Patch Project Groups

Description

Links AttackForge Groups to an existing project, or unlinks them. This is a write operation. Linking a group gives every member of the group access to the project at their group access level; unlinking it takes that access away, unless a member also has access another way.

One call can mix up to 50 add and remove operations, one per group, and the call is refused without changing anything if any operation cannot be applied. Discover groups to link with find_groups and the current links with find_project_groups.

The shape of args is declared inline (see Building args for Write Tools), so no preparatory call is needed.

Preconditions: the caller must be an Admin, the project's owner, or a Project Coordinator with access to the project. No email is sent. On success the group ids are returned, sorted by outcome.

How To Enable

1. Go to Users

2. Select the user you would like to provide access to this tool

3. Click on Access > MCP

4. Click on Add Tools

5. Select the tool patch_project_groups and click Add

Example Prompts

• Link the Red Team group to project X.

• Remove the Contractors group from the ACME project.

• Give the SOC group access to this project and take it away from the Blue Team group.

Parameters

Parameter	Type	Required	Description
args	object	Yes	The project-groups patch payload - see the keys below.

args keys:

Key	Type	Required	Description
project_id	string	Yes	Id (24-hex) of the project whose linked groups are changed. Source: find_projects.
operations	array	Yes	1 to 50 operations, at most one per group - see the keys below.

operations item keys:

Key	Type	Required	Description
type	string	Yes	'add' to link the group, 'remove' to unlink it.
group_id	string	Yes	Id (24-hex) of the group. For 'add', the group must exist and not be archived (source: find_groups); a group that is already linked is reported as unchanged. For 'remove', the group must currently be linked to the project (source: find_project_groups); an archived group can still be unlinked.

unchanged lists the groups asked to be linked that already were. It is not an error and the call should not be retried.

Example Response

{
  "project_id": "685500711d6a44e61f90db4e",
  "added": [
    "65b1f0a28cade68ca7bc71a4"
  ],
  "removed": [
    "65b1f0a28cade68ca7bc71b9"
  ],
  "unchanged": []
}