pulsemcp-cms-admin-mcp-server 0.9.13 → 0.9.15

package/shared/pulsemcp-admin-client/lib/update-post.js

@@ -1,3 +1,4 @@
+import { adminFetch } from './admin-fetch.js';
 export async function updatePost(apiKey, baseUrl, slug, params) {
     const url = new URL(`/posts/${slug}`, baseUrl);
     // Build form data for the PUT request
@@ -50,7 +51,7 @@ export async function updatePost(apiKey, baseUrl, slug, params) {
             formData.append('post[featured_mcp_client_ids][]', id.toString());
         });
     }
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'PUT',
         headers: {
             'X-API-Key': apiKey,

package/shared/pulsemcp-admin-client/lib/update-redirect.js

@@ -1,3 +1,4 @@
+import { adminFetch } from './admin-fetch.js';
 export async function updateRedirect(apiKey, baseUrl, id, params) {
     const url = new URL(`/api/redirects/${id}`, baseUrl);
     const body = {};
@@ -10,7 +11,7 @@ export async function updateRedirect(apiKey, baseUrl, id, params) {
     if (params.status !== undefined) {
         body.status = params.status;
     }
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'PUT',
         headers: {
             'X-API-Key': apiKey,

package/shared/pulsemcp-admin-client/lib/update-unofficial-mirror.js

@@ -1,3 +1,4 @@
+import { adminFetch } from './admin-fetch.js';
 export async function updateUnofficialMirror(apiKey, baseUrl, id, params) {
     const url = new URL(`/api/unofficial_mirrors/${id}`, baseUrl);
     const body = {};
@@ -20,7 +21,7 @@ export async function updateUnofficialMirror(apiKey, baseUrl, id, params) {
     if (params.next_name !== undefined) {
         body.next_name = params.next_name;
     }
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'PUT',
         headers: {
             'X-API-Key': apiKey,

package/shared/pulsemcp-admin-client/lib/upload-image.js

@@ -1,3 +1,4 @@
+import { adminFetch } from './admin-fetch.js';
 export async function uploadImage(apiKey, baseUrl, postSlug, fileName, fileData) {
     const url = new URL('/upload_image', baseUrl);
     // Create form data for multipart upload
@@ -9,7 +10,7 @@ export async function uploadImage(apiKey, baseUrl, postSlug, fileName, fileData)
     // Add folder and filepath as documented in the API
     formData.append('folder', `posts/${postSlug}`);
     formData.append('filepath', fileName);
-    const response = await fetch(url.toString(), {
+    const response = await adminFetch(url.toString(), {
         method: 'POST',
         headers: {
             'X-API-Key': apiKey,

package/shared/pulsemcp-admin-client/pulsemcp-admin-client.integration-mock.js

@@ -1023,5 +1023,32 @@ export function createMockPulseMCPAdminClient(mockData) {
                 },
             };
         },
+        async createTenant(params) {
+            return {
+                id: 99,
+                slug: params.slug,
+                is_admin: false,
+                enrichments: {},
+                created_at: '2024-01-01T00:00:00Z',
+                updated_at: '2024-01-01T00:00:00Z',
+            };
+        },
+        async createApiKey(params) {
+            return {
+                id: 99,
+                name: params.name,
+                tenant_id: 1,
+                tenant_slug: params.tenant_slug,
+                tenant_is_admin: false,
+                permission_level: (params.permission_level || 'full_access'),
+                key: '00000000-0000-0000-0000-000000000000',
+                created_at: '2024-01-01T00:00:00Z',
+            };
+        },
+        async recacheMCPServer(slug) {
+            return {
+                message: `Cache successfully refreshed for ${slug}.`,
+            };
+        },
     };
 }

package/shared/server.d.ts

@@ -1,5 +1,5 @@
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
-import type { Post, PostsResponse, CreatePostParams, UpdatePostParams, ImageUploadResponse, Author, AuthorsResponse, MCPServer, MCPClient, MCPImplementation, MCPImplementationsResponse, SaveMCPImplementationParams, CreateMCPImplementationParams, Provider, ProvidersResponse, OfficialMirrorQueueStatus, OfficialMirrorQueueResponse, OfficialMirrorQueueItemDetail, OfficialMirrorQueueActionResponse, UnofficialMirror, UnofficialMirrorsResponse, CreateUnofficialMirrorParams, UpdateUnofficialMirrorParams, OfficialMirrorRest, OfficialMirrorsResponse, Tenant, TenantsResponse, McpJson, McpJsonsResponse, CreateMcpJsonParams, UpdateMcpJsonParams, UnifiedMCPServer, UnifiedMCPServersResponse, UpdateUnifiedMCPServerParams, Redirect, RedirectsResponse, RedirectStatus, CreateRedirectParams, UpdateRedirectParams, GoodJob, GoodJobsResponse, GoodJobStatus, GoodJobCronSchedule, GoodJobProcess, GoodJobStatistics, GoodJobActionResponse, GoodJobCleanupResponse, ProctorRunExamParams, ProctorRunExamResponse, ProctorSaveResultsParams, ProctorSaveResultsResponse, ProctorRunsResponse, GetProctorRunsParams, ProctorMetadataResponse, DiscoveredUrlsResponse, MarkDiscoveredUrlProcessedParams, MarkDiscoveredUrlProcessedResponse, DiscoveredUrlStats, MozMetricsResponse, MozBacklinksResponse, MozStoredMetricsResponse } from './types.js';
+import type { Post, PostsResponse, CreatePostParams, UpdatePostParams, ImageUploadResponse, Author, AuthorsResponse, MCPServer, MCPClient, MCPImplementation, MCPImplementationsResponse, SaveMCPImplementationParams, CreateMCPImplementationParams, Provider, ProvidersResponse, OfficialMirrorQueueStatus, OfficialMirrorQueueResponse, OfficialMirrorQueueItemDetail, OfficialMirrorQueueActionResponse, UnofficialMirror, UnofficialMirrorsResponse, CreateUnofficialMirrorParams, UpdateUnofficialMirrorParams, OfficialMirrorRest, OfficialMirrorsResponse, Tenant, TenantsResponse, McpJson, McpJsonsResponse, CreateMcpJsonParams, UpdateMcpJsonParams, UnifiedMCPServer, UnifiedMCPServersResponse, UpdateUnifiedMCPServerParams, Redirect, RedirectsResponse, RedirectStatus, CreateRedirectParams, UpdateRedirectParams, GoodJob, GoodJobsResponse, GoodJobStatus, GoodJobCronSchedule, GoodJobProcess, GoodJobStatistics, GoodJobActionResponse, GoodJobCleanupResponse, ProctorRunExamParams, ProctorRunExamResponse, ProctorSaveResultsParams, ProctorSaveResultsResponse, ProctorRunsResponse, GetProctorRunsParams, ProctorMetadataResponse, DiscoveredUrlsResponse, MarkDiscoveredUrlProcessedParams, MarkDiscoveredUrlProcessedResponse, DiscoveredUrlStats, MozMetricsResponse, MozBacklinksResponse, MozStoredMetricsResponse, CreateTenantParams, ApiKey, CreateApiKeyParams, RecacheMCPServerResponse } from './types.js';
 export interface IPulseMCPAdminClient {
     getPosts(params?: {
         search?: string;
@@ -102,6 +102,8 @@ export interface IPulseMCPAdminClient {
         offset?: number;
     }): Promise<TenantsResponse>;
     getTenant(idOrSlug: number | string): Promise<Tenant>;
+    createTenant(params: CreateTenantParams): Promise<Tenant>;
+    createApiKey(params: CreateApiKeyParams): Promise<ApiKey>;
     getMcpJsons(params?: {
         unofficial_mirror_id?: number;
         q?: string;
@@ -124,6 +126,7 @@ export interface IPulseMCPAdminClient {
     }): Promise<UnifiedMCPServersResponse>;
     getUnifiedMCPServer(slug: string): Promise<UnifiedMCPServer>;
     updateUnifiedMCPServer(implementationId: number, params: UpdateUnifiedMCPServerParams): Promise<UnifiedMCPServer>;
+    recacheMCPServer(slug: string): Promise<RecacheMCPServerResponse>;
     getRedirects(params?: {
         q?: string;
         status?: RedirectStatus;
@@ -290,6 +293,8 @@ export declare class PulseMCPAdminClient implements IPulseMCPAdminClient {
         offset?: number;
     }): Promise<TenantsResponse>;
     getTenant(idOrSlug: number | string): Promise<Tenant>;
+    createTenant(params: CreateTenantParams): Promise<Tenant>;
+    createApiKey(params: CreateApiKeyParams): Promise<ApiKey>;
     getMcpJsons(params?: {
         unofficial_mirror_id?: number;
         q?: string;
@@ -312,6 +317,7 @@ export declare class PulseMCPAdminClient implements IPulseMCPAdminClient {
     }): Promise<UnifiedMCPServersResponse>;
     getUnifiedMCPServer(slug: string): Promise<UnifiedMCPServer>;
     updateUnifiedMCPServer(implementationId: number, params: UpdateUnifiedMCPServerParams): Promise<UnifiedMCPServer>;
+    recacheMCPServer(slug: string): Promise<RecacheMCPServerResponse>;
     getRedirects(params?: {
         q?: string;
         status?: RedirectStatus;
@@ -385,6 +391,9 @@ export declare function createMCPServer(options: CreateMCPServerOptions): {
             _meta?: {
                 [x: string]: unknown;
                 progressToken?: string | number | undefined;
+                "io.modelcontextprotocol/related-task"?: {
+                    taskId: string;
+                } | undefined;
             } | undefined;
         } | undefined;
     }, {
@@ -393,12 +402,20 @@ export declare function createMCPServer(options: CreateMCPServerOptions): {
             [x: string]: unknown;
             _meta?: {
                 [x: string]: unknown;
+                progressToken?: string | number | undefined;
+                "io.modelcontextprotocol/related-task"?: {
+                    taskId: string;
+                } | undefined;
             } | undefined;
         } | undefined;
     }, {
         [x: string]: unknown;
         _meta?: {
             [x: string]: unknown;
+            progressToken?: string | number | undefined;
+            "io.modelcontextprotocol/related-task"?: {
+                taskId: string;
+            } | undefined;
         } | undefined;
     }>;
     registerHandlers: (server: Server, clientFactory?: ClientFactory) => Promise<void>;

package/shared/server.js

@@ -71,6 +71,9 @@ import { getDiscoveredUrlStats } from './pulsemcp-admin-client/lib/get-discovere
 import { getMozMetrics } from './pulsemcp-admin-client/lib/get-moz-metrics.js';
 import { getMozBacklinks } from './pulsemcp-admin-client/lib/get-moz-backlinks.js';
 import { getMozStoredMetrics } from './pulsemcp-admin-client/lib/get-moz-stored-metrics.js';
+import { recacheMCPServer } from './pulsemcp-admin-client/lib/recache-mcp-server.js';
+import { createTenant } from './pulsemcp-admin-client/lib/create-tenant.js';
+import { createApiKey } from './pulsemcp-admin-client/lib/create-api-key.js';
 // PulseMCP Admin API client implementation
 export class PulseMCPAdminClient {
     apiKey;
@@ -184,13 +187,19 @@ export class PulseMCPAdminClient {
     async getOfficialMirror(id) {
         return getOfficialMirror(this.apiKey, this.baseUrl, id);
     }
-    // Tenant REST API methods (read-only)
+    // Tenant REST API methods
     async getTenants(params) {
         return getTenants(this.apiKey, this.baseUrl, params);
     }
     async getTenant(idOrSlug) {
         return getTenant(this.apiKey, this.baseUrl, idOrSlug);
     }
+    async createTenant(params) {
+        return createTenant(this.apiKey, this.baseUrl, params);
+    }
+    async createApiKey(params) {
+        return createApiKey(this.apiKey, this.baseUrl, params);
+    }
     // MCP JSON REST API methods
     async getMcpJsons(params) {
         return getMcpJsons(this.apiKey, this.baseUrl, params);
@@ -217,6 +226,9 @@ export class PulseMCPAdminClient {
     async updateUnifiedMCPServer(implementationId, params) {
         return updateUnifiedMCPServer(this.apiKey, this.baseUrl, implementationId, params);
     }
+    async recacheMCPServer(slug) {
+        return recacheMCPServer(this.apiKey, this.baseUrl, slug);
+    }
     // Redirect REST API methods
     async getRedirects(params) {
         return getRedirects(this.apiKey, this.baseUrl, params);

package/shared/tools/create-api-key.d.ts

@@ -0,0 +1,39 @@
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import type { ClientFactory } from '../server.js';
+export declare function createApiKey(_server: Server, clientFactory: ClientFactory): {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            tenant_slug: {
+                type: string;
+                description: "The slug of the tenant to create the API key for";
+            };
+            name: {
+                type: string;
+                description: "Optional display name for the API key";
+            };
+            permission_level: {
+                type: string;
+                enum: string[];
+                description: "Permission level for the key: read_only, read_and_upsert, or full_access. Defaults to full_access.";
+            };
+        };
+        required: string[];
+    };
+    handler: (args: unknown) => Promise<{
+        content: {
+            type: string;
+            text: string;
+        }[];
+        isError?: undefined;
+    } | {
+        content: {
+            type: string;
+            text: string;
+        }[];
+        isError: boolean;
+    }>;
+};
+//# sourceMappingURL=create-api-key.d.ts.map

package/shared/tools/create-api-key.js

@@ -0,0 +1,78 @@
+import { z } from 'zod';
+const PARAM_DESCRIPTIONS = {
+    tenant_slug: 'The slug of the tenant to create the API key for',
+    name: 'Optional display name for the API key',
+    permission_level: 'Permission level for the key: read_only, read_and_upsert, or full_access. Defaults to full_access.',
+};
+const CreateApiKeySchema = z.object({
+    tenant_slug: z.string().describe(PARAM_DESCRIPTIONS.tenant_slug),
+    name: z.string().optional().describe(PARAM_DESCRIPTIONS.name),
+    permission_level: z
+        .enum(['read_only', 'read_and_upsert', 'full_access'])
+        .optional()
+        .describe(PARAM_DESCRIPTIONS.permission_level),
+});
+export function createApiKey(_server, clientFactory) {
+    return {
+        name: 'create_api_key',
+        description: `Create an API key for a specified tenant. Returns the raw key value, which is only available at creation time.
+
+Example request:
+{
+  "tenant_slug": "acme-corp",
+  "name": "Production Key",
+  "permission_level": "read_and_upsert"
+}
+
+Use cases:
+- Provision API access for a new tenant
+- Create keys with specific permission levels for different use cases
+- Generate read-only keys for monitoring integrations`,
+        inputSchema: {
+            type: 'object',
+            properties: {
+                tenant_slug: { type: 'string', description: PARAM_DESCRIPTIONS.tenant_slug },
+                name: { type: 'string', description: PARAM_DESCRIPTIONS.name },
+                permission_level: {
+                    type: 'string',
+                    enum: ['read_only', 'read_and_upsert', 'full_access'],
+                    description: PARAM_DESCRIPTIONS.permission_level,
+                },
+            },
+            required: ['tenant_slug'],
+        },
+        handler: async (args) => {
+            const validatedArgs = CreateApiKeySchema.parse(args);
+            const client = clientFactory();
+            try {
+                const apiKey = await client.createApiKey({
+                    tenant_slug: validatedArgs.tenant_slug,
+                    name: validatedArgs.name,
+                    permission_level: validatedArgs.permission_level,
+                });
+                let content = `Successfully created API key!\n\n`;
+                content += `**ID:** ${apiKey.id}\n`;
+                if (apiKey.name) {
+                    content += `**Name:** ${apiKey.name}\n`;
+                }
+                content += `**Tenant:** ${apiKey.tenant_slug} (ID: ${apiKey.tenant_id})\n`;
+                content += `**Permission Level:** ${apiKey.permission_level}\n`;
+                content += `**Key:** \`${apiKey.key}\`\n`;
+                content += `**Created:** ${apiKey.created_at}\n`;
+                content += `\n> **Important:** Save this key now — it cannot be retrieved again.`;
+                return { content: [{ type: 'text', text: content }] };
+            }
+            catch (error) {
+                return {
+                    content: [
+                        {
+                            type: 'text',
+                            text: `Error creating API key: ${error instanceof Error ? error.message : String(error)}`,
+                        },
+                    ],
+                    isError: true,
+                };
+            }
+        },
+    };
+}

package/shared/tools/create-tenant.d.ts

@@ -0,0 +1,30 @@
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import type { ClientFactory } from '../server.js';
+export declare function createTenant(_server: Server, clientFactory: ClientFactory): {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            slug: {
+                type: string;
+                description: "Unique slug identifier for the new tenant (e.g., \"acme-corp\")";
+            };
+        };
+        required: string[];
+    };
+    handler: (args: unknown) => Promise<{
+        content: {
+            type: string;
+            text: string;
+        }[];
+        isError?: undefined;
+    } | {
+        content: {
+            type: string;
+            text: string;
+        }[];
+        isError: boolean;
+    }>;
+};
+//# sourceMappingURL=create-tenant.d.ts.map

package/shared/tools/create-tenant.js

@@ -0,0 +1,58 @@
+import { z } from 'zod';
+const PARAM_DESCRIPTIONS = {
+    slug: 'Unique slug identifier for the new tenant (e.g., "acme-corp")',
+};
+const CreateTenantSchema = z.object({
+    slug: z.string().describe(PARAM_DESCRIPTIONS.slug),
+});
+export function createTenant(_server, clientFactory) {
+    return {
+        name: 'create_tenant',
+        description: `Create a new tenant for sub-registry provisioning.
+
+Example request:
+{
+  "slug": "acme-corp"
+}
+
+Use cases:
+- Provision a new sub-registry tenant
+- Set up a new organization in the PulseMCP platform`,
+        inputSchema: {
+            type: 'object',
+            properties: {
+                slug: { type: 'string', description: PARAM_DESCRIPTIONS.slug },
+            },
+            required: ['slug'],
+        },
+        handler: async (args) => {
+            const validatedArgs = CreateTenantSchema.parse(args);
+            const client = clientFactory();
+            try {
+                const tenant = await client.createTenant({ slug: validatedArgs.slug });
+                let content = `Successfully created tenant!\n\n`;
+                content += `**ID:** ${tenant.id}\n`;
+                content += `**Slug:** ${tenant.slug}\n`;
+                content += `**Admin:** ${tenant.is_admin ? 'Yes' : 'No'}\n`;
+                if (tenant.enrichments && Object.keys(tenant.enrichments).length > 0) {
+                    content += `**Enrichments:** ${Object.keys(tenant.enrichments).join(', ')}\n`;
+                }
+                if (tenant.created_at) {
+                    content += `**Created:** ${tenant.created_at}\n`;
+                }
+                return { content: [{ type: 'text', text: content }] };
+            }
+            catch (error) {
+                return {
+                    content: [
+                        {
+                            type: 'text',
+                            text: `Error creating tenant: ${error instanceof Error ? error.message : String(error)}`,
+                        },
+                    ],
+                    isError: true,
+                };
+            }
+        },
+    };
+}

package/shared/tools/recache-mcp-server.d.ts

@@ -0,0 +1,30 @@
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import type { ClientFactory } from '../server.js';
+export declare function recacheMCPServer(_server: Server, clientFactory: ClientFactory): {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            slug: {
+                type: string;
+                description: "The slug of the MCP server to recache (e.g., \"filesystem\")";
+            };
+        };
+        required: string[];
+    };
+    handler: (args: unknown) => Promise<{
+        content: {
+            type: string;
+            text: string;
+        }[];
+        isError?: undefined;
+    } | {
+        content: {
+            type: string;
+            text: string;
+        }[];
+        isError: boolean;
+    }>;
+};
+//# sourceMappingURL=recache-mcp-server.d.ts.map

package/shared/tools/recache-mcp-server.js

@@ -0,0 +1,49 @@
+import { z } from 'zod';
+const PARAM_DESCRIPTIONS = {
+    slug: 'The slug of the MCP server to recache (e.g., "filesystem")',
+};
+const RecacheMCPServerSchema = z.object({
+    slug: z.string().describe(PARAM_DESCRIPTIONS.slug),
+});
+export function recacheMCPServer(_server, clientFactory) {
+    return {
+        name: 'recache_mcp_server',
+        description: `Refresh the cache for a specific MCP server. Clears and warms the show page, card fragments across all sort variations, canonical URLs, and parent pages.
+
+Example request:
+{
+  "slug": "filesystem"
+}
+
+Use cases:
+- Force a cache refresh after updating server data
+- Fix stale cache entries for a specific server
+- Warm caches after content changes`,
+        inputSchema: {
+            type: 'object',
+            properties: {
+                slug: { type: 'string', description: PARAM_DESCRIPTIONS.slug },
+            },
+            required: ['slug'],
+        },
+        handler: async (args) => {
+            const validatedArgs = RecacheMCPServerSchema.parse(args);
+            const client = clientFactory();
+            try {
+                const result = await client.recacheMCPServer(validatedArgs.slug);
+                return { content: [{ type: 'text', text: result.message }] };
+            }
+            catch (error) {
+                return {
+                    content: [
+                        {
+                            type: 'text',
+                            text: `Error recaching MCP server: ${error instanceof Error ? error.message : String(error)}`,
+                        },
+                    ],
+                    isError: true,
+                };
+            }
+        },
+    };
+}

package/shared/tools.d.ts

@@ -18,7 +18,7 @@ import { ClientFactory } from './server.js';
  * - official_queue / official_queue_readonly: Official mirror queue tools (list, get, approve, reject, unlink)
  * - unofficial_mirrors / unofficial_mirrors_readonly: Unofficial mirror CRUD tools
  * - official_mirrors_readonly: Official mirrors read-only tools (REST API)
- * - tenants_readonly: Tenant read-only tools
+ * - tenants / tenants_readonly: Tenant management tools (CRUD + API key provisioning)
  * - mcp_jsons / mcp_jsons_readonly: MCP JSON configuration tools
  * - mcp_servers / mcp_servers_readonly: Unified MCP server tools (abstracted interface)
  * - redirects / redirects_readonly: URL redirect management tools
@@ -60,6 +60,7 @@ export declare function parseEnabledToolGroups(enabledGroupsParam?: string): Too
  * - unofficial_mirrors: Unofficial mirror CRUD tools (read + write)
  * - unofficial_mirrors_readonly: Unofficial mirror tools (read only)
  * - official_mirrors_readonly: Official mirrors REST API tools (read only)
+ * - tenants: Tenant management tools including API key provisioning (read + write)
  * - tenants_readonly: Tenant tools (read only)
  * - mcp_jsons: MCP JSON configuration tools (read + write)
  * - mcp_jsons_readonly: MCP JSON tools (read only)

package/shared/tools.js

@@ -26,9 +26,11 @@ import { deleteUnofficialMirror } from './tools/delete-unofficial-mirror.js';
 // Official mirrors REST tools (read-only)
 import { getOfficialMirrors } from './tools/get-official-mirrors.js';
 import { getOfficialMirror } from './tools/get-official-mirror.js';
-// Tenant tools (read-only)
+// Tenant tools
 import { getTenants } from './tools/get-tenants.js';
 import { getTenant } from './tools/get-tenant.js';
+import { createTenant } from './tools/create-tenant.js';
+import { createApiKey } from './tools/create-api-key.js';
 // MCP JSON tools
 import { getMcpJsons } from './tools/get-mcp-jsons.js';
 import { getMcpJson } from './tools/get-mcp-json.js';
@@ -39,6 +41,7 @@ import { deleteMcpJson } from './tools/delete-mcp-json.js';
 import { listMCPServers } from './tools/list-mcp-servers.js';
 import { getMCPServer } from './tools/get-mcp-server.js';
 import { updateMCPServer } from './tools/update-mcp-server.js';
+import { recacheMCPServer } from './tools/recache-mcp-server.js';
 // Redirect tools
 import { getRedirects } from './tools/get-redirects.js';
 import { getRedirect } from './tools/get-redirect.js';
@@ -170,9 +173,11 @@ const ALL_TOOLS = [
         groups: ['official_mirrors', 'server_directory'],
         isWriteOperation: false,
     },
-    // Tenant tools (read-only)
+    // Tenant tools
     { factory: getTenants, groups: ['tenants'], isWriteOperation: false },
     { factory: getTenant, groups: ['tenants'], isWriteOperation: false },
+    { factory: createTenant, groups: ['tenants'], isWriteOperation: true },
+    { factory: createApiKey, groups: ['tenants'], isWriteOperation: true },
     // MCP JSON tools (CRUD) (also in server_directory)
     {
         factory: getMcpJsons,
@@ -215,6 +220,11 @@ const ALL_TOOLS = [
         groups: ['mcp_servers', 'server_directory'],
         isWriteOperation: true,
     },
+    {
+        factory: recacheMCPServer,
+        groups: ['mcp_servers', 'server_directory'],
+        isWriteOperation: true,
+    },
     // Redirect tools (CRUD)
     { factory: getRedirects, groups: ['redirects'], isWriteOperation: false },
     { factory: getRedirect, groups: ['redirects'], isWriteOperation: false },
@@ -372,6 +382,7 @@ function shouldIncludeTool(toolDef, enabledGroups) {
  * - unofficial_mirrors: Unofficial mirror CRUD tools (read + write)
  * - unofficial_mirrors_readonly: Unofficial mirror tools (read only)
  * - official_mirrors_readonly: Official mirrors REST API tools (read only)
+ * - tenants: Tenant management tools including API key provisioning (read + write)
  * - tenants_readonly: Tenant tools (read only)
  * - mcp_jsons: MCP JSON configuration tools (read + write)
  * - mcp_jsons_readonly: MCP JSON tools (read only)

package/shared/types.d.ts

@@ -786,6 +786,28 @@ export interface DiscoveredUrlStats {
     rejected_today: number;
     errored_today: number;
 }
+export interface CreateTenantParams {
+    slug: string;
+}
+export type ApiKeyPermissionLevel = 'read_only' | 'read_and_upsert' | 'full_access';
+export interface ApiKey {
+    id: number;
+    name?: string;
+    tenant_id: number;
+    tenant_slug: string;
+    tenant_is_admin: boolean;
+    permission_level: ApiKeyPermissionLevel;
+    key: string;
+    created_at: string;
+}
+export interface CreateApiKeyParams {
+    tenant_slug: string;
+    name?: string;
+    permission_level?: ApiKeyPermissionLevel;
+}
+export interface RecacheMCPServerResponse {
+    message: string;
+}
 export interface MozMetrics {
     page_authority?: number;
     domain_authority?: number;