npm - @lightdash-tools/mcp - Versions diffs - 0.2.4 → 0.2.6 - Mend

@lightdash-tools/mcp 0.2.4 → 0.2.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (8) hide show

package/README.md CHANGED Viewed

@@ -98,9 +98,9 @@ The server registers the following tools (names prefixed with `lightdash_tools__
 The MCP server implements a hierarchical safety model. You can control which tools are available to AI agents using the `LIGHTDASH_TOOL_SAFETY_MODE` environment variable or the `--safety-mode` CLI option.
-- `read-only`: Only allows non-modifying tools (e.g., `list_*`, `get_*`).
+- `read-only` (default): Only allows non-modifying tools (e.g., `list_*`, `get_*`).
 - `write-idempotent`: Allows read tools and non-destructive writes (e.g., `upsert_chart_as_code`).
-- `write-destructive` (default): Allows all tools, including destructive ones (e.g., `delete_member`).
+- `write-destructive`: Allows all tools, including destructive ones (e.g., `delete_member`).
 ### Enforcement Layers

package/dist/bin.js CHANGED Viewed

@@ -44,7 +44,7 @@ const program = new commander_1.Command();
 program
     .name('lightdash-mcp')
     .description('MCP server for Lightdash AI')
-    .version('0.2.3')
+    .version('0.2.6')
     .option('--http', 'Run as HTTP server instead of Stdio')
     .option('--safety-mode <mode>', 'Filter registered tools by safety mode (read-only, write-idempotent, write-destructive)')
     .action((options) => {

package/dist/tools/groups.js CHANGED Viewed

@@ -38,4 +38,84 @@ function registerGroupTools(server, client) {
         const group = yield c.v1.groups.getGroup(groupUuid);
         return { content: [{ type: 'text', text: JSON.stringify(group, null, 2) }] };
     })));
+    (0, shared_js_1.registerToolSafe)(server, 'create_group', {
+        title: 'Create group',
+        description: 'Create a new group in the organization',
+        inputSchema: {
+            name: zod_1.z.string().describe('Group name'),
+        },
+        annotations: shared_js_1.WRITE_IDEMPOTENT,
+    }, (0, shared_js_1.wrapTool)(client, (c) => (_a) => __awaiter(this, [_a], void 0, function* ({ name }) {
+        const group = yield c.v1.groups.createGroup({ name });
+        return { content: [{ type: 'text', text: JSON.stringify(group, null, 2) }] };
+    })));
+    (0, shared_js_1.registerToolSafe)(server, 'update_group', {
+        title: 'Update group',
+        description: 'Update a group name',
+        inputSchema: {
+            groupUuid: zod_1.z.string().describe('Group UUID'),
+            name: zod_1.z.string().describe('New group name'),
+        },
+        annotations: shared_js_1.WRITE_IDEMPOTENT,
+    }, (0, shared_js_1.wrapTool)(client, (c) => (_a) => __awaiter(this, [_a], void 0, function* ({ groupUuid, name }) {
+        const group = yield c.v1.groups.updateGroup(groupUuid, { name });
+        return { content: [{ type: 'text', text: JSON.stringify(group, null, 2) }] };
+    })));
+    (0, shared_js_1.registerToolSafe)(server, 'delete_group', {
+        title: 'Delete group',
+        description: 'Delete a group by UUID',
+        inputSchema: {
+            groupUuid: zod_1.z.string().describe('Group UUID'),
+        },
+        annotations: shared_js_1.WRITE_DESTRUCTIVE,
+    }, (0, shared_js_1.wrapTool)(client, (c) => (_a) => __awaiter(this, [_a], void 0, function* ({ groupUuid }) {
+        yield c.v1.groups.deleteGroup(groupUuid);
+        return { content: [{ type: 'text', text: `Group ${groupUuid} deleted successfully` }] };
+    })));
+    (0, shared_js_1.registerToolSafe)(server, 'list_group_members', {
+        title: 'List group members',
+        description: 'List members of a group',
+        inputSchema: {
+            groupUuid: zod_1.z.string().describe('Group UUID'),
+        },
+        annotations: shared_js_1.READ_ONLY_DEFAULT,
+    }, (0, shared_js_1.wrapTool)(client, (c) => (_a) => __awaiter(this, [_a], void 0, function* ({ groupUuid }) {
+        const members = yield c.v1.groups.getGroupMembers(groupUuid);
+        return { content: [{ type: 'text', text: JSON.stringify(members, null, 2) }] };
+    })));
+    (0, shared_js_1.registerToolSafe)(server, 'add_user_to_group', {
+        title: 'Add user to group',
+        description: 'Add a user to a group',
+        inputSchema: {
+            groupUuid: zod_1.z.string().describe('Group UUID'),
+            userUuid: zod_1.z.string().describe('User UUID'),
+        },
+        annotations: shared_js_1.WRITE_IDEMPOTENT,
+    }, (0, shared_js_1.wrapTool)(client, (c) => (_a) => __awaiter(this, [_a], void 0, function* ({ groupUuid, userUuid }) {
+        yield c.v1.groups.addUserToGroup(groupUuid, userUuid);
+        return {
+            content: [
+                { type: 'text', text: `User ${userUuid} added to group ${groupUuid} successfully` },
+            ],
+        };
+    })));
+    (0, shared_js_1.registerToolSafe)(server, 'remove_user_from_group', {
+        title: 'Remove user from group',
+        description: 'Remove a user from a group',
+        inputSchema: {
+            groupUuid: zod_1.z.string().describe('Group UUID'),
+            userUuid: zod_1.z.string().describe('User UUID'),
+        },
+        annotations: shared_js_1.WRITE_DESTRUCTIVE,
+    }, (0, shared_js_1.wrapTool)(client, (c) => (_a) => __awaiter(this, [_a], void 0, function* ({ groupUuid, userUuid }) {
+        yield c.v1.groups.removeUserFromGroup(groupUuid, userUuid);
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `User ${userUuid} removed from group ${groupUuid} successfully`,
+                },
+            ],
+        };
+    })));
 }

package/dist/tools/spaces.js CHANGED Viewed

@@ -37,4 +37,92 @@ function registerSpaceTools(server, client) {
         const space = yield c.v1.spaces.getSpace(projectUuid, spaceUuid);
         return { content: [{ type: 'text', text: JSON.stringify(space, null, 2) }] };
     })));
+    (0, shared_js_1.registerToolSafe)(server, 'grant_user_space_access', {
+        title: 'Grant user access to space',
+        description: 'Grant a user access to a space',
+        inputSchema: {
+            projectUuid: zod_1.z.string().describe('Project UUID'),
+            spaceUuid: zod_1.z.string().describe('Space UUID'),
+            userUuid: zod_1.z.string().describe('User UUID'),
+            spaceRole: zod_1.z.enum(['viewer', 'editor', 'admin']).describe('Space role'),
+        },
+        annotations: shared_js_1.WRITE_IDEMPOTENT,
+    }, (0, shared_js_1.wrapTool)(client, (c) => (_a) => __awaiter(this, [_a], void 0, function* ({ projectUuid, spaceUuid, userUuid, spaceRole, }) {
+        yield c.v1.spaces.grantUserAccessToSpace(projectUuid, spaceUuid, {
+            userUuid,
+            spaceRole: spaceRole,
+        });
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `Successfully granted ${spaceRole} access to user ${userUuid} in space ${spaceUuid}`,
+                },
+            ],
+        };
+    })));
+    (0, shared_js_1.registerToolSafe)(server, 'revoke_user_space_access', {
+        title: 'Revoke user access to space',
+        description: "Revoke a user's access to a space",
+        inputSchema: {
+            projectUuid: zod_1.z.string().describe('Project UUID'),
+            spaceUuid: zod_1.z.string().describe('Space UUID'),
+            userUuid: zod_1.z.string().describe('User UUID'),
+        },
+        annotations: shared_js_1.WRITE_DESTRUCTIVE,
+    }, (0, shared_js_1.wrapTool)(client, (c) => (_a) => __awaiter(this, [_a], void 0, function* ({ projectUuid, spaceUuid, userUuid, }) {
+        yield c.v1.spaces.revokeUserAccessToSpace(projectUuid, spaceUuid, userUuid);
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `Successfully revoked access for user ${userUuid} in space ${spaceUuid}`,
+                },
+            ],
+        };
+    })));
+    (0, shared_js_1.registerToolSafe)(server, 'grant_group_space_access', {
+        title: 'Grant group access to space',
+        description: 'Grant a group access to a space',
+        inputSchema: {
+            projectUuid: zod_1.z.string().describe('Project UUID'),
+            spaceUuid: zod_1.z.string().describe('Space UUID'),
+            groupUuid: zod_1.z.string().describe('Group UUID'),
+            spaceRole: zod_1.z.enum(['viewer', 'editor', 'admin']).describe('Space role'),
+        },
+        annotations: shared_js_1.WRITE_IDEMPOTENT,
+    }, (0, shared_js_1.wrapTool)(client, (c) => (_a) => __awaiter(this, [_a], void 0, function* ({ projectUuid, spaceUuid, groupUuid, spaceRole, }) {
+        yield c.v1.spaces.grantGroupAccessToSpace(projectUuid, spaceUuid, {
+            groupUuid,
+            spaceRole: spaceRole,
+        });
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `Successfully granted ${spaceRole} access to group ${groupUuid} in space ${spaceUuid}`,
+                },
+            ],
+        };
+    })));
+    (0, shared_js_1.registerToolSafe)(server, 'revoke_group_space_access', {
+        title: 'Revoke group access to space',
+        description: "Revoke a group's access to a space",
+        inputSchema: {
+            projectUuid: zod_1.z.string().describe('Project UUID'),
+            spaceUuid: zod_1.z.string().describe('Space UUID'),
+            groupUuid: zod_1.z.string().describe('Group UUID'),
+        },
+        annotations: shared_js_1.WRITE_DESTRUCTIVE,
+    }, (0, shared_js_1.wrapTool)(client, (c) => (_a) => __awaiter(this, [_a], void 0, function* ({ projectUuid, spaceUuid, groupUuid, }) {
+        yield c.v1.spaces.revokeGroupAccessToSpace(projectUuid, spaceUuid, groupUuid);
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `Successfully revoked access for group ${groupUuid} in space ${spaceUuid}`,
+                },
+            ],
+        };
+    })));
 }

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@lightdash-tools/mcp",
-  "version": "0.2.4",
+  "version": "0.2.6",
   "description": "MCP server and utilities for Lightdash AI.",
   "keywords": [],
   "license": "Apache-2.0",
@@ -14,8 +14,8 @@
     "@modelcontextprotocol/sdk": "^1.26.0",
     "commander": "^14.0.3",
     "zod": "^4.3.6",
-    "@lightdash-tools/client": "0.2.4",
-    "@lightdash-tools/common": "0.2.4"
+    "@lightdash-tools/common": "0.2.6",
+    "@lightdash-tools/client": "0.2.6"
   },
   "devDependencies": {
     "@types/node": "^25.2.3"

package/src/bin.ts CHANGED Viewed

@@ -12,7 +12,7 @@ const program = new Command();
 program
   .name('lightdash-mcp')
   .description('MCP server for Lightdash AI')
-  .version('0.2.3')
+  .version('0.2.6')
   .option('--http', 'Run as HTTP server instead of Stdio')
   .option(
     '--safety-mode <mode>',

package/src/tools/groups.ts CHANGED Viewed

@@ -5,7 +5,13 @@
 import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import type { LightdashClient } from '@lightdash-tools/client';
 import { z } from 'zod';
-import { wrapTool, registerToolSafe, READ_ONLY_DEFAULT } from './shared.js';
+import {
+  wrapTool,
+  registerToolSafe,
+  READ_ONLY_DEFAULT,
+  WRITE_IDEMPOTENT,
+  WRITE_DESTRUCTIVE,
+} from './shared.js';
 type ListGroupsParams = {
   page?: number;
@@ -32,6 +38,7 @@ export function registerGroupTools(server: McpServer, client: LightdashClient):
       return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
     }),
   );
   registerToolSafe(
     server,
     'get_group',
@@ -46,4 +53,128 @@ export function registerGroupTools(server: McpServer, client: LightdashClient):
       return { content: [{ type: 'text', text: JSON.stringify(group, null, 2) }] };
     }),
   );
+  registerToolSafe(
+    server,
+    'create_group',
+    {
+      title: 'Create group',
+      description: 'Create a new group in the organization',
+      inputSchema: {
+        name: z.string().describe('Group name'),
+      },
+      annotations: WRITE_IDEMPOTENT,
+    },
+    wrapTool(client, (c) => async ({ name }: { name: string }) => {
+      const group = await c.v1.groups.createGroup({ name });
+      return { content: [{ type: 'text', text: JSON.stringify(group, null, 2) }] };
+    }),
+  );
+  registerToolSafe(
+    server,
+    'update_group',
+    {
+      title: 'Update group',
+      description: 'Update a group name',
+      inputSchema: {
+        groupUuid: z.string().describe('Group UUID'),
+        name: z.string().describe('New group name'),
+      },
+      annotations: WRITE_IDEMPOTENT,
+    },
+    wrapTool(client, (c) => async ({ groupUuid, name }: { groupUuid: string; name: string }) => {
+      const group = await c.v1.groups.updateGroup(groupUuid, { name });
+      return { content: [{ type: 'text', text: JSON.stringify(group, null, 2) }] };
+    }),
+  );
+  registerToolSafe(
+    server,
+    'delete_group',
+    {
+      title: 'Delete group',
+      description: 'Delete a group by UUID',
+      inputSchema: {
+        groupUuid: z.string().describe('Group UUID'),
+      },
+      annotations: WRITE_DESTRUCTIVE,
+    },
+    wrapTool(client, (c) => async ({ groupUuid }: { groupUuid: string }) => {
+      await c.v1.groups.deleteGroup(groupUuid);
+      return { content: [{ type: 'text', text: `Group ${groupUuid} deleted successfully` }] };
+    }),
+  );
+  registerToolSafe(
+    server,
+    'list_group_members',
+    {
+      title: 'List group members',
+      description: 'List members of a group',
+      inputSchema: {
+        groupUuid: z.string().describe('Group UUID'),
+      },
+      annotations: READ_ONLY_DEFAULT,
+    },
+    wrapTool(client, (c) => async ({ groupUuid }: { groupUuid: string }) => {
+      const members = await c.v1.groups.getGroupMembers(groupUuid);
+      return { content: [{ type: 'text', text: JSON.stringify(members, null, 2) }] };
+    }),
+  );
+  registerToolSafe(
+    server,
+    'add_user_to_group',
+    {
+      title: 'Add user to group',
+      description: 'Add a user to a group',
+      inputSchema: {
+        groupUuid: z.string().describe('Group UUID'),
+        userUuid: z.string().describe('User UUID'),
+      },
+      annotations: WRITE_IDEMPOTENT,
+    },
+    wrapTool(
+      client,
+      (c) =>
+        async ({ groupUuid, userUuid }: { groupUuid: string; userUuid: string }) => {
+          await c.v1.groups.addUserToGroup(groupUuid, userUuid);
+          return {
+            content: [
+              { type: 'text', text: `User ${userUuid} added to group ${groupUuid} successfully` },
+            ],
+          };
+        },
+    ),
+  );
+  registerToolSafe(
+    server,
+    'remove_user_from_group',
+    {
+      title: 'Remove user from group',
+      description: 'Remove a user from a group',
+      inputSchema: {
+        groupUuid: z.string().describe('Group UUID'),
+        userUuid: z.string().describe('User UUID'),
+      },
+      annotations: WRITE_DESTRUCTIVE,
+    },
+    wrapTool(
+      client,
+      (c) =>
+        async ({ groupUuid, userUuid }: { groupUuid: string; userUuid: string }) => {
+          await c.v1.groups.removeUserFromGroup(groupUuid, userUuid);
+          return {
+            content: [
+              {
+                type: 'text',
+                text: `User ${userUuid} removed from group ${groupUuid} successfully`,
+              },
+            ],
+          };
+        },
+    ),
+  );
 }

package/src/tools/spaces.ts CHANGED Viewed

@@ -5,7 +5,14 @@
 import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import type { LightdashClient } from '@lightdash-tools/client';
 import { z } from 'zod';
-import { wrapTool, registerToolSafe, READ_ONLY_DEFAULT } from './shared.js';
+import {
+  wrapTool,
+  registerToolSafe,
+  READ_ONLY_DEFAULT,
+  WRITE_IDEMPOTENT,
+  WRITE_DESTRUCTIVE,
+} from './shared.js';
+import { type SpaceMemberRole } from '@lightdash-tools/common';
 export function registerSpaceTools(server: McpServer, client: LightdashClient): void {
   registerToolSafe(
@@ -43,4 +50,168 @@ export function registerSpaceTools(server: McpServer, client: LightdashClient):
         },
     ),
   );
+  registerToolSafe(
+    server,
+    'grant_user_space_access',
+    {
+      title: 'Grant user access to space',
+      description: 'Grant a user access to a space',
+      inputSchema: {
+        projectUuid: z.string().describe('Project UUID'),
+        spaceUuid: z.string().describe('Space UUID'),
+        userUuid: z.string().describe('User UUID'),
+        spaceRole: z.enum(['viewer', 'editor', 'admin']).describe('Space role'),
+      },
+      annotations: WRITE_IDEMPOTENT,
+    },
+    wrapTool(
+      client,
+      (c) =>
+        async ({
+          projectUuid,
+          spaceUuid,
+          userUuid,
+          spaceRole,
+        }: {
+          projectUuid: string;
+          spaceUuid: string;
+          userUuid: string;
+          spaceRole: string;
+        }) => {
+          await c.v1.spaces.grantUserAccessToSpace(projectUuid, spaceUuid, {
+            userUuid,
+            spaceRole: spaceRole as SpaceMemberRole,
+          });
+          return {
+            content: [
+              {
+                type: 'text',
+                text: `Successfully granted ${spaceRole} access to user ${userUuid} in space ${spaceUuid}`,
+              },
+            ],
+          };
+        },
+    ),
+  );
+  registerToolSafe(
+    server,
+    'revoke_user_space_access',
+    {
+      title: 'Revoke user access to space',
+      description: "Revoke a user's access to a space",
+      inputSchema: {
+        projectUuid: z.string().describe('Project UUID'),
+        spaceUuid: z.string().describe('Space UUID'),
+        userUuid: z.string().describe('User UUID'),
+      },
+      annotations: WRITE_DESTRUCTIVE,
+    },
+    wrapTool(
+      client,
+      (c) =>
+        async ({
+          projectUuid,
+          spaceUuid,
+          userUuid,
+        }: {
+          projectUuid: string;
+          spaceUuid: string;
+          userUuid: string;
+        }) => {
+          await c.v1.spaces.revokeUserAccessToSpace(projectUuid, spaceUuid, userUuid);
+          return {
+            content: [
+              {
+                type: 'text',
+                text: `Successfully revoked access for user ${userUuid} in space ${spaceUuid}`,
+              },
+            ],
+          };
+        },
+    ),
+  );
+  registerToolSafe(
+    server,
+    'grant_group_space_access',
+    {
+      title: 'Grant group access to space',
+      description: 'Grant a group access to a space',
+      inputSchema: {
+        projectUuid: z.string().describe('Project UUID'),
+        spaceUuid: z.string().describe('Space UUID'),
+        groupUuid: z.string().describe('Group UUID'),
+        spaceRole: z.enum(['viewer', 'editor', 'admin']).describe('Space role'),
+      },
+      annotations: WRITE_IDEMPOTENT,
+    },
+    wrapTool(
+      client,
+      (c) =>
+        async ({
+          projectUuid,
+          spaceUuid,
+          groupUuid,
+          spaceRole,
+        }: {
+          projectUuid: string;
+          spaceUuid: string;
+          groupUuid: string;
+          spaceRole: string;
+        }) => {
+          await c.v1.spaces.grantGroupAccessToSpace(projectUuid, spaceUuid, {
+            groupUuid,
+            spaceRole: spaceRole as SpaceMemberRole,
+          });
+          return {
+            content: [
+              {
+                type: 'text',
+                text: `Successfully granted ${spaceRole} access to group ${groupUuid} in space ${spaceUuid}`,
+              },
+            ],
+          };
+        },
+    ),
+  );
+  registerToolSafe(
+    server,
+    'revoke_group_space_access',
+    {
+      title: 'Revoke group access to space',
+      description: "Revoke a group's access to a space",
+      inputSchema: {
+        projectUuid: z.string().describe('Project UUID'),
+        spaceUuid: z.string().describe('Space UUID'),
+        groupUuid: z.string().describe('Group UUID'),
+      },
+      annotations: WRITE_DESTRUCTIVE,
+    },
+    wrapTool(
+      client,
+      (c) =>
+        async ({
+          projectUuid,
+          spaceUuid,
+          groupUuid,
+        }: {
+          projectUuid: string;
+          spaceUuid: string;
+          groupUuid: string;
+        }) => {
+          await c.v1.spaces.revokeGroupAccessToSpace(projectUuid, spaceUuid, groupUuid);
+          return {
+            content: [
+              {
+                type: 'text',
+                text: `Successfully revoked access for group ${groupUuid} in space ${spaceUuid}`,
+              },
+            ],
+          };
+        },
+    ),
+  );
 }