pulsemcp-cms-admin-mcp-server 0.9.17 → 0.9.24

package/shared/pulsemcp-admin-client/lib/list-tenant-servers.js

@@ -0,0 +1,57 @@
+import { adminFetch } from './admin-fetch.js';
+function mapTenantServer(row) {
+    return {
+        id: row.id,
+        tenant_id: row.tenant_id,
+        mcp_server_id: row.mcp_server_id,
+        mcp_server_slug: row.mcp_server_slug,
+        status: row.status,
+        server_json_selection: row.server_json_selection,
+        first_touched_at: row.first_touched_at,
+        touched: row.touched,
+        created_at: row.created_at,
+        updated_at: row.updated_at,
+    };
+}
+export async function listTenantServers(apiKey, baseUrl, idOrSlug, params) {
+    const url = new URL(`/api/tenants/${idOrSlug}/servers`, baseUrl);
+    if (params?.status) {
+        url.searchParams.append('status', params.status);
+    }
+    if (params?.limit !== undefined) {
+        url.searchParams.append('limit', params.limit.toString());
+    }
+    if (params?.offset !== undefined) {
+        url.searchParams.append('offset', params.offset.toString());
+    }
+    const response = await adminFetch(url.toString(), {
+        method: 'GET',
+        headers: {
+            'X-API-Key': apiKey,
+            Accept: 'application/json',
+        },
+    });
+    if (!response.ok) {
+        if (response.status === 401) {
+            throw new Error('Invalid API key');
+        }
+        if (response.status === 403) {
+            throw new Error('User lacks admin privileges');
+        }
+        if (response.status === 404) {
+            throw new Error(`Tenant with ID/slug ${idOrSlug} not found`);
+        }
+        throw new Error(`Failed to list tenant servers: ${response.status} ${response.statusText}`);
+    }
+    const data = (await response.json());
+    return {
+        data: data.data.map(mapTenantServer),
+        pagination: {
+            current_page: data.meta.current_page,
+            total_pages: data.meta.total_pages,
+            total_count: data.meta.total_count,
+            has_next: data.meta.has_next,
+            limit: data.meta.limit,
+        },
+    };
+}

package/shared/pulsemcp-admin-client/lib/save-mcp-implementation.js

@@ -98,6 +98,14 @@ export async function saveMCPImplementation(apiKey, baseUrl, id, params) {
     if (params.internal_notes !== undefined) {
         formData.append('mcp_implementation[internal_notes]', params.internal_notes);
     }
+    // Owner tenant linking. Slug wins over id on the Rails side when both are sent.
+    // null/empty value clears the link (Rails uses .presence semantics).
+    if (params.owner_tenant_slug !== undefined) {
+        formData.append('mcp_implementation[owner_tenant_slug]', params.owner_tenant_slug === null ? '' : params.owner_tenant_slug);
+    }
+    if (params.owner_tenant_id !== undefined) {
+        formData.append('mcp_implementation[owner_tenant_id]', params.owner_tenant_id === null ? '' : params.owner_tenant_id.toString());
+    }
     // Remote endpoints
     // Rails expects nested attributes to use the _attributes suffix for has_many associations
     if (params.remote !== undefined) {

package/shared/pulsemcp-admin-client/lib/unified-mcp-server-mapper.d.ts

@@ -47,6 +47,8 @@ export interface RailsImplementation {
         mcp_server_remotes_count?: number;
         recommended?: boolean;
         verified_no_remote_canonicals?: boolean;
+        owner_tenant_id?: number | null;
+        owner_tenant_slug?: string | null;
         tags?: MCPServerTag[];
         remotes?: MCPServerRemote[];
         created_at?: string;

package/shared/pulsemcp-admin-client/lib/unified-mcp-server-mapper.js

@@ -74,6 +74,9 @@ export function mapToUnifiedServer(impl) {
         downloads_estimate_total: mcpServer.downloads_estimate_total,
         // Internal notes
         internal_notes: impl.internal_notes,
+        // Owner tenant
+        owner_tenant_id: mcpServer.owner_tenant_id,
+        owner_tenant_slug: mcpServer.owner_tenant_slug,
         // Timestamps (use implementation timestamps as they're more relevant)
         created_at: impl.created_at,
         updated_at: impl.updated_at,

package/shared/pulsemcp-admin-client/lib/update-unified-mcp-server.js

@@ -54,6 +54,20 @@ export async function updateUnifiedMCPServer(apiKey, baseUrl, implementationId,
     // Date overrides
     if (params.created_on_override !== undefined)
         implParams.created_on_override = params.created_on_override;
+    // Owner tenant: route to slug or id depending on the value type.
+    // String → slug, number → id, null → clear (sent as empty owner_tenant_id).
+    if (params.owner_tenant !== undefined) {
+        if (typeof params.owner_tenant === 'string') {
+            implParams.owner_tenant_slug = params.owner_tenant;
+        }
+        else if (typeof params.owner_tenant === 'number') {
+            implParams.owner_tenant_id = params.owner_tenant;
+        }
+        else {
+            // null — clear the link
+            implParams.owner_tenant_id = null;
+        }
+    }
     // Tags
     if (params.tags !== undefined)
         implParams.tags = params.tags;

package/shared/pulsemcp-admin-client/pulsemcp-admin-client.integration-mock.js

@@ -1045,6 +1045,35 @@ export function createMockPulseMCPAdminClient(mockData) {
                 created_at: '2024-01-01T00:00:00Z',
             };
         },
+        async deleteTenant() {
+            return { success: true, message: 'Tenant deleted' };
+        },
+        async deleteApiKey() {
+            return { success: true, message: 'API key revoked' };
+        },
+        async listTenantServers() {
+            return {
+                data: [],
+                pagination: {
+                    current_page: 1,
+                    total_pages: 0,
+                    total_count: 0,
+                    has_next: false,
+                    limit: 30,
+                },
+            };
+        },
+        async bulkUpdateTenantServers(idOrSlug) {
+            return {
+                status: 'success',
+                tenant: { id: typeof idOrSlug === 'number' ? idOrSlug : 1, slug: String(idOrSlug) },
+                added: [],
+                removed: [],
+                restored: [],
+                skipped: [],
+                unresolved_identifiers: [],
+            };
+        },
         async recacheMCPServer(slug) {
             return {
                 message: `Cache successfully refreshed for ${slug}.`,

package/shared/server.d.ts

@@ -1,5 +1,5 @@
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
-import type { Post, PostsResponse, CreatePostParams, UpdatePostParams, ImageUploadResponse, Author, AuthorsResponse, MCPServer, MCPClient, MCPImplementation, MCPImplementationsResponse, SaveMCPImplementationParams, CreateMCPImplementationParams, Provider, ProvidersResponse, OfficialMirrorQueueStatus, OfficialMirrorQueueResponse, OfficialMirrorQueueItemDetail, OfficialMirrorQueueActionResponse, UnofficialMirror, UnofficialMirrorsResponse, CreateUnofficialMirrorParams, UpdateUnofficialMirrorParams, OfficialMirrorRest, OfficialMirrorsResponse, Tenant, TenantsResponse, McpJson, McpJsonsResponse, CreateMcpJsonParams, UpdateMcpJsonParams, UnifiedMCPServer, UnifiedMCPServersResponse, UpdateUnifiedMCPServerParams, Redirect, RedirectsResponse, RedirectStatus, CreateRedirectParams, UpdateRedirectParams, GoodJob, GoodJobsResponse, GoodJobStatus, GoodJobCronSchedule, GoodJobProcess, GoodJobStatistics, GoodJobActionResponse, GoodJobCleanupResponse, ProctorRunExamParams, ProctorRunExamResponse, ProctorSaveResultsParams, ProctorSaveResultsResponse, ProctorRunsResponse, GetProctorRunsParams, ProctorMetadataResponse, DiscoveredUrlsResponse, MarkDiscoveredUrlProcessedParams, MarkDiscoveredUrlProcessedResponse, DiscoveredUrlStats, MozMetricsResponse, MozBacklinksResponse, MozStoredMetricsResponse, CreateTenantParams, ApiKey, CreateApiKeyParams, RecacheMCPServerResponse } from './types.js';
+import type { Post, PostsResponse, CreatePostParams, UpdatePostParams, ImageUploadResponse, Author, AuthorsResponse, MCPServer, MCPClient, MCPImplementation, MCPImplementationsResponse, SaveMCPImplementationParams, CreateMCPImplementationParams, Provider, ProvidersResponse, OfficialMirrorQueueStatus, OfficialMirrorQueueResponse, OfficialMirrorQueueItemDetail, OfficialMirrorQueueActionResponse, UnofficialMirror, UnofficialMirrorsResponse, CreateUnofficialMirrorParams, UpdateUnofficialMirrorParams, OfficialMirrorRest, OfficialMirrorsResponse, Tenant, TenantsResponse, ListTenantServersResponse, BulkUpdateTenantServersParams, BulkUpdateTenantServersResponse, McpJson, McpJsonsResponse, CreateMcpJsonParams, UpdateMcpJsonParams, UnifiedMCPServer, UnifiedMCPServersResponse, UpdateUnifiedMCPServerParams, Redirect, RedirectsResponse, RedirectStatus, CreateRedirectParams, UpdateRedirectParams, GoodJob, GoodJobsResponse, GoodJobStatus, GoodJobCronSchedule, GoodJobProcess, GoodJobStatistics, GoodJobActionResponse, GoodJobCleanupResponse, ProctorRunExamParams, ProctorRunExamResponse, ProctorSaveResultsParams, ProctorSaveResultsResponse, ProctorRunsResponse, GetProctorRunsParams, ProctorMetadataResponse, DiscoveredUrlsResponse, MarkDiscoveredUrlProcessedParams, MarkDiscoveredUrlProcessedResponse, DiscoveredUrlStats, MozMetricsResponse, MozBacklinksResponse, MozStoredMetricsResponse, CreateTenantParams, ApiKey, CreateApiKeyParams, DeleteTenantParams, DeleteTenantResponse, DeleteApiKeyResponse, RecacheMCPServerResponse } from './types.js';
 export interface IPulseMCPAdminClient {
     getPosts(params?: {
         search?: string;
@@ -104,6 +104,14 @@ export interface IPulseMCPAdminClient {
     getTenant(idOrSlug: number | string): Promise<Tenant>;
     createTenant(params: CreateTenantParams): Promise<Tenant>;
     createApiKey(params: CreateApiKeyParams): Promise<ApiKey>;
+    deleteTenant(params: DeleteTenantParams): Promise<DeleteTenantResponse>;
+    deleteApiKey(id: number): Promise<DeleteApiKeyResponse>;
+    listTenantServers(idOrSlug: number | string, params?: {
+        status?: 'active' | 'deleted' | 'all';
+        limit?: number;
+        offset?: number;
+    }): Promise<ListTenantServersResponse>;
+    bulkUpdateTenantServers(idOrSlug: number | string, params: BulkUpdateTenantServersParams): Promise<BulkUpdateTenantServersResponse>;
     getMcpJsons(params?: {
         unofficial_mirror_id?: number;
         q?: string;
@@ -295,6 +303,14 @@ export declare class PulseMCPAdminClient implements IPulseMCPAdminClient {
     getTenant(idOrSlug: number | string): Promise<Tenant>;
     createTenant(params: CreateTenantParams): Promise<Tenant>;
     createApiKey(params: CreateApiKeyParams): Promise<ApiKey>;
+    deleteTenant(params: DeleteTenantParams): Promise<DeleteTenantResponse>;
+    deleteApiKey(id: number): Promise<DeleteApiKeyResponse>;
+    listTenantServers(idOrSlug: number | string, params?: {
+        status?: 'active' | 'deleted' | 'all';
+        limit?: number;
+        offset?: number;
+    }): Promise<ListTenantServersResponse>;
+    bulkUpdateTenantServers(idOrSlug: number | string, params: BulkUpdateTenantServersParams): Promise<BulkUpdateTenantServersResponse>;
     getMcpJsons(params?: {
         unofficial_mirror_id?: number;
         q?: string;

package/shared/server.js

@@ -74,6 +74,10 @@ import { getMozStoredMetrics } from './pulsemcp-admin-client/lib/get-moz-stored-
 import { recacheMCPServer } from './pulsemcp-admin-client/lib/recache-mcp-server.js';
 import { createTenant } from './pulsemcp-admin-client/lib/create-tenant.js';
 import { createApiKey } from './pulsemcp-admin-client/lib/create-api-key.js';
+import { deleteTenant } from './pulsemcp-admin-client/lib/delete-tenant.js';
+import { deleteApiKey } from './pulsemcp-admin-client/lib/delete-api-key.js';
+import { listTenantServers } from './pulsemcp-admin-client/lib/list-tenant-servers.js';
+import { bulkUpdateTenantServers } from './pulsemcp-admin-client/lib/bulk-update-tenant-servers.js';
 // PulseMCP Admin API client implementation
 export class PulseMCPAdminClient {
     apiKey;
@@ -200,6 +204,18 @@ export class PulseMCPAdminClient {
     async createApiKey(params) {
         return createApiKey(this.apiKey, this.baseUrl, params);
     }
+    async deleteTenant(params) {
+        return deleteTenant(this.apiKey, this.baseUrl, params);
+    }
+    async deleteApiKey(id) {
+        return deleteApiKey(this.apiKey, this.baseUrl, id);
+    }
+    async listTenantServers(idOrSlug, params) {
+        return listTenantServers(this.apiKey, this.baseUrl, idOrSlug, params);
+    }
+    async bulkUpdateTenantServers(idOrSlug, params) {
+        return bulkUpdateTenantServers(this.apiKey, this.baseUrl, idOrSlug, params);
+    }
     // MCP JSON REST API methods
     async getMcpJsons(params) {
         return getMcpJsons(this.apiKey, this.baseUrl, params);

package/shared/tools/add-servers-to-tenant.d.ts

@@ -0,0 +1,57 @@
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import type { ClientFactory } from '../server.js';
+export declare function addServersToTenant(_server: Server, clientFactory: ClientFactory): {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            tenant: {
+                oneOf: {
+                    type: string;
+                }[];
+                description: "Tenant ID (number) or slug (string) to add servers to.";
+            };
+            add_server_identifiers: {
+                type: string;
+                items: {
+                    oneOf: {
+                        type: string;
+                    }[];
+                };
+                description: "Array of MCP server IDs (numbers) or slugs (strings) to add to the tenant's recommendation list. Servers without an unofficial mirror are silently skipped (returned in `skipped` with reason \"no_unofficial_mirror\"). Already-active associations are skipped (reason \"already_active\").";
+            };
+            remove_server_identifiers: {
+                type: string;
+                items: {
+                    oneOf: {
+                        type: string;
+                    }[];
+                };
+                description: "Optional array of MCP server IDs or slugs to remove from the tenant in the same call. Touched associations are soft-deleted; untouched associations are hard-deleted.";
+            };
+            restore_association_ids: {
+                type: string;
+                items: {
+                    type: string;
+                };
+                description: "Optional array of TenantsMcpServer association IDs to restore from a soft-deleted state. Use list_tenant_servers with status=\"deleted\" to find these IDs.";
+            };
+        };
+        required: string[];
+    };
+    handler: (args: unknown) => Promise<{
+        content: {
+            type: string;
+            text: string;
+        }[];
+        isError?: undefined;
+    } | {
+        content: {
+            type: string;
+            text: string;
+        }[];
+        isError: boolean;
+    }>;
+};
+//# sourceMappingURL=add-servers-to-tenant.d.ts.map

package/shared/tools/add-servers-to-tenant.js

@@ -0,0 +1,133 @@
+import { z } from 'zod';
+const PARAM_DESCRIPTIONS = {
+    tenant: 'Tenant ID (number) or slug (string) to add servers to.',
+    add_server_identifiers: 'Array of MCP server IDs (numbers) or slugs (strings) to add to the tenant\'s recommendation list. Servers without an unofficial mirror are silently skipped (returned in `skipped` with reason "no_unofficial_mirror"). Already-active associations are skipped (reason "already_active").',
+    remove_server_identifiers: 'Optional array of MCP server IDs or slugs to remove from the tenant in the same call. Touched associations are soft-deleted; untouched associations are hard-deleted.',
+    restore_association_ids: 'Optional array of TenantsMcpServer association IDs to restore from a soft-deleted state. Use list_tenant_servers with status="deleted" to find these IDs.',
+};
+const AddServersToTenantSchema = z
+    .object({
+    tenant: z.union([z.number(), z.string()]).describe(PARAM_DESCRIPTIONS.tenant),
+    add_server_identifiers: z
+        .array(z.union([z.number(), z.string()]))
+        .optional()
+        .describe(PARAM_DESCRIPTIONS.add_server_identifiers),
+    remove_server_identifiers: z
+        .array(z.union([z.number(), z.string()]))
+        .optional()
+        .describe(PARAM_DESCRIPTIONS.remove_server_identifiers),
+    restore_association_ids: z
+        .array(z.number())
+        .optional()
+        .describe(PARAM_DESCRIPTIONS.restore_association_ids),
+})
+    .refine((val) => (val.add_server_identifiers && val.add_server_identifiers.length > 0) ||
+    (val.remove_server_identifiers && val.remove_server_identifiers.length > 0) ||
+    (val.restore_association_ids && val.restore_association_ids.length > 0), {
+    message: 'Must provide at least one of add_server_identifiers, remove_server_identifiers, or restore_association_ids',
+});
+export function addServersToTenant(_server, clientFactory) {
+    return {
+        name: 'add_servers_to_tenant',
+        description: `Add MCP servers to a tenant's recommendation list. Optionally remove and restore associations in the same transactional call.
+
+Servers are added with server_json_selection: "unofficial" — they always pin to the unofficial mirror's server.json. A server without an unofficial mirror cannot be added and will be reported in "skipped" with reason "no_unofficial_mirror".
+
+This tool only changes the tenant's recommendation list (TenantsMcpServer rows). The underlying MCP server's public listing is NOT affected — public servers stay public and continue to appear in the public directory.
+
+The response includes:
+- added: servers newly attached to the tenant (outcome "created" or "restored_from_deleted")
+- removed: servers detached (outcome "hard_deleted" if untouched, "soft_deleted" if the row had been customized)
+- restored: associations restored from soft-deleted state via restore_association_ids
+- skipped: identifiers that resolved to a server but were skipped with a reason
+- unresolved_identifiers: identifiers that didn't match any existing MCP server
+
+Use cases:
+- Curate a tenant's recommended-servers list
+- Bulk-add servers by slug or ID in one call
+- Combine adds and removes atomically (e.g., swap one server for another)`,
+        inputSchema: {
+            type: 'object',
+            properties: {
+                tenant: {
+                    oneOf: [{ type: 'number' }, { type: 'string' }],
+                    description: PARAM_DESCRIPTIONS.tenant,
+                },
+                add_server_identifiers: {
+                    type: 'array',
+                    items: { oneOf: [{ type: 'number' }, { type: 'string' }] },
+                    description: PARAM_DESCRIPTIONS.add_server_identifiers,
+                },
+                remove_server_identifiers: {
+                    type: 'array',
+                    items: { oneOf: [{ type: 'number' }, { type: 'string' }] },
+                    description: PARAM_DESCRIPTIONS.remove_server_identifiers,
+                },
+                restore_association_ids: {
+                    type: 'array',
+                    items: { type: 'number' },
+                    description: PARAM_DESCRIPTIONS.restore_association_ids,
+                },
+            },
+            required: ['tenant'],
+        },
+        handler: async (args) => {
+            try {
+                const validatedArgs = AddServersToTenantSchema.parse(args);
+                const client = clientFactory();
+                const result = await client.bulkUpdateTenantServers(validatedArgs.tenant, {
+                    add_server_identifiers: validatedArgs.add_server_identifiers,
+                    remove_server_identifiers: validatedArgs.remove_server_identifiers,
+                    restore_association_ids: validatedArgs.restore_association_ids,
+                });
+                let content = `**Tenant servers updated** (tenant=${result.tenant.slug}, id=${result.tenant.id})\n\n`;
+                content += `- Added: ${result.added.length}\n`;
+                content += `- Removed: ${result.removed.length}\n`;
+                content += `- Restored: ${result.restored.length}\n`;
+                content += `- Skipped: ${result.skipped.length}\n`;
+                content += `- Unresolved identifiers: ${result.unresolved_identifiers.length}\n`;
+                if (result.added.length > 0) {
+                    content += `\n**Added:**\n`;
+                    for (const item of result.added) {
+                        content += `- ${item.mcp_server_slug} (server_id=${item.mcp_server_id}, association_id=${item.association_id}, outcome=${item.outcome})\n`;
+                    }
+                }
+                if (result.removed.length > 0) {
+                    content += `\n**Removed:**\n`;
+                    for (const item of result.removed) {
+                        const assocPart = item.association_id != null ? `, association_id=${item.association_id}` : '';
+                        content += `- ${item.mcp_server_slug} (server_id=${item.mcp_server_id}${assocPart}, outcome=${item.outcome})\n`;
+                    }
+                }
+                if (result.restored.length > 0) {
+                    content += `\n**Restored:**\n`;
+                    for (const item of result.restored) {
+                        content += `- ${item.mcp_server_slug} (server_id=${item.mcp_server_id}, association_id=${item.association_id})\n`;
+                    }
+                }
+                if (result.skipped.length > 0) {
+                    content += `\n**Skipped:**\n`;
+                    for (const item of result.skipped) {
+                        const label = item.mcp_server_slug || item.mcp_server_id || item.association_id;
+                        content += `- ${label} — reason: ${item.reason}\n`;
+                    }
+                }
+                if (result.unresolved_identifiers.length > 0) {
+                    content += `\n**Unresolved identifiers:** ${result.unresolved_identifiers.join(', ')}\n`;
+                }
+                return { content: [{ type: 'text', text: content }] };
+            }
+            catch (error) {
+                return {
+                    content: [
+                        {
+                            type: 'text',
+                            text: `Error updating tenant servers: ${error instanceof Error ? error.message : String(error)}`,
+                        },
+                    ],
+                    isError: true,
+                };
+            }
+        },
+    };
+}

package/shared/tools/delete-api-key.d.ts

@@ -0,0 +1,30 @@
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import type { ClientFactory } from '../server.js';
+export declare function deleteApiKey(server: Server, clientFactory: ClientFactory): {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            id: {
+                type: string;
+                description: "The numeric ID of the API key to revoke.";
+            };
+        };
+        required: string[];
+    };
+    handler: (args: unknown) => Promise<{
+        content: {
+            type: string;
+            text: string;
+        }[];
+        isError: boolean;
+    } | {
+        content: {
+            type: string;
+            text: string;
+        }[];
+        isError?: undefined;
+    }>;
+};
+//# sourceMappingURL=delete-api-key.d.ts.map

package/shared/tools/delete-api-key.js

@@ -0,0 +1,119 @@
+import { z } from 'zod';
+import { requestConfirmation, createConfirmationSchema } from '@pulsemcp/mcp-elicitation';
+import { readCmsAdminElicitationConfig } from '../elicitation-config.js';
+const PARAM_DESCRIPTIONS = {
+    id: 'The numeric ID of the API key to revoke.',
+};
+const DeleteApiKeySchema = z.object({
+    id: z.number().int().positive().describe(PARAM_DESCRIPTIONS.id),
+});
+const TOOL_DESCRIPTION = `Permanently revoke (delete) an API key.
+
+**This is a destructive operation.** Revoking an API key immediately invalidates it; any clients still using the key will start receiving 401 Unauthorized. The deletion is idempotent — calling delete on a non-existent or already-deleted key returns success.
+
+By default, the request requires explicit user approval via MCP elicitation before being sent to the admin API.
+
+**Parameters:**
+- \`id\` (required): Numeric ID of the API key.
+
+**Returns:**
+- \`success\`: Boolean indicating whether the request succeeded.
+- \`message\`: Human-readable confirmation message.
+
+**Use cases:**
+- Revoke a leaked or compromised API key.
+- Roll a tenant's keys after a permission change.
+- Remove a deprecated key during cleanup.`;
+export function deleteApiKey(server, clientFactory) {
+    return {
+        name: 'delete_api_key',
+        description: TOOL_DESCRIPTION,
+        inputSchema: {
+            type: 'object',
+            properties: {
+                id: {
+                    type: 'number',
+                    description: PARAM_DESCRIPTIONS.id,
+                },
+            },
+            required: ['id'],
+        },
+        handler: async (args) => {
+            try {
+                const validatedArgs = DeleteApiKeySchema.parse(args);
+                const elicitConfig = readCmsAdminElicitationConfig();
+                if (elicitConfig.destructiveElicitationEnabled) {
+                    const lines = [
+                        'About to PERMANENTLY REVOKE an API key via the PulseMCP admin API:',
+                        `  API key ID: ${validatedArgs.id}`,
+                        '',
+                        'Any clients still using this key will start receiving 401 Unauthorized.',
+                        'This action cannot be undone.',
+                    ];
+                    const confirmation = await requestConfirmation({
+                        server,
+                        message: lines.join('\n') + '\n',
+                        requestedSchema: createConfirmationSchema('Revoke this API key?', 'Confirm that you want to permanently revoke this API key.'),
+                        meta: {
+                            'com.pulsemcp/tool-name': 'delete_api_key',
+                        },
+                    }, elicitConfig.base);
+                    if (confirmation.action !== 'accept') {
+                        if (confirmation.action === 'expired') {
+                            return {
+                                content: [
+                                    {
+                                        type: 'text',
+                                        text: 'API key revocation confirmation expired. Please try again.',
+                                    },
+                                ],
+                                isError: true,
+                            };
+                        }
+                        return {
+                            content: [
+                                {
+                                    type: 'text',
+                                    text: 'API key revocation was cancelled by the user.',
+                                },
+                            ],
+                        };
+                    }
+                    if (confirmation.content &&
+                        'confirm' in confirmation.content &&
+                        confirmation.content.confirm === false) {
+                        return {
+                            content: [
+                                {
+                                    type: 'text',
+                                    text: 'API key revocation was not confirmed.',
+                                },
+                            ],
+                        };
+                    }
+                }
+                const client = clientFactory();
+                const result = await client.deleteApiKey(validatedArgs.id);
+                return {
+                    content: [
+                        {
+                            type: 'text',
+                            text: `${result.success ? 'API key revoked.' : 'API key revocation failed.'} ${result.message}`,
+                        },
+                    ],
+                };
+            }
+            catch (error) {
+                return {
+                    content: [
+                        {
+                            type: 'text',
+                            text: `Error revoking API key: ${error instanceof Error ? error.message : String(error)}`,
+                        },
+                    ],
+                    isError: true,
+                };
+            }
+        },
+    };
+}

package/shared/tools/delete-tenant.d.ts

@@ -0,0 +1,36 @@
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import type { ClientFactory } from '../server.js';
+export declare function deleteTenant(server: Server, clientFactory: ClientFactory): {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            id_or_slug: {
+                oneOf: {
+                    type: string;
+                }[];
+                description: "The ID (number) or slug (string) of the tenant to delete.";
+            };
+            force: {
+                type: string;
+                description: "When true, deletes the tenant and cascades to dependent records (API keys, enrichments, etc.). When false (default), the deletion will fail with a 422 if dependents exist.";
+            };
+        };
+        required: string[];
+    };
+    handler: (args: unknown) => Promise<{
+        content: {
+            type: string;
+            text: string;
+        }[];
+        isError: boolean;
+    } | {
+        content: {
+            type: string;
+            text: string;
+        }[];
+        isError?: undefined;
+    }>;
+};
+//# sourceMappingURL=delete-tenant.d.ts.map