Skip to main content
Glama

Invite a person

invite_member

Invite a PERSON into your org, on behalf of YOUR human (RTSC-724) — mints an invite code and, if you pass an email, sends it. Removes the browser round trip: adding a teammate no longer means opening the Dash. Authorized through your human principal, who must be an active owner or admin; an ordinary member's agent, or a key with no principal, is refused. Joining is a consent act and the invite is a bearer token, so NEVER call this unprompted — your human names the person and you relay it. The invite is always to YOUR org — that comes from your key, not from you. What you choose is which PROJECTS inside it the invitee may reach: leave projectIds out and they get just THIS folder's project (the safe default, and usually the right one); pass projectIds (from list_projects) for one or several; pass allProjects: true for the whole org, now and as it grows. CALL IT WITH NO ARGUMENTS FIRST: it returns the QUESTIONS to put to your human, as data with exact options — which projects, how to deliver it, and whether it is for someone they already work with. Ask those, then call again with their answers plus decided: true. Do not skip the questions and do not author your own: "everyone on everything" and "this one project" are very different grants. Passing both projectIds and allProjects is rejected rather than guessed. Returns the raw code ONCE — it's stored only as a hash, and anyone holding it can redeem it, so hand it to your human rather than pasting it anywhere it persists. If you gave an email, they already have it and you do not need to repeat it. If you addressed it to somebody your human already works with, the invite is mailed to the address Retasc already holds for them (RTSC-772) — never go hunting for one, and never ask your human for an address you were not offered. The invitee joins as a member; owner invites are not self-serve. It grants YOU nothing — your key stays scoped to its own org and project afterwards. Reversible: an owner can revoke it from the Dash, and it expires on its own.

Input Schema

NameRequiredDescriptionDefault
emailNoSend the invite to this address. Omit to mint an unaddressed link you hand over yourself.
decidedNoYou have put the questions to your human and carry their answers. Without this the tool returns the questions instead of minting.
projectIdsNoProject ids (from list_projects) the invitee may reach — one or several. OMIT = just this folder's project.
allProjectsNoGrant every project in the org, now and as it grows. Cannot be combined with projectIds.
expiresInDaysNoHow long the code stays live. Default 7, max 30.
inviteeUserIdNoAddress it to a person, so THEIR agent tells them and they can accept without opening anything — and, unless your human asked for the link instead, so the invite is mailed to the address Retasc already holds for them. Only a value offered by this tool's own question — never one you looked up or guessed.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

A4.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only declare the generic profile (not read-only, open-world, non-idempotent, non-destructive); the description adds substantial context: authorization requires an active owner/admin principal, the code is returned once and stored only as a hash, the invite is a bearer token, expiry/revocation behavior, and that the caller gains no privileges. Strong disclosure, though the email-delivery and expiry details largely restate the schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads purpose and authorization, then walks through the two-pass call pattern in a logical order with the highest-stakes warning in caps. It is dense and long, and some sentences are redundant (the repeated 'never go hunting for an address' instruction) or add noise (the RTSC ticket references), which keeps it from a 5.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description fully carries the burden: it explains what the no-argument call returns (the questions as data with exact options), what the final call returns (the raw code, once), the authorization preconditions, and the reversibility/expiry model. An agent has everything needed to invoke it correctly end to end.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3; the description earns more by explaining the intent behind choices the schema can't convey — that omitting `projectIds` is the safe default granting only this folder's project, why `allProjects` conflicts with it, and when `inviteeUserId` should be used. It doesn't enumerate formats or defaults beyond the schema, but the decision semantics are genuinely additive.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Invite a PERSON into your org') with explicit on-behalf-of scoping, and distinguishes it from siblings like list_invites, revoke_invite, and accept_invite by describing minting an invite code versus managing one. An agent can identify this as the creation/issuance step without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit when-to-use rules ('NEVER call this unprompted — your human names the person'), a mandatory workflow ('CALL IT WITH NO ARGUMENTS FIRST'), and precise selection criteria between `projectIds`, omitting it, and `allProjects: true`. It even names the failure mode of combining the two. This is about as complete as usage guidance gets.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources