# Workspace administration

<!-- Generated by scripts/gen-docs-mcp.mjs from the shared tool catalog. Do not edit by hand —
     edit the catalog in packages/shared/src/mcp.ts and regenerate. -->

## Tools

These require the admin role in the workspace named, checked live on every call — being offered a tool is not authorization to use it. Mutations are written to the workspace's audit trail.

| Tool | What it does | |
|---|---|---|
| [`manage_member`](#manage_member) | Manage a member | Destructive write |
| [`get_workspace_usage`](#get_workspace_usage) | Get workspace usage | Read-only |
| [`list_audit_log`](#list_audit_log) | List audit log | Read-only |

## manage_member

`Destructive write`

Change who is in a workspace, by `action`: `invite` sends an invitation to `email` at `role`; `revoke` cancels the pending invitation for `email`; `set_role` changes `memberUserId`'s role; `remove` removes `memberUserId`. Each action's rules are on `action`. list_workspace_members with includeInvitations: true reads the result back. Requires workspace admin.

### `action: invite`

invite `email` at `role` admin or member. Sends the invitation email; inviting an already-invited email overwrites its pending role and resends it (one pending invitation per email). Invitations expire after 7 days. At most 30 invitations per sender a day; refused when members plus pending invitations reach the member cap of the plan. Not available on personal workspaces, or when members are managed by directory sync.

### `action: revoke`

revoke the pending invitation for `email`; it can no longer be accepted.

### `action: set_role`

change `memberUserId`'s workspace role (admin | member). A guest cannot hold the admin role: making a guest an admin makes them a full member in the same step. The workspace's only admin cannot be demoted — promote someone else first.

### `action: remove`

remove `memberUserId` from the workspace. They lose access immediately; content they created stays. The workspace's only admin cannot be removed. Not available on personal workspaces.

## get_workspace_usage

`Read-only`

Workspace credit usage as flat, chartable rows: per-period totals, per-member and per-source breakdowns, and a per-member-per-source cross-tab (`byMemberSource`), in marked-up micro-dollars (1,000,000 = $1, the rate users pay). The cross-tab covers periods from 2026-09-02 on; older periods return the two flat breakdowns only. `periods` (default 1, max 12) walks back from the current billing period; periods with no recorded usage return zero rows. Requires workspace admin.

## list_audit_log

`Read-only`

List the workspace's admin audit trail, most recent first: who ran which admin tool, on what target, with what arguments, and when. Covers ADMIN-PLANE actions only (membership, roles, invitations, limits, workspace settings) — dashboard/widget content changes are NOT recorded here; a dashboard's change history is list_dashboard_versions. Requires workspace admin.