Cloud Profile Manage Tool
profile_manageManage your profile, password, 2FA, and linked OAuth accounts: read or update profile, change password, check 2FA status, and unlink social providers.
Instructions
Caller's own profile and account settings (name, email, password, 2FA, OAuth links). Operates on the authenticated user — there is no user_id parameter; super-admins managing other users use admin_manage instead. All actions are rate-limited per user (60/min) and audit-logged.
When to use: agent or assistant needs to read/update the current user's profile, list linked OAuth providers, or unlink a social provider. Do NOT use to create accounts (that's a self-service signup flow only).
Actions:
get (read) — returns profile object: name, email, locale, timezone, current_team_id, last_login_at, email_verified_at.
update (write) — optional fields: name, email, locale, timezone. Email change re-issues the verification mail and clears
email_verified_atuntil confirmed.password_update (DESTRUCTIVE; rotates session) — current_password, password, password_confirmation. Verifies current password then bcrypts the new one; revokes all OTHER active sessions of this user.
2fa_status (read) — returns { enabled: bool, recovery_codes_remaining: int }.
connected_accounts (read) — list of linked OAuth provider records (provider, provider_user_id, linked_at).
social_list (read) — duplicate of connected_accounts kept for backward client compatibility.
social_unlink (DESTRUCTIVE) — provider. Removes the OAuth link; rejected with 422 if it would leave the user with no remaining auth method.
Errors: 401 unauthenticated; 403 if Sanctum token lacks team:{id} ability; 422 for validation; 429 on rate limit.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| action | Yes | Action to perform: get, update, password_update, 2fa_status, connected_accounts, social_list, social_unlink | |
| deadline_ms | No | Optional: max wall-clock time (ms) the tool may spend. If exceeded during the call, returns a DEADLINE_EXCEEDED error. Minimum 100 ms. Leave unset for no deadline. | |
| name | No | ||
| No | |||
| current_password | No | ||
| password | No | ||
| password_confirmation | No | ||
| provider | No | The social provider to disconnect. |