@smartytalent/mcp-tools 0.5.4 → 0.6.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/tools.json +171 -10
- package/package.json +1 -1
package/dist/tools.json
CHANGED
|
@@ -181,6 +181,65 @@
|
|
|
181
181
|
"type": "object",
|
|
182
182
|
"description": "Tenant-level outbound-sync defaults (ATS integrations): {syncStage, syncNotes, syncRatings, syncTags, syncReports, syncConversationReports, syncMessages} - overridden per job by job.settings.operation. NOTE: the generated model whitelists keys, so this property MUST be declared for the SDK to carry it."
|
|
183
183
|
},
|
|
184
|
+
"sso": {
|
|
185
|
+
"type": "object",
|
|
186
|
+
"description": "Enterprise SSO configuration. READ-ONLY here: the generic tenant PATCH strips this key, the only writers are the /v1/tenants/{tenantId}/sso doors. Sending it in a PATCH is ignored (not an error).",
|
|
187
|
+
"properties": {
|
|
188
|
+
"enabled": {
|
|
189
|
+
"type": "boolean",
|
|
190
|
+
"description": "Whether enterprise SSO is provisioned for this tenant"
|
|
191
|
+
},
|
|
192
|
+
"provider": {
|
|
193
|
+
"type": "string",
|
|
194
|
+
"enum": [
|
|
195
|
+
"microsoft"
|
|
196
|
+
],
|
|
197
|
+
"description": "Identity provider family behind the tenant's IdP"
|
|
198
|
+
},
|
|
199
|
+
"entraTenantId": {
|
|
200
|
+
"type": "string",
|
|
201
|
+
"description": "GUID of the customer's Entra tenant. One Cognito IdP serves exactly one Entra tenant: Cognito compares the token iss to a single configured issuer, and Entra mints iss per tenant, so a multi-tenant issuer can never match."
|
|
202
|
+
},
|
|
203
|
+
"idpName": {
|
|
204
|
+
"type": "string",
|
|
205
|
+
"description": "Name of the Cognito identity provider, ms-{shortCode}. Carries the tenant, which is how the auth triggers resolve it without scanning."
|
|
206
|
+
},
|
|
207
|
+
"domains": {
|
|
208
|
+
"type": "array",
|
|
209
|
+
"description": "Email domains of the customer. A domain gates JIT and auto-link ONLY once it carries verifiedAt - uniqueness in the claim registry is not proof of ownership.",
|
|
210
|
+
"items": {
|
|
211
|
+
"type": "object",
|
|
212
|
+
"properties": {
|
|
213
|
+
"name": {
|
|
214
|
+
"type": "string"
|
|
215
|
+
},
|
|
216
|
+
"verifiedAt": {
|
|
217
|
+
"type": "string"
|
|
218
|
+
},
|
|
219
|
+
"method": {
|
|
220
|
+
"type": "string",
|
|
221
|
+
"enum": [
|
|
222
|
+
"dns-txt",
|
|
223
|
+
"entra-verified"
|
|
224
|
+
]
|
|
225
|
+
}
|
|
226
|
+
}
|
|
227
|
+
}
|
|
228
|
+
},
|
|
229
|
+
"defaultRole": {
|
|
230
|
+
"type": "string",
|
|
231
|
+
"description": "Role granted when a pending JIT user is APPROVED - never granted by the act of signing in. Domain-gated JIT makes the whole customer workforce eligible, so an automatic operational role would expose candidate data to anyone who can authenticate at the customer's IdP."
|
|
232
|
+
},
|
|
233
|
+
"required": {
|
|
234
|
+
"type": "boolean",
|
|
235
|
+
"description": "When true, password login is refused for this tenant's users. Owner and sysowner are always exempt - a break-glass account, because an outage in the customer's Entra must not lock them out of the product."
|
|
236
|
+
},
|
|
237
|
+
"autoApprove": {
|
|
238
|
+
"type": "boolean",
|
|
239
|
+
"description": "When true, a JIT user is activated immediately with defaultRole instead of landing in a pending state. Off by default."
|
|
240
|
+
}
|
|
241
|
+
}
|
|
242
|
+
},
|
|
184
243
|
"language": {
|
|
185
244
|
"type": "string"
|
|
186
245
|
},
|
|
@@ -581,6 +640,65 @@
|
|
|
581
640
|
"type": "object",
|
|
582
641
|
"description": "Tenant-level outbound-sync defaults (ATS integrations): {syncStage, syncNotes, syncRatings, syncTags, syncReports, syncConversationReports, syncMessages} - overridden per job by job.settings.operation. NOTE: the generated model whitelists keys, so this property MUST be declared for the SDK to carry it."
|
|
583
642
|
},
|
|
643
|
+
"sso": {
|
|
644
|
+
"type": "object",
|
|
645
|
+
"description": "Enterprise SSO configuration. READ-ONLY here: the generic tenant PATCH strips this key, the only writers are the /v1/tenants/{tenantId}/sso doors. Sending it in a PATCH is ignored (not an error).",
|
|
646
|
+
"properties": {
|
|
647
|
+
"enabled": {
|
|
648
|
+
"type": "boolean",
|
|
649
|
+
"description": "Whether enterprise SSO is provisioned for this tenant"
|
|
650
|
+
},
|
|
651
|
+
"provider": {
|
|
652
|
+
"type": "string",
|
|
653
|
+
"enum": [
|
|
654
|
+
"microsoft"
|
|
655
|
+
],
|
|
656
|
+
"description": "Identity provider family behind the tenant's IdP"
|
|
657
|
+
},
|
|
658
|
+
"entraTenantId": {
|
|
659
|
+
"type": "string",
|
|
660
|
+
"description": "GUID of the customer's Entra tenant. One Cognito IdP serves exactly one Entra tenant: Cognito compares the token iss to a single configured issuer, and Entra mints iss per tenant, so a multi-tenant issuer can never match."
|
|
661
|
+
},
|
|
662
|
+
"idpName": {
|
|
663
|
+
"type": "string",
|
|
664
|
+
"description": "Name of the Cognito identity provider, ms-{shortCode}. Carries the tenant, which is how the auth triggers resolve it without scanning."
|
|
665
|
+
},
|
|
666
|
+
"domains": {
|
|
667
|
+
"type": "array",
|
|
668
|
+
"description": "Email domains of the customer. A domain gates JIT and auto-link ONLY once it carries verifiedAt - uniqueness in the claim registry is not proof of ownership.",
|
|
669
|
+
"items": {
|
|
670
|
+
"type": "object",
|
|
671
|
+
"properties": {
|
|
672
|
+
"name": {
|
|
673
|
+
"type": "string"
|
|
674
|
+
},
|
|
675
|
+
"verifiedAt": {
|
|
676
|
+
"type": "string"
|
|
677
|
+
},
|
|
678
|
+
"method": {
|
|
679
|
+
"type": "string",
|
|
680
|
+
"enum": [
|
|
681
|
+
"dns-txt",
|
|
682
|
+
"entra-verified"
|
|
683
|
+
]
|
|
684
|
+
}
|
|
685
|
+
}
|
|
686
|
+
}
|
|
687
|
+
},
|
|
688
|
+
"defaultRole": {
|
|
689
|
+
"type": "string",
|
|
690
|
+
"description": "Role granted when a pending JIT user is APPROVED - never granted by the act of signing in. Domain-gated JIT makes the whole customer workforce eligible, so an automatic operational role would expose candidate data to anyone who can authenticate at the customer's IdP."
|
|
691
|
+
},
|
|
692
|
+
"required": {
|
|
693
|
+
"type": "boolean",
|
|
694
|
+
"description": "When true, password login is refused for this tenant's users. Owner and sysowner are always exempt - a break-glass account, because an outage in the customer's Entra must not lock them out of the product."
|
|
695
|
+
},
|
|
696
|
+
"autoApprove": {
|
|
697
|
+
"type": "boolean",
|
|
698
|
+
"description": "When true, a JIT user is activated immediately with defaultRole instead of landing in a pending state. Off by default."
|
|
699
|
+
}
|
|
700
|
+
}
|
|
701
|
+
},
|
|
584
702
|
"language": {
|
|
585
703
|
"type": "string"
|
|
586
704
|
},
|
|
@@ -1321,6 +1439,26 @@
|
|
|
1321
1439
|
"type": "object",
|
|
1322
1440
|
"additionalProperties": true
|
|
1323
1441
|
},
|
|
1442
|
+
"identities": {
|
|
1443
|
+
"type": "array",
|
|
1444
|
+
"description": "Federated logins linked to this account. System-owned: written only by the auth triggers and the linking doors, never by a PATCH. Linking must happen BEFORE the first federated sign-in, otherwise Cognito mints a separate profile that has to be deleted.",
|
|
1445
|
+
"items": {
|
|
1446
|
+
"type": "object",
|
|
1447
|
+
"properties": {
|
|
1448
|
+
"provider": {
|
|
1449
|
+
"type": "string",
|
|
1450
|
+
"description": "Cognito identity provider name (Google, LinkedIn, or ms-{shortCode})"
|
|
1451
|
+
},
|
|
1452
|
+
"sub": {
|
|
1453
|
+
"type": "string",
|
|
1454
|
+
"description": "The provider's subject identifier. Pairwise per client_id at Entra, so it only matches tokens issued to the same app registration as the IdP."
|
|
1455
|
+
},
|
|
1456
|
+
"linkedAt": {
|
|
1457
|
+
"type": "string"
|
|
1458
|
+
}
|
|
1459
|
+
}
|
|
1460
|
+
}
|
|
1461
|
+
},
|
|
1324
1462
|
"avatarUrl": {
|
|
1325
1463
|
"type": "string",
|
|
1326
1464
|
"description": "CDN URL of the profile picture. Either a per-user upload (users/... key, minted via the upload door) or a shared gallery image (avatars/...). Must point at an existing CDN object - updateUser head-checks it."
|
|
@@ -1639,6 +1777,26 @@
|
|
|
1639
1777
|
"type": "object",
|
|
1640
1778
|
"additionalProperties": true
|
|
1641
1779
|
},
|
|
1780
|
+
"identities": {
|
|
1781
|
+
"type": "array",
|
|
1782
|
+
"description": "Federated logins linked to this account. System-owned: written only by the auth triggers and the linking doors, never by a PATCH. Linking must happen BEFORE the first federated sign-in, otherwise Cognito mints a separate profile that has to be deleted.",
|
|
1783
|
+
"items": {
|
|
1784
|
+
"type": "object",
|
|
1785
|
+
"properties": {
|
|
1786
|
+
"provider": {
|
|
1787
|
+
"type": "string",
|
|
1788
|
+
"description": "Cognito identity provider name (Google, LinkedIn, or ms-{shortCode})"
|
|
1789
|
+
},
|
|
1790
|
+
"sub": {
|
|
1791
|
+
"type": "string",
|
|
1792
|
+
"description": "The provider's subject identifier. Pairwise per client_id at Entra, so it only matches tokens issued to the same app registration as the IdP."
|
|
1793
|
+
},
|
|
1794
|
+
"linkedAt": {
|
|
1795
|
+
"type": "string"
|
|
1796
|
+
}
|
|
1797
|
+
}
|
|
1798
|
+
}
|
|
1799
|
+
},
|
|
1642
1800
|
"avatarUrl": {
|
|
1643
1801
|
"type": "string",
|
|
1644
1802
|
"description": "CDN URL of the profile picture. Either a per-user upload (users/... key, minted via the upload door) or a shared gallery image (avatars/...). Must point at an existing CDN object - updateUser head-checks it."
|
|
@@ -2576,19 +2734,22 @@
|
|
|
2576
2734
|
"title": "ApikeyRelationshipsSchema",
|
|
2577
2735
|
"type": "object",
|
|
2578
2736
|
"properties": {
|
|
2579
|
-
"
|
|
2580
|
-
"title": "
|
|
2737
|
+
"users": {
|
|
2738
|
+
"title": "ApikeyRelationshipsUsersSchema",
|
|
2581
2739
|
"type": "object",
|
|
2582
2740
|
"properties": {
|
|
2583
2741
|
"data": {
|
|
2584
|
-
"
|
|
2585
|
-
"
|
|
2586
|
-
|
|
2587
|
-
"type":
|
|
2588
|
-
|
|
2589
|
-
|
|
2590
|
-
|
|
2591
|
-
|
|
2742
|
+
"type": "array",
|
|
2743
|
+
"items": {
|
|
2744
|
+
"title": "ApikeyRelationshipsUsersDataSchema",
|
|
2745
|
+
"type": "object",
|
|
2746
|
+
"properties": {
|
|
2747
|
+
"type": {
|
|
2748
|
+
"type": "string"
|
|
2749
|
+
},
|
|
2750
|
+
"id": {
|
|
2751
|
+
"type": "string"
|
|
2752
|
+
}
|
|
2592
2753
|
}
|
|
2593
2754
|
}
|
|
2594
2755
|
}
|