Cloud Team Manage Tool
team_manageManage team settings, membership, BYOK credentials, API tokens, notifications, and KMS encryption keys. Write actions require owner or admin role.
Instructions
Caller's team — settings, membership, BYOK provider credentials, API tokens, notifications, and KMS-managed encryption keys. Most write actions require team role owner or admin (HTTP 403 otherwise); viewer and member are limited to read + their own profile-level toggles (notifications). Every write is audit-logged.
When to use: agent or assistant managing the current team's configuration — invite a member, mint an API token, register a BYOK Anthropic key, etc. Do NOT use for cross-team operations — those require admin_manage (super-admin only).
Core team actions:
get (read) — returns team object (name, slug, plan, settings, owner_id, member_count).
update (write — admin/owner) — optional: name, settings (object). Plan changes happen via Stripe webhook only.
members (write — admin/owner) — sub-actions: list, invite (email, role), remove (user_id). Invitations expire after 7 days.
LLM provider config (admin/owner):
local_llm (read) — bridge-discovered local LLM agents (Ollama, LM Studio, Codex, Claude Code).
byok_credential (write) — sub-actions on BYOK keys (Anthropic, OpenAI, Google, Mistral, Perplexity). Keys encrypted at rest; never echoed back.
custom_endpoint (write — plan-enforced; pro/enterprise only) — sub-actions on custom OpenAI-compatible LLM endpoints (vLLM, LiteLLM, custom proxies).
Tokens & access (admin/owner):
api_token (write) — sub-actions: create (returns token once), list, revoke. Tokens are team-scoped and inherit the user's role; rotate on suspected leak.
Notifications & system:
notification (write — any role) — sub-actions: list, dismiss, dismiss_all on the user's notification inbox.
join_request (write — admin/owner) — sub-actions: list, approve, reject pending team join requests.
kms (DESTRUCTIVE — owner only) — sub-actions on KMS encryption keys: list, rotate (re-encrypts all team credentials with new key — cannot be undone), revoke.
Errors: 401, 403 (insufficient role), 404, 409 (cannot remove self if last owner), 422, 429.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| action | Yes | Action to perform: get, update, members, local_llm, byok_credential, custom_endpoint, api_token, notification, join_request, kms | |
| deadline_ms | No | Optional: max wall-clock time (ms) the tool may spend. If exceeded during the call, returns a DEADLINE_EXCEEDED error. Minimum 100 ms. Leave unset for no deadline. | |
| name | No | New team name | |
| settings | No | Team settings object (merged with existing settings) | |
| provider | No | Provider: ollama | openai_compatible (required for configure/remove/discover) | |
| base_url | No | Base URL of the endpoint (e.g. http://localhost:11434) | |
| api_key | No | Optional API key for authenticated endpoints | |
| models | No | Comma-separated model IDs for openai_compatible endpoints | |
| token_id | No | Token ID to revoke (required for revoke action) | |
| notification_id | No | Required for mark_read. The notification UUID to mark as read. | |
| title | No | Required for send. Notification title. | |
| body | No | Required for send. Notification body text. | |
| type | No | For send. Notification type (e.g. agent_alert, budget_warning, info). | |
| action_url | No | For send. Optional URL the user can click to navigate. | |
| user_id | No | For send. Target user ID. If omitted, notifies all team members. | |
| preferences | No | For update_preferences. Map of notification_type => array of channels (in_app, mail, push). E.g. {"experiment.stuck": ["in_app","mail","push"]} | |
| request_id | No | Join request UUID (required for approve/deny) | |
| credentials | No | Provider-specific credentials. Required for test and enable. AWS: {role_arn, key_arn, region}. GCP: {project_id, location, key_ring, key_id, service_account_json}. Azure: {tenant_id, client_id, client_secret, vault_url, key_name, key_version?}. | |
| key_identifier | No | The key identifier (ARN for AWS, resource name for GCP, vault URL + key name for Azure). Required for enable. | |
| force | No | Force removal even if KMS is unreachable. Only for remove action. |