pulsemcp-cms-admin-mcp-server 0.9.17 → 0.9.26

package/shared/pulsemcp-admin-client/lib/delete-tenant.js

@@ -0,0 +1,31 @@
+import { adminFetch } from './admin-fetch.js';
+export async function deleteTenant(apiKey, baseUrl, params) {
+    const url = new URL(`/api/tenants/${encodeURIComponent(String(params.id_or_slug))}`, baseUrl);
+    if (params.force) {
+        url.searchParams.set('force', 'true');
+    }
+    const response = await adminFetch(url.toString(), {
+        method: 'DELETE',
+        headers: {
+            'X-API-Key': apiKey,
+            Accept: 'application/json',
+        },
+    });
+    if (!response.ok) {
+        if (response.status === 401) {
+            throw new Error('Invalid API key');
+        }
+        if (response.status === 403) {
+            throw new Error('User lacks write privileges');
+        }
+        if (response.status === 404) {
+            throw new Error(`Tenant ${params.id_or_slug} not found`);
+        }
+        if (response.status === 422) {
+            const errorData = (await response.json().catch(() => ({})));
+            throw new Error(`Cannot delete tenant: ${errorData.errors?.join(', ') || 'validation failed'}`);
+        }
+        throw new Error(`Failed to delete tenant: ${response.status} ${response.statusText}`);
+    }
+    return (await response.json());
+}

package/shared/pulsemcp-admin-client/lib/get-unified-mcp-server.js

@@ -80,8 +80,12 @@ export async function getUnifiedMCPServer(apiKey, baseUrl, slug) {
             updated_at: mcpServerData.updated_at,
         };
     }
-    // Merge MCPServer data with implementation data for complete picture
+    // Merge MCPServer data with implementation data for complete picture.
+    // Spread the search-response mcp_server first so fields only present there
+    // (e.g. owner_tenant_id/owner_tenant_slug) are preserved when the supervisor
+    // endpoint omits them. Supervisor data wins for the fields it does provide.
     matchingImpl.mcp_server = {
+        ...matchingImpl.mcp_server,
         ...mcpServerData,
         remotes: mcpServerData.remotes,
         tags: mcpServerData.tags,

package/shared/pulsemcp-admin-client/lib/list-tenant-servers.d.ts

@@ -0,0 +1,7 @@
+import type { ListTenantServersResponse } from '../../types.js';
+export declare function listTenantServers(apiKey: string, baseUrl: string, idOrSlug: number | string, params?: {
+    status?: 'active' | 'deleted' | 'all';
+    limit?: number;
+    offset?: number;
+}): Promise<ListTenantServersResponse>;
+//# sourceMappingURL=list-tenant-servers.d.ts.map

package/shared/pulsemcp-admin-client/lib/list-tenant-servers.js

@@ -0,0 +1,57 @@
+import { adminFetch } from './admin-fetch.js';
+function mapTenantServer(row) {
+    return {
+        id: row.id,
+        tenant_id: row.tenant_id,
+        mcp_server_id: row.mcp_server_id,
+        mcp_server_slug: row.mcp_server_slug,
+        status: row.status,
+        server_json_selection: row.server_json_selection,
+        first_touched_at: row.first_touched_at,
+        touched: row.touched,
+        created_at: row.created_at,
+        updated_at: row.updated_at,
+    };
+}
+export async function listTenantServers(apiKey, baseUrl, idOrSlug, params) {
+    const url = new URL(`/api/tenants/${idOrSlug}/servers`, baseUrl);
+    if (params?.status) {
+        url.searchParams.append('status', params.status);
+    }
+    if (params?.limit !== undefined) {
+        url.searchParams.append('limit', params.limit.toString());
+    }
+    if (params?.offset !== undefined) {
+        url.searchParams.append('offset', params.offset.toString());
+    }
+    const response = await adminFetch(url.toString(), {
+        method: 'GET',
+        headers: {
+            'X-API-Key': apiKey,
+            Accept: 'application/json',
+        },
+    });
+    if (!response.ok) {
+        if (response.status === 401) {
+            throw new Error('Invalid API key');
+        }
+        if (response.status === 403) {
+            throw new Error('User lacks admin privileges');
+        }
+        if (response.status === 404) {
+            throw new Error(`Tenant with ID/slug ${idOrSlug} not found`);
+        }
+        throw new Error(`Failed to list tenant servers: ${response.status} ${response.statusText}`);
+    }
+    const data = (await response.json());
+    return {
+        data: data.data.map(mapTenantServer),
+        pagination: {
+            current_page: data.meta.current_page,
+            total_pages: data.meta.total_pages,
+            total_count: data.meta.total_count,
+            has_next: data.meta.has_next,
+            limit: data.meta.limit,
+        },
+    };
+}

package/shared/pulsemcp-admin-client/lib/save-mcp-implementation.js

@@ -98,6 +98,14 @@ export async function saveMCPImplementation(apiKey, baseUrl, id, params) {
     if (params.internal_notes !== undefined) {
         formData.append('mcp_implementation[internal_notes]', params.internal_notes);
     }
+    // Owner tenant linking. Slug wins over id on the Rails side when both are sent.
+    // null/empty value clears the link (Rails uses .presence semantics).
+    if (params.owner_tenant_slug !== undefined) {
+        formData.append('mcp_implementation[owner_tenant_slug]', params.owner_tenant_slug === null ? '' : params.owner_tenant_slug);
+    }
+    if (params.owner_tenant_id !== undefined) {
+        formData.append('mcp_implementation[owner_tenant_id]', params.owner_tenant_id === null ? '' : params.owner_tenant_id.toString());
+    }
     // Remote endpoints
     // Rails expects nested attributes to use the _attributes suffix for has_many associations
     if (params.remote !== undefined) {

package/shared/pulsemcp-admin-client/lib/set-known-missing-init-tools-list.d.ts

@@ -0,0 +1,3 @@
+import type { SetKnownMissingInitToolsListResponse } from '../../types.js';
+export declare function setKnownMissingInitToolsList(apiKey: string, baseUrl: string, id: number, knownMissingInitToolsList: boolean, knownMissingInitToolsListFilterTo?: string | null): Promise<SetKnownMissingInitToolsListResponse>;
+//# sourceMappingURL=set-known-missing-init-tools-list.d.ts.map

package/shared/pulsemcp-admin-client/lib/set-known-missing-init-tools-list.js

@@ -0,0 +1,42 @@
+import { adminFetch } from './admin-fetch.js';
+export async function setKnownMissingInitToolsList(apiKey, baseUrl, id, knownMissingInitToolsList, knownMissingInitToolsListFilterTo) {
+    const url = new URL(`/api/mcp_servers/${id}/known_missing_init_tools_list`, baseUrl);
+    const body = {
+        known_missing_init_tools_list: knownMissingInitToolsList,
+    };
+    if (knownMissingInitToolsListFilterTo !== undefined) {
+        // null is sent as JSON null; the Rails controller treats nil/blank as "clear".
+        body.known_missing_init_tools_list_filter_to = knownMissingInitToolsListFilterTo;
+    }
+    const response = await adminFetch(url.toString(), {
+        method: 'POST',
+        headers: {
+            'X-API-Key': apiKey,
+            Accept: 'application/json',
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify(body),
+    });
+    if (!response.ok) {
+        if (response.status === 401) {
+            throw new Error('Invalid API key');
+        }
+        if (response.status === 403) {
+            throw new Error('User lacks write privileges');
+        }
+        if (response.status === 404) {
+            throw new Error(`MCP server not found: ${id}`);
+        }
+        if (response.status === 400) {
+            const errBody = (await response.json().catch(() => ({})));
+            throw new Error(errBody.error ?? 'Bad request');
+        }
+        if (response.status === 422) {
+            const errBody = (await response.json().catch(() => ({})));
+            const detailStr = errBody.details?.length ? ` (${errBody.details.join(', ')})` : '';
+            throw new Error(`${errBody.error ?? 'Validation failed'}${detailStr}`);
+        }
+        throw new Error(`Failed to set known_missing_init_tools_list: ${response.status} ${response.statusText}`);
+    }
+    return (await response.json());
+}

package/shared/pulsemcp-admin-client/lib/unified-mcp-server-mapper.d.ts

@@ -47,6 +47,8 @@ export interface RailsImplementation {
         mcp_server_remotes_count?: number;
         recommended?: boolean;
         verified_no_remote_canonicals?: boolean;
+        owner_tenant_id?: number | null;
+        owner_tenant_slug?: string | null;
         tags?: MCPServerTag[];
         remotes?: MCPServerRemote[];
         created_at?: string;

package/shared/pulsemcp-admin-client/lib/unified-mcp-server-mapper.js

@@ -74,6 +74,9 @@ export function mapToUnifiedServer(impl) {
         downloads_estimate_total: mcpServer.downloads_estimate_total,
         // Internal notes
         internal_notes: impl.internal_notes,
+        // Owner tenant
+        owner_tenant_id: mcpServer.owner_tenant_id,
+        owner_tenant_slug: mcpServer.owner_tenant_slug,
         // Timestamps (use implementation timestamps as they're more relevant)
         created_at: impl.created_at,
         updated_at: impl.updated_at,

package/shared/pulsemcp-admin-client/lib/update-unified-mcp-server.js

@@ -54,6 +54,20 @@ export async function updateUnifiedMCPServer(apiKey, baseUrl, implementationId,
     // Date overrides
     if (params.created_on_override !== undefined)
         implParams.created_on_override = params.created_on_override;
+    // Owner tenant: route to slug or id depending on the value type.
+    // String → slug, number → id, null → clear (sent as empty owner_tenant_id).
+    if (params.owner_tenant !== undefined) {
+        if (typeof params.owner_tenant === 'string') {
+            implParams.owner_tenant_slug = params.owner_tenant;
+        }
+        else if (typeof params.owner_tenant === 'number') {
+            implParams.owner_tenant_id = params.owner_tenant;
+        }
+        else {
+            // null — clear the link
+            implParams.owner_tenant_id = null;
+        }
+    }
     // Tags
     if (params.tags !== undefined)
         implParams.tags = params.tags;

package/shared/pulsemcp-admin-client/pulsemcp-admin-client.integration-mock.js

@@ -1045,10 +1045,49 @@ export function createMockPulseMCPAdminClient(mockData) {
                 created_at: '2024-01-01T00:00:00Z',
             };
         },
+        async deleteTenant() {
+            return { success: true, message: 'Tenant deleted' };
+        },
+        async deleteApiKey() {
+            return { success: true, message: 'API key revoked' };
+        },
+        async listTenantServers() {
+            return {
+                data: [],
+                pagination: {
+                    current_page: 1,
+                    total_pages: 0,
+                    total_count: 0,
+                    has_next: false,
+                    limit: 30,
+                },
+            };
+        },
+        async bulkUpdateTenantServers(idOrSlug) {
+            return {
+                status: 'success',
+                tenant: { id: typeof idOrSlug === 'number' ? idOrSlug : 1, slug: String(idOrSlug) },
+                added: [],
+                removed: [],
+                restored: [],
+                skipped: [],
+                unresolved_identifiers: [],
+            };
+        },
         async recacheMCPServer(slug) {
             return {
                 message: `Cache successfully refreshed for ${slug}.`,
             };
         },
+        async setKnownMissingInitToolsList(id, knownMissingInitToolsList, knownMissingInitToolsListFilterTo) {
+            return {
+                id,
+                slug: `mock-server-${id}`,
+                known_missing_init_tools_list: knownMissingInitToolsList,
+                known_missing_init_tools_list_filter_to: knownMissingInitToolsListFilterTo === undefined
+                    ? null
+                    : (knownMissingInitToolsListFilterTo ?? null),
+            };
+        },
     };
 }

package/shared/server.d.ts

@@ -1,5 +1,5 @@
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
-import type { Post, PostsResponse, CreatePostParams, UpdatePostParams, ImageUploadResponse, Author, AuthorsResponse, MCPServer, MCPClient, MCPImplementation, MCPImplementationsResponse, SaveMCPImplementationParams, CreateMCPImplementationParams, Provider, ProvidersResponse, OfficialMirrorQueueStatus, OfficialMirrorQueueResponse, OfficialMirrorQueueItemDetail, OfficialMirrorQueueActionResponse, UnofficialMirror, UnofficialMirrorsResponse, CreateUnofficialMirrorParams, UpdateUnofficialMirrorParams, OfficialMirrorRest, OfficialMirrorsResponse, Tenant, TenantsResponse, McpJson, McpJsonsResponse, CreateMcpJsonParams, UpdateMcpJsonParams, UnifiedMCPServer, UnifiedMCPServersResponse, UpdateUnifiedMCPServerParams, Redirect, RedirectsResponse, RedirectStatus, CreateRedirectParams, UpdateRedirectParams, GoodJob, GoodJobsResponse, GoodJobStatus, GoodJobCronSchedule, GoodJobProcess, GoodJobStatistics, GoodJobActionResponse, GoodJobCleanupResponse, ProctorRunExamParams, ProctorRunExamResponse, ProctorSaveResultsParams, ProctorSaveResultsResponse, ProctorRunsResponse, GetProctorRunsParams, ProctorMetadataResponse, DiscoveredUrlsResponse, MarkDiscoveredUrlProcessedParams, MarkDiscoveredUrlProcessedResponse, DiscoveredUrlStats, MozMetricsResponse, MozBacklinksResponse, MozStoredMetricsResponse, CreateTenantParams, ApiKey, CreateApiKeyParams, RecacheMCPServerResponse } from './types.js';
+import type { Post, PostsResponse, CreatePostParams, UpdatePostParams, ImageUploadResponse, Author, AuthorsResponse, MCPServer, MCPClient, MCPImplementation, MCPImplementationsResponse, SaveMCPImplementationParams, CreateMCPImplementationParams, Provider, ProvidersResponse, OfficialMirrorQueueStatus, OfficialMirrorQueueResponse, OfficialMirrorQueueItemDetail, OfficialMirrorQueueActionResponse, UnofficialMirror, UnofficialMirrorsResponse, CreateUnofficialMirrorParams, UpdateUnofficialMirrorParams, OfficialMirrorRest, OfficialMirrorsResponse, Tenant, TenantsResponse, ListTenantServersResponse, BulkUpdateTenantServersParams, BulkUpdateTenantServersResponse, McpJson, McpJsonsResponse, CreateMcpJsonParams, UpdateMcpJsonParams, UnifiedMCPServer, UnifiedMCPServersResponse, UpdateUnifiedMCPServerParams, Redirect, RedirectsResponse, RedirectStatus, CreateRedirectParams, UpdateRedirectParams, GoodJob, GoodJobsResponse, GoodJobStatus, GoodJobCronSchedule, GoodJobProcess, GoodJobStatistics, GoodJobActionResponse, GoodJobCleanupResponse, ProctorRunExamParams, ProctorRunExamResponse, ProctorSaveResultsParams, ProctorSaveResultsResponse, ProctorRunsResponse, GetProctorRunsParams, ProctorMetadataResponse, DiscoveredUrlsResponse, MarkDiscoveredUrlProcessedParams, MarkDiscoveredUrlProcessedResponse, DiscoveredUrlStats, MozMetricsResponse, MozBacklinksResponse, MozStoredMetricsResponse, CreateTenantParams, ApiKey, CreateApiKeyParams, DeleteTenantParams, DeleteTenantResponse, DeleteApiKeyResponse, RecacheMCPServerResponse, SetKnownMissingInitToolsListResponse } from './types.js';
 export interface IPulseMCPAdminClient {
     getPosts(params?: {
         search?: string;
@@ -104,6 +104,14 @@ export interface IPulseMCPAdminClient {
     getTenant(idOrSlug: number | string): Promise<Tenant>;
     createTenant(params: CreateTenantParams): Promise<Tenant>;
     createApiKey(params: CreateApiKeyParams): Promise<ApiKey>;
+    deleteTenant(params: DeleteTenantParams): Promise<DeleteTenantResponse>;
+    deleteApiKey(id: number): Promise<DeleteApiKeyResponse>;
+    listTenantServers(idOrSlug: number | string, params?: {
+        status?: 'active' | 'deleted' | 'all';
+        limit?: number;
+        offset?: number;
+    }): Promise<ListTenantServersResponse>;
+    bulkUpdateTenantServers(idOrSlug: number | string, params: BulkUpdateTenantServersParams): Promise<BulkUpdateTenantServersResponse>;
     getMcpJsons(params?: {
         unofficial_mirror_id?: number;
         q?: string;
@@ -127,6 +135,7 @@ export interface IPulseMCPAdminClient {
     getUnifiedMCPServer(slug: string): Promise<UnifiedMCPServer>;
     updateUnifiedMCPServer(implementationId: number, params: UpdateUnifiedMCPServerParams): Promise<UnifiedMCPServer>;
     recacheMCPServer(slug: string): Promise<RecacheMCPServerResponse>;
+    setKnownMissingInitToolsList(id: number, knownMissingInitToolsList: boolean, knownMissingInitToolsListFilterTo?: string | null): Promise<SetKnownMissingInitToolsListResponse>;
     getRedirects(params?: {
         q?: string;
         status?: RedirectStatus;
@@ -295,6 +304,14 @@ export declare class PulseMCPAdminClient implements IPulseMCPAdminClient {
     getTenant(idOrSlug: number | string): Promise<Tenant>;
     createTenant(params: CreateTenantParams): Promise<Tenant>;
     createApiKey(params: CreateApiKeyParams): Promise<ApiKey>;
+    deleteTenant(params: DeleteTenantParams): Promise<DeleteTenantResponse>;
+    deleteApiKey(id: number): Promise<DeleteApiKeyResponse>;
+    listTenantServers(idOrSlug: number | string, params?: {
+        status?: 'active' | 'deleted' | 'all';
+        limit?: number;
+        offset?: number;
+    }): Promise<ListTenantServersResponse>;
+    bulkUpdateTenantServers(idOrSlug: number | string, params: BulkUpdateTenantServersParams): Promise<BulkUpdateTenantServersResponse>;
     getMcpJsons(params?: {
         unofficial_mirror_id?: number;
         q?: string;
@@ -318,6 +335,7 @@ export declare class PulseMCPAdminClient implements IPulseMCPAdminClient {
     getUnifiedMCPServer(slug: string): Promise<UnifiedMCPServer>;
     updateUnifiedMCPServer(implementationId: number, params: UpdateUnifiedMCPServerParams): Promise<UnifiedMCPServer>;
     recacheMCPServer(slug: string): Promise<RecacheMCPServerResponse>;
+    setKnownMissingInitToolsList(id: number, knownMissingInitToolsList: boolean, knownMissingInitToolsListFilterTo?: string | null): Promise<SetKnownMissingInitToolsListResponse>;
     getRedirects(params?: {
         q?: string;
         status?: RedirectStatus;

package/shared/server.js

@@ -72,8 +72,13 @@ import { getMozMetrics } from './pulsemcp-admin-client/lib/get-moz-metrics.js';
 import { getMozBacklinks } from './pulsemcp-admin-client/lib/get-moz-backlinks.js';
 import { getMozStoredMetrics } from './pulsemcp-admin-client/lib/get-moz-stored-metrics.js';
 import { recacheMCPServer } from './pulsemcp-admin-client/lib/recache-mcp-server.js';
+import { setKnownMissingInitToolsList } from './pulsemcp-admin-client/lib/set-known-missing-init-tools-list.js';
 import { createTenant } from './pulsemcp-admin-client/lib/create-tenant.js';
 import { createApiKey } from './pulsemcp-admin-client/lib/create-api-key.js';
+import { deleteTenant } from './pulsemcp-admin-client/lib/delete-tenant.js';
+import { deleteApiKey } from './pulsemcp-admin-client/lib/delete-api-key.js';
+import { listTenantServers } from './pulsemcp-admin-client/lib/list-tenant-servers.js';
+import { bulkUpdateTenantServers } from './pulsemcp-admin-client/lib/bulk-update-tenant-servers.js';
 // PulseMCP Admin API client implementation
 export class PulseMCPAdminClient {
     apiKey;
@@ -200,6 +205,18 @@ export class PulseMCPAdminClient {
     async createApiKey(params) {
         return createApiKey(this.apiKey, this.baseUrl, params);
     }
+    async deleteTenant(params) {
+        return deleteTenant(this.apiKey, this.baseUrl, params);
+    }
+    async deleteApiKey(id) {
+        return deleteApiKey(this.apiKey, this.baseUrl, id);
+    }
+    async listTenantServers(idOrSlug, params) {
+        return listTenantServers(this.apiKey, this.baseUrl, idOrSlug, params);
+    }
+    async bulkUpdateTenantServers(idOrSlug, params) {
+        return bulkUpdateTenantServers(this.apiKey, this.baseUrl, idOrSlug, params);
+    }
     // MCP JSON REST API methods
     async getMcpJsons(params) {
         return getMcpJsons(this.apiKey, this.baseUrl, params);
@@ -229,6 +246,9 @@ export class PulseMCPAdminClient {
     async recacheMCPServer(slug) {
         return recacheMCPServer(this.apiKey, this.baseUrl, slug);
     }
+    async setKnownMissingInitToolsList(id, knownMissingInitToolsList, knownMissingInitToolsListFilterTo) {
+        return setKnownMissingInitToolsList(this.apiKey, this.baseUrl, id, knownMissingInitToolsList, knownMissingInitToolsListFilterTo);
+    }
     // Redirect REST API methods
     async getRedirects(params) {
         return getRedirects(this.apiKey, this.baseUrl, params);

package/shared/tools/add-servers-to-tenant.d.ts

@@ -0,0 +1,57 @@
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import type { ClientFactory } from '../server.js';
+export declare function addServersToTenant(_server: Server, clientFactory: ClientFactory): {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            tenant: {
+                oneOf: {
+                    type: string;
+                }[];
+                description: "Tenant ID (number) or slug (string) to add servers to.";
+            };
+            add_server_identifiers: {
+                type: string;
+                items: {
+                    oneOf: {
+                        type: string;
+                    }[];
+                };
+                description: "Array of MCP server IDs (numbers) or slugs (strings) to add to the tenant's recommendation list. Servers without an unofficial mirror are silently skipped (returned in `skipped` with reason \"no_unofficial_mirror\"). Already-active associations are skipped (reason \"already_active\").";
+            };
+            remove_server_identifiers: {
+                type: string;
+                items: {
+                    oneOf: {
+                        type: string;
+                    }[];
+                };
+                description: "Optional array of MCP server IDs or slugs to remove from the tenant in the same call. Touched associations are soft-deleted; untouched associations are hard-deleted.";
+            };
+            restore_association_ids: {
+                type: string;
+                items: {
+                    type: string;
+                };
+                description: "Optional array of TenantsMcpServer association IDs to restore from a soft-deleted state. Use list_tenant_servers with status=\"deleted\" to find these IDs.";
+            };
+        };
+        required: string[];
+    };
+    handler: (args: unknown) => Promise<{
+        content: {
+            type: string;
+            text: string;
+        }[];
+        isError?: undefined;
+    } | {
+        content: {
+            type: string;
+            text: string;
+        }[];
+        isError: boolean;
+    }>;
+};
+//# sourceMappingURL=add-servers-to-tenant.d.ts.map

package/shared/tools/add-servers-to-tenant.js

@@ -0,0 +1,133 @@
+import { z } from 'zod';
+const PARAM_DESCRIPTIONS = {
+    tenant: 'Tenant ID (number) or slug (string) to add servers to.',
+    add_server_identifiers: 'Array of MCP server IDs (numbers) or slugs (strings) to add to the tenant\'s recommendation list. Servers without an unofficial mirror are silently skipped (returned in `skipped` with reason "no_unofficial_mirror"). Already-active associations are skipped (reason "already_active").',
+    remove_server_identifiers: 'Optional array of MCP server IDs or slugs to remove from the tenant in the same call. Touched associations are soft-deleted; untouched associations are hard-deleted.',
+    restore_association_ids: 'Optional array of TenantsMcpServer association IDs to restore from a soft-deleted state. Use list_tenant_servers with status="deleted" to find these IDs.',
+};
+const AddServersToTenantSchema = z
+    .object({
+    tenant: z.union([z.number(), z.string()]).describe(PARAM_DESCRIPTIONS.tenant),
+    add_server_identifiers: z
+        .array(z.union([z.number(), z.string()]))
+        .optional()
+        .describe(PARAM_DESCRIPTIONS.add_server_identifiers),
+    remove_server_identifiers: z
+        .array(z.union([z.number(), z.string()]))
+        .optional()
+        .describe(PARAM_DESCRIPTIONS.remove_server_identifiers),
+    restore_association_ids: z
+        .array(z.number())
+        .optional()
+        .describe(PARAM_DESCRIPTIONS.restore_association_ids),
+})
+    .refine((val) => (val.add_server_identifiers && val.add_server_identifiers.length > 0) ||
+    (val.remove_server_identifiers && val.remove_server_identifiers.length > 0) ||
+    (val.restore_association_ids && val.restore_association_ids.length > 0), {
+    message: 'Must provide at least one of add_server_identifiers, remove_server_identifiers, or restore_association_ids',
+});
+export function addServersToTenant(_server, clientFactory) {
+    return {
+        name: 'add_servers_to_tenant',
+        description: `Add MCP servers to a tenant's recommendation list. Optionally remove and restore associations in the same transactional call.
+
+Servers are added with server_json_selection: "unofficial" — they always pin to the unofficial mirror's server.json. A server without an unofficial mirror cannot be added and will be reported in "skipped" with reason "no_unofficial_mirror".
+
+This tool only changes the tenant's recommendation list (TenantsMcpServer rows). The underlying MCP server's public listing is NOT affected — public servers stay public and continue to appear in the public directory.
+
+The response includes:
+- added: servers newly attached to the tenant (outcome "created" or "restored_from_deleted")
+- removed: servers detached (outcome "hard_deleted" if untouched, "soft_deleted" if the row had been customized)
+- restored: associations restored from soft-deleted state via restore_association_ids
+- skipped: identifiers that resolved to a server but were skipped with a reason
+- unresolved_identifiers: identifiers that didn't match any existing MCP server
+
+Use cases:
+- Curate a tenant's recommended-servers list
+- Bulk-add servers by slug or ID in one call
+- Combine adds and removes atomically (e.g., swap one server for another)`,
+        inputSchema: {
+            type: 'object',
+            properties: {
+                tenant: {
+                    oneOf: [{ type: 'number' }, { type: 'string' }],
+                    description: PARAM_DESCRIPTIONS.tenant,
+                },
+                add_server_identifiers: {
+                    type: 'array',
+                    items: { oneOf: [{ type: 'number' }, { type: 'string' }] },
+                    description: PARAM_DESCRIPTIONS.add_server_identifiers,
+                },
+                remove_server_identifiers: {
+                    type: 'array',
+                    items: { oneOf: [{ type: 'number' }, { type: 'string' }] },
+                    description: PARAM_DESCRIPTIONS.remove_server_identifiers,
+                },
+                restore_association_ids: {
+                    type: 'array',
+                    items: { type: 'number' },
+                    description: PARAM_DESCRIPTIONS.restore_association_ids,
+                },
+            },
+            required: ['tenant'],
+        },
+        handler: async (args) => {
+            try {
+                const validatedArgs = AddServersToTenantSchema.parse(args);
+                const client = clientFactory();
+                const result = await client.bulkUpdateTenantServers(validatedArgs.tenant, {
+                    add_server_identifiers: validatedArgs.add_server_identifiers,
+                    remove_server_identifiers: validatedArgs.remove_server_identifiers,
+                    restore_association_ids: validatedArgs.restore_association_ids,
+                });
+                let content = `**Tenant servers updated** (tenant=${result.tenant.slug}, id=${result.tenant.id})\n\n`;
+                content += `- Added: ${result.added.length}\n`;
+                content += `- Removed: ${result.removed.length}\n`;
+                content += `- Restored: ${result.restored.length}\n`;
+                content += `- Skipped: ${result.skipped.length}\n`;
+                content += `- Unresolved identifiers: ${result.unresolved_identifiers.length}\n`;
+                if (result.added.length > 0) {
+                    content += `\n**Added:**\n`;
+                    for (const item of result.added) {
+                        content += `- ${item.mcp_server_slug} (server_id=${item.mcp_server_id}, association_id=${item.association_id}, outcome=${item.outcome})\n`;
+                    }
+                }
+                if (result.removed.length > 0) {
+                    content += `\n**Removed:**\n`;
+                    for (const item of result.removed) {
+                        const assocPart = item.association_id != null ? `, association_id=${item.association_id}` : '';
+                        content += `- ${item.mcp_server_slug} (server_id=${item.mcp_server_id}${assocPart}, outcome=${item.outcome})\n`;
+                    }
+                }
+                if (result.restored.length > 0) {
+                    content += `\n**Restored:**\n`;
+                    for (const item of result.restored) {
+                        content += `- ${item.mcp_server_slug} (server_id=${item.mcp_server_id}, association_id=${item.association_id})\n`;
+                    }
+                }
+                if (result.skipped.length > 0) {
+                    content += `\n**Skipped:**\n`;
+                    for (const item of result.skipped) {
+                        const label = item.mcp_server_slug || item.mcp_server_id || item.association_id;
+                        content += `- ${label} — reason: ${item.reason}\n`;
+                    }
+                }
+                if (result.unresolved_identifiers.length > 0) {
+                    content += `\n**Unresolved identifiers:** ${result.unresolved_identifiers.join(', ')}\n`;
+                }
+                return { content: [{ type: 'text', text: content }] };
+            }
+            catch (error) {
+                return {
+                    content: [
+                        {
+                            type: 'text',
+                            text: `Error updating tenant servers: ${error instanceof Error ? error.message : String(error)}`,
+                        },
+                    ],
+                    isError: true,
+                };
+            }
+        },
+    };
+}

package/shared/tools/delete-api-key.d.ts

@@ -0,0 +1,30 @@
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import type { ClientFactory } from '../server.js';
+export declare function deleteApiKey(server: Server, clientFactory: ClientFactory): {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            id: {
+                type: string;
+                description: "The numeric ID of the API key to revoke.";
+            };
+        };
+        required: string[];
+    };
+    handler: (args: unknown) => Promise<{
+        content: {
+            type: string;
+            text: string;
+        }[];
+        isError: boolean;
+    } | {
+        content: {
+            type: string;
+            text: string;
+        }[];
+        isError?: undefined;
+    }>;
+};
+//# sourceMappingURL=delete-api-key.d.ts.map