conduyt-mcp 4.2.0 → 4.3.0

package/README.md

@@ -1,13 +1,13 @@
 # Conduyt MCP Server
 
-MCP server for [Conduyt CRM](https://conduyt.app) — expose your CRM as AI-accessible tools. Covers the core CRM surface (contacts, deals, pipelines, custom fields, automations, messaging, and more); use `conduyt_api_catalog` to discover the full set of 409 REST endpoints.
+MCP server for [Conduyt CRM](https://conduyt.app) — expose your CRM as AI-accessible tools. Covers the core CRM surface (contacts, deals, pipelines, custom fields, automations, messaging, and more); use `conduyt_api_catalog` to discover the full set of 500+ REST endpoints.
 
-## 113 Tools
+## 136 Tools
 
 ### Discovery
 | Tool | Description |
 |------|-------------|
-| `conduyt_api_catalog` | Discover all 409 API endpoints |
+| `conduyt_api_catalog` | Discover all 500+ API endpoints |
 | `conduyt_check_permissions` | Introspect current API key permissions |
 | `conduyt_search` | Global search across contacts, deals, companies, tasks |
 
@@ -27,6 +27,7 @@ MCP server for [Conduyt CRM](https://conduyt.app) — expose your CRM as AI-acce
 | `conduyt_get_deal` | Get deal details with history, including custom-field values |
 | `conduyt_create_deal` | Create a deal with full attributes — currency (e.g. GBP), probability, priority, expected close date, contact/company, and structured custom-field values |
 | `conduyt_update_deal` | Move stage, change value/currency, set probability or close date, reassign, mark won/lost, or write custom-field values |
+| `conduyt_import_deals` | Bulk-import deals (pipeline/stage by name, contact by email) via the canonical import engine — dedupes, side-effect-free, owner/admin only |
 
 ### Tasks
 | Tool | Description |
@@ -172,6 +173,8 @@ MCP server for [Conduyt CRM](https://conduyt.app) — expose your CRM as AI-acce
 | `conduyt_update_user` | Update profile, role, or permissions |
 | `conduyt_get_user_stats` | Get performance stats (deals, tasks, activity) |
 | `conduyt_invite_user` | Invite team member via email |
+| `conduyt_deactivate_user` | Deactivate a user (optionally reassign their records) |
+| `conduyt_reactivate_user` | Reactivate a deactivated user |
 
 ### Bulk Operations
 | Tool | Description |
@@ -179,6 +182,14 @@ MCP server for [Conduyt CRM](https://conduyt.app) — expose your CRM as AI-acce
 | `conduyt_ai_import_contacts` | AI-powered bulk import (up to 1000, auto-tag, smart list, automation) |
 | `conduyt_export_contacts` | Export contacts as JSON with filters |
 | `conduyt_export_deals` | Export deals as JSON with filters |
+| `conduyt_bulk_tag_contacts` | Add one tag to many contacts |
+| `conduyt_bulk_untag_contacts` | Remove one tag from many contacts |
+| `conduyt_bulk_edit_contacts` | Apply the same field changes to many contacts |
+| `conduyt_bulk_update_contacts` | Apply per-contact field changes (each row has its own id) |
+| `conduyt_bulk_delete_contacts` | Soft-delete many contacts |
+| `conduyt_bulk_dnc_contacts` | Add/remove DNC or litigator mark on many contacts (compliance) |
+| `conduyt_bulk_edit_deals` | Apply the same field changes to many deals (e.g. bulk reassign) |
+| `conduyt_bulk_update_deals` | Apply per-deal field changes (each row has its own id) |
 
 ### Drip Campaigns
 | Tool | Description |
@@ -228,6 +239,18 @@ MCP server for [Conduyt CRM](https://conduyt.app) — expose your CRM as AI-acce
 | `conduyt_ai_compose_email` | AI-generated email with context-aware tone |
 | `conduyt_ai_enrich_contact` | AI-powered contact data enrichment |
 | `conduyt_ai_summarize_contact` | AI summary with sentiment and next steps |
+| `conduyt_ai_chat` | Conversational AI assistant grounded in your CRM (optionally pinned to a record) |
+| `conduyt_ai_improve_email` | Rewrite an email draft for clarity, tone, and persuasiveness |
+| `conduyt_ai_deal_insights` | AI risk/momentum analysis and next actions for a single deal |
+| `conduyt_ai_conversation_intelligence` | AI summary/sentiment/objections for a transcribed call |
+| `conduyt_ai_call_disposition` | AI-suggested disposition for a call from its transcript |
+| `conduyt_ai_daily_brief` | AI daily brief — today's priorities for a user |
+| `conduyt_ai_next_actions` | AI-ranked next actions for a user |
+| `conduyt_ai_feed` | Chronological stream of AI-surfaced events and insights |
+| `conduyt_ai_usage` | AI usage and budget report over a rolling window (owner/admin only) |
+| `conduyt_ai_task_import_and_enroll` | AI task (preview only): bulk import + tag + enroll + smart list — execution is human-session-only |
+| `conduyt_ai_task_segment_and_act` | AI task (preview only): segment by filter, then tag/assign/update — execution is human-session-only |
+| `conduyt_ai_task_pipeline_cleanup` | AI task (preview only): find stale deals and tag/move/notify/report — execution is human-session-only |
 
 ## Setup
 

package/dist/client.d.ts

@@ -4,8 +4,10 @@ export declare class ConduytClient {
     private apiKey;
     constructor(config: ConduytConfig);
     request(method: string, path: string, body?: unknown): Promise<unknown>;
+    requestText(method: string, path: string, body?: unknown): Promise<string>;
     get(path: string): Promise<unknown>;
     post(path: string, body: unknown): Promise<unknown>;
+    postText(path: string, body: unknown): Promise<string>;
     patch(path: string, body: unknown): Promise<unknown>;
     del(path: string): Promise<unknown>;
 }

package/dist/client.js

@@ -23,12 +23,41 @@ export class ConduytClient {
         }
         return json;
     }
+    async requestText(method, path, body) {
+        const url = `${this.baseUrl}${path}`;
+        const headers = {
+            Authorization: `Bearer ${this.apiKey}`,
+            "Content-Type": "application/json",
+        };
+        const res = await fetch(url, {
+            method,
+            headers,
+            body: body !== undefined ? JSON.stringify(body) : undefined,
+        });
+        const text = await res.text().catch(() => "");
+        if (!res.ok) {
+            let msg = res.statusText;
+            try {
+                const json = JSON.parse(text);
+                msg = json.error || msg;
+            }
+            catch {
+                if (text)
+                    msg = text;
+            }
+            throw new Error(`Conduyt API ${res.status}: ${msg}`);
+        }
+        return text;
+    }
     get(path) {
         return this.request("GET", path);
     }
     post(path, body) {
         return this.request("POST", path, body);
     }
+    postText(path, body) {
+        return this.requestText("POST", path, body);
+    }
     patch(path, body) {
         return this.request("PATCH", path, body);
     }

package/dist/index.js

@@ -45,7 +45,7 @@ if (!apiKey.startsWith("cdy_")) {
 const client = new ConduytClient({ apiUrl, apiKey });
 const server = new McpServer({
     name: "conduyt",
-    version: "4.2.0",
+    version: "4.3.0",
 });
 registerDiscoveryTools(server, client);
 registerContactTools(server, client);

package/dist/tools/activities.js

@@ -2,19 +2,22 @@ import { z } from "zod";
 import { formatResult } from "../client.js";
 export function registerActivityTools(server, client) {
     server.tool("conduyt_list_activities", "List recent activities across the CRM — calls, emails, notes, meetings, deal changes, and system events.", {
-        userId: z.string().optional().describe("Filter by user UUID who performed the activity"),
         type: z.string().optional().describe("Filter by activity type (e.g. 'call', 'email', 'note', 'meeting', 'deal_stage_changed')"),
         contactId: z.string().optional().describe("Filter activities for a specific contact"),
+        dealId: z.string().optional().describe("Filter activities for a specific deal"),
+        search: z.string().optional().describe("Search activity titles/descriptions"),
         page: z.number().optional().describe("Page number (default 1)"),
         per_page: z.number().optional().describe("Results per page (default 25, max 100)"),
-    }, async ({ userId, type, contactId, page, per_page }) => {
+    }, async ({ type, contactId, dealId, search, page, per_page }) => {
         const params = new URLSearchParams();
-        if (userId)
-            params.set("userId", userId);
         if (type)
             params.set("type", type);
         if (contactId)
-            params.set("contactId", contactId);
+            params.set("contact_id", contactId);
+        if (dealId)
+            params.set("deal_id", dealId);
+        if (search)
+            params.set("search", search);
         if (page)
             params.set("page", String(page));
         if (per_page)

package/dist/tools/ai-extended.js

@@ -1,5 +1,46 @@
 import { z } from "zod";
 import { formatResult } from "../client.js";
+function parseSseText(streamText) {
+    let reply = "";
+    let sawDone = false;
+    const errors = [];
+    for (const line of streamText.split(/\r?\n/)) {
+        const trimmed = line.trim();
+        if (!trimmed.startsWith("data:"))
+            continue;
+        const payload = trimmed.slice("data:".length).trim();
+        if (!payload)
+            continue;
+        if (payload === "[DONE]") {
+            sawDone = true;
+            continue;
+        }
+        try {
+            const parsed = JSON.parse(payload);
+            if (typeof parsed.error === "string" && parsed.error.trim()) {
+                errors.push(parsed.error.trim());
+            }
+            if (typeof parsed.text === "string") {
+                reply += parsed.text;
+            }
+        }
+        catch {
+            // Ignore malformed chunks; the app route does the same for provider SSE.
+        }
+    }
+    // Fail closed: any error chunk means the response is unreliable — surface it
+    // even if some text streamed before the failure (don't return a partial reply
+    // as if it were complete).
+    if (errors.length > 0) {
+        throw new Error(`AI chat stream error: ${errors.join("; ")}`);
+    }
+    // Fail closed: a successful stream always terminates with the [DONE] sentinel.
+    // Its absence means the stream was truncated mid-flight.
+    if (!sawDone) {
+        throw new Error("AI chat stream ended without a completion marker; the response may be incomplete");
+    }
+    return reply;
+}
 export function registerAiExtendedTools(server, client) {
     server.tool("conduyt_ai_compose_email", "AI-powered email composition. Generates subject, body, and HTML based on contact context, deal stage, and desired tone.", {
         contactName: z.string().describe("Recipient's name"),
@@ -11,8 +52,8 @@ export function registerAiExtendedTools(server, client) {
         contactTitle: z.string().optional().describe("Recipient's job title"),
         dealStage: z.string().optional().describe("Current deal stage for context"),
         dealValue: z.number().optional().describe("Deal value for context"),
-        previousMessages: z.string().optional().describe("Summary of previous conversation for context"),
-        tone: z.string().optional().describe("Desired tone (e.g. 'professional', 'friendly', 'urgent')"),
+        previousMessages: z.array(z.string()).optional().describe("Recent previous messages for context (max 5, 2000 chars each)"),
+        tone: z.enum(["professional", "friendly", "formal", "casual"]).optional().describe("Desired tone"),
         senderTitle: z.string().optional().describe("Your job title"),
     }, async (params) => {
         const result = await client.post("/api/v1/ai/compose-email", params);
@@ -35,4 +76,177 @@ export function registerAiExtendedTools(server, client) {
         const result = await client.post("/api/v1/ai/summarize-contact", params);
         return formatResult(result);
     });
+    server.tool("conduyt_ai_chat", "Conversational AI assistant grounded in your CRM. Send a multi-turn message thread and optionally pin it to a record (contact/deal) so the assistant has live context. Returns the assistant's reply.", {
+        messages: z
+            .array(z.object({
+            role: z.enum(["user", "assistant"]).describe("Who sent the message"),
+            content: z.string().describe("Message text"),
+        }))
+            .describe("Conversation thread, oldest first. Max 20 messages, 4000 chars each."),
+        context: z.string().optional().describe("Freeform extra context to ground the reply"),
+        section: z
+            .object({
+            type: z.enum(["contact", "deal", "conversations", "dashboard", "reports", "automation", "sequence", "custom-fields", "scoring", "general"]).describe("Page/record context type"),
+            id: z.string().optional().describe("Record UUID to pull live context from"),
+            pathname: z.string().optional().describe("UI pathname the user is viewing"),
+        })
+            .optional()
+            .describe("Pin the chat to a specific record for grounded answers"),
+    }, async (params) => {
+        const streamText = await client.postText("/api/v1/ai/chat", params);
+        const reply = parseSseText(streamText);
+        return formatResult({ reply });
+    });
+    server.tool("conduyt_ai_improve_email", "Improve an email draft. Rewrites the body (and optionally the subject) for clarity, tone, and persuasiveness. Pass instructions to steer the rewrite.", {
+        body: z.string().describe("The email body to improve"),
+        subject: z.string().describe("The current subject line"),
+        instructions: z.string().optional().describe("How to improve it, e.g. 'make it shorter and more direct'"),
+    }, async (params) => {
+        const result = await client.post("/api/v1/ai/improve-email", params);
+        return formatResult(result);
+    });
+    server.tool("conduyt_ai_deal_insights", "AI analysis of a single deal. Returns risk signals, momentum, and recommended next actions based on the deal's stage, activity, and history.", {
+        dealId: z.string().describe("Deal UUID to analyze"),
+    }, async (params) => {
+        const result = await client.post("/api/v1/ai/deal-insights", params);
+        return formatResult(result);
+    });
+    server.tool("conduyt_ai_conversation_intelligence", "AI analysis of a recorded/transcribed call. Returns summary, sentiment, topics, objections, and follow-up suggestions for the conversation.", {
+        callId: z.string().describe("Call UUID to analyze (must have a transcript)"),
+    }, async (params) => {
+        const result = await client.post("/api/v1/ai/conversation-intelligence", params);
+        return formatResult(result);
+    });
+    server.tool("conduyt_ai_call_disposition", "AI-suggested call disposition. Reads the call's transcript and details and proposes a disposition/outcome status. Returns the suggested disposition.", {
+        callId: z.string().describe("Call UUID to disposition"),
+    }, async ({ callId }) => {
+        const result = await client.post(`/api/v1/dialer/call/${callId}/ai-disposition`, {});
+        return formatResult(result);
+    });
+    server.tool("conduyt_ai_daily_brief", "AI-generated daily brief for the current user. Summarizes today's priorities — deals needing attention, overdue tasks, hot leads, and recommended focus.", {}, async () => {
+        const result = await client.get("/api/v1/ai/daily-brief");
+        return formatResult(result);
+    });
+    server.tool("conduyt_ai_next_actions", "AI-ranked next actions. Returns a prioritized list of suggested actions (replies to send, deals to advance, tasks to do) for a user.", {
+        userId: z.string().optional().describe("User UUID to generate actions for (defaults to the authenticated user)"),
+    }, async ({ userId }) => {
+        const params = new URLSearchParams();
+        if (userId)
+            params.set("userId", userId);
+        const qs = params.toString();
+        const result = await client.get(`/api/v1/ai/next-actions${qs ? `?${qs}` : ""}`);
+        return formatResult(result);
+    });
+    server.tool("conduyt_ai_feed", "AI activity feed — a chronological stream of AI-surfaced events and insights across the account.", {
+        limit: z.number().optional().describe("Max items to return (default 30)"),
+        since: z.string().optional().describe("ISO timestamp; only return items after this time"),
+    }, async ({ limit, since }) => {
+        const params = new URLSearchParams();
+        if (limit)
+            params.set("limit", String(limit));
+        if (since)
+            params.set("since", since);
+        const qs = params.toString();
+        const result = await client.get(`/api/v1/ai/feed${qs ? `?${qs}` : ""}`);
+        return formatResult(result);
+    });
+    server.tool("conduyt_ai_usage", "AI usage and budget report for the account. Returns request counts and budget consumption over a rolling window. Requires an owner/admin API key — other roles get 403.", {
+        range: z
+            .union([z.literal(7), z.literal(30), z.literal(90)])
+            .optional()
+            .describe("Reporting window in days; one of 7, 30, or 90 (default 30). Other values fall back to 30."),
+    }, async ({ range }) => {
+        const params = new URLSearchParams();
+        if (range !== undefined)
+            params.set("range", String(range));
+        const qs = params.toString();
+        const result = await client.get(`/api/v1/ai/usage${qs ? `?${qs}` : ""}`);
+        return formatResult(result);
+    });
+    server.tool("conduyt_ai_task_import_and_enroll", "AI task (PREVIEW ONLY): preview bulk-importing contacts and optionally tagging them, enrolling them in an automation, and adding them to a smart list. Returns what WOULD happen — counts, matches, and warnings — without persisting anything. Executing this is intentionally restricted to a human session in the app; agent/API-key callers can only preview.", {
+        contacts: z
+            .array(z.object({
+            firstName: z.string().optional(),
+            lastName: z.string().optional(),
+            email: z.string().optional(),
+            phone: z.string().optional(),
+            company: z.string().optional(),
+            jobTitle: z.string().optional(),
+            country: z.string().optional(),
+            source: z.string().optional(),
+            addressLine1: z.string().optional(),
+            addressLine2: z.string().optional(),
+            city: z.string().optional(),
+            state: z.string().optional(),
+            zip: z.string().optional(),
+            customFields: z.record(z.any()).optional().describe("Custom-field values keyed by field key"),
+        }))
+            .describe("Contacts to preview importing (1-500)"),
+        tagIds: z.array(z.string()).optional().describe("Tag UUIDs that would be applied to all imported contacts"),
+        automationId: z.string().optional().describe("Automation UUID imported contacts would be enrolled in"),
+        smartListId: z.string().optional().describe("Smart list UUID imported contacts would be added to"),
+    }, async (params) => {
+        const result = await client.post("/api/v1/ai/tasks", { type: "import_and_enroll", ...params, dryRun: true });
+        return formatResult(result);
+    });
+    server.tool("conduyt_ai_task_segment_and_act", "AI task (PREVIEW ONLY): preview segmenting contacts by a filter and applying one action (add/remove a tag, assign to a user, or update a field) to the whole segment. Returns the matched count and what WOULD change, without persisting. Executing this is intentionally restricted to a human session in the app; agent/API-key callers can only preview.", {
+        filter: z
+            .object({
+            tagId: z.string().optional().describe("Only contacts with this tag UUID"),
+            source: z.string().optional().describe("Only contacts from this source"),
+            createdAfter: z.string().optional().describe("ISO timestamp lower bound"),
+            createdBefore: z.string().optional().describe("ISO timestamp upper bound"),
+            hasEmail: z.boolean().optional(),
+            hasPhone: z.boolean().optional(),
+        })
+            .describe("Segment selection criteria"),
+        action: z
+            .discriminatedUnion("type", [
+            z.object({
+                type: z.literal("add_tag"),
+                tagId: z.string().describe("Tag UUID to add"),
+            }),
+            z.object({
+                type: z.literal("remove_tag"),
+                tagId: z.string().describe("Tag UUID to remove"),
+            }),
+            z.object({
+                type: z.literal("assign_to"),
+                userId: z.string().describe("User UUID to assign contacts to"),
+            }),
+            z.object({
+                type: z.literal("update_field"),
+                field: z.enum([
+                    "firstName",
+                    "lastName",
+                    "email",
+                    "phone",
+                    "company",
+                    "jobTitle",
+                    "source",
+                    "city",
+                    "state",
+                    "zip",
+                    "country",
+                    "leadScore",
+                ]).describe("Allowed contact field to update"),
+                value: z.any().describe("New value; strings/null for most fields, 0-100 number for leadScore"),
+            }),
+        ])
+            .describe("The action to apply to the whole segment"),
+        limit: z.number().optional().describe("Max contacts to act on (default 100, max 1000)"),
+    }, async (params) => {
+        const result = await client.post("/api/v1/ai/tasks", { type: "segment_and_act", ...params, dryRun: true });
+        return formatResult(result);
+    });
+    server.tool("conduyt_ai_task_pipeline_cleanup", "AI task (PREVIEW ONLY): preview finding stale deals in a pipeline and tagging, moving, notifying, or reporting on them. Returns the stale deals and what WOULD happen, without persisting. Executing a mutating action is intentionally restricted to a human session in the app; agent/API-key callers can only preview.", {
+        pipelineId: z.string().describe("Pipeline UUID to scan"),
+        staleDays: z.number().optional().describe("Days without activity to consider a deal stale (default 30)"),
+        action: z.enum(["tag", "move_stage", "notify", "report_only"]).optional().describe("Action to preview against stale deals (default report_only)"),
+        targetStageId: z.string().optional().describe("Destination stage UUID (for move_stage)"),
+        tagId: z.string().optional().describe("Tag UUID to apply (for tag)"),
+    }, async (params) => {
+        const result = await client.post("/api/v1/ai/tasks", { type: "pipeline_cleanup", ...params, dryRun: true });
+        return formatResult(result);
+    });
 }

package/dist/tools/ai.js

@@ -2,7 +2,7 @@ import { z } from "zod";
 import { formatResult } from "../client.js";
 export function registerAiTools(server, client) {
     server.tool("conduyt_ai_insights", "Query AI-powered CRM insights. 8 query types available: pipeline_health (deals per stage, stale deals), sms_drip_status (SMS drip overview by provider/step), sms_responses_untouched (replied contacts with no follow-up), agent_followups (per-agent task performance), email_performance (open/click/reply rates), smart_view_summary (contact counts per saved view), team_activity (per-user activity counts), contact_import_history (recent import batches).", {
-        type: z.enum([
+        query: z.enum([
             "pipeline_health",
             "sms_drip_status",
             "sms_responses_untouched",
@@ -12,9 +12,22 @@ export function registerAiTools(server, client) {
             "team_activity",
             "contact_import_history",
         ]).describe("Insight query type"),
-        days: z.number().optional().describe("Lookback period in days (default varies by type)"),
-        pipelineId: z.string().optional().describe("Pipeline UUID (for pipeline_health)"),
-        userId: z.string().optional().describe("User UUID (for agent_followups)"),
+        filters: z
+            .object({
+            dateRange: z
+                .object({
+                from: z.string().describe("ISO 8601 date"),
+                to: z.string().describe("ISO 8601 date"),
+            })
+                .optional()
+                .describe("Date range to scope the query"),
+            provider: z.string().optional().describe("Filter by provider (e.g. for sms_drip_status)"),
+            pipelineId: z.string().optional().describe("Pipeline UUID (for pipeline_health)"),
+            userId: z.string().optional().describe("User UUID (for agent_followups)"),
+            smartListId: z.string().optional().describe("Smart list UUID (for smart_view_summary)"),
+        })
+            .optional()
+            .describe("Optional filters; supply the subset relevant to the query"),
     }, async (params) => {
         const result = await client.post("/api/v1/ai/insights", params);
         return formatResult(result);

package/dist/tools/automations.js

@@ -23,7 +23,9 @@ export function registerAutomationTools(server, client) {
         name: z.string().describe("Automation name"),
         description: z.string().optional().describe("Description of what this automation does"),
         triggerEvent: z.string().describe("Trigger event (e.g. 'contact.created', 'deal.stage_changed', 'tag.added', 'scheduled')"),
-        kind: z.enum(["native", "n8n"]).optional().describe("Automation type — 'native' for built-in graph engine, 'n8n' for n8n webhook (default: 'n8n')"),
+        kind: z.enum(["native", "n8n"]).optional().describe("Automation type — 'native' for the built-in graph engine (use `actions`), 'n8n' for an external n8n webhook (requires n8nWorkflowId + n8nWebhookUrl). For agent-built automations use 'native'."),
+        n8nWorkflowId: z.string().optional().describe("n8n workflow ID (required when kind='n8n')"),
+        n8nWebhookUrl: z.string().optional().describe("n8n webhook URL (required when kind='n8n')"),
         actions: z.any().optional().describe("Actions graph — v1: [{type, config}], v2: {nodes:[], startNodeId}"),
         graphVersion: z.number().optional().describe("Graph version — 1 (legacy array) or 2 (node graph). Default 1"),
         schedule: z.string().optional().describe("5-field cron expression (required if triggerEvent='scheduled')"),

package/dist/tools/bulk.js

@@ -68,4 +68,63 @@ export function registerBulkTools(server, client) {
         const result = await client.get(`/api/v1/deals/export?${qp}`);
         return formatResult(result);
     });
+    server.tool("conduyt_bulk_tag_contacts", "Add one tag to many contacts in a single call. Requires contacts:edit.", {
+        contactIds: z.array(z.string()).describe("Contact UUIDs to tag"),
+        tagId: z.string().describe("Tag UUID to add to all of them"),
+    }, async (params) => {
+        const result = await client.post("/api/v1/bulk/contacts/tag", params);
+        return formatResult(result);
+    });
+    server.tool("conduyt_bulk_untag_contacts", "Remove one tag from many contacts in a single call. Requires contacts:edit.", {
+        contactIds: z.array(z.string()).describe("Contact UUIDs to untag"),
+        tagId: z.string().describe("Tag UUID to remove from all of them"),
+    }, async (params) => {
+        const result = await client.post("/api/v1/bulk/contacts/untag", params);
+        return formatResult(result);
+    });
+    server.tool("conduyt_bulk_edit_contacts", "Apply the SAME field changes to many contacts at once (one updates object → all ids). For different values per contact, use conduyt_bulk_update_contacts. Requires contacts:edit.", {
+        ids: z.array(z.string()).describe("Contact UUIDs to edit"),
+        updates: z.record(z.any()).describe("Fields to set on every listed contact, e.g. { assignedTo: '<uuid>', source: 'webinar', customFields: { tier: 'gold' } }. customFields merge into existing values."),
+    }, async (params) => {
+        const result = await client.post("/api/v1/bulk/contacts/edit", params);
+        return formatResult(result);
+    });
+    server.tool("conduyt_bulk_update_contacts", "Apply DIFFERENT field changes per contact in one call (each row carries its own id + fields). For the same change across many, use conduyt_bulk_edit_contacts. Requires contacts:edit.", {
+        updates: z
+            .array(z.record(z.any()))
+            .describe("Array of per-contact update objects; each MUST include 'id' plus the fields to change, e.g. [{ id: '<uuid>', firstName: 'Ada' }, …]"),
+    }, async (params) => {
+        const result = await client.post("/api/v1/bulk/contacts/update", params);
+        return formatResult(result);
+    });
+    server.tool("conduyt_bulk_delete_contacts", "Soft-delete many contacts in a single call. Requires contacts:delete.", {
+        ids: z.array(z.string()).describe("Contact UUIDs to delete"),
+    }, async (params) => {
+        const result = await client.post("/api/v1/bulk/contacts/delete", params);
+        return formatResult(result);
+    });
+    server.tool("conduyt_bulk_dnc_contacts", "Add or remove a Do-Not-Contact / litigator mark for many contacts (compliance action). The mark is keyed on each contact's phone number, so contacts without a phone are skipped. Base permission is contacts:edit; removing any mark, or adding a litigator mark, additionally requires an owner/admin role server-side (others get 403).", {
+        contactIds: z.array(z.string()).describe("Contact UUIDs (those without a phone number are skipped)"),
+        action: z.enum(["add", "remove"]).describe("Add or remove the mark"),
+        tier: z.enum(["dnc", "litigator"]).describe("Which list: 'dnc' (standard do-not-contact) or 'litigator' (known litigator; admin-only to add)"),
+        reason: z.string().optional().describe("Reason recorded with the action for the compliance audit trail"),
+    }, async (params) => {
+        const result = await client.post("/api/v1/bulk/contacts/dnc", params);
+        return formatResult(result);
+    });
+    server.tool("conduyt_bulk_edit_deals", "Apply the SAME field changes to many deals at once (one updates object → all ids) — e.g. reassign a set of deals to a user. For different values per deal, use conduyt_bulk_update_deals. Requires deals:edit.", {
+        ids: z.array(z.string()).describe("Deal UUIDs to edit"),
+        updates: z.record(z.any()).describe("Fields to set on every listed deal, e.g. { assignedTo: '<uuid>', stageId: '<uuid>', priority: 'high' }"),
+    }, async (params) => {
+        const result = await client.post("/api/v1/bulk/deals/edit", params);
+        return formatResult(result);
+    });
+    server.tool("conduyt_bulk_update_deals", "Apply DIFFERENT field changes per deal in one call (each row carries its own id + fields). For the same change across many, use conduyt_bulk_edit_deals. Requires deals:edit.", {
+        updates: z
+            .array(z.record(z.any()))
+            .describe("Array of per-deal update objects; each MUST include 'id' plus the fields to change, e.g. [{ id: '<uuid>', value: 5000 }, …]"),
+    }, async (params) => {
+        const result = await client.post("/api/v1/bulk/deals/update", params);
+        return formatResult(result);
+    });
 }

package/dist/tools/contacts.js

@@ -17,7 +17,7 @@ export function registerContactTools(server, client) {
         if (source)
             params.set("source", source);
         if (assignedTo)
-            params.set("assignedTo", assignedTo);
+            params.set("assigned_to", assignedTo);
         if (page)
             params.set("page", String(page));
         if (per_page)
@@ -38,7 +38,7 @@ export function registerContactTools(server, client) {
         phone: z.string().optional().describe("Phone number"),
         company: z.string().optional().describe("Company name"),
         source: z.string().optional().describe("Lead source (e.g. 'website', 'referral', 'import')"),
-        tags: z.array(z.string()).optional().describe("Tag names to apply"),
+        tags: z.array(z.string()).optional().describe("Tag UUIDs to apply (tags must already exist — create them with conduyt_create_tag first)"),
     }, async (params) => {
         const result = await client.post("/api/v1/contacts", params);
         return formatResult(result);
@@ -54,11 +54,11 @@ export function registerContactTools(server, client) {
         const result = await client.patch(`/api/v1/contacts/${id}`, updates);
         return formatResult(result);
     });
-    server.tool("conduyt_add_tags", "Add one or more tags to a contact. Creates the tag if it doesn't exist.", {
+    server.tool("conduyt_add_tags", "Add one or more existing tags to a contact by tag UUID. Tags must already exist (create them with conduyt_create_tag); this does NOT create tags.", {
         contactId: z.string().describe("Contact UUID"),
-        tags: z.array(z.string()).describe("Tag names to add"),
-    }, async ({ contactId, tags }) => {
-        const result = await client.post(`/api/v1/contacts/${contactId}/tags`, { tags });
+        tagIds: z.array(z.string()).describe("Tag UUIDs to add (must already exist)"),
+    }, async ({ contactId, tagIds }) => {
+        const result = await client.post(`/api/v1/contacts/${contactId}/tags`, { tagIds });
         return formatResult(result);
     });
 }

package/dist/tools/deals.js

@@ -12,11 +12,11 @@ export function registerDealTools(server, client) {
     }, async ({ pipelineId, stageId, assignedTo, status, search, page, per_page }) => {
         const params = new URLSearchParams();
         if (pipelineId)
-            params.set("pipelineId", pipelineId);
+            params.set("pipeline", pipelineId);
         if (stageId)
-            params.set("stageId", stageId);
+            params.set("stage", stageId);
         if (assignedTo)
-            params.set("assignedTo", assignedTo);
+            params.set("assigned_to", assignedTo);
         if (status)
             params.set("status", status);
         if (search)
@@ -70,4 +70,38 @@ export function registerDealTools(server, client) {
         const result = await client.patch(`/api/v1/deals/${id}`, updates);
         return formatResult(result);
     });
+    server.tool("conduyt_import_deals", "Bulk-import deals from a list of rows in one call. Runs on the canonical import engine — pipelines and stages are resolved by NAME (create them first with conduyt_create_pipeline), contacts by email. Deduplicates on title + pipeline + contact, and intentionally does NOT fire deal-created automations/webhooks/SMS/email (bulk imports are side-effect-free by design). Requires an owner/admin API key. Returns the created/skipped/duplicate counts and any per-row errors.", {
+        deals: z
+            .array(z.object({
+            title: z.string().describe("Deal title (required)"),
+            pipelineName: z.string().describe("Pipeline name (resolved by name; required)"),
+            stageName: z.string().optional().describe("Stage name within the pipeline; defaults to the first stage if omitted or unmatched"),
+            contactEmail: z.string().optional().describe("Email of an existing contact to link (resolved by email)"),
+            companyId: z.string().optional().describe("Company UUID to link (must belong to your account; invalid/deleted/cross-account IDs are reported as row errors)"),
+            value: z.number().optional().describe("Deal value (numeric, in the deal's currency)"),
+            currency: z.string().optional().describe("ISO 4217 currency code, e.g. 'GBP'. Defaults to USD."),
+            status: z.string().optional().describe("Deal status (default 'open')"),
+            priority: z.string().optional().describe("Deal priority, e.g. 'low', 'medium', 'high'"),
+            probability: z.number().min(0).max(1).optional().describe("Win probability as a 0–1 fraction (e.g. 0.75 = 75%); clamped to 0–1"),
+            expectedCloseDate: z.string().optional().describe("Expected close date (ISO 8601, e.g. '2026-09-30')"),
+            customFields: z.record(z.any()).optional().describe("Structured custom-field values keyed by field key, e.g. { limit_of_indemnity: 5000000 }"),
+        }))
+            .describe("Deals to import (1 or more rows; max matches the account import cap)"),
+    }, async ({ deals }) => {
+        const created = (await client.post("/api/v1/imports", {
+            objectType: "opportunities",
+            format: "json",
+            fileName: "deal-import.csv",
+            rows: deals,
+        }));
+        const jobId = created.data?.id;
+        if (!jobId) {
+            return formatResult({
+                error: "Import job was created but no job id was returned",
+                createResponse: created,
+            });
+        }
+        const result = await client.post(`/api/v1/imports/${jobId}/process`, {});
+        return formatResult({ jobId, ...result });
+    });
 }

package/dist/tools/discovery.js

@@ -11,17 +11,14 @@ export function registerDiscoveryTools(server, client) {
     });
     server.tool("conduyt_search", "Global search across all CRM entities — contacts, deals, companies, tasks.", {
         query: z.string().describe("Search query — matches names, emails, phone numbers, deal titles"),
-        type: z.enum(["contacts", "deals", "companies", "tasks"]).optional().describe("Limit search to a specific entity type"),
-        page: z.number().optional().describe("Page number (default 1)"),
-        per_page: z.number().optional().describe("Results per page (default 25, max 100)"),
-    }, async ({ query, type, page, per_page }) => {
+        limit: z.number().optional().describe("Max results to return (default 50)"),
+        cursor: z.string().optional().describe("Pagination cursor from a previous response's nextCursor"),
+    }, async ({ query, limit, cursor }) => {
         const params = new URLSearchParams({ q: query });
-        if (type)
-            params.set("type", type);
-        if (page)
-            params.set("page", String(page));
-        if (per_page)
-            params.set("per_page", String(per_page));
+        if (limit)
+            params.set("limit", String(limit));
+        if (cursor)
+            params.set("cursor", cursor);
         const result = await client.get(`/api/v1/search?${params}`);
         return formatResult(result);
     });

package/dist/tools/invoices.js

@@ -47,7 +47,9 @@ export function registerInvoiceTools(server, client) {
         notes: z.string().optional().describe("Notes visible to client"),
         terms: z.string().optional().describe("Payment terms"),
     }, async (params) => {
-        const result = await client.post("/api/v1/invoices", params);
+        // The create route requires a valid currency (no server-side default),
+        // so always send one — honoring the documented USD default.
+        const result = await client.post("/api/v1/invoices", { ...params, currency: params.currency ?? "USD" });
         return formatResult(result);
     });
     server.tool("conduyt_update_invoice", "Update a draft invoice — change items, contact, due date, or terms. Cannot update paid or voided invoices.", {

package/dist/tools/notifications.js

@@ -19,7 +19,7 @@ export function registerNotificationTools(server, client) {
         message: z.string().describe("Notification body (max 1000 chars)"),
         userId: z.string().optional().describe("Target user UUID (defaults to API key owner)"),
         url: z.string().optional().describe("Deep link URL when notification is clicked"),
-        metadata: z.any().optional().describe("Additional data attached to the notification"),
+        metadata: z.record(z.string(), z.any()).optional().describe("Additional data attached to the notification (must be a key/value object)"),
         push: z.boolean().optional().describe("Send web push notification (default true)"),
     }, async (params) => {
         const result = await client.post("/api/v1/notifications", params);

package/dist/tools/tasks.js

@@ -3,25 +3,49 @@ import { formatResult } from "../client.js";
 export function registerTaskTools(server, client) {
     server.tool("conduyt_list_tasks", "List tasks with filtering by assignee, status, or due date. Returns task title, description, due date, priority, and assignee.", {
         assignedTo: z.string().optional().describe("Filter by assigned user UUID"),
-        status: z.enum(["pending", "in_progress", "completed", "cancelled"]).optional().describe("Filter by task status"),
-        dueDate: z.string().optional().describe("Filter by due date (ISO 8601 format, e.g. '2026-04-30')"),
+        status: z.enum(["todo", "in_progress", "done"]).optional().describe("Filter by task status"),
+        priority: z.enum(["low", "medium", "high", "urgent"]).optional().describe("Filter by task priority"),
+        dueFrom: z.string().optional().describe("Filter tasks due on/after this date (ISO 8601, e.g. '2026-04-30')"),
+        dueTo: z.string().optional().describe("Filter tasks due on/before this date (ISO 8601)"),
+        overdue: z.boolean().optional().describe("Filter to overdue open tasks"),
+        tab: z.enum(["my_tasks", "all", "completed"]).optional().describe("Task queue tab filter"),
+        search: z.string().optional().describe("Search task title or description"),
         contactId: z.string().optional().describe("Filter tasks linked to a specific contact"),
+        dealId: z.string().optional().describe("Filter tasks linked to a specific deal"),
         page: z.number().optional().describe("Page number (default 1)"),
         per_page: z.number().optional().describe("Results per page (default 25, max 100)"),
-    }, async ({ assignedTo, status, dueDate, contactId, page, per_page }) => {
+        sort: z.enum(["createdAt", "updatedAt", "dueDate", "priority", "title", "status"]).optional().describe("Sort field"),
+        order: z.enum(["asc", "desc"]).optional().describe("Sort order"),
+    }, async ({ assignedTo, status, priority, dueFrom, dueTo, overdue, tab, search, contactId, dealId, page, per_page, sort, order }) => {
         const params = new URLSearchParams();
         if (assignedTo)
             params.set("assignedTo", assignedTo);
         if (status)
             params.set("status", status);
-        if (dueDate)
-            params.set("dueDate", dueDate);
+        if (priority)
+            params.set("priority", priority);
+        if (dueFrom)
+            params.set("dueFrom", dueFrom);
+        if (dueTo)
+            params.set("dueTo", dueTo);
+        if (overdue !== undefined)
+            params.set("overdue", String(overdue));
+        if (tab)
+            params.set("tab", tab);
+        if (search)
+            params.set("search", search);
         if (contactId)
             params.set("contactId", contactId);
+        if (dealId)
+            params.set("dealId", dealId);
         if (page)
             params.set("page", String(page));
         if (per_page)
             params.set("per_page", String(per_page));
+        if (sort)
+            params.set("sort", sort);
+        if (order)
+            params.set("order", order);
         const result = await client.get(`/api/v1/tasks?${params}`);
         return formatResult(result);
     });
@@ -30,6 +54,7 @@ export function registerTaskTools(server, client) {
         description: z.string().optional().describe("Task description"),
         dueDate: z.string().optional().describe("Due date (ISO 8601)"),
         priority: z.enum(["low", "medium", "high", "urgent"]).optional().describe("Task priority"),
+        status: z.enum(["todo", "in_progress", "done"]).optional().describe("Task status (default: todo)"),
         assignedTo: z.string().optional().describe("Assign to user UUID"),
         contactId: z.string().optional().describe("Link to a contact UUID"),
         dealId: z.string().optional().describe("Link to a deal UUID"),

package/dist/tools/users.js

@@ -33,7 +33,7 @@ export function registerUserTools(server, client) {
         const result = await client.post("/api/v1/users", params);
         return formatResult(result);
     });
-    server.tool("conduyt_update_user", "Update a team member's profile, role, or permissions. Cannot modify your own role.", {
+    server.tool("conduyt_update_user", "Update a team member's profile, role, or permissions. Cannot modify your own role. To activate/deactivate a user, use conduyt_deactivate_user / conduyt_reactivate_user (status cannot be changed here).", {
         id: z.string().describe("User UUID"),
         firstName: z.string().optional().describe("Updated first name"),
         lastName: z.string().optional().describe("Updated last name"),
@@ -41,7 +41,6 @@ export function registerUserTools(server, client) {
         phone: z.string().optional().describe("Updated phone"),
         role: z.enum(["member", "admin", "owner"]).optional().describe("Updated role"),
         permissions: z.array(z.string()).optional().describe("Updated permission scopes"),
-        isActive: z.boolean().optional().describe("Activate or deactivate the user"),
     }, async ({ id, ...updates }) => {
         const result = await client.patch(`/api/v1/users/${id}`, updates);
         return formatResult(result);
@@ -62,4 +61,18 @@ export function registerUserTools(server, client) {
         const result = await client.post("/api/v1/users/invite", params);
         return formatResult(result);
     });
+    server.tool("conduyt_deactivate_user", "Deactivate (soft-disable) a team member so they can no longer sign in. Optionally reassign their open records to another user. Requires the users:deactivate permission.", {
+        id: z.string().describe("User UUID to deactivate"),
+        reassignTo: z.string().optional().describe("User UUID to reassign the deactivated user's records to"),
+    }, async ({ id, reassignTo }) => {
+        const qs = reassignTo ? `?reassign_to=${encodeURIComponent(reassignTo)}` : "";
+        const result = await client.post(`/api/v1/users/${id}/deactivate${qs}`, {});
+        return formatResult(result);
+    });
+    server.tool("conduyt_reactivate_user", "Reactivate a previously deactivated team member, restoring their access.", {
+        id: z.string().describe("User UUID to reactivate"),
+    }, async ({ id }) => {
+        const result = await client.post(`/api/v1/users/${id}/reactivate`, {});
+        return formatResult(result);
+    });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "conduyt-mcp",
-  "version": "4.2.0",
+  "version": "4.3.0",
   "description": "MCP server for Conduyt CRM — expose CRM operations as AI-accessible tools",
   "type": "module",
   "main": "dist/index.js",