MCP · Tools

Tools: users

Three tools on the data plane. Two require a signed-in human. Descriptions are quoted as the agent reads them.

list_users#

List the end-users of a project's app (id, email, created_at, last seen).

Calls GET /v1/projects/:pid/users. last_seen_at is the date of the person's last living session, null when none — including someone who signed up and never signed in. The list paginates, oldest sign-up first.

invite_user was removed on 2026-09-22: your agent no longer mints invitation links, and POST /v1/projects/:pid/invites answers 404. An invitation is issued from your app, by a person signed in to it — see Invite users.

delete_user — human required#

Delete an end-user of the app. Their private and journal rows are removed; shared rows are kept with a frozen owner (§8). Answers 428 with a confirmation_token the first time; requires human elevation (MANYBASES_ACCOUNT_SESSION).

Calls DELETE /v1/projects/:pid/users/:uid. The 428 summary counts the rows destroyed, the rows kept and frozen, the memberships removed and the files destroyed — read it before confirming. Frozen rows can never be edited again, only deleted.

reset_password — human required#

Issue a password-reset link for an end-user (returned to you, not emailed). Answers 428 with a confirmation_token the first time; requires human elevation (MANYBASES_ACCOUNT_SESSION).

Calls POST /v1/projects/:pid/users/:uid/reset-password. The link is returned to the caller, valid one hour, single-use; it is an API route that returns JSON, not a page. Nothing changes until it is used; using it signs the person out everywhere.