@sendinel/mcp-server 1.0.63 → 1.0.64

package/build/tools/contacts.js

@@ -7,7 +7,7 @@ import { db, projectClientForWriteback } from '../db.js';
 import { getProjectId } from '../project.js';
 import { checkPlanLimit } from '../plan-limits.js';
 import { logConsent, logAudit } from '../audit.js';
-import { assertChannelCanExecute, currentChannelContext, requestApproval, checkApproval } from '../lib/action-approvals.js';
+import { assertChannelCanExecute, currentChannelContext, requestApproval, checkApproval, withApproval } from '../lib/action-approvals.js';
 import { decrypt } from '../crypto.js';
 import { normalizeActiveCampaignAccountUrl } from '../lib/url-validation.js';
 import { diffCustomProperties } from '../lib/custom-properties-diff.js';
@@ -1059,9 +1059,10 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
         },
         description: 'Delete a saved subscriber view owned by the current project.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             view_id: z.string().uuid(),
         },
-    }, async ({ view_id }) => {
+    }, withApproval('delete_subscriber_view', async ({ view_id }) => {
         const { data, error } = await db()
             .from('subscriber_list_views')
             .delete()
@@ -1074,7 +1075,7 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
         if (!data)
             return txt('View not found');
         return j({ deleted: true, view_id });
-    });
+    }));
     server.registerTool('list_companies', {
         title: 'List Companies',
         annotations: {
@@ -1231,6 +1232,7 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
         },
         description: 'Bulk import contacts and subscribe them to a site. Max 200 per call.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             contacts: z.array(z.object({
                 email: z.string().email(),
                 first_name: z.string().optional(),
@@ -1238,7 +1240,7 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
             })).min(1).max(200),
             site_id: z.string().uuid(),
         },
-    }, async ({ contacts, site_id }) => {
+    }, withApproval('import_subscribers', async ({ contacts, site_id }) => {
         const projectId = getProjectId();
         const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
         // Distribution list / system address block — same patterns as dashboard email-validation.ts
@@ -1314,7 +1316,7 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
         const created = contactRows.filter((c) => !existingEmails.has(c.email)).length;
         const updated = contactRows.length - created;
         return { content: [{ type: 'text', text: JSON.stringify({ created, updated, total: contactRows.length }, null, 2) }] };
-    });
+    }));
     server.registerTool('unsubscribe_subscriber', {
         title: 'Unsubscribe Subscriber',
         annotations: {
@@ -1862,10 +1864,11 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
         },
         description: 'Merge custom_properties into many contacts at once. Same merge semantics as update_subscriber, applied across a batch.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             contact_ids: z.array(z.string().uuid()).min(1),
             custom_properties: z.record(z.string(), z.unknown()).describe('Merged into each contact\'s existing custom_properties; a key set to null deletes that key'),
         },
-    }, async ({ contact_ids, custom_properties }) => {
+    }, withApproval('bulk_update_subscribers', async ({ contact_ids, custom_properties }) => {
         const projectId = getProjectId();
         const orgId = await getProjectOrgId(projectId);
         const fields = await loadContactPropertyDefinitions(projectId);
@@ -1921,7 +1924,7 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
             await writeBackMcpContact(projectId, contact, { custom_properties: merged });
         }
         return j({ updated, total: contact_ids.length });
-    });
+    }));
     server.registerTool('estimate_segment_size', {
         title: 'Estimate Segment Size',
         annotations: {
@@ -2141,11 +2144,12 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
             idempotentHint: false,
             openWorldHint: false,
         },
-        description: 'Remove an email address from the suppression list',
+        description: 'Remove an email address from the suppression list. Requires human approval: the first call returns an approve_url and does nothing; call again with the same arguments plus approval_id once approved.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             email: z.string().email(),
         },
-    }, async ({ email }) => {
+    }, withApproval('remove_suppression', async ({ email }) => {
         const { data, error } = await db()
             .from('suppressions')
             .delete()
@@ -2158,7 +2162,7 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
         if (!data)
             return txt(`No suppression found for ${email}.`);
         return j({ removed: true, email, previous_reason: data.reason });
-    });
+    }));
     server.registerTool('find_duplicates', {
         title: 'Find Duplicates',
         annotations: {
@@ -2496,8 +2500,8 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
         title: 'Delete Custom Field',
         annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: false },
         description: 'Delete a custom field definition without deleting existing contact values stored under that key.',
-        inputSchema: { id: z.string().uuid() },
-    }, async ({ id }) => {
+        inputSchema: { approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'), id: z.string().uuid() },
+    }, withApproval('delete_custom_field', async ({ id }) => {
         const projectId = getProjectId();
         const { data, error } = await db()
             .from('custom_field_definitions')
@@ -2517,7 +2521,7 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
             details: { key: data.key },
         });
         return j({ deleted: true, id: data.id, key: data.key });
-    });
+    }));
     server.registerTool('get_contact_neighborhood', {
         title: 'Get Contact Neighborhood',
         annotations: {

package/build/tools/content.js

@@ -1,3 +1,4 @@
+import { withApproval } from '../lib/action-approvals.js';
 import { z } from 'zod';
 import { adminDb, db } from '../db.js';
 import { getProjectId } from '../project.js';
@@ -234,13 +235,13 @@ export function registerContentTools(server) {
             openWorldHint: false,
         },
         description: 'Delete a reusable content block.',
-        inputSchema: { block_id: z.string().uuid() },
-    }, async ({ block_id }) => {
+        inputSchema: { approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'), block_id: z.string().uuid() },
+    }, withApproval('delete_content_block', async ({ block_id }) => {
         const { error } = await db().from('content_blocks').delete().eq('project_id', getProjectId()).eq('id', block_id);
         if (error)
             return j({ error: error.message });
         return j({ deleted: true });
-    });
+    }));
     server.registerTool('list_content_sources', {
         title: 'List Content Sources',
         annotations: {
@@ -294,6 +295,7 @@ export function registerContentTools(server) {
         },
         description: 'Ingest a blog post (written by your AI/agent) into Sendinel. By default it lands as a draft in the review queue. For a trusted, hands-off flow, set auto_publish=true with publish_to (a destination name or id from list_blog_destinations) to skip review and publish to the user\'s own site — now, or at scheduled_at. Only title is required; everything else is optional.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             title: z.string().min(1).max(300),
             body: z.string().optional(),
             excerpt: z.string().max(1000).optional(),
@@ -308,7 +310,7 @@ export function registerContentTools(server) {
             auto_publish: z.boolean().optional(),
             publish_to: z.string().max(200).optional(),
         },
-    }, async (args) => {
+    }, withApproval('create_blog_post', async (args) => {
         const { data: proj, error: projErr } = await adminDb().from('projects').select('org_id').eq('id', getProjectId()).single();
         if (projErr || !proj?.org_id)
             return j({ error: 'Organization not found for project' });
@@ -363,7 +365,7 @@ export function registerContentTools(server) {
         if (error)
             return j({ error: error.message, code: error.code });
         return j({ blog_post: data, ...(auto_publish ? { note: scheduled_at ? 'Scheduled — the publish worker will send it at scheduled_at.' : 'Queued for immediate publish — the worker publishes it within a few minutes.' } : {}) });
-    });
+    }));
     server.registerTool('list_blog_posts', {
         title: 'List Blog Posts',
         annotations: {

package/build/tools/data.js

@@ -4,7 +4,7 @@ import { z } from 'zod';
 import { adminDb, db } from '../db.js';
 import { decrypt, encrypt } from '../crypto.js';
 import { normalizeActiveCampaignAccountUrl } from '../lib/url-validation.js';
-import { assertChannelCanExecute, checkApproval, currentChannelContext, requestApproval } from '../lib/action-approvals.js';
+import { assertChannelCanExecute, checkApproval, currentChannelContext, requestApproval, withApproval } from '../lib/action-approvals.js';
 import { getProjectId } from '../project.js';
 import { logAudit } from '../audit.js';
 const j = (data) => ({ content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] });
@@ -562,11 +562,12 @@ export function registerDataTools(server) {
         },
         description: 'Disconnect an external platform connection for the current project organization and remove stored credentials.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             org_id: z.string().uuid().optional(),
             platform: z.enum(CONNECTED_PLATFORMS).optional(),
             connection_id: z.string().uuid().optional(),
         },
-    }, async ({ org_id, platform, connection_id }) => {
+    }, withApproval('disconnect_platform', async ({ org_id, platform, connection_id }) => {
         try {
             if (!platform && !connection_id)
                 return j({ error: 'platform or connection_id is required' });
@@ -596,7 +597,7 @@ export function registerDataTools(server) {
         catch (error) {
             return j({ error: error instanceof Error ? error.message : 'Failed to disconnect platform' });
         }
-    });
+    }));
     server.registerTool('list_platform_events', {
         title: 'List Platform Events',
         annotations: {
@@ -978,11 +979,12 @@ export function registerDataTools(server) {
         },
         description: 'Create an API key and return the secret once.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             name: z.string().min(1),
             slug: z.string().optional(),
             scopes: z.array(z.string()).optional().default(['read']),
         },
-    }, async ({ name, slug, scopes = ['read'] }) => {
+    }, withApproval('create_api_key', async ({ name, slug, scopes = ['read'] }) => {
         // MCP API-key sessions can be unbound to a user, so they cannot prove an
         // acting org role. Admin keys must be created through the dashboard.
         if (scopes.includes('admin')) {
@@ -997,7 +999,7 @@ export function registerDataTools(server) {
         if (error)
             return j({ error: error.message });
         return j({ key_id: data.id, name: data.name, slug: data.slug, secret });
-    });
+    }));
     server.registerTool('revoke_api_key', {
         title: 'Revoke API Key',
         annotations: {
@@ -1007,13 +1009,13 @@ export function registerDataTools(server) {
             openWorldHint: false,
         },
         description: 'Revoke an API key.',
-        inputSchema: { key_id: z.string().uuid() },
-    }, async ({ key_id }) => {
+        inputSchema: { approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'), key_id: z.string().uuid() },
+    }, withApproval('revoke_api_key', async ({ key_id }) => {
         const { error } = await db().from('api_keys').update({ revoked_at: new Date().toISOString() }).eq('project_id', getProjectId()).eq('id', key_id);
         if (error)
             return j({ error: error.message });
         return j({ revoked: true });
-    });
+    }));
     server.registerTool('migrate_campaigns_from', {
         title: 'Migrate Campaigns From',
         annotations: {
@@ -1195,10 +1197,11 @@ export function registerDataTools(server) {
         },
         description: 'Export all tenant data classes for portability. Returns inline data for small exports or a signed archive URL for large exports.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             siteId: z.string().uuid(),
             format: z.enum(['json', 'csv']).optional().default('json'),
         },
-    }, async ({ siteId, format = 'json' }) => {
+    }, withApproval('tenant_export_full', async ({ siteId, format = 'json' }) => {
         const projectId = getProjectId();
         const since = new Date(Date.now() - 90 * 24 * 3600 * 1000).toISOString();
         const client = db();
@@ -1284,5 +1287,5 @@ export function registerDataTools(server) {
             expires_at: new Date(Date.now() + 24 * 3600 * 1000).toISOString(),
             record_counts: recordCounts,
         });
-    });
+    }));
 }

package/build/tools/delivery-ops.js

@@ -3,7 +3,7 @@ import dns from 'node:dns/promises';
 import { cancelSendQueueRows, findReplayableEnrollmentDlqRows, listSendQueueRows, replayEnrollmentDlqRows, retrySendQueueRows, } from '@sendinel/domain';
 import { logAudit } from '../audit.js';
 import { adminDb, db } from '../db.js';
-import { assertChannelCanExecute, checkApproval, currentChannelContext, requestApproval } from '../lib/action-approvals.js';
+import { assertChannelCanExecute, checkApproval, currentChannelContext, requestApproval, withApproval } from '../lib/action-approvals.js';
 import { callSendinelV1 } from '../lib/v1-client.js';
 import { getProjectId } from '../project.js';
 const j = (data) => ({ content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] });
@@ -507,13 +507,14 @@ export function registerDeliveryOpsTools(server) {
         },
         description: 'Re-enter dead-lettered campaign enrollments into active sending, which can cause real emails to send on the next queue tick. Call once without confirmed to preview the matched count, then call again with confirmed=true to replay them.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             site_id: z.string().uuid(),
             max_count: z.number().int().min(1).max(1000).default(100).optional(),
             failed_after: z.string().datetime().optional(),
             confirmed: z.boolean().optional().default(false)
                 .describe('Two-call confirmation. First call previews the matched rows; confirmed=true replays them.'),
         },
-    }, async ({ site_id, max_count = 100, failed_after, confirmed = false }) => {
+    }, withApproval('replay_enrollment_dlq_rows', async ({ site_id, max_count = 100, failed_after, confirmed = false }) => {
         const projectId = getProjectId();
         if (!confirmed) {
             try {
@@ -561,7 +562,7 @@ export function registerDeliveryOpsTools(server) {
         catch (error) {
             return j({ error: error instanceof Error ? error.message : 'Replay failed' });
         }
-    });
+    }));
     server.registerTool('get_scoring_rules', {
         title: 'Get Scoring Rules',
         annotations: {

package/build/tools/landing-pages.js

@@ -1,3 +1,4 @@
+import { withApproval } from '../lib/action-approvals.js';
 import { z } from 'zod';
 import { db } from '../db.js';
 import { getProjectId } from '../project.js';
@@ -118,6 +119,7 @@ export function registerLandingPageTools(server) {
         annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: false },
         description: 'Update a landing page. Setting status to published stamps published_at; pass site_id or form_id as null to clear it.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             page_id: z.string().uuid(),
             title: z.string().trim().min(1).max(200).optional(),
             slug: z.string().trim().regex(SLUG_RE, 'Lowercase alphanumeric + hyphens, max 63 chars').optional(),
@@ -132,7 +134,7 @@ export function registerLandingPageTools(server) {
             accent_color: z.string().optional(),
             custom_css: z.string().optional(),
         },
-    }, async ({ page_id, title, slug, status, site_id, form_id, blocks, meta_title, meta_description, conversion_event, background_color, accent_color, custom_css }) => {
+    }, withApproval('update_landing_page', async ({ page_id, title, slug, status, site_id, form_id, blocks, meta_title, meta_description, conversion_event, background_color, accent_color, custom_css }) => {
         const projectId = getProjectId();
         const updates = { updated_at: new Date().toISOString() };
         if (title !== undefined)
@@ -181,13 +183,13 @@ export function registerLandingPageTools(server) {
             details: { title: data.title, slug: data.slug, status: data.status },
         });
         return j(data);
-    });
+    }));
     server.registerTool('delete_landing_page', {
         title: 'Delete Landing Page',
         annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: false },
         description: 'Permanently delete a landing page. Set status to archived instead to unpublish without deleting.',
-        inputSchema: { page_id: z.string().uuid() },
-    }, async ({ page_id }) => {
+        inputSchema: { approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'), page_id: z.string().uuid() },
+    }, withApproval('delete_landing_page', async ({ page_id }) => {
         const projectId = getProjectId();
         const { error } = await db()
             .from('landing_pages')
@@ -198,5 +200,5 @@ export function registerLandingPageTools(server) {
             return j({ error: error.message });
         await logAudit({ action: 'landing_page.deleted', resourceType: 'landing_page', resourceId: page_id });
         return j({ deleted: true });
-    });
+    }));
 }

package/build/tools/lists.js

@@ -3,7 +3,7 @@ import { applySegmentRules, buildSegmentBaseQuery, evaluateSegmentRules, normali
 import { db } from '../db.js';
 import { getProjectId } from '../project.js';
 import { logAudit } from '../audit.js';
-import { assertChannelCanExecute, checkApproval, currentChannelContext, requestApproval, } from '../lib/action-approvals.js';
+import { assertChannelCanExecute, checkApproval, currentChannelContext, requestApproval, withApproval, } from '../lib/action-approvals.js';
 const LIST_MEMBER_BATCH_SIZE = 500;
 const txt = (text) => ({ content: [{ type: 'text', text }] });
 const j = (data) => txt(JSON.stringify(data, null, 2));
@@ -181,8 +181,8 @@ export function registerListTools(server) {
         title: 'Delete Contact List',
         annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: false },
         description: 'Permanently delete a static contact list and its memberships.',
-        inputSchema: { list_id: z.string().uuid() },
-    }, async ({ list_id }) => {
+        inputSchema: { approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'), list_id: z.string().uuid() },
+    }, withApproval('delete_list', async ({ list_id }) => {
         const projectId = getProjectId();
         const { error } = await db()
             .from('contact_lists')
@@ -193,7 +193,7 @@ export function registerListTools(server) {
             return txt(`Error: ${error.message}`);
         await logAudit({ action: 'list.deleted', resourceType: 'list', resourceId: list_id });
         return j({ deleted: true, list_id });
-    });
+    }));
     server.registerTool('add_list_members', {
         title: 'Add List Members',
         annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: false },

package/build/tools/newsletters.js

@@ -1,3 +1,4 @@
+import { withApproval } from '../lib/action-approvals.js';
 import { z } from 'zod';
 import { db } from '../db.js';
 import { getProjectId } from '../project.js';
@@ -354,11 +355,12 @@ export function registerNewsletterTools(server) {
         },
         description: 'Schedule a newsletter issue through the campaign send pipeline.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             newsletter_id: z.string().uuid(),
             issue_id: z.string().uuid(),
             scheduled_at: z.string(),
         },
-    }, async ({ newsletter_id, issue_id, scheduled_at }) => {
+    }, withApproval('schedule_newsletter_issue', async ({ newsletter_id, issue_id, scheduled_at }) => {
         const parsed = parseFutureDate(scheduled_at);
         if ('error' in parsed)
             return j({ error: parsed.error, code: 'INVALID_FIELD' });
@@ -381,7 +383,7 @@ export function registerNewsletterTools(server) {
         if (error)
             return j({ error: error.message });
         return j({ issue: data, campaign_id: campaign.campaignId, enrolled: campaign.enrolled });
-    });
+    }));
     server.registerTool('send_newsletter_issue', {
         title: 'Send Newsletter Issue',
         annotations: {
@@ -390,12 +392,13 @@ export function registerNewsletterTools(server) {
             idempotentHint: false,
             openWorldHint: true,
         },
-        description: 'Send a newsletter issue now through the campaign send pipeline and create archive metadata.',
+        description: 'Send a newsletter issue now through the campaign send pipeline and create archive metadata. Requires human approval: the first call returns an approve_url and does nothing; call again with the same arguments plus approval_id once approved.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             newsletter_id: z.string().uuid(),
             issue_id: z.string().uuid(),
         },
-    }, async ({ newsletter_id, issue_id }) => {
+    }, withApproval('send_newsletter_issue', async ({ newsletter_id, issue_id }) => {
         const projectId = getProjectId();
         const loaded = await loadSendableIssue(newsletter_id, issue_id, projectId);
         if ('error' in loaded)
@@ -436,7 +439,7 @@ export function registerNewsletterTools(server) {
         if (error)
             return j({ error: error.message });
         return j({ issue: data, campaign_id: campaign.campaignId, enrolled: campaign.enrolled, blog_post_id: post?.id ?? null, archive_url: post?.external_url ?? null });
-    });
+    }));
     server.registerTool('subscribe_to_newsletter', {
         title: 'Subscribe To Newsletter',
         annotations: {

package/build/tools/org.js

@@ -3,7 +3,7 @@ import { z } from 'zod';
 import { logAudit } from '../audit.js';
 import { adminDb, db } from '../db.js';
 import { getProjectId } from '../project.js';
-import { assertChannelCanExecute, checkApproval, currentChannelContext, requestApproval } from '../lib/action-approvals.js';
+import { assertChannelCanExecute, checkApproval, currentChannelContext, requestApproval, withApproval } from '../lib/action-approvals.js';
 import { callSendinelV1 } from '../lib/v1-client.js';
 import { readAllRows } from '@sendinel/domain';
 const j = (data) => ({ content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] });
@@ -175,8 +175,8 @@ export function registerOrgTools(server) {
             openWorldHint: false,
         },
         description: 'Create a team invitation for the current project organization.',
-        inputSchema: { email: z.string().email(), role: z.enum(['owner', 'admin', 'member']).default('member') },
-    }, async ({ email, role }) => {
+        inputSchema: { approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'), email: z.string().email(), role: z.enum(['owner', 'admin', 'member']).default('member') },
+    }, withApproval('invite_team_member', async ({ email, role }) => {
         const { data: project } = await db().from('projects').select('org_id').eq('id', getProjectId()).maybeSingle();
         if (!project?.org_id)
             return j({ error: 'Project has no organization', code: 'NO_ORG' });
@@ -189,7 +189,7 @@ export function registerOrgTools(server) {
         if (error)
             return j({ error: error.message });
         return j({ invitation_id: data.id, expires_at: data.expires_at });
-    });
+    }));
     server.registerTool('remove_team_member', {
         title: 'Remove Team Member',
         annotations: {
@@ -348,11 +348,12 @@ export function registerOrgTools(server) {
         },
         description: "Replace a team member's per-project access within the org (full replace, not a merge). Org owners have implicit access to all projects and cannot be scoped this way.",
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             user_id: z.string().uuid(),
             projects: z.array(memberProjectAssignmentSchema),
             org_id: z.string().uuid().optional(),
         },
-    }, async ({ user_id, projects, org_id }) => {
+    }, withApproval('set_member_project_access', async ({ user_id, projects, org_id }) => {
         const context = await resolveCurrentOrgId(org_id);
         if (!context.ok)
             return j({ error: context.error, code: context.code });
@@ -409,7 +410,7 @@ export function registerOrgTools(server) {
             details: { org_id: context.orgId, project_ids: requestedIds },
         }).catch(() => { });
         return j({ ok: true, user_id, project_ids: requestedIds });
-    });
+    }));
     server.registerTool('list_invitations', {
         title: 'List Invitations',
         annotations: {
@@ -495,10 +496,11 @@ export function registerOrgTools(server) {
         },
         description: 'Revoke a pending org invitation before it is accepted.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             invitation_id: z.string().uuid(),
             org_id: z.string().uuid().optional(),
         },
-    }, async ({ invitation_id, org_id }) => {
+    }, withApproval('revoke_invitation', async ({ invitation_id, org_id }) => {
         const context = await resolveCurrentOrgId(org_id);
         if (!context.ok)
             return j({ error: context.error, code: context.code });
@@ -526,7 +528,7 @@ export function registerOrgTools(server) {
             details: { org_id: context.orgId, email: invitation.email, role: invitation.role },
         }).catch(() => { });
         return j({ ok: true });
-    });
+    }));
     server.registerTool('get_plan_usage', {
         title: 'Get Plan Usage',
         annotations: {
@@ -910,16 +912,17 @@ export function registerOrgTools(server) {
         },
         description: 'Start moving a sending domain between supported providers using the existing provider-switch flow.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             site_id: z.string().uuid(),
             to_provider: z.enum(PROVIDER_SWITCH_V1_PROVIDERS),
         },
-    }, async ({ site_id, to_provider }) => {
+    }, withApproval('start_provider_switch', async ({ site_id, to_provider }) => {
         const result = await callProviderSwitchApi('/api/dashboard/provider-switch/start', {
             method: 'POST',
             body: { site_id, to_provider },
         });
         return result.ok ? j(result.data) : j({ error: result.error });
-    });
+    }));
     server.registerTool('get_provider_switch_status', {
         title: 'Get Provider Switch Status',
         annotations: {

package/build/tools/segments.js

@@ -1,3 +1,4 @@
+import { withApproval } from '../lib/action-approvals.js';
 import { z } from 'zod';
 import Anthropic from '@anthropic-ai/sdk';
 import { db } from '../db.js';
@@ -152,9 +153,10 @@ export function registerSegmentTools(server) {
         },
         description: 'Delete a saved segment. Campaigns using this segment will lose targeting.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             segment_id: z.string().uuid(),
         },
-    }, async ({ segment_id }) => {
+    }, withApproval('delete_segment', async ({ segment_id }) => {
         const { error } = await db()
             .from('segments')
             .delete()
@@ -163,7 +165,7 @@ export function registerSegmentTools(server) {
         if (error)
             return txt(`Error: ${error.message}`);
         return j({ deleted: true, segment_id });
-    });
+    }));
     server.registerTool('preview_segment', {
         title: 'Preview Segment',
         annotations: {

package/build/tools/signatures.js

@@ -1,3 +1,4 @@
+import { withApproval } from '../lib/action-approvals.js';
 import { z } from 'zod';
 import { db } from '../db.js';
 import { getProjectId } from '../project.js';
@@ -137,8 +138,8 @@ export function registerSignatureTools(server) {
         title: 'Delete Signature',
         annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: false },
         description: 'Permanently delete a project-scoped sending signature block.',
-        inputSchema: { id: z.string().uuid() },
-    }, async ({ id }) => {
+        inputSchema: { approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'), id: z.string().uuid() },
+    }, withApproval('delete_signature', async ({ id }) => {
         const projectId = getProjectId();
         const { data: existing, error: existingError } = await db()
             .from('signature_blocks')
@@ -164,5 +165,5 @@ export function registerSignatureTools(server) {
             details: { name: existing.name, site_id: existing.site_id, via: 'mcp' },
         });
         return j({ ok: true, deleted: id });
-    });
+    }));
 }

package/build/tools/sms.js

@@ -1,4 +1,5 @@
 import { randomUUID } from 'crypto';
+import { withApproval } from '../lib/action-approvals.js';
 import { z } from 'zod';
 import { decrypt } from '../crypto.js';
 import { db } from '../db.js';
@@ -308,13 +309,14 @@ export function registerSmsTools(server) {
         },
         description: 'Manually record an opt-in or opt-out for a contact (e.g., from a paper form or phone conversation).',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             contact_id: z.string().uuid(),
             status: z.enum(['opt_in', 'opt_out']),
             source: z.string().optional(),
             consent_text: z.string().optional(),
             reason: z.string().optional(),
         },
-    }, async ({ contact_id, status, source, consent_text, reason }) => {
+    }, withApproval('set_contact_sms_consent', async ({ contact_id, status, source, consent_text, reason }) => {
         const projectId = getProjectId();
         const orgId = await getProjectOrgId(projectId);
         if (!orgId)
@@ -366,7 +368,7 @@ export function registerSmsTools(server) {
                 return j({ error: suppressionError.message });
         }
         return j({ ok: true, contact_id, phone_e164: contact.phone_e164, status });
-    });
+    }));
     server.registerTool('preview_sms_cost', {
         title: 'Preview SMS Cost',
         annotations: {
@@ -403,6 +405,7 @@ export function registerSmsTools(server) {
         },
         description: "Launch an SMS campaign or broadcast to a segment. Same shape as email campaigns but with channel='sms'.",
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             site_id: z.string().uuid(),
             name: z.string().min(1).max(200),
             body: z.string().min(1),
@@ -411,7 +414,7 @@ export function registerSmsTools(server) {
             scheduled_at: z.string().optional(),
             activate: z.boolean().optional().default(false),
         },
-    }, async ({ site_id, name, body, type, segment_id, scheduled_at, activate }) => {
+    }, withApproval('send_sms_campaign', async ({ site_id, name, body, type, segment_id, scheduled_at, activate }) => {
         const projectId = getProjectId();
         const { data: campaign, error: campaignError } = await db()
             .from('campaigns')
@@ -452,7 +455,7 @@ export function registerSmsTools(server) {
             segment_id: segment_id ?? null,
             note: segment_id ? 'Campaign created. Enroll the target segment through the campaign workflow to start delivery.' : 'Campaign created as SMS-ready.',
         });
-    });
+    }));
     server.registerTool('send_sms', {
         title: 'Send SMS',
         annotations: {
@@ -461,15 +464,16 @@ export function registerSmsTools(server) {
             idempotentHint: false,
             openWorldHint: true,
         },
-        description: 'Send a single SMS through the active SMS provider to a contact or raw phone number. Validates consent and quiet hours before sending.',
+        description: 'Send a single SMS through the active SMS provider to a contact or raw phone number. Validates consent and quiet hours before sending. Requires human approval: the first call returns an approve_url and does nothing; call again with the same arguments plus approval_id once approved.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             body: z.string().min(1),
             to_number: z.string().optional(),
             contact_id: z.string().uuid().optional(),
             site_id: z.string().uuid().optional(),
             classification: z.enum(['marketing', 'transactional', 'conversational']).optional().default('marketing'),
         },
-    }, async ({ body, to_number, contact_id, site_id, classification }) => {
+    }, withApproval('send_sms', async ({ body, to_number, contact_id, site_id, classification }) => {
         const projectId = getProjectId();
         const orgId = await getProjectOrgId(projectId);
         if (!orgId)
@@ -534,5 +538,5 @@ export function registerSmsTools(server) {
             encoding: sendResult.encoding,
             estimated_cost_cents: sendResult.estimated_cost_cents,
         });
-    });
+    }));
 }