@smartytalent/mcp-tools 0.6.1 → 0.7.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/dist/tools.json +127 -0
  2. package/package.json +1 -1
package/dist/tools.json CHANGED
@@ -219,6 +219,7 @@
219
219
  "method": {
220
220
  "type": "string",
221
221
  "enum": [
222
+ "ops-confirmed",
222
223
  "dns-txt",
223
224
  "entra-verified"
224
225
  ]
@@ -678,6 +679,7 @@
678
679
  "method": {
679
680
  "type": "string",
680
681
  "enum": [
682
+ "ops-confirmed",
681
683
  "dns-txt",
682
684
  "entra-verified"
683
685
  ]
@@ -1221,6 +1223,131 @@
1221
1223
  "operationId": "tenantPhoneNumbersUnassignOptions"
1222
1224
  }
1223
1225
  },
1226
+ {
1227
+ "name": "show_tenant_sso",
1228
+ "description": "Show Tenant Enterprise SSO",
1229
+ "inputSchema": {
1230
+ "type": "object",
1231
+ "properties": {}
1232
+ },
1233
+ "_meta": {
1234
+ "method": "GET",
1235
+ "path": "/v1/tenants/{tenantId}/sso",
1236
+ "operationId": "showTenantSso"
1237
+ }
1238
+ },
1239
+ {
1240
+ "name": "configure_tenant_sso",
1241
+ "description": "Configure Tenant Enterprise SSO",
1242
+ "inputSchema": {
1243
+ "type": "object",
1244
+ "properties": {
1245
+ "data": {
1246
+ "type": "object",
1247
+ "properties": {
1248
+ "type": {
1249
+ "type": "string",
1250
+ "enum": [
1251
+ "tenant-sso"
1252
+ ]
1253
+ },
1254
+ "attributes": {
1255
+ "title": "TenantSsoAttributesSchema",
1256
+ "type": "object",
1257
+ "description": "Enterprise SSO configuration for one tenant. Written only by the /v1/tenants/{tenantId}/sso doors (sysowner); the generic tenant PATCH strips settings.sso.",
1258
+ "properties": {
1259
+ "provider": {
1260
+ "type": "string",
1261
+ "enum": [
1262
+ "microsoft"
1263
+ ],
1264
+ "description": "Identity provider family behind the tenant's IdP"
1265
+ },
1266
+ "entraTenantId": {
1267
+ "type": "string",
1268
+ "description": "GUID of the customer's Entra tenant. One Cognito IdP serves exactly one Entra tenant: Cognito compares the token iss to a single configured issuer and Entra mints iss per tenant, so a multi-tenant issuer can never match. NOTE: CreateIdentityProvider accepts a /common issuer without error and only sign-in fails, which is why 'common' is rejected here."
1269
+ },
1270
+ "idpName": {
1271
+ "type": "string",
1272
+ "description": "Derived server-side as ms-{shortCode} and ignored if sent. The name carries the tenant, which is how the auth triggers resolve it without scanning; it must fit Cognito's 32-character IdP name limit."
1273
+ },
1274
+ "domains": {
1275
+ "type": "array",
1276
+ "description": "Email domains of the customer. A domain gates JIT and auto-link ONLY once it carries verifiedAt - uniqueness in the claim registry is not proof of ownership. Public mail providers (gmail.com and friends) are rejected: a shared domain can never prove its holder employs the person signing in.",
1277
+ "items": {
1278
+ "type": "object",
1279
+ "properties": {
1280
+ "name": {
1281
+ "type": "string"
1282
+ },
1283
+ "verifiedAt": {
1284
+ "type": "string"
1285
+ },
1286
+ "method": {
1287
+ "type": "string",
1288
+ "enum": [
1289
+ "ops-confirmed",
1290
+ "dns-txt",
1291
+ "entra-verified"
1292
+ ]
1293
+ }
1294
+ }
1295
+ }
1296
+ },
1297
+ "defaultRole": {
1298
+ "type": "string",
1299
+ "description": "Role granted when a pending JIT user is APPROVED - never granted by the act of signing in. Domain-gated JIT makes the whole customer workforce eligible, so an automatic operational role would expose candidate data to anyone who can authenticate at the customer's IdP. Privileged roles (owner/admin/sysowner) are rejected."
1300
+ },
1301
+ "required": {
1302
+ "type": "boolean",
1303
+ "description": "When true, password login is refused for this tenant's users. Owner and sysowner are always exempt - a break-glass account, because an outage in the customer's Entra must not lock them out of the product."
1304
+ },
1305
+ "autoApprove": {
1306
+ "type": "boolean",
1307
+ "description": "When true, a JIT user is activated immediately with defaultRole instead of landing in a pending state. Off by default."
1308
+ },
1309
+ "enabled": {
1310
+ "type": "boolean",
1311
+ "description": "Whether a Cognito identity provider exists for this tenant. Owned by the provisioning step and ignored if sent."
1312
+ }
1313
+ }
1314
+ }
1315
+ }
1316
+ }
1317
+ }
1318
+ },
1319
+ "_meta": {
1320
+ "method": "POST",
1321
+ "path": "/v1/tenants/{tenantId}/sso",
1322
+ "operationId": "configureTenantSso"
1323
+ }
1324
+ },
1325
+ {
1326
+ "name": "delete_tenant_sso",
1327
+ "description": "Delete Tenant Enterprise SSO",
1328
+ "inputSchema": {
1329
+ "type": "object",
1330
+ "properties": {}
1331
+ },
1332
+ "_meta": {
1333
+ "method": "DELETE",
1334
+ "path": "/v1/tenants/{tenantId}/sso",
1335
+ "operationId": "deleteTenantSso"
1336
+ }
1337
+ },
1338
+ {
1339
+ "name": "tenant_sso_options",
1340
+ "description": "Tenant SSO Options",
1341
+ "inputSchema": {
1342
+ "type": "object",
1343
+ "properties": {}
1344
+ },
1345
+ "_meta": {
1346
+ "method": "OPTIONS",
1347
+ "path": "/v1/tenants/{tenantId}/sso",
1348
+ "operationId": "tenantSsoOptions"
1349
+ }
1350
+ },
1224
1351
  {
1225
1352
  "name": "purchase_tenant_phone_number",
1226
1353
  "description": "Purchase Phone Number",
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@smartytalent/mcp-tools",
3
- "version": "0.6.1",
3
+ "version": "0.7.0",
4
4
  "description": "MCP tool definitions for SmartyTalent API",
5
5
  "main": "dist/index.js",
6
6
  "types": "dist/index.d.ts",