Set a member's project access
set_member_project_accessControl which organization projects a member can access by granting either all projects or only selected project IDs, effective from their next request, API keys, and MCP connections.
Instructions
Set which projects of the organization a member reaches: every project (mode "all") or only the projects in projectIds (mode "selected"); a project outside a selection answers as if it did not exist. It applies from the member's next request, including through their API keys and MCP connections. An owner always reaches every project and cannot be limited. memberId is the member id from list_members, not the user id; projectIds come from list_projects. Requires a confirmationToken: call preview_operation with tool "set_member_project_access" and these arguments first, show the returned plan to the user, and call this tool only after the user explicitly agrees. Needs the organization:manage permission and the owner role.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| mode | Yes | ||
| memberId | Yes | ||
| requestId | No | Optional idempotency key, 8-255 printable characters. Reuse it only to retry this same call. | |
| projectIds | No | The projects a "selected" access reaches: at least one and at most 500 distinct projects, all of this organization; a repeated id counts once. Leave it out for "all". | |
| organizationId | Yes | ||
| confirmationToken | Yes |