Put a member or API key in an access role
assign_access_roleMove one member (by email) or one API key (by name) into an access role, or back onto the workspace's default role with role = null. Owners can't be given a role — they are always unrestricted. Give exactly one of member or apiKey. This only stages a request: the owner opens the link in their browser, reviews it, and approves it there with their agent PIN. Never ask for or accept the PIN in chat.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| role | Yes | The access role's name, or null for the default role. | |
| apiKey | No | The API key's name, as shown on the Agents page. | |
| member | No | The member's email. | |
| workspace | No | Which workspace, by name or id. Only needed when you own more than one — list_workspaces shows them. |