Grant Agent Project Access
grant_agent_project_accessGrant or reactivate a project-scoped agent principal by specifying agent key and role. Requires manageProject permission.
Instructions
Use when: Human project-manager tool: grant or reactivate a project-scoped agent principal. The API generates actorId as agent:: and enforces manageProject. Do not use when: a narrower tool better matches the intent, the project scope is unresolved, or the user has declined the action. Requires: authenticated API authority and an API-authorized selected Project. Effect: canonical mutation. This mutation has no client idempotency key in the current contract; do not retry it automatically after an unknown outcome. Human approval: required before this action or its canonical follow-up. Then: follow typed result state; review pending proposals/drafts before any canonical apply. On failure: login_required → login; project_not_selected → list_projects/select_project; permission_denied → stop; stale_version or conflict → read current state; projection_pending → report canonical success separately and wait.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| role | Yes | Project role to grant to the agent. | |
| status | No | Optional project access status. Defaults to active when granting access. | |
| agentKey | Yes | Project-local agent key, for example design-reviewer or codex-worker-1. | |
| projectId | No | Optional project id. Defaults to the project chosen with select_project. If omitted and no project is selected, the call is rejected with instructions to select one. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| data | Yes | ||
| status | Yes | ||
| warnings | Yes | ||
| authority | Yes | ||
| projectId | Yes | ||
| reviewUrl | Yes | ||
| idempotency | Yes | ||
| nextActions | Yes | ||
| reviewRequired | Yes | ||
| canonicalVersion | Yes | ||
| projectionStatus | Yes |