private. Contributors need an invitation from `drjerryrelth`. The
 
 ### Reducing context / token usage
 
-Every registered MCP tool's schema is shipped to the model on every message. With 229 tools that's a meaningful per-message context cost even in chats that never touch GHL. If you only use a slice of GHL Command, restrict the tool surface with `GHL_ENABLED_MODULES` and/or `GHL_ENABLED_TOOLS`:
+Every registered MCP tool's schema is shipped to the model on every message. With 232 tools that's a meaningful per-message context cost even in chats that never touch GHL. If you only use a slice of GHL Command, restrict the tool surface with `GHL_ENABLED_MODULES` and/or `GHL_ENABLED_TOOLS`:
 
 ```jsonc
 // Claude Desktop config — enable whole modules

package/dist/index.js

@@ -31,9 +31,9 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@elitedcs/ghl-mcp",
-      version: "3.50.0",
+      version: "3.52.0",
       mcpName: "io.github.drjerryrelth/ghl-command",
-      description: "GoHighLevel MCP Server for Claude. 229 tools \u2014 full CRM, automation, marketing control, account-wide workflow audit, live funnel-capture verification, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
+      description: "GoHighLevel MCP Server for Claude. 232 tools \u2014 full CRM, automation, marketing control, account-wide workflow audit, live funnel-capture verification, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
       main: "dist/index.js",
       bin: {
         "ghl-mcp": "dist/index.js"
@@ -370,6 +370,11 @@ function foldCredentialsIntoEnv(creds, env = process.env) {
   }
 }
 function writeCredentials(creds) {
+  if (process.env.VITEST && !process.env.GHL_MCP_CONFIG_DIR) {
+    throw new Error(
+      "writeCredentials under vitest without GHL_MCP_CONFIG_DIR \u2014 set it to a temp dir in the test (see interactive-capture.test.ts) so the real credentials.json is never touched."
+    );
+  }
   ensureAppDataDir();
   const file = credentialsPath();
   const tmp = `${file}.tmp.${process.pid}.${Date.now()}`;
@@ -6170,22 +6175,85 @@ ${text2}`);
       }
     }
   );
+  function toCamel(meta) {
+    return meta.replace(/-([a-z])/g, (_m, c) => c.toUpperCase());
+  }
+  function computeIntegrations(pageData) {
+    const counts = {};
+    let videoBackground = false;
+    const sections = Array.isArray(pageData.sections) ? pageData.sections : [];
+    for (const sec of sections) {
+      const bg = sec.metaData?.extra?.bgImage?.value;
+      if (bg && bg.mediaType === "video" && bg.videoUrl) videoBackground = true;
+      const elements = Array.isArray(sec.elements) ? sec.elements : [];
+      for (const el of elements) {
+        if (el.type !== "element") continue;
+        const meta = typeof el.meta === "string" ? el.meta : null;
+        if (!meta) continue;
+        const key = toCamel(meta);
+        counts[key] = (counts[key] ?? 0) + 1;
+      }
+    }
+    const popupsList = pageData.popupsList;
+    const popup = Array.isArray(popupsList) && popupsList.length > 0;
+    return {
+      videoBackground,
+      blogMeta: { selectedBlogCategories: [], categoryNavigationList: [] },
+      ...counts,
+      popup
+    };
+  }
+  async function autosaveRequest(pageId, body) {
+    const headers = await client.buildHeaders();
+    headers.Origin = "https://page-builder.leadconnectorhq.com";
+    headers.Referer = "https://page-builder.leadconnectorhq.com/";
+    const url = `https://backend.leadconnectorhq.com/funnels/builder/autosave/${pageId}`;
+    const response = await fetch(url, { method: "POST", headers, body: JSON.stringify(body) });
+    if (!response.ok) {
+      throw new Error(`Funnel API Error ${response.status}: POST /builder/autosave/${pageId}
+${await response.text()}`);
+    }
+    const text = await response.text();
+    if (!text) return {};
+    try {
+      return JSON.parse(text);
+    } catch {
+      return JSON.parse(text.replace(/[\x00-\x1F\x7F]/g, ""));
+    }
+  }
   server2.tool(
     "update_page_content",
-    "Update a page's builder content \u2014 sections, elements, settings, pageStyles, trackingCode, popups, popupsList, fontsForPreview. Use get_page_content first to see the current structure, modify it, then pass the full 8-field envelope here. GHL's UI fires three POSTs to this endpoint per save (one collaborative-edit broadcast + two commits); for MCP use, one POST with write=true is enough.",
+    "Update a funnel/website page's builder content \u2014 sections, elements, settings, pageStyles, trackingCode, popups, popupsList, fontsForPreview. Use get_page_content first to see the current structure, modify it, then pass the full envelope here. Writes via GHL's builder autosave: the server uploads the page to storage, bumps the version, and regenerates the preview snapshot, then returns the new pageDataUrl. The funnelId and current version are resolved automatically from the page. Saves as a draft unless isPublished is true.",
     {
       pageId: import_zod34.z.string().describe("The page ID to update."),
-      content: import_zod34.z.record(import_zod34.z.unknown()).describe("The full page content JSON. Expected fields: sections, settings, general, pageStyles, trackingCode, popups, popupsList, fontsForPreview."),
-      isPublished: import_zod34.z.boolean().optional().describe("Whether the page should be marked published after the save. Defaults to false (draft).")
+      content: import_zod34.z.record(import_zod34.z.unknown()).describe("The full page content JSON \u2014 the 8-field envelope: sections, settings, general, pageStyles, trackingCode, fontsForPreview, popups, popupsList. Start from get_page_content and modify it."),
+      funnelId: import_zod34.z.string().optional().describe("Funnel ID that owns the page. Optional \u2014 auto-resolved from the page metadata if omitted."),
+      isPublished: import_zod34.z.boolean().optional().describe("Mark the page published after the save. Defaults to false (draft).")
     },
-    async ({ pageId, content, isPublished }) => {
+    async ({ pageId, content, funnelId, isPublished }) => {
       try {
-        const result = await funnelRequest("POST", `/builder/prebuilt-section/sync/changes`, {
-          locationId: client.locationId,
-          pageId,
-          pageData: content,
-          write: true,
-          isPublished: isPublished ?? false
+        let meta = {};
+        try {
+          meta = await funnelRequest("GET", `/page/${pageId}?locationId=${client.locationId}`);
+        } catch (metaErr) {
+          if (!funnelId) throw metaErr;
+        }
+        const resolvedFunnelId = funnelId ?? (typeof meta.funnelId === "string" ? meta.funnelId : void 0);
+        if (!resolvedFunnelId) {
+          throw new Error(`Could not resolve funnelId for page ${pageId}. Pass funnelId explicitly.`);
+        }
+        const pageVersion = typeof meta.pageVersion === "number" ? meta.pageVersion : typeof meta.version === "number" ? meta.version : 1;
+        const pageData = {
+          ...content,
+          pageVersion,
+          pageType: isPublished ? "published" : "draft",
+          manualSave: true,
+          integrations: computeIntegrations(content)
+        };
+        const result = await autosaveRequest(pageId, {
+          funnelId: resolvedFunnelId,
+          pageVersion,
+          pageData
         });
         return jsonResponse(result);
       } catch (error) {
@@ -7254,7 +7322,7 @@ async function validateFirebase(firebaseKey, refreshToken) {
 function registerSetupTool(server2) {
   server2.tool(
     "setup_ghl_mcp",
-    "First-run setup for GHL Command MCP. Validates your license and GHL credentials, then writes them to a per-user credentials file. Restart Claude after this completes to load all 229 tools (177 if you skip the optional Firebase fields; add Firebase later with enable_workflow_builder).",
+    "First-run setup for GHL Command MCP. Validates your license and GHL credentials, then writes them to a per-user credentials file. Restart Claude after this completes to load all 232 tools (180 if you skip the optional Firebase fields; add Firebase later with enable_workflow_builder).",
     {
       email: import_zod39.z.string().email().describe("Email used at purchase."),
       license_key: import_zod39.z.string().min(20).describe("License key from your purchase email."),
@@ -7336,11 +7404,11 @@ Note: Firebase credentials rejected (${fb.error}). Saved without Workflow Builde
         signed_attestation: lic.signedAttestation
       });
       const isFree = lic.tier === "free";
-      const toolCount = isFree ? workflowBuilderEnabled ? "105" : "87" : workflowBuilderEnabled ? "229" : "177";
+      const toolCount = isFree ? workflowBuilderEnabled ? "106" : "88" : workflowBuilderEnabled ? "232" : "180";
       const wfLine = workflowBuilderEnabled ? "Workflow Builder: enabled." : "Workflow Builder: not configured (optional).";
       const wfTip = workflowBuilderEnabled ? "" : isFree ? `
 Unlock the account auditor next (the free tier's best tool): say "Unlock the Workflow Builder" \u2014 one browser login enables audit_workflows, validate_workflow, and the full-detail reads.` : "\nTo enable Workflow Builder later (52 extra Firebase-gated tools): run enable_workflow_builder with your three Firebase values. No need to re-enter license/API key/location ID.";
-      const freeTip = isFree ? "\n\nFree tier: 105 read-only tools (87 before the one-login auditor unlock). Write tools stay visible but answer with upgrade info instead of acting. Full version ($97/mo founding rate, same key upgrades in place): https://ghlcommand.com" : "";
+      const freeTip = isFree ? "\n\nFree tier: 106 read-only tools (88 before the one-login auditor unlock). Write tools stay visible but answer with upgrade info instead of acting. Full version ($97/mo founding rate, same key upgrades in place): https://ghlcommand.com" : "";
       return {
         content: [{
           type: "text",
@@ -7366,7 +7434,7 @@ Unlock the account auditor next (the free tier's best tool): say "Unlock the Wor
 function registerEnableWorkflowBuilderTool(server2) {
   server2.tool(
     "enable_workflow_builder",
-    "Add Firebase credentials to an existing GHL Command install to unlock 52 additional tools across the internal-API modules: workflow builder (create/edit/clone/delete/publish/validate workflows, build_if_else_branch, build_goal_event, get_trigger_registry), funnel + page builder, form builder, pipeline builder, workflow cloner, smart lists, reputation, email campaigns, email templates, and memberships, plus the pre-deploy validator. On the FREE tier this same login unlocks the read-only auditor suite (audit_workflows, validate_workflow, full-detail workflow/funnel/pipeline reads). Requires you've already run setup_ghl_mcp. EASIEST PATH: run `capture_firebase_interactive` instead \u2014 a Chrome window opens, you log into GHL, zero pasting. Use THIS tool when you have JSON from `auto_capture_firebase_script` (console-paste path) to put in `firebase_paste`, or the three manual DevTools fields. Tool count goes from 177 to 229 after the next Claude restart.",
+    "Add Firebase credentials to an existing GHL Command install to unlock 52 additional tools across the internal-API modules: workflow builder (create/edit/clone/delete/publish/validate workflows, build_if_else_branch, build_goal_event, get_trigger_registry), funnel + page builder, form builder, pipeline builder, workflow cloner, smart lists, reputation, email campaigns, email templates, and memberships, plus the pre-deploy validator. On the FREE tier this same login unlocks the read-only auditor suite (audit_workflows, validate_workflow, full-detail workflow/funnel/pipeline reads). Requires you've already run setup_ghl_mcp. EASIEST PATH: run `capture_firebase_interactive` instead \u2014 a Chrome window opens, you log into GHL, zero pasting. Use THIS tool when you have JSON from `auto_capture_firebase_script` (console-paste path) to put in `firebase_paste`, or the three manual DevTools fields. Tool count goes from 180 to 232 after the next Claude restart.",
     {
       // v3.25.0: one-paste path. Tool runs `auto_capture_firebase_script` to
       // get the console script; the script returns a JSON object that pastes
@@ -7447,7 +7515,7 @@ DevTools steps: https://elitedcs.com/ghl-mcp-firebase`
             "",
             "**You MUST restart Claude before using any workflow-builder tool.** Quit Claude completely (Cmd+Q on Mac, full exit on Windows) and reopen. Without a restart, the workflow builder tools will keep using the OLD Firebase auth from before this call and fail with 401 errors \u2014 even though this tool reported success.",
             "",
-            'After restart, all 229 tools load. Try: "List my workflows in full detail" or "Validate workflow <id>".',
+            'After restart, all 232 tools load. Try: "List my workflows in full detail" or "Validate workflow <id>".',
             "",
             "Note: Firebase refresh tokens rotate every few weeks. If workflow tools stop working in a few weeks (run `health_check` to confirm Firebase auth: FAIL), run `auto_capture_firebase_script` for fresh values and re-run this tool with the new firebase_paste."
           ].join("\n")
@@ -7543,7 +7611,7 @@ The login in the capture window may belong to the wrong GHL account, or the sess
               "",
               "**You MUST restart Claude before using any workflow-builder tool.** Quit Claude completely (Cmd+Q on Mac, full exit on Windows) and reopen.",
               "",
-              'After restart, all 229 tools load. Try: "List my workflows in full detail".',
+              'After restart, all 232 tools load. Try: "List my workflows in full detail".',
               "",
               "Future token rotations re-capture silently \u2014 if workflow tools ever 401, just run capture_firebase_interactive again; no window should appear."
             ].join("\n")
@@ -8180,6 +8248,143 @@ ${lines.join("\n")}
       }
     }
   );
+  server2.tool(
+    "create_sub_account",
+    "Create a NEW GHL sub-account (location) under the agency, optionally loading a snapshot at creation \u2014 the first step of fully programmatic client provisioning (create \u2192 Blueprint build \u2192 verify_funnel). Requires an agency-level API key with the locations.write scope (add via register_agency_key). After creating, this probes whether the agency key can operate the new location and auto-registers it in the token registry when it can (switch_location then works immediately); if the probe fails, create a Private Integration Token inside the new sub-account and run register_location. Company Firebase (register_company_firebase) covers the internal-API builder tools in the new location either way.",
+    {
+      name: import_zod40.z.string().min(1).describe("Business / sub-account name."),
+      snapshot_id: import_zod40.z.string().optional().describe("Snapshot ID to load at creation (see list_snapshots)."),
+      company_id: import_zod40.z.string().optional().describe("Agency company ID. Defaults to the active location's registered companyId."),
+      first_name: import_zod40.z.string().optional().describe("Prospect/owner first name."),
+      last_name: import_zod40.z.string().optional().describe("Prospect/owner last name."),
+      email: import_zod40.z.string().email().optional().describe("Prospect/owner email."),
+      phone: import_zod40.z.string().optional().describe("Business phone (E.164, e.g. +15551234567)."),
+      address: import_zod40.z.string().optional().describe("Street address."),
+      city: import_zod40.z.string().optional(),
+      state: import_zod40.z.string().optional(),
+      postal_code: import_zod40.z.string().optional(),
+      country: import_zod40.z.string().optional().describe("Two-letter country code. Defaults to US."),
+      website: import_zod40.z.string().optional(),
+      timezone: import_zod40.z.string().optional().describe("IANA timezone, e.g. America/Los_Angeles."),
+      auto_register: import_zod40.z.boolean().optional().describe("Probe the new location with the agency key and add it to the token registry on success. Default true.")
+    },
+    async (args) => {
+      const agencyKey = registry2?.getAgencyKey();
+      if (!agencyKey) {
+        return {
+          content: [{ type: "text", text: "No agency key registered. Run register_agency_key with an agency-level Private Integration key (it needs the locations.write scope to create sub-accounts)." }],
+          isError: true
+        };
+      }
+      const companyId = args.company_id || (client.defaultLocationId ? registry2?.getToken(client.defaultLocationId)?.companyId : void 0) || process.env.GHL_COMPANY_ID;
+      if (!companyId) {
+        return {
+          content: [{ type: "text", text: "Couldn't resolve the agency company ID \u2014 pass company_id explicitly (the GHL agency/company ID, not a location ID)." }],
+          isError: true
+        };
+      }
+      try {
+        const agencyClient = new GHLClient({ apiKey: agencyKey });
+        const prospect = args.first_name || args.last_name || args.email ? { prospectInfo: { ...args.first_name && { firstName: args.first_name }, ...args.last_name && { lastName: args.last_name }, ...args.email && { email: args.email } } } : {};
+        const body = {
+          name: args.name,
+          companyId,
+          country: args.country || "US",
+          ...args.snapshot_id && { snapshotId: args.snapshot_id },
+          ...args.phone && { phone: args.phone },
+          ...args.address && { address: args.address },
+          ...args.city && { city: args.city },
+          ...args.state && { state: args.state },
+          ...args.postal_code && { postalCode: args.postal_code },
+          ...args.website && { website: args.website },
+          ...args.timezone && { timezone: args.timezone },
+          ...prospect
+        };
+        const created = await agencyClient.post("/locations/", { body, noRetry: true });
+        const loc = created.location ?? created;
+        const locationId2 = loc.id || loc._id;
+        if (!locationId2) {
+          return {
+            content: [{ type: "text", text: `Sub-account create returned no location id. Raw response:
+${JSON.stringify(created, null, 2)}` }],
+            isError: true
+          };
+        }
+        let probeOk = false;
+        let probeNote = "";
+        try {
+          await agencyClient.get("/contacts/", { params: { locationId: locationId2, limit: 1 } });
+          probeOk = true;
+        } catch (e) {
+          probeNote = e instanceof Error ? e.message : String(e);
+        }
+        let registered = false;
+        if (probeOk && args.auto_register !== false && registry2) {
+          registry2.registerLocation(locationId2, args.name, agencyKey, companyId);
+          registered = true;
+        }
+        return {
+          content: [{
+            type: "text",
+            text: [
+              `Sub-account created: "${args.name}"`,
+              `Location ID: ${locationId2}`,
+              args.snapshot_id ? `Snapshot ${args.snapshot_id} is loading (GHL applies snapshots asynchronously \u2014 assets appear over the next minute or two).` : "No snapshot loaded.",
+              probeOk ? registered ? "Agency key CAN operate this location \u2014 added to the token registry. Run switch_location to start building in it." : "Agency key CAN operate this location (auto_register was off \u2014 run register_location to add it)." : `Agency key can NOT read this location's data (${probeNote.slice(0, 120)}). Create a Private Integration Token inside the new sub-account, then run register_location. The company Firebase still covers the workflow/funnel/form builder tools there.`
+            ].join("\n")
+          }]
+        };
+      } catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        const scopeHint = /401|403|scope|unauthorized/i.test(message) ? "\n\nThis usually means the registered agency key lacks the locations.write scope. Edit the agency Private Integration in GHL (Agency Settings \u2192 Private Integrations) and enable it." : "";
+        return {
+          content: [{ type: "text", text: `Error creating sub-account: ${message}${scopeHint}` }],
+          isError: true
+        };
+      }
+    }
+  );
+  server2.tool(
+    "delete_sub_account",
+    "Permanently delete a GHL sub-account (location) via the agency API. IRREVERSIBLE \u2014 every contact, workflow, funnel, and setting inside the sub-account is destroyed. Refuses to delete the currently active location. Also removes the location from the token registry. Requires an agency-level key with locations.write.",
+    {
+      location_id: import_zod40.z.string().min(1).describe("The location ID to delete."),
+      confirm: import_zod40.z.literal("DELETE").describe("Must pass 'DELETE' to confirm this destructive action."),
+      delete_twilio: import_zod40.z.boolean().optional().describe("Also delete the location's Twilio sub-account. Default false.")
+    },
+    async ({ location_id, delete_twilio }) => {
+      const agencyKey = registry2?.getAgencyKey();
+      if (!agencyKey) {
+        return {
+          content: [{ type: "text", text: "No agency key registered. Run register_agency_key first." }],
+          isError: true
+        };
+      }
+      if (client.defaultLocationId === location_id) {
+        return {
+          content: [{ type: "text", text: `Refusing to delete the currently ACTIVE location (${location_id}). switch_location to a different sub-account first.` }],
+          isError: true
+        };
+      }
+      try {
+        const agencyClient = new GHLClient({ apiKey: agencyKey });
+        await agencyClient.delete(`/locations/${location_id}`, { params: { deleteTwilioAccount: delete_twilio ?? false } });
+        const wasRegistered = registry2?.removeLocation(location_id) ?? false;
+        return {
+          content: [{
+            type: "text",
+            text: `Sub-account ${location_id} permanently deleted.${wasRegistered ? " Removed from the token registry." : ""}`
+          }]
+        };
+      } catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return {
+          content: [{ type: "text", text: `Error deleting sub-account: ${message}` }],
+          isError: true
+        };
+      }
+    }
+  );
 }
 
 // src/tools/bulk-operations.ts

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@elitedcs/ghl-mcp",
-  "version": "3.50.0",
+  "version": "3.52.0",
   "mcpName": "io.github.drjerryrelth/ghl-command",
-  "description": "GoHighLevel MCP Server for Claude. 229 tools — full CRM, automation, marketing control, account-wide workflow audit, live funnel-capture verification, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
+  "description": "GoHighLevel MCP Server for Claude. 232 tools — full CRM, automation, marketing control, account-wide workflow audit, live funnel-capture verification, and the only programmatic GHL workflow builder, now multi-tenant across client accounts.",
   "main": "dist/index.js",
   "bin": {
     "ghl-mcp": "dist/index.js"