@transcend-io/mcp-server-admin 0.1.0

package/README.md

@@ -0,0 +1,90 @@
+# @transcend-io/mcp-server-admin
+
+> **Alpha** — this package is under active development and has not yet been published to npm. APIs may change without notice.
+
+Transcend MCP Server for organization administration. Provides tools for managing users, teams, API keys, and organization settings.
+
+Requires **Node.js ≥ 22.12** (see `engines` in `package.json`).
+
+For local runs from this repository, copy [`secret.env.example`](../../../secret.env.example) to **`secret.env`** at the repo root (gitignored) and set your API key (see **Run from the monorepo**).
+
+## Install
+
+When the package is available on npm, install the CLI globally:
+
+```bash
+npm install -g @transcend-io/mcp-server-admin
+```
+
+Until then, run from a checkout of this repository (see **Run from the monorepo** below).
+
+## Usage
+
+```bash
+# With TRANSCEND_API_KEY in the environment; from the monorepo use secret.env (see Run from the monorepo)
+TRANSCEND_API_KEY=your-api-key transcend-mcp-admin
+```
+
+The process speaks MCP over **stdio** and is meant to be launched by an MCP client (for example Cursor or Claude Desktop), not used as an interactive shell.
+
+### MCP client configuration
+
+`npx` runs the package’s `transcend-mcp-admin` binary (see `bin` in `package.json`).
+
+```json
+{
+  "mcpServers": {
+    "transcend-admin": {
+      "command": "npx",
+      "args": ["-y", "@transcend-io/mcp-server-admin"],
+      "env": {
+        "TRANSCEND_API_KEY": "your-api-key"
+      }
+    }
+  }
+}
+```
+
+When developing in this repository, reuse the same variable names from root **`secret.env`** in the `env` block, or use your client’s env-file support if it has one.
+
+### Run from the monorepo
+
+1. **Credentials** — From the repository root, copy [`secret.env.example`](../../../secret.env.example) to **`secret.env`** and set `TRANSCEND_API_KEY` (and optional URL overrides).
+
+2. **Build and run** — `node ./dist/cli.mjs` matches the `transcend-mcp-admin` `bin` (use `node` because `pnpm exec transcend-mcp-admin` may not resolve this package’s own binary in a pnpm workspace):
+
+```bash
+# from the repository root
+pnpm exec turbo run build --filter="@transcend-io/mcp-server-admin..."
+set -a && source ./secret.env && set +a
+pnpm -F @transcend-io/mcp-server-admin exec node ./dist/cli.mjs
+```
+
+**Alternative:** `./scripts/mcp-run.sh ./packages/mcp/mcp-server-admin/dist/cli.mjs` (sources `secret.env` when present; run after build).
+
+See [CONTRIBUTING.md](../../../CONTRIBUTING.md#mcp-servers) for workspace layout and `pnpm --filter` workflows.
+
+### Environment variables
+
+| Variable                | Required | Default                                    | Description       |
+| ----------------------- | -------- | ------------------------------------------ | ----------------- |
+| `TRANSCEND_API_KEY`     | Yes      | —                                          | Transcend API key |
+| `TRANSCEND_API_URL`     | No       | `https://multi-tenant.sombra.transcend.io` | Sombra API URL    |
+| `TRANSCEND_GRAPHQL_URL` | No       | `https://api.transcend.io`                 | GraphQL API URL   |
+
+**Monorepo:** keep these in root **`secret.env`** (from [`secret.env.example`](../../../secret.env.example)); see **Run from the monorepo**.
+
+## Tools
+
+- `admin_test_connection` — Test API connectivity
+- `admin_get_current_user` — Get the authenticated user
+- `admin_get_organization` — Get organization details
+- `admin_get_privacy_center` — Get privacy center configuration
+- `admin_list_users` — List organization users
+- `admin_list_teams` — List teams
+- `admin_list_api_keys` — List API keys
+- `admin_create_api_key` — Create a new API key
+
+## Related packages
+
+Also available as part of the unified [`@transcend-io/mcp-server`](../mcp-server/README.md) which includes all domains. See the [root README](../../../README.md#mcp-servers) for the full list.

package/dist/cli.d.mts

@@ -0,0 +1 @@
+export { };

package/dist/cli.mjs

@@ -0,0 +1,17 @@
+#!/usr/bin/env node
+import { n as getAdminTools, t as AdminMixin } from "./graphql-DBU41KQd.mjs";
+import { TranscendRestClient, createMCPServer } from "@transcend-io/mcp-server-core";
+//#region src/cli.ts
+createMCPServer({
+	name: "transcend-mcp-admin",
+	version: "1.0.0",
+	getTools: getAdminTools,
+	createClients: (auth, sombraUrl, graphqlUrl) => ({
+		rest: new TranscendRestClient(auth, sombraUrl),
+		graphql: new AdminMixin(auth, graphqlUrl)
+	})
+});
+//#endregion
+export {};
+
+//# sourceMappingURL=cli.mjs.map

package/dist/cli.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.mjs","names":[],"sources":["../src/cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { createMCPServer, TranscendRestClient } from '@transcend-io/mcp-server-core';\n\nimport { AdminMixin } from './graphql.js';\nimport { getAdminTools } from './tools/index.js';\n\ncreateMCPServer({\n  name: 'transcend-mcp-admin',\n  version: '1.0.0',\n  getTools: getAdminTools,\n  createClients: (auth, sombraUrl, graphqlUrl) => ({\n    rest: new TranscendRestClient(auth, sombraUrl),\n    graphql: new AdminMixin(auth, graphqlUrl),\n  }),\n});\n"],"mappings":";;;;AAMA,gBAAgB;CACd,MAAM;CACN,SAAS;CACT,UAAU;CACV,gBAAgB,MAAM,WAAW,gBAAgB;EAC/C,MAAM,IAAI,oBAAoB,MAAM,UAAU;EAC9C,SAAS,IAAI,WAAW,MAAM,WAAW;EAC1C;CACF,CAAC"}

package/dist/graphql-DBU41KQd.mjs

@@ -0,0 +1,399 @@
+import { EmptySchema, TranscendGraphQLBase, createListResult, createToolResult, defineTool, z } from "@transcend-io/mcp-server-core";
+import { ScopeName, TRANSCEND_SCOPES } from "@transcend-io/privacy-types";
+//#region src/tools/admin_create_api_key.ts
+const scopeSummary = Object.entries(TRANSCEND_SCOPES).map(([name, def]) => {
+	const deps = def.dependencies.length > 0 ? ` (requires: ${def.dependencies.join(", ")})` : "";
+	return `- ${name}: ${def.title} — ${def.description}${deps}`;
+}).join("\n");
+const CreateApiKeySchema = z.object({
+	title: z.string().describe("Name/title for the API key"),
+	scopes: z.array(z.nativeEnum(ScopeName)).describe("Array of permission scopes for the key"),
+	data_silos: z.array(z.string()).optional().describe("Array of data silo IDs to assign the key to (optional)")
+});
+function createAdminCreateApiKeyTool(clients) {
+	const graphql = clients.graphql;
+	return defineTool({
+		name: "admin_create_api_key",
+		description: "Create a new API key with specified scopes. WARNING: The token is only shown once! Scopes control what the key can access. Some scopes inherit dependencies — for example, manageDataMap requires viewDataMap. Use \"readOnly\" for view-only access to all resources, or \"fullAdmin\" for unrestricted access. Common scopes: manageApiKeys, manageDataMap, manageConsentManager, makeDataSubjectRequest, connectDataSilos, manageAssessments, manageDataInventory.\n\nAvailable scopes:\n" + scopeSummary,
+		category: "Admin",
+		readOnly: false,
+		confirmationHint: "Creates a new API key with the specified scopes",
+		annotations: {
+			readOnlyHint: false,
+			destructiveHint: true,
+			idempotentHint: false
+		},
+		zodSchema: CreateApiKeySchema,
+		handler: async ({ title, scopes, data_silos }) => {
+			const result = await graphql.createApiKey({
+				title,
+				scopes,
+				dataSilos: data_silos
+			});
+			return createToolResult(true, {
+				apiKey: result.apiKey,
+				token: result.token,
+				warning: "IMPORTANT: Save this token now! It will not be shown again.",
+				message: `API key "${title}" created successfully`
+			});
+		}
+	});
+}
+//#endregion
+//#region src/tools/admin_get_current_user.ts
+function createAdminGetCurrentUserTool(clients) {
+	const graphql = clients.graphql;
+	return defineTool({
+		name: "admin_get_current_user",
+		description: "Get information about the currently authenticated user (the API key owner)",
+		category: "Admin",
+		readOnly: true,
+		annotations: {
+			readOnlyHint: true,
+			destructiveHint: false,
+			idempotentHint: true
+		},
+		zodSchema: EmptySchema,
+		handler: async (_args) => {
+			return createToolResult(true, await graphql.getCurrentUser());
+		}
+	});
+}
+//#endregion
+//#region src/tools/admin_get_organization.ts
+function createAdminGetOrganizationTool(clients) {
+	const graphql = clients.graphql;
+	return defineTool({
+		name: "admin_get_organization",
+		description: "Get information about your Transcend organization",
+		category: "Admin",
+		readOnly: true,
+		annotations: {
+			readOnlyHint: true,
+			destructiveHint: false,
+			idempotentHint: true
+		},
+		zodSchema: EmptySchema,
+		handler: async (_args) => {
+			return createToolResult(true, await graphql.getOrganization());
+		}
+	});
+}
+//#endregion
+//#region src/tools/admin_get_privacy_center.ts
+function createAdminGetPrivacyCenterTool(clients) {
+	const graphql = clients.graphql;
+	return defineTool({
+		name: "admin_get_privacy_center",
+		description: "Get privacy center configuration for your organization",
+		category: "Admin",
+		readOnly: true,
+		annotations: {
+			readOnlyHint: true,
+			destructiveHint: false,
+			idempotentHint: true
+		},
+		zodSchema: EmptySchema,
+		handler: async (_args) => {
+			const result = await graphql.getPrivacyCenter();
+			if (!result) return createToolResult(true, {
+				found: false,
+				message: "No privacy center configured for this organization"
+			});
+			return createToolResult(true, {
+				found: true,
+				privacyCenter: result
+			});
+		}
+	});
+}
+//#endregion
+//#region src/tools/admin_list_api_keys.ts
+const ListApiKeysSchema = z.object({
+	limit: z.coerce.number().min(1).max(100).optional().default(50).describe("Results per page (1-100, default: 50)"),
+	cursor: z.string().optional().describe("Pagination cursor from previous response (where supported)"),
+	offset: z.coerce.number().min(0).optional().default(0).describe("Number of results to skip (default: 0)")
+});
+function createAdminListApiKeysTool(clients) {
+	const graphql = clients.graphql;
+	return defineTool({
+		name: "admin_list_api_keys",
+		description: "List all API keys configured for your organization (tokens are not shown). Note: API does not support cursor pagination (max ~100 results).",
+		category: "Admin",
+		readOnly: true,
+		annotations: {
+			readOnlyHint: true,
+			destructiveHint: false,
+			idempotentHint: true
+		},
+		zodSchema: ListApiKeysSchema,
+		handler: async ({ limit, offset }) => {
+			const result = await graphql.listApiKeys({
+				first: limit,
+				offset
+			});
+			return createListResult(result.nodes, {
+				totalCount: result.totalCount,
+				hasNextPage: result.pageInfo?.hasNextPage
+			});
+		}
+	});
+}
+//#endregion
+//#region src/tools/admin_list_teams.ts
+const ListTeamsSchema = z.object({
+	limit: z.coerce.number().min(1).max(100).optional().default(50).describe("Results per page (1-100, default: 50)"),
+	cursor: z.string().optional().describe("Pagination cursor from previous response (where supported)")
+});
+function createAdminListTeamsTool(clients) {
+	const graphql = clients.graphql;
+	return defineTool({
+		name: "admin_list_teams",
+		description: "List all teams in your Transcend organization. Note: API does not support cursor pagination (max ~100 results).",
+		category: "Admin",
+		readOnly: true,
+		annotations: {
+			readOnlyHint: true,
+			destructiveHint: false,
+			idempotentHint: true
+		},
+		zodSchema: ListTeamsSchema,
+		handler: async ({ limit, cursor }) => {
+			const result = await graphql.listTeams({
+				first: limit,
+				after: cursor
+			});
+			return createListResult(result.nodes, {
+				totalCount: result.totalCount,
+				hasNextPage: result.pageInfo?.hasNextPage
+			});
+		}
+	});
+}
+//#endregion
+//#region src/tools/admin_list_users.ts
+const ListUsersSchema = z.object({
+	limit: z.coerce.number().min(1).max(100).optional().default(50).describe("Results per page (1-100, default: 50)"),
+	cursor: z.string().optional().describe("Pagination cursor from previous response (where supported)")
+});
+function createAdminListUsersTool(clients) {
+	const graphql = clients.graphql;
+	return defineTool({
+		name: "admin_list_users",
+		description: "List all users in your Transcend organization. Note: API does not support cursor pagination (max ~100 results).",
+		category: "Admin",
+		readOnly: true,
+		annotations: {
+			readOnlyHint: true,
+			destructiveHint: false,
+			idempotentHint: true
+		},
+		zodSchema: ListUsersSchema,
+		handler: async ({ limit, cursor }) => {
+			const result = await graphql.listUsers({
+				first: limit,
+				after: cursor
+			});
+			return createListResult(result.nodes, {
+				totalCount: result.totalCount,
+				hasNextPage: result.pageInfo?.hasNextPage
+			});
+		}
+	});
+}
+//#endregion
+//#region src/tools/admin_test_connection.ts
+function createAdminTestConnectionTool(clients) {
+	const { rest } = clients;
+	const graphql = clients.graphql;
+	return defineTool({
+		name: "admin_test_connection",
+		description: "Test connectivity to both Transcend REST and GraphQL APIs",
+		category: "Admin",
+		readOnly: true,
+		annotations: {
+			readOnlyHint: true,
+			destructiveHint: false,
+			idempotentHint: true
+		},
+		zodSchema: EmptySchema,
+		handler: async (_args) => {
+			const [graphqlConnected, restConnected] = await Promise.all([graphql.testConnection(), rest.testConnection()]);
+			const allConnected = graphqlConnected && restConnected;
+			return createToolResult(true, {
+				connected: allConnected,
+				details: {
+					graphql: {
+						connected: graphqlConnected,
+						url: graphql.getBaseUrl()
+					},
+					rest: {
+						connected: restConnected,
+						url: rest.getBaseUrl()
+					}
+				},
+				message: allConnected ? "Successfully connected to all Transcend APIs" : "Some API connections failed - check details",
+				timestamp: (/* @__PURE__ */ new Date()).toISOString()
+			});
+		}
+	});
+}
+//#endregion
+//#region src/tools/index.ts
+function getAdminTools(clients) {
+	return [
+		createAdminGetOrganizationTool(clients),
+		createAdminGetCurrentUserTool(clients),
+		createAdminListUsersTool(clients),
+		createAdminListTeamsTool(clients),
+		createAdminListApiKeysTool(clients),
+		createAdminCreateApiKeyTool(clients),
+		createAdminGetPrivacyCenterTool(clients),
+		createAdminTestConnectionTool(clients)
+	];
+}
+//#endregion
+//#region src/graphql.ts
+var AdminMixin = class extends TranscendGraphQLBase {
+	async getOrganization() {
+		return (await this.makeRequest(`
+      query {
+        organization {
+          id
+          name
+          createdAt
+        }
+      }
+    `)).organization;
+	}
+	async getCurrentUser() {
+		return (await this.makeRequest(`
+      query {
+        user {
+          id
+          email
+          name
+          createdAt
+        }
+      }
+    `)).user;
+	}
+	async listUsers(options) {
+		const data = await this.makeRequest(`
+      query ListUsers($first: Int, $filterBy: UserFiltersInput) {
+        users(first: $first, filterBy: $filterBy) {
+          nodes {
+            id
+            email
+            name
+          }
+          totalCount
+        }
+      }
+    `, {
+			first: Math.min(options?.first || 50, 100),
+			...options?.filterBy ? { filterBy: options.filterBy } : {}
+		});
+		return {
+			nodes: data.users.nodes,
+			pageInfo: {
+				hasNextPage: data.users.nodes.length < data.users.totalCount,
+				hasPreviousPage: false
+			},
+			totalCount: data.users.totalCount
+		};
+	}
+	async listTeams(options) {
+		const data = await this.makeRequest(`
+      query ListTeams($first: Int) {
+        teams(first: $first) {
+          nodes {
+            id
+            name
+          }
+          totalCount
+        }
+      }
+    `, { first: Math.min(options?.first || 50, 100) });
+		return {
+			nodes: data.teams.nodes,
+			pageInfo: {
+				hasNextPage: data.teams.nodes.length < data.teams.totalCount,
+				hasPreviousPage: false
+			},
+			totalCount: data.teams.totalCount
+		};
+	}
+	async listApiKeys(options) {
+		const data = await this.makeRequest(`
+      query ListApiKeys($first: Int, $offset: Int) {
+        apiKeys(first: $first, offset: $offset) {
+          nodes {
+            id
+            title
+            scopes {
+              id
+              name
+            }
+            lastUsedAt
+            createdAt
+          }
+          totalCount
+        }
+      }
+    `, {
+			first: Math.min(options?.first || 50, 100),
+			offset: options?.offset || 0
+		});
+		return {
+			nodes: data.apiKeys.nodes,
+			pageInfo: {
+				hasNextPage: data.apiKeys.nodes.length < data.apiKeys.totalCount,
+				hasPreviousPage: false
+			},
+			totalCount: data.apiKeys.totalCount
+		};
+	}
+	async createApiKey(input) {
+		return (await this.makeRequest(`
+      mutation CreateApiKey($input: ApiKeyInput!) {
+        createApiKey(input: $input) {
+          apiKey {
+            id
+            title
+            scopes
+            createdAt
+          }
+          token
+        }
+      }
+    `, { input })).createApiKey;
+	}
+	async getPrivacyCenter(lookup) {
+		const query = `
+      query GetPrivacyCenter($lookup: PrivacyCenterLookupInput) {
+        privacyCenter(lookup: $lookup) {
+          id
+        }
+      }
+    `;
+		try {
+			const data = await this.makeRequest(query, { lookup: lookup || void 0 });
+			if (data.privacyCenter) return {
+				id: data.privacyCenter.id,
+				name: "Privacy Center",
+				url: lookup?.url || "",
+				isActive: true,
+				createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+				updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+			};
+			return null;
+		} catch {
+			return null;
+		}
+	}
+};
+//#endregion
+export { ListApiKeysSchema as a, ListTeamsSchema as i, getAdminTools as n, CreateApiKeySchema as o, ListUsersSchema as r, AdminMixin as t };
+
+//# sourceMappingURL=graphql-DBU41KQd.mjs.map

package/dist/graphql-DBU41KQd.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphql-DBU41KQd.mjs","names":[],"sources":["../src/tools/admin_create_api_key.ts","../src/tools/admin_get_current_user.ts","../src/tools/admin_get_organization.ts","../src/tools/admin_get_privacy_center.ts","../src/tools/admin_list_api_keys.ts","../src/tools/admin_list_teams.ts","../src/tools/admin_list_users.ts","../src/tools/admin_test_connection.ts","../src/tools/index.ts","../src/graphql.ts"],"sourcesContent":["import { createToolResult, defineTool, z, type ToolClients } from '@transcend-io/mcp-server-core';\nimport { ScopeName, TRANSCEND_SCOPES } from '@transcend-io/privacy-types';\n\nimport type { AdminMixin } from '../graphql.js';\n\nconst scopeSummary = Object.entries(TRANSCEND_SCOPES)\n  .map(([name, def]) => {\n    const deps = def.dependencies.length > 0 ? ` (requires: ${def.dependencies.join(', ')})` : '';\n    return `- ${name}: ${def.title} — ${def.description}${deps}`;\n  })\n  .join('\\n');\n\nexport const CreateApiKeySchema = z.object({\n  title: z.string().describe('Name/title for the API key'),\n  scopes: z.array(z.nativeEnum(ScopeName)).describe('Array of permission scopes for the key'),\n  data_silos: z\n    .array(z.string())\n    .optional()\n    .describe('Array of data silo IDs to assign the key to (optional)'),\n});\nexport type CreateApiKeyInput = z.infer<typeof CreateApiKeySchema>;\n\nexport function createAdminCreateApiKeyTool(clients: ToolClients) {\n  const graphql = clients.graphql as AdminMixin;\n  return defineTool({\n    name: 'admin_create_api_key',\n    description:\n      'Create a new API key with specified scopes. WARNING: The token is only shown once! ' +\n      'Scopes control what the key can access. Some scopes inherit dependencies — ' +\n      'for example, manageDataMap requires viewDataMap. ' +\n      'Use \"readOnly\" for view-only access to all resources, or \"fullAdmin\" for unrestricted access. ' +\n      'Common scopes: manageApiKeys, manageDataMap, manageConsentManager, makeDataSubjectRequest, ' +\n      'connectDataSilos, manageAssessments, manageDataInventory.\\n\\n' +\n      'Available scopes:\\n' +\n      scopeSummary,\n    category: 'Admin',\n    readOnly: false,\n    confirmationHint: 'Creates a new API key with the specified scopes',\n    annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: false },\n    zodSchema: CreateApiKeySchema,\n    handler: async ({ title, scopes, data_silos }) => {\n      const result = await graphql.createApiKey({\n        title,\n        scopes,\n        dataSilos: data_silos,\n      });\n      return createToolResult(true, {\n        apiKey: result.apiKey,\n        token: result.token,\n        warning: 'IMPORTANT: Save this token now! It will not be shown again.',\n        message: `API key \"${title}\" created successfully`,\n      });\n    },\n  });\n}\n","import {\n  createToolResult,\n  defineTool,\n  EmptySchema,\n  type ToolClients,\n} from '@transcend-io/mcp-server-core';\n\nimport type { AdminMixin } from '../graphql.js';\n\nexport function createAdminGetCurrentUserTool(clients: ToolClients) {\n  const graphql = clients.graphql as AdminMixin;\n  return defineTool({\n    name: 'admin_get_current_user',\n    description: 'Get information about the currently authenticated user (the API key owner)',\n    category: 'Admin',\n    readOnly: true,\n    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },\n    zodSchema: EmptySchema,\n    handler: async (_args) => {\n      const result = await graphql.getCurrentUser();\n      return createToolResult(true, result);\n    },\n  });\n}\n","import {\n  createToolResult,\n  defineTool,\n  EmptySchema,\n  type ToolClients,\n} from '@transcend-io/mcp-server-core';\n\nimport type { AdminMixin } from '../graphql.js';\n\nexport function createAdminGetOrganizationTool(clients: ToolClients) {\n  const graphql = clients.graphql as AdminMixin;\n  return defineTool({\n    name: 'admin_get_organization',\n    description: 'Get information about your Transcend organization',\n    category: 'Admin',\n    readOnly: true,\n    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },\n    zodSchema: EmptySchema,\n    handler: async (_args) => {\n      const result = await graphql.getOrganization();\n      return createToolResult(true, result);\n    },\n  });\n}\n","import {\n  createToolResult,\n  defineTool,\n  EmptySchema,\n  type ToolClients,\n} from '@transcend-io/mcp-server-core';\n\nimport type { AdminMixin } from '../graphql.js';\n\nexport function createAdminGetPrivacyCenterTool(clients: ToolClients) {\n  const graphql = clients.graphql as AdminMixin;\n  return defineTool({\n    name: 'admin_get_privacy_center',\n    description: 'Get privacy center configuration for your organization',\n    category: 'Admin',\n    readOnly: true,\n    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },\n    zodSchema: EmptySchema,\n    handler: async (_args) => {\n      const result = await graphql.getPrivacyCenter();\n      if (!result) {\n        return createToolResult(true, {\n          found: false,\n          message: 'No privacy center configured for this organization',\n        });\n      }\n      return createToolResult(true, { found: true, privacyCenter: result });\n    },\n  });\n}\n","import { createListResult, defineTool, z, type ToolClients } from '@transcend-io/mcp-server-core';\n\nimport type { AdminMixin } from '../graphql.js';\n\nexport const ListApiKeysSchema = z.object({\n  limit: z.coerce\n    .number()\n    .min(1)\n    .max(100)\n    .optional()\n    .default(50)\n    .describe('Results per page (1-100, default: 50)'),\n  cursor: z\n    .string()\n    .optional()\n    .describe('Pagination cursor from previous response (where supported)'),\n  offset: z.coerce\n    .number()\n    .min(0)\n    .optional()\n    .default(0)\n    .describe('Number of results to skip (default: 0)'),\n});\nexport type ListApiKeysInput = z.infer<typeof ListApiKeysSchema>;\n\nexport function createAdminListApiKeysTool(clients: ToolClients) {\n  const graphql = clients.graphql as AdminMixin;\n  return defineTool({\n    name: 'admin_list_api_keys',\n    description:\n      'List all API keys configured for your organization (tokens are not shown). Note: API does not support cursor pagination (max ~100 results).',\n    category: 'Admin',\n    readOnly: true,\n    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },\n    zodSchema: ListApiKeysSchema,\n    handler: async ({ limit, offset }) => {\n      const result = await graphql.listApiKeys({\n        first: limit,\n        offset,\n      });\n      return createListResult(result.nodes, {\n        totalCount: result.totalCount,\n        hasNextPage: result.pageInfo?.hasNextPage,\n      });\n    },\n  });\n}\n","import { createListResult, defineTool, z, type ToolClients } from '@transcend-io/mcp-server-core';\n\nimport type { AdminMixin } from '../graphql.js';\n\nexport const ListTeamsSchema = z.object({\n  limit: z.coerce\n    .number()\n    .min(1)\n    .max(100)\n    .optional()\n    .default(50)\n    .describe('Results per page (1-100, default: 50)'),\n  cursor: z\n    .string()\n    .optional()\n    .describe('Pagination cursor from previous response (where supported)'),\n});\nexport type ListTeamsInput = z.infer<typeof ListTeamsSchema>;\n\nexport function createAdminListTeamsTool(clients: ToolClients) {\n  const graphql = clients.graphql as AdminMixin;\n  return defineTool({\n    name: 'admin_list_teams',\n    description:\n      'List all teams in your Transcend organization. Note: API does not support cursor pagination (max ~100 results).',\n    category: 'Admin',\n    readOnly: true,\n    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },\n    zodSchema: ListTeamsSchema,\n    handler: async ({ limit, cursor }) => {\n      const result = await graphql.listTeams({\n        first: limit,\n        after: cursor,\n      });\n      return createListResult(result.nodes, {\n        totalCount: result.totalCount,\n        hasNextPage: result.pageInfo?.hasNextPage,\n      });\n    },\n  });\n}\n","import { createListResult, defineTool, z, type ToolClients } from '@transcend-io/mcp-server-core';\n\nimport type { AdminMixin } from '../graphql.js';\n\nexport const ListUsersSchema = z.object({\n  limit: z.coerce\n    .number()\n    .min(1)\n    .max(100)\n    .optional()\n    .default(50)\n    .describe('Results per page (1-100, default: 50)'),\n  cursor: z\n    .string()\n    .optional()\n    .describe('Pagination cursor from previous response (where supported)'),\n});\nexport type ListUsersInput = z.infer<typeof ListUsersSchema>;\n\nexport function createAdminListUsersTool(clients: ToolClients) {\n  const graphql = clients.graphql as AdminMixin;\n  return defineTool({\n    name: 'admin_list_users',\n    description:\n      'List all users in your Transcend organization. Note: API does not support cursor pagination (max ~100 results).',\n    category: 'Admin',\n    readOnly: true,\n    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },\n    zodSchema: ListUsersSchema,\n    handler: async ({ limit, cursor }) => {\n      const result = await graphql.listUsers({\n        first: limit,\n        after: cursor,\n      });\n      return createListResult(result.nodes, {\n        totalCount: result.totalCount,\n        hasNextPage: result.pageInfo?.hasNextPage,\n      });\n    },\n  });\n}\n","import {\n  createToolResult,\n  defineTool,\n  EmptySchema,\n  type ToolClients,\n} from '@transcend-io/mcp-server-core';\n\nimport type { AdminMixin } from '../graphql.js';\n\nexport function createAdminTestConnectionTool(clients: ToolClients) {\n  const { rest } = clients;\n  const graphql = clients.graphql as AdminMixin;\n  return defineTool({\n    name: 'admin_test_connection',\n    description: 'Test connectivity to both Transcend REST and GraphQL APIs',\n    category: 'Admin',\n    readOnly: true,\n    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },\n    zodSchema: EmptySchema,\n    handler: async (_args) => {\n      const [graphqlConnected, restConnected] = await Promise.all([\n        graphql.testConnection(),\n        rest.testConnection(),\n      ]);\n      const allConnected = graphqlConnected && restConnected;\n      return createToolResult(true, {\n        connected: allConnected,\n        details: {\n          graphql: { connected: graphqlConnected, url: graphql.getBaseUrl() },\n          rest: { connected: restConnected, url: rest.getBaseUrl() },\n        },\n        message: allConnected\n          ? 'Successfully connected to all Transcend APIs'\n          : 'Some API connections failed - check details',\n        timestamp: new Date().toISOString(),\n      });\n    },\n  });\n}\n","import type { ToolDefinition, ToolClients } from '@transcend-io/mcp-server-core';\n\nimport { createAdminCreateApiKeyTool } from './admin_create_api_key.js';\nimport { createAdminGetCurrentUserTool } from './admin_get_current_user.js';\nimport { createAdminGetOrganizationTool } from './admin_get_organization.js';\nimport { createAdminGetPrivacyCenterTool } from './admin_get_privacy_center.js';\nimport { createAdminListApiKeysTool } from './admin_list_api_keys.js';\nimport { createAdminListTeamsTool } from './admin_list_teams.js';\nimport { createAdminListUsersTool } from './admin_list_users.js';\nimport { createAdminTestConnectionTool } from './admin_test_connection.js';\n\nexport function getAdminTools(clients: ToolClients): ToolDefinition[] {\n  return [\n    createAdminGetOrganizationTool(clients),\n    createAdminGetCurrentUserTool(clients),\n    createAdminListUsersTool(clients),\n    createAdminListTeamsTool(clients),\n    createAdminListApiKeysTool(clients),\n    createAdminCreateApiKeyTool(clients),\n    createAdminGetPrivacyCenterTool(clients),\n    createAdminTestConnectionTool(clients),\n  ];\n}\n","import {\n  TranscendGraphQLBase,\n  type ApiKey,\n  type ApiKeyCreateInput,\n  type ListOptions,\n  type Organization,\n  type PaginatedResponse,\n  type PrivacyCenter,\n  type Team,\n  type User,\n} from '@transcend-io/mcp-server-core';\n\nexport class AdminMixin extends TranscendGraphQLBase {\n  async getOrganization(): Promise<Organization> {\n    const query = `\n      query {\n        organization {\n          id\n          name\n          createdAt\n        }\n      }\n    `;\n    const data = await this.makeRequest<{ organization: Organization }>(query);\n    return data.organization;\n  }\n\n  async getCurrentUser(): Promise<User> {\n    const query = `\n      query {\n        user {\n          id\n          email\n          name\n          createdAt\n        }\n      }\n    `;\n    const data = await this.makeRequest<{ user: User }>(query);\n    return data.user;\n  }\n\n  async listUsers(\n    options?: ListOptions & { filterBy?: { text?: string } },\n  ): Promise<PaginatedResponse<User>> {\n    const query = `\n      query ListUsers($first: Int, $filterBy: UserFiltersInput) {\n        users(first: $first, filterBy: $filterBy) {\n          nodes {\n            id\n            email\n            name\n          }\n          totalCount\n        }\n      }\n    `;\n    const data = await this.makeRequest<{ users: { nodes: User[]; totalCount: number } }>(query, {\n      first: Math.min(options?.first || 50, 100),\n      ...(options?.filterBy ? { filterBy: options.filterBy } : {}),\n    });\n    return {\n      nodes: data.users.nodes,\n      pageInfo: {\n        hasNextPage: data.users.nodes.length < data.users.totalCount,\n        hasPreviousPage: false,\n      },\n      totalCount: data.users.totalCount,\n    };\n  }\n\n  async listTeams(options?: ListOptions): Promise<PaginatedResponse<Team>> {\n    const query = `\n      query ListTeams($first: Int) {\n        teams(first: $first) {\n          nodes {\n            id\n            name\n          }\n          totalCount\n        }\n      }\n    `;\n    const data = await this.makeRequest<{ teams: { nodes: Team[]; totalCount: number } }>(query, {\n      first: Math.min(options?.first || 50, 100),\n    });\n    return {\n      nodes: data.teams.nodes,\n      pageInfo: {\n        hasNextPage: data.teams.nodes.length < data.teams.totalCount,\n        hasPreviousPage: false,\n      },\n      totalCount: data.teams.totalCount,\n    };\n  }\n\n  async listApiKeys(options?: ListOptions): Promise<PaginatedResponse<ApiKey>> {\n    const query = `\n      query ListApiKeys($first: Int, $offset: Int) {\n        apiKeys(first: $first, offset: $offset) {\n          nodes {\n            id\n            title\n            scopes {\n              id\n              name\n            }\n            lastUsedAt\n            createdAt\n          }\n          totalCount\n        }\n      }\n    `;\n    const data = await this.makeRequest<{ apiKeys: { nodes: ApiKey[]; totalCount: number } }>(\n      query,\n      {\n        first: Math.min(options?.first || 50, 100),\n        offset: options?.offset || 0,\n      },\n    );\n    return {\n      nodes: data.apiKeys.nodes,\n      pageInfo: {\n        hasNextPage: data.apiKeys.nodes.length < data.apiKeys.totalCount,\n        hasPreviousPage: false,\n      },\n      totalCount: data.apiKeys.totalCount,\n    };\n  }\n\n  async createApiKey(input: ApiKeyCreateInput): Promise<{ apiKey: ApiKey; token: string }> {\n    const mutation = `\n      mutation CreateApiKey($input: ApiKeyInput!) {\n        createApiKey(input: $input) {\n          apiKey {\n            id\n            title\n            scopes\n            createdAt\n          }\n          token\n        }\n      }\n    `;\n    const data = await this.makeRequest<{ createApiKey: { apiKey: ApiKey; token: string } }>(\n      mutation,\n      { input },\n    );\n    return data.createApiKey;\n  }\n\n  async getPrivacyCenter(lookup?: { url?: string }): Promise<PrivacyCenter | null> {\n    const query = `\n      query GetPrivacyCenter($lookup: PrivacyCenterLookupInput) {\n        privacyCenter(lookup: $lookup) {\n          id\n        }\n      }\n    `;\n    try {\n      const data = await this.makeRequest<{ privacyCenter: { id: string } | null }>(query, {\n        lookup: lookup || undefined,\n      });\n      if (data.privacyCenter) {\n        return {\n          id: data.privacyCenter.id,\n          name: 'Privacy Center',\n          url: lookup?.url || '',\n          isActive: true,\n          createdAt: new Date().toISOString(),\n          updatedAt: new Date().toISOString(),\n        };\n      }\n      return null;\n    } catch {\n      return null;\n    }\n  }\n}\n"],"mappings":";;;AAKA,MAAM,eAAe,OAAO,QAAQ,iBAAiB,CAClD,KAAK,CAAC,MAAM,SAAS;CACpB,MAAM,OAAO,IAAI,aAAa,SAAS,IAAI,eAAe,IAAI,aAAa,KAAK,KAAK,CAAC,KAAK;AAC3F,QAAO,KAAK,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI,cAAc;EACtD,CACD,KAAK,KAAK;AAEb,MAAa,qBAAqB,EAAE,OAAO;CACzC,OAAO,EAAE,QAAQ,CAAC,SAAS,6BAA6B;CACxD,QAAQ,EAAE,MAAM,EAAE,WAAW,UAAU,CAAC,CAAC,SAAS,yCAAyC;CAC3F,YAAY,EACT,MAAM,EAAE,QAAQ,CAAC,CACjB,UAAU,CACV,SAAS,yDAAyD;CACtE,CAAC;AAGF,SAAgB,4BAA4B,SAAsB;CAChE,MAAM,UAAU,QAAQ;AACxB,QAAO,WAAW;EAChB,MAAM;EACN,aACE,ieAOA;EACF,UAAU;EACV,UAAU;EACV,kBAAkB;EAClB,aAAa;GAAE,cAAc;GAAO,iBAAiB;GAAM,gBAAgB;GAAO;EAClF,WAAW;EACX,SAAS,OAAO,EAAE,OAAO,QAAQ,iBAAiB;GAChD,MAAM,SAAS,MAAM,QAAQ,aAAa;IACxC;IACA;IACA,WAAW;IACZ,CAAC;AACF,UAAO,iBAAiB,MAAM;IAC5B,QAAQ,OAAO;IACf,OAAO,OAAO;IACd,SAAS;IACT,SAAS,YAAY,MAAM;IAC5B,CAAC;;EAEL,CAAC;;;;AC5CJ,SAAgB,8BAA8B,SAAsB;CAClE,MAAM,UAAU,QAAQ;AACxB,QAAO,WAAW;EAChB,MAAM;EACN,aAAa;EACb,UAAU;EACV,UAAU;EACV,aAAa;GAAE,cAAc;GAAM,iBAAiB;GAAO,gBAAgB;GAAM;EACjF,WAAW;EACX,SAAS,OAAO,UAAU;AAExB,UAAO,iBAAiB,MADT,MAAM,QAAQ,gBAAgB,CACR;;EAExC,CAAC;;;;ACbJ,SAAgB,+BAA+B,SAAsB;CACnE,MAAM,UAAU,QAAQ;AACxB,QAAO,WAAW;EAChB,MAAM;EACN,aAAa;EACb,UAAU;EACV,UAAU;EACV,aAAa;GAAE,cAAc;GAAM,iBAAiB;GAAO,gBAAgB;GAAM;EACjF,WAAW;EACX,SAAS,OAAO,UAAU;AAExB,UAAO,iBAAiB,MADT,MAAM,QAAQ,iBAAiB,CACT;;EAExC,CAAC;;;;ACbJ,SAAgB,gCAAgC,SAAsB;CACpE,MAAM,UAAU,QAAQ;AACxB,QAAO,WAAW;EAChB,MAAM;EACN,aAAa;EACb,UAAU;EACV,UAAU;EACV,aAAa;GAAE,cAAc;GAAM,iBAAiB;GAAO,gBAAgB;GAAM;EACjF,WAAW;EACX,SAAS,OAAO,UAAU;GACxB,MAAM,SAAS,MAAM,QAAQ,kBAAkB;AAC/C,OAAI,CAAC,OACH,QAAO,iBAAiB,MAAM;IAC5B,OAAO;IACP,SAAS;IACV,CAAC;AAEJ,UAAO,iBAAiB,MAAM;IAAE,OAAO;IAAM,eAAe;IAAQ,CAAC;;EAExE,CAAC;;;;ACxBJ,MAAa,oBAAoB,EAAE,OAAO;CACxC,OAAO,EAAE,OACN,QAAQ,CACR,IAAI,EAAE,CACN,IAAI,IAAI,CACR,UAAU,CACV,QAAQ,GAAG,CACX,SAAS,wCAAwC;CACpD,QAAQ,EACL,QAAQ,CACR,UAAU,CACV,SAAS,6DAA6D;CACzE,QAAQ,EAAE,OACP,QAAQ,CACR,IAAI,EAAE,CACN,UAAU,CACV,QAAQ,EAAE,CACV,SAAS,yCAAyC;CACtD,CAAC;AAGF,SAAgB,2BAA2B,SAAsB;CAC/D,MAAM,UAAU,QAAQ;AACxB,QAAO,WAAW;EAChB,MAAM;EACN,aACE;EACF,UAAU;EACV,UAAU;EACV,aAAa;GAAE,cAAc;GAAM,iBAAiB;GAAO,gBAAgB;GAAM;EACjF,WAAW;EACX,SAAS,OAAO,EAAE,OAAO,aAAa;GACpC,MAAM,SAAS,MAAM,QAAQ,YAAY;IACvC,OAAO;IACP;IACD,CAAC;AACF,UAAO,iBAAiB,OAAO,OAAO;IACpC,YAAY,OAAO;IACnB,aAAa,OAAO,UAAU;IAC/B,CAAC;;EAEL,CAAC;;;;ACzCJ,MAAa,kBAAkB,EAAE,OAAO;CACtC,OAAO,EAAE,OACN,QAAQ,CACR,IAAI,EAAE,CACN,IAAI,IAAI,CACR,UAAU,CACV,QAAQ,GAAG,CACX,SAAS,wCAAwC;CACpD,QAAQ,EACL,QAAQ,CACR,UAAU,CACV,SAAS,6DAA6D;CAC1E,CAAC;AAGF,SAAgB,yBAAyB,SAAsB;CAC7D,MAAM,UAAU,QAAQ;AACxB,QAAO,WAAW;EAChB,MAAM;EACN,aACE;EACF,UAAU;EACV,UAAU;EACV,aAAa;GAAE,cAAc;GAAM,iBAAiB;GAAO,gBAAgB;GAAM;EACjF,WAAW;EACX,SAAS,OAAO,EAAE,OAAO,aAAa;GACpC,MAAM,SAAS,MAAM,QAAQ,UAAU;IACrC,OAAO;IACP,OAAO;IACR,CAAC;AACF,UAAO,iBAAiB,OAAO,OAAO;IACpC,YAAY,OAAO;IACnB,aAAa,OAAO,UAAU;IAC/B,CAAC;;EAEL,CAAC;;;;ACnCJ,MAAa,kBAAkB,EAAE,OAAO;CACtC,OAAO,EAAE,OACN,QAAQ,CACR,IAAI,EAAE,CACN,IAAI,IAAI,CACR,UAAU,CACV,QAAQ,GAAG,CACX,SAAS,wCAAwC;CACpD,QAAQ,EACL,QAAQ,CACR,UAAU,CACV,SAAS,6DAA6D;CAC1E,CAAC;AAGF,SAAgB,yBAAyB,SAAsB;CAC7D,MAAM,UAAU,QAAQ;AACxB,QAAO,WAAW;EAChB,MAAM;EACN,aACE;EACF,UAAU;EACV,UAAU;EACV,aAAa;GAAE,cAAc;GAAM,iBAAiB;GAAO,gBAAgB;GAAM;EACjF,WAAW;EACX,SAAS,OAAO,EAAE,OAAO,aAAa;GACpC,MAAM,SAAS,MAAM,QAAQ,UAAU;IACrC,OAAO;IACP,OAAO;IACR,CAAC;AACF,UAAO,iBAAiB,OAAO,OAAO;IACpC,YAAY,OAAO;IACnB,aAAa,OAAO,UAAU;IAC/B,CAAC;;EAEL,CAAC;;;;AC9BJ,SAAgB,8BAA8B,SAAsB;CAClE,MAAM,EAAE,SAAS;CACjB,MAAM,UAAU,QAAQ;AACxB,QAAO,WAAW;EAChB,MAAM;EACN,aAAa;EACb,UAAU;EACV,UAAU;EACV,aAAa;GAAE,cAAc;GAAM,iBAAiB;GAAO,gBAAgB;GAAM;EACjF,WAAW;EACX,SAAS,OAAO,UAAU;GACxB,MAAM,CAAC,kBAAkB,iBAAiB,MAAM,QAAQ,IAAI,CAC1D,QAAQ,gBAAgB,EACxB,KAAK,gBAAgB,CACtB,CAAC;GACF,MAAM,eAAe,oBAAoB;AACzC,UAAO,iBAAiB,MAAM;IAC5B,WAAW;IACX,SAAS;KACP,SAAS;MAAE,WAAW;MAAkB,KAAK,QAAQ,YAAY;MAAE;KACnE,MAAM;MAAE,WAAW;MAAe,KAAK,KAAK,YAAY;MAAE;KAC3D;IACD,SAAS,eACL,iDACA;IACJ,4BAAW,IAAI,MAAM,EAAC,aAAa;IACpC,CAAC;;EAEL,CAAC;;;;AC1BJ,SAAgB,cAAc,SAAwC;AACpE,QAAO;EACL,+BAA+B,QAAQ;EACvC,8BAA8B,QAAQ;EACtC,yBAAyB,QAAQ;EACjC,yBAAyB,QAAQ;EACjC,2BAA2B,QAAQ;EACnC,4BAA4B,QAAQ;EACpC,gCAAgC,QAAQ;EACxC,8BAA8B,QAAQ;EACvC;;;;ACTH,IAAa,aAAb,cAAgC,qBAAqB;CACnD,MAAM,kBAAyC;AAW7C,UADa,MAAM,KAAK,YATV;;;;;;;;MAS4D,EAC9D;;CAGd,MAAM,iBAAgC;AAYpC,UADa,MAAM,KAAK,YAVV;;;;;;;;;MAU4C,EAC9C;;CAGd,MAAM,UACJ,SACkC;EAalC,MAAM,OAAO,MAAM,KAAK,YAZV;;;;;;;;;;;OAY+E;GAC3F,OAAO,KAAK,IAAI,SAAS,SAAS,IAAI,IAAI;GAC1C,GAAI,SAAS,WAAW,EAAE,UAAU,QAAQ,UAAU,GAAG,EAAE;GAC5D,CAAC;AACF,SAAO;GACL,OAAO,KAAK,MAAM;GAClB,UAAU;IACR,aAAa,KAAK,MAAM,MAAM,SAAS,KAAK,MAAM;IAClD,iBAAiB;IAClB;GACD,YAAY,KAAK,MAAM;GACxB;;CAGH,MAAM,UAAU,SAAyD;EAYvE,MAAM,OAAO,MAAM,KAAK,YAXV;;;;;;;;;;OAW+E,EAC3F,OAAO,KAAK,IAAI,SAAS,SAAS,IAAI,IAAI,EAC3C,CAAC;AACF,SAAO;GACL,OAAO,KAAK,MAAM;GAClB,UAAU;IACR,aAAa,KAAK,MAAM,MAAM,SAAS,KAAK,MAAM;IAClD,iBAAiB;IAClB;GACD,YAAY,KAAK,MAAM;GACxB;;CAGH,MAAM,YAAY,SAA2D;EAkB3E,MAAM,OAAO,MAAM,KAAK,YAjBV;;;;;;;;;;;;;;;;OAmBZ;GACE,OAAO,KAAK,IAAI,SAAS,SAAS,IAAI,IAAI;GAC1C,QAAQ,SAAS,UAAU;GAC5B,CACF;AACD,SAAO;GACL,OAAO,KAAK,QAAQ;GACpB,UAAU;IACR,aAAa,KAAK,QAAQ,MAAM,SAAS,KAAK,QAAQ;IACtD,iBAAiB;IAClB;GACD,YAAY,KAAK,QAAQ;GAC1B;;CAGH,MAAM,aAAa,OAAsE;AAkBvF,UAJa,MAAM,KAAK,YAbP;;;;;;;;;;;;OAef,EAAE,OAAO,CACV,EACW;;CAGd,MAAM,iBAAiB,QAA0D;EAC/E,MAAM,QAAQ;;;;;;;AAOd,MAAI;GACF,MAAM,OAAO,MAAM,KAAK,YAAsD,OAAO,EACnF,QAAQ,UAAU,KAAA,GACnB,CAAC;AACF,OAAI,KAAK,cACP,QAAO;IACL,IAAI,KAAK,cAAc;IACvB,MAAM;IACN,KAAK,QAAQ,OAAO;IACpB,UAAU;IACV,4BAAW,IAAI,MAAM,EAAC,aAAa;IACnC,4BAAW,IAAI,MAAM,EAAC,aAAa;IACpC;AAEH,UAAO;UACD;AACN,UAAO"}

package/dist/index.d.mts

@@ -0,0 +1,58 @@
+import { ApiKey, ApiKeyCreateInput, ListOptions, Organization, PaginatedResponse, PrivacyCenter, Team, ToolClients, ToolDefinition, TranscendGraphQLBase, User, z } from "@transcend-io/mcp-server-core";
+import { ScopeName } from "@transcend-io/privacy-types";
+
+//#region src/tools/index.d.ts
+declare function getAdminTools(clients: ToolClients): ToolDefinition[];
+//#endregion
+//#region src/graphql.d.ts
+declare class AdminMixin extends TranscendGraphQLBase {
+  getOrganization(): Promise<Organization>;
+  getCurrentUser(): Promise<User>;
+  listUsers(options?: ListOptions & {
+    filterBy?: {
+      text?: string;
+    };
+  }): Promise<PaginatedResponse<User>>;
+  listTeams(options?: ListOptions): Promise<PaginatedResponse<Team>>;
+  listApiKeys(options?: ListOptions): Promise<PaginatedResponse<ApiKey>>;
+  createApiKey(input: ApiKeyCreateInput): Promise<{
+    apiKey: ApiKey;
+    token: string;
+  }>;
+  getPrivacyCenter(lookup?: {
+    url?: string;
+  }): Promise<PrivacyCenter | null>;
+}
+//#endregion
+//#region src/tools/admin_create_api_key.d.ts
+declare const CreateApiKeySchema: z.ZodObject<{
+  title: z.ZodString;
+  scopes: z.ZodArray<z.ZodEnum<typeof ScopeName>>;
+  data_silos: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+type CreateApiKeyInput = z.infer<typeof CreateApiKeySchema>;
+//#endregion
+//#region src/tools/admin_list_api_keys.d.ts
+declare const ListApiKeysSchema: z.ZodObject<{
+  limit: z.ZodDefault<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
+  cursor: z.ZodOptional<z.ZodString>;
+  offset: z.ZodDefault<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
+}, z.core.$strip>;
+type ListApiKeysInput = z.infer<typeof ListApiKeysSchema>;
+//#endregion
+//#region src/tools/admin_list_teams.d.ts
+declare const ListTeamsSchema: z.ZodObject<{
+  limit: z.ZodDefault<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
+  cursor: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+type ListTeamsInput = z.infer<typeof ListTeamsSchema>;
+//#endregion
+//#region src/tools/admin_list_users.d.ts
+declare const ListUsersSchema: z.ZodObject<{
+  limit: z.ZodDefault<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
+  cursor: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+type ListUsersInput = z.infer<typeof ListUsersSchema>;
+//#endregion
+export { AdminMixin, type CreateApiKeyInput, CreateApiKeySchema, type ListApiKeysInput, ListApiKeysSchema, type ListTeamsInput, ListTeamsSchema, type ListUsersInput, ListUsersSchema, getAdminTools };
+//# sourceMappingURL=index.d.mts.map

package/dist/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../src/tools/index.ts","../src/graphql.ts","../src/tools/admin_create_api_key.ts","../src/tools/admin_list_api_keys.ts","../src/tools/admin_list_teams.ts","../src/tools/admin_list_users.ts"],"mappings":";;;;iBAWgB,aAAA,CAAc,OAAA,EAAS,WAAA,GAAc,cAAA;;;cCCxC,UAAA,SAAmB,oBAAA;EACxB,eAAA,CAAA,GAAmB,OAAA,CAAQ,YAAA;EAc3B,cAAA,CAAA,GAAkB,OAAA,CAAQ,IAAA;EAe1B,SAAA,CACJ,OAAA,GAAU,WAAA;IAAgB,QAAA;MAAa,IAAA;IAAA;EAAA,IACtC,OAAA,CAAQ,iBAAA,CAAkB,IAAA;EA2BvB,SAAA,CAAU,OAAA,GAAU,WAAA,GAAc,OAAA,CAAQ,iBAAA,CAAkB,IAAA;EAyB5D,WAAA,CAAY,OAAA,GAAU,WAAA,GAAc,OAAA,CAAQ,iBAAA,CAAkB,MAAA;EAmC9D,YAAA,CAAa,KAAA,EAAO,iBAAA,GAAoB,OAAA;IAAU,MAAA,EAAQ,MAAA;IAAQ,KAAA;EAAA;EAqBlE,gBAAA,CAAiB,MAAA;IAAW,GAAA;EAAA,IAAiB,OAAA,CAAQ,aAAA;AAAA;;;cC5IhD,kBAAA,EAAkB,CAAA,CAAA,SAAA;;;;;KAQnB,iBAAA,GAAoB,CAAA,CAAE,KAAA,QAAa,kBAAA;;;cChBlC,iBAAA,EAAiB,CAAA,CAAA,SAAA;;;;;KAmBlB,gBAAA,GAAmB,CAAA,CAAE,KAAA,QAAa,iBAAA;;;cCnBjC,eAAA,EAAe,CAAA,CAAA,SAAA;;;;KAahB,cAAA,GAAiB,CAAA,CAAE,KAAA,QAAa,eAAA;;;cCb/B,eAAA,EAAe,CAAA,CAAA,SAAA;;;;KAahB,cAAA,GAAiB,CAAA,CAAE,KAAA,QAAa,eAAA"}

package/dist/index.mjs

@@ -0,0 +1,2 @@
+import { a as ListApiKeysSchema, i as ListTeamsSchema, n as getAdminTools, o as CreateApiKeySchema, r as ListUsersSchema, t as AdminMixin } from "./graphql-DBU41KQd.mjs";
+export { AdminMixin, CreateApiKeySchema, ListApiKeysSchema, ListTeamsSchema, ListUsersSchema, getAdminTools };

package/package.json

@@ -0,0 +1,56 @@
+{
+  "name": "@transcend-io/mcp-server-admin",
+  "version": "0.1.0",
+  "description": "Transcend MCP Server — Admin tools.",
+  "homepage": "https://github.com/transcend-io/tools/tree/main/packages/mcp/mcp-server-admin",
+  "license": "Apache-2.0",
+  "author": "Transcend Inc.",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/transcend-io/tools.git",
+    "directory": "packages/mcp/mcp-server-admin"
+  },
+  "bin": {
+    "transcend-mcp-admin": "./dist/cli.mjs"
+  },
+  "files": [
+    "dist"
+  ],
+  "type": "module",
+  "sideEffects": false,
+  "types": "./dist/index.d.mts",
+  "exports": {
+    ".": {
+      "@transcend-io/source": "./src/index.ts",
+      "types": "./dist/index.d.mts",
+      "default": "./dist/index.mjs"
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsdown",
+    "test": "vitest run",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "check:exports": "attw --pack . --ignore-rules cjs-resolves-to-esm",
+    "check:publint": "publint --level warning --strict --pack pnpm"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "catalog:",
+    "@transcend-io/mcp-server-core": "workspace:*",
+    "@transcend-io/privacy-types": "workspace:*",
+    "zod": "catalog:"
+  },
+  "devDependencies": {
+    "@arethetypeswrong/cli": "catalog:",
+    "@types/node": "catalog:",
+    "publint": "catalog:",
+    "tsdown": "catalog:",
+    "typescript": "catalog:",
+    "vitest": "catalog:"
+  },
+  "engines": {
+    "node": ">=22.12.0"
+  }
+}